This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft File: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json) Hash identifier: wZH9HPhH+xnfgG2FdLs9GWAISMOcUYftesfoJPrKk9I= Subject key identifier: EB:0D:FB:01:74:D3:AF:D3:6F:0A:2C:FB:C4:9E:08:10:4C:00:20:AF Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Certificate serial: 019B386A2129448BFF1DC35A8C1CA70F0E22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft Manifest number: 04F2 Signing time: Fri 19 Dec 2025 21:00:37 +0000 Manifest this update: Fri 19 Dec 2025 21:00:37 +0000 Manifest next update: Sat 20 Dec 2025 21:00:37 +0000 Files and hashes: 1: 6w2zju3MQesL2h0kBvZh3fnqTpk.roa (hash: qFtRm28NJGQNJhvYD72+GzqZcewOHcDC5+790w2uIjw=) 2: Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa (hash: V2GzO75KrR6j8wTx9v/Qqyh9ekhgpMjeYEsEM94WE4M=) 3: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: xWvJcjiJO8SG+857JOg4RU2TbSgH3G7HwTtM6e5ISc4=) 4: f5zZHfnsAaopf1GoZf4uBje2t0Q.roa (hash: stYfXchqDnkN91Nt8UqXVM+bMk/Z/wzqFhIgpOKs0pk=) 5: j3K4X35kfjEUhm8UmbEuSZuRvvY.roa (hash: uk+5aj7HJZZkakM6PdHtx3JuETeBBl+0lL4mUEVaQ90=) 6: oFLSLxTROTSIlscGjGR0gR901FM.roa (hash: WRbdNPDyjk05klC3/AGlx6tP1ckSGAuLYeSpiKLvrT0=) 7: un7aOLvVH0DQuSmGP1vDBl9I7QA.roa (hash: iVhFcj6hdZp2lh837gdlgVnJ4rMcKoq6PbO5cfW5HHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:21:29:44:8b:ff:1d:c3:5a:8c:1c:a7:0f:0e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Validity Not Before: Dec 19 21:00:37 2025 GMT Not After : Dec 20 21:00:37 2025 GMT Subject: CN=eb0dfb0174d3afd36f0a2cfbc49e08104c0020af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:61:47:6e:13:33:86:70:fa:68:91:74:9d:eb: 8a:72:f6:92:37:f8:af:78:5f:fe:90:bd:8e:d5:bd: 2d:a9:1d:3e:84:c4:62:e6:6e:db:f2:e3:f6:a3:83: ad:06:66:9d:3d:a3:b2:ba:68:ac:cf:1c:be:02:14: f7:d4:13:b0:8c:fb:8c:0b:69:bd:54:86:82:00:c4: 97:b6:25:fb:f7:59:a8:34:84:f2:51:e6:5d:73:89: c4:b1:2b:88:04:72:d8:16:e6:49:62:4f:b4:c7:04: e0:dd:94:d7:52:5b:70:80:c8:5d:1a:89:f1:3d:3c: 33:31:b5:0e:1f:b4:98:10:a3:d9:a5:94:9c:5c:5b: cd:bb:e7:06:a5:a3:5b:3d:e1:8d:b4:3c:c1:01:2f: da:d1:4a:ed:14:28:fd:b1:33:9a:a4:2d:ad:10:55: 71:93:44:cf:7b:a6:e7:0e:9b:ff:12:3d:9a:eb:67: 91:ec:e4:6f:3a:a2:e2:03:8f:68:b9:b1:61:25:bf: 95:cf:a3:e7:5e:16:a8:67:aa:f2:32:39:88:59:02: d5:df:63:43:b7:92:06:9e:11:ec:94:39:ae:71:a0: 52:6f:6c:45:fd:4f:0b:94:1e:c8:85:1c:3b:cc:52: 79:30:31:ab:51:db:db:cb:51:1c:b1:4c:d4:29:c6: