This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File: KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier: mo3333lyD0QFSs+hQB026vuVm23fpsYqF1XNmwf2Res=
Subject key identifier: 84:2C:FA:09:60:9C:DF:59:B0:8B:83:0F:5B:DE:1A:A6:B0:24:9E:B5
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 019B3AC69B616E79548BB9311B327BA5CA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number: 17EA
Signing time: Sat 20 Dec 2025 08:00:52 +0000
Manifest this update: Sat 20 Dec 2025 08:00:52 +0000
Manifest next update: Sun 21 Dec 2025 08:00:52 +0000
Files and hashes: 1: 1Dk1x9YSG3BVVIbM2O2ifNME7O4.roa (hash: bxHAHEV4CTUi3kyjkeY9dH18wMJTnBz71aOw3+/p61U=)
2: 5b3w5WcrIXEeKH5XOut46ipTc4w.roa (hash: wSQolPimhjlX9rU+wv9xFVShzU/9tCapeIVqocnoaew=)
3: 8rDHkLe0TSTwHx4WDDvrR-_Rnow.roa (hash: 29wxN1vn1T45ahVLJ7TowTdHbtjp7jm1ioyZkNKCMeI=)
4: 9DHBflpO2zTq-ZsTYT_i7dxcY_g.roa (hash: YT2WyJ5x+F2bOi2viPVWXtqAfg5t81Bc82ekuwDxgjA=)
5: AaMJOJAR_jVCVwMYDwYI3gmD9l0.roa (hash: /UEG6by7QHTYXkIm8jukBNGFEjjmQ4X5Tt6//4m1EmU=)
6: DPwZz44a0SIlqFLCKW0htkdMPoY.roa (hash: d9tgMhBVAbT22h5OLZMfkC+rJIvzIpXwzoTGPpF0N0Q=)
7: Dq1UZ8Za_KiC3ifwJmz4ToXjALA.roa (hash: u6c3kgWrQ3gKS4YbnxoWNnk9GqM2x4eQbdTW0OGphkk=)
8: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: 9BkV1jHFvBjPj+P7mQ6hzxCK+5ld1uvoH3yPfYgl16E=)
9: OEOJwFAahZvwzj87JFWa_SbOMWg.roa (hash: kgzUW534tMtjzd2PJ6OMYeaWjMtd+g/tt/n2DYdbR1k=)
10: RqiGFoHKY_PvFOmHEK-QxYQhid8.roa (hash: 7Q9q0xcwl3LPjrjXkBmNiQj0PUW+2bCcKvQ2CphVsQc=)
11: Sc0ZcHdx0AbvbolBuMLmmkLg87Y.roa (hash: 3CX34XBdUEqZcEmT7f9t0G55z1zYTbnZZPkwKp6U/uM=)
12: SsU_hevSpCMxRICHNvRhGuqJl1M.roa (hash: 1JAmA6OyEuXd481Jl9UTpVGADh2xyB9dz46taIyZEKE=)
13: WCfjChyA9D2SKAzCeaN1yr1cksU.roa (hash: MnNx5I8AC7aU64AxF3SWeU+kL9QY1gnFcWJmB0EHgIA=)
14: WDWdZiJlLEpQPDPG4KnU9lq-n8M.roa (hash: vIhTma8+lG8HgAIfqToXR0NbvqLMHJQtArmEHR9vby8=)
15: WtLdMvYpQzi0fGTL1Q3HQ_DReMY.roa (hash: j430VQypl4xdO0dg2dxgGLE5xR8YBPLi6F+UcN6kXHs=)
16: ZKlKzuP-3KIu0ytUKTqCxBGN9TM.roa (hash: SDs87Jaxku1PQ7oFYG+wM5Er0JvuQEL/e/JKQfxtyCo=)
17: bh40Q3Lzb_Q5XEFGsUjv6LJAONg.roa (hash: 7Dp/8cQlX9mJBbuCpHWin7gTO/+CrJ9Pq/AHAemXX08=)
18: cVTxJTSeVUmK7pjAVpvnpKuV91M.roa (hash: vq2s7bgsT4XNUVmFsaLuYuUSK79St21lLAq5yACC0dY=)
19: h54YHi8hM94l9jsvTnRnFWWqS5o.roa (hash: NWwJ0KAawmMd6NhRf5A37uzrf8FPZhmnW7BDAKDpfw0=)
20: kyAzjnv0nUH25AOinhIVzLY6P7c.roa (hash: SQiPtkZG6xmYTm9x2csmKQ6IrIn57WCQkamimZAGJLQ=)
21: l_4towjM6IXiQikoqm_Qaaqf6xE.roa (hash: 9m0yhaTrrYhKwESoJQxIhWXl3oVuIFFdoCKFpCN1x68=)
22: mkKJ3-jBO0RnuHX4p2gPe1LiAO0.roa (hash: YsOcjwPDGcx62gouTiDvY21jEpeo8cJ7ctCe2GexDO0=)
23: onG_yjL71KBjT6qb1tlriGXEPkI.roa (hash: p0uEFp4aWU/cii43fYdqNq07qdotCor+2MbAKHw7Hr8=)
