This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
File: KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json)
Hash identifier: 2DYuouPu3aU7LE824tCCyIKFiHH3o/P9y9qckgIuvOA=
Subject key identifier: B9:90:45:DE:B5:DB:90:E2:CF:6F:8E:79:9F:7F:E1:32:51:49:11:F8
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 019B0F3797D81ADF4C03C39026B96E2A0500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
Manifest number: 0C53
Signing time: Thu 11 Dec 2025 21:01:00 +0000
Manifest this update: Thu 11 Dec 2025 21:01:00 +0000
Manifest next update: Fri 12 Dec 2025 21:01:00 +0000
Files and hashes: 1: 40-Fe0ClJjM3rGq3tKMY4lgTO0c.roa (hash: lMieyX7jH2Flr7s7p5R5H9gYjE+H53LSKunrL+hZLEw=)
2: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (hash: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=)
3: FbAqPaVw4Lc8kzGFywuLUOLuN6g.roa (hash: 5y6ol4UAm9wCL/bXngkdTGDKDxUzmNqQsajx2DmmhCQ=)
4: IvOVPi4Jk0LAA7IyC_lBmoedUPk.roa (hash: iVbMNdqQVbnDfCnhCbcyzkADBiETtoTlj0kjeIAta6w=)
5: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: mVJJcB206TCDt81Q7ZxleKxblcACfN9XvSJK2tFY1wY=)
6: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (hash: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=)
7: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (hash: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=)
8: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (hash: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=)
9: ca6XJ5NiIiIJ1gn26NWoBZY1OOE.roa (hash: m0MfY3W/yHtAcpQIPruy2IhGfS2aQQkvwxrvdJx1dpE=)
10: ozTUlRS2BP8xxCFNOquOdzTJVac.roa (hash: l1UJXUEegLYZKNp2zf9niVjLEqjlu26RHLObHLwCBJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 14:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0f:37:97:d8:1a:df:4c:03:c3:90:26:b9:6e:2a:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Dec 11 21:01:00 2025 GMT
Not After : Dec 12 21:01:00 2025 GMT
Subject: CN=b99045deb5db90e2cf6f8e799f7fe132514911f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:d7:f6:23:42:91:b6:33:69:ac:cc:8e:80:
f9:25:22:e2:8f:af:77:df:d0:7f:b1:dd:13:d0:ab:
ab:da:27:4f:14:50:e1:0c:50:af:55:e8:5a:dd:56:
4d:26:70:7a:a2:32:9a:29:1a:23:a3:cf:73:2d:b6:
b6:53:11:ad:4b:5b:d5:4d:82:4e:a9:fc:3e:14:a6:
1c:0e:79:bb:ad:74:ab:3b:f7:