This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json) Hash identifier: GCi0PJ23cK+ixpNoYjpJqO19AbZH1HqRrIhiA2Kj6Ss= Subject key identifier: 6F:16:2E:21:EE:ED:3C:C8:4A:71:E6:52:37:31:EB:DA:E5:00:99:AB Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 019B3532ECA7B5847395C8CE64FD4176F09B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft Manifest number: 1790 Signing time: Fri 19 Dec 2025 06:01:28 +0000 Manifest this update: Fri 19 Dec 2025 06:01:28 +0000 Manifest next update: Sat 20 Dec 2025 06:01:28 +0000 Files and hashes: 1: OJ0Ryazj-aordFIxit1Bui-oJcw.roa (hash: h0zTVrZOKT+350ZtHmP3C0wVqFaZWHFThI4Ful5AAsA=) 2: TJJQIxFkBPcclxKSiBSE29OWp44.roa (hash: o//SaNRJoAMIebEbxmORe+ZFOyk3uvF1gz9qkdqBZAw=) 3: VNCm6_FzOH2wvD6zP5chPBaMMwY.roa (hash: Y0Swh/SNbMijU4wn94W5cEpLxOM8OyzH9BGZ9D0MVqQ=) 4: W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa (hash: IRDGgxnAqqWapeedP2vWmhEF4xJ1dwTUzVZaEKAfNbA=) 5: adGon4jeIZ0r-mmhwuDe1fI5B2k.roa (hash: aBRQa0UMkK3S5EnY+OV2wpOm+sDP6DLxGshcVdzFnDI=) 6: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: QIAwb51gjjN/FHAcuugnIiTgKfKkuiioRaZQoQ6cxh4=) 7: ny9txiVmQCoFhi410-1gKXnflUg.roa (hash: yIycSieFB9uuOH8Bli2Ll16YsK0vsKCVxPaK5dJ0zg0=) 8: o715x5kcExne_D_D3zYLFnEa5s0.roa (hash: /1ud4mPQXWjniwbnuJIk+aU9+DH9Jasow43KC86v9gE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:ec:a7:b5:84:73:95:c8:ce:64:fd:41:76:f0:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Dec 19 06:01:28 2025 GMT Not After : Dec 20 06:01:28 2025 GMT Subject: CN=6f162e21eeed3cc84a71e6523731ebdae50099ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:23:80:c1:a1:f7:83:47:42:01:ab:c6:71:7d: 6a:e2:80:35:ab:71:8a:7e:a3:ba:74:6e:7b:61:26: 72:3b:bf:3a:a4:91:8d:04:9c:f5:47:39:c3:cc:aa: 03:5e:8f:ed:d7:4c:01:d0:db:e0:ab:b3:d6:0a:7c: 60:ec:a7:42:ab:4e:bc:69:a4:00:20:a1:23:25:ac: 7e:5c:76:e8:fa:5e:3d:c5:a3:86:14:98:19:c9:68: dd:13:a5:02:12:06:fe:7c:0c:33:2a:53:8f:10:1d: 23:62:cb:86:e6:c6:3b:b3:0a:da:0d:63:e2:ff:b9: f6:b6:54:6c:5f:32:a0:73:7f:b4:65:ec:2b:c1:37: bd:c5:cd:78:e3:f1:18:df:ed:0b:5e:0e:92:b5:43: ec:15:ae:24:54:7b:99:3d:f5:dd:32:dc:8a:8e:40: 9a:d4:9e:13:45:a4:9c:3a:b9:a1:f0:b6:83:1b:93: fe:b2:57:1c:99:36:bd:2e:02:12:64:a4:ea:09:25: 1b:f9:6f:19:c9:fc:6d:47:18:83:e1:35:20:85:94: 08:e9:b2:07:72:33:93:aa:1d:37:3b:b4:bc:05:30: ab:eb:c7:9f:68:4d:92:dc:c1:40:a8:c8:68:02:8a: c0:5f:9f:60:e8:5c:87:ee:e8:85:9b:e4:24:60:c3: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:16:2E:21:EE:ED:3C:C8:4A:71:E6:52:37:31:EB:DA:E5:00:99:AB X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a7:9e:e1:46:46:a8:b4:c3:1a:ed:72:a9:36:23:d8:27:9c: 38:b4:2d:bd:f8:23:86:af:9d:ae:5f:ab:19:71:a2:cc:a7:74: c4:bf:44:ce:e9:ed:27:cb:bc:19:f6:d6:87:99:d7:e7:a8:37: 79:55:87:5b:3e:ce:9d:5b:33:e1:19:c6:e0:8a:24:85:ca:9a: 58:88:65:da:34:ff:e1:30:cd:a0:b1:95:dc:05:76:31:4f:39: 43:f7:f0:f1:5b:c3:8d:c6:1b:d4:a4:b5:9b:40:ca:b5:c0:0e: 21:67:19:3a:9a:78:3f:1d:f3:c5:0d:8e:75:79:3d:5e:ce:18: 6b:84:b5:99:66:9d:94:77:62:48:15:31:58:f0:bf:5b:64:60: c0:6e:07:a4:32:da:f5:c9:86:2f:f9:55:0e:fb:d7:2e:8c:72: 75:16:bc:ee:cd:7d:ee:69:4c:00:33:6f:14:0a:c2:76:db:5c: 4a:c2:b8:80:c7:39:88:58:fd:4f:d9:42:99:b9:0f:7e:bd:ca: c5:5c:b0:94:bb:fc:79:b2:64:55:55:f7:c0:0d:09:e7:44:18: 25:43:08:6c:ce:2e:04:d9:a7:3f:54:a6:f3:4b:40:26:9e:78: 12:5f:91:f6:1f:96:77:73:f9:d3:59:d5:77:e6:fc:e9:5b:e7: b4:14:37:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MuyntYRzlcjOZP1BdvCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjUxMjE5MDYwMTI4WhcNMjUxMjIwMDYwMTI4WjAzMTEwLwYDVQQD Eyg2ZjE2MmUyMWVlZWQzY2M4NGE3MWU2NTIzNzMxZWJkYWU1MDA5OWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yOAwaH3g0dCAavGcX1q4oA1q3GK fqO6dG57YSZyO786pJGNBJz1RznDzKoDXo/t10wB0Nvgq7PWCnxg7KdCq068aaQA IKEjJax+XHbo+l49xaOGFJgZyWjdE6UCEgb+fAwzKlOPEB0jYsuG5sY7swraDWPi /7n2tlRsXzKgc3+0ZewrwTe9xc144/EY3+0LXg6StUPsFa4kVHuZPfXdMtyKjkCa 1J4TRaScOrmh8LaDG5P+slccmTa9LgISZKTqCSUb+W8ZyfxtRxiD4TUghZQI6bIH cjOTqh03O7S8BTCr68efaE2S3MFAqMhoAorAX59g6FyH7uiFm+QkYMN9eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8WLiHu7TzISnHmUjcx69rlAJmrMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKee4UZG qLTDGu1yqTYj2CecOLQtvfgjhq+drl+rGXGizKd0xL9EzuntJ8u8GfbWh5nX56g3 eVWHWz7OnVsz4RnG4IokhcqaWIhl2jT/4TDNoLGV3AV2MU85Q/fw8VvDjcYb1KS1 m0DKtcAOIWcZOpp4Px3zxQ2OdXk9Xs4Ya4S1mWadlHdiSBUxWPC/W2RgwG4HpDLa 9cmGL/lVDvvXLoxydRa87s197mlMADNvFArCdttcSsK4gMc5iFj9T9lCmbkPfr3K xVywlLv8ebJkVVX3wA0J50QYJUMIbM4uBNmnP1Sm80tAJp54El+R9h+Wd3P501nV d+b86VvntBQ3Rg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:49:10 2025 by rpki-client