24: tOFRlY-pCvrh6Y-rJiCJAGk32Bo.roa (hash: iS4fsfAEYEUo1JvfCjEoG0SIGOQHZVaAMrY2D/vtJF0=)
25: uBvzEXm5VwGZwiUWFNWddxjZq1E.roa (hash: oD/A8OR3XYpgvQFrjXxLCPlCLhedXuhOhlVHK3hjzlw=)
26: uFOFjnpS5WfkiXWuANlN0J-QpVE.roa (hash: AOEC6tTe16mH/5zPTdMGyJX1tIhoZY/G4YVm3ABD8jI=)
27: wz02ujMIpfYt95jo9uRu2zTZVWs.roa (hash: P+xH2nnVuR8tGZi2nJ3gm3pk9DG+gPgY1s3yifqR2ck=)
28: xuOlBIXmGcwg4wE1JQqdpI4MuaQ.roa (hash: Ham3CQIGB6RAgApXtIdpnkUHiIBxk1FnaFEgcgcWWRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:c6:9b:61:6e:79:54:8b:b9:31:1b:32:7b:a5:ca:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Dec 20 08:00:52 2025 GMT
Not After : Dec 21 08:00:52 2025 GMT
Subject: CN=842cfa09609cdf59b08b830f5bde1aa6b0249eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:0a:2a:9b:1e:44:00:c1:69:cd:c5:e8:66:
c8:28:7f:6a:81:62:d2:08:4a:d9:be:95:b1:ac:bc:
1b:04:25:27:aa:60:df:a6:06:cc:cc:53:03:00:fc:
ff:ab:94:6b:43:f7:d3:ca:4d:05:eb:ce:85:4c:e6:
e7:93:29:b5:a0:df:32:e6:be:4b:71:7d:2e:5b:d2:
86:4d:1b:b1:11:ca:e6:ea:58:56:fb:d5:32:1c:b8:
a2:d0:2f:66:f7:b9:8c:d1:b6:e1:46:05:a5:ee:95:
a8:f1:73:84:14:a5:5b:84:dd:12:b8:8a:2d:c1:59:
5b:0d:f2:4b:dd:47:ba:8c:86:40:20:36:35:3b:ba:
69:a2:7b:3c:dd:44:18:3e:99:50:7c:a8:fd:de:16:
79:f5:b3:7d:a9:c4:cc:db:6e:f4:02:93:2c:94:d7:
a2:3c:c6:cf:7b:0e:16:b7:83:b6:bc:58:e8:f0:9e:
fe:43:c7:af:db:36:e1:f0:15:84:a2:4e:6b:ca:0f:
aa:78:5e:e5:0c:03:1f:77:3d:12:86:b3:e8:bb:e2:
15:bc:c0:ea:20:2b:23:9c:2e:5b:8d:e0:72:7e:44:
fa:e8:de:3d:7d:e4:06:f3:b8:e2:98:16:06:28:19:
6a:01:7f:1e:57:ce:99:1f:a5:e7:a3:c2:96:e1:a2:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:FA:09:60:9C:DF:59:B0:8B:83:0F:5B:DE:1A:A6:B0:24:9E:B5
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:23:b9:e8:cd:5c:86:ab:52:33:41:ca:de:cb:9a:52:8a:0c:
42:24:0e:95:34:18:38:6c:73:82:20:9f:98:9b:29:3e:ea:89:
09:1f:51:0a:12:19:f0:17:27:54:85:45:c1:88:c8:cd:08:76:
7f:43:89:9c:df:62:7c:42:37:81:b3:e5:71:bb:25:e4:51:72:
30:d6:54:70:74:ab:6f:7f:03:54:b1:09:08:21:80:ac:3e:84:
c9:b8:58:dc:49:3d:0d:4e:20:bf:e4:3d:36:87:8a:57:5d:a4:
89:ae:c3:9f:e5:f9:52:dd:a5:4b:5f:e8:ba:1f:89:b0:c2:ec:
4c:2b:58:1d:d7:fb:1a:f4:ef:1d:a9:9e:92:34:63:a9:2e:92:
01:e1:a5:3c:e8:1b:26:9f:09:32:9d:b0:15:ae:a9:4d:ce:0e:
ec:76:6b:60:92:70:4a:0d:8a:e5:f6:5d:9e:94:92:d4:91:0c:
bf:5a:65:33:80:fb:7a:a0:e7:1f:07:50:bf:aa:b6:89:94:2a:
e9:8f:e5:02:38:f0:97:12:f8:27:68:5e:35:14:6e:ee:06:cf:
dd:94:f3:22:e3:64:46:3b:b5:86:eb:a5:46:8b:cd:64:04:06:
ef:25:3c:e6:bd:0d:96:94:e5:97:d4:ab:62:11:52:98:de:73:
03:06:6d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:00:36 2025 by rpki-client