ea:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0D:FB:01:74:D3:AF:D3:6F:0A:2C:FB:C4:9E:08:10:4C:00:20:AF X509v3 Authority Key Identifier: keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:5d:29:46:02:14:5b:66:92:68:20:f3:96:55:0b:c9:e5:2d: ad:86:6b:fc:d2:98:2b:79:ed:c2:60:0d:62:e5:a9:73:f7:90: ef:d0:a2:18:2d:63:13:ff:33:33:11:a8:c0:92:b7:12:8f:01: 28:40:84:60:f2:de:31:bb:66:e8:30:d5:ee:d6:3a:a0:64:ab: d6:67:bd:9e:57:98:02:05:f3:b8:25:53:d8:a9:bf:8a:d1:78: f6:20:66:91:a6:17:97:ec:3f:69:6d:ae:70:54:32:b2:79:0c: a1:4f:da:9f:ca:2c:a6:28:32:b3:1b:18:fa:26:fd:bc:70:37: 36:27:c0:dc:79:71:bc:d5:35:82:5c:a5:c9:7c:96:38:ad:09: 32:5f:83:6c:7c:93:b7:4a:cb:cf:e1:a5:2a:0d:3b:95:86:1c: 10:b6:62:55:4b:17:82:b1:04:13:91:7a:09:0d:08:37:f6:89: fb:f9:7e:ac:b7:ad:1d:a1:6b:8c:03:00:a5:82:47:28:d5:9c: 92:79:da:bb:f0:30:cc:b3:08:6b:26:71:b6:0b:42:49:92:08: 62:0b:58:38:2e:eb:7b:e4:3e:e1:31:de:6b:ab:00:ff:c5:24: 8e:58:62:64:6b:1e:29:06:30:4e:07:d4:63:e1:a0:bd:7e:c9: 96:0f:54:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4aiEpRIv/HcNajBynDw4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTM5NmYxYzM0NGIwNzljNWQyZjI3YmZiMzEzMzc3ZmVi YjJlYzcwHhcNMjUxMjE5MjEwMDM3WhcNMjUxMjIwMjEwMDM3WjAzMTEwLwYDVQQD EyhlYjBkZmIwMTc0ZDNhZmQzNmYwYTJjZmJjNDllMDgxMDRjMDAyMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GFHbhMzhnD6aJF0neuKcvaSN/iv eF/+kL2O1b0tqR0+hMRi5m7b8uP2o4OtBmadPaOyumiszxy+AhT31BOwjPuMC2m9 VIaCAMSXtiX791moNITyUeZdc4nEsSuIBHLYFuZJYk+0xwTg3ZTXUltwgMhdGonx PTwzMbUOH7SYEKPZpZScXFvNu+cGpaNbPeGNtDzBAS/a0UrtFCj9sTOapC2tEFVx k0TPe6bnDpv/Ej2a62eR7ORvOqLiA49oubFhJb+Vz6PnXhaoZ6ryMjmIWQLV32ND t5IGnhHslDmucaBSb2xF/U8LlB7IhRw7zFJ5MDGrUdvby1EcsUzUKcbqYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsN+wF006/Tbwos+8SeCBBMACCvMB8GA1UdIwQY MBaAFPyjlvHDRLB5xdLye/sxM3f+uy7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWIt ZmZiMTZlYmQxMTFmLzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWItZmZiMTZlYmQxMTFm LzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJV0pRgIU W2aSaCDzllULyeUtrYZr/NKYK3ntwmANYuWpc/eQ79CiGC1jE/8zMxGowJK3Eo8B KECEYPLeMbtm6DDV7tY6oGSr1me9nleYAgXzuCVT2Km/itF49iBmkaYXl+w/aW2u cFQysnkMoU/an8ospigysxsY+ib9vHA3NifA3HlxvNU1glylyXyWOK0JMl+DbHyT t0rLz+GlKg07lYYcELZiVUsXgrEEE5F6CQ0IN/aJ+/l+rLetHaFrjAMApYJHKNWc knnau/AwzLMIayZxtgtCSZIIYgtYOC7re+Q+4THea6sA/8UkjlhiZGseKQYwTgfU Y+GgvX7Jlg9UpA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:20:19 2025 by rpki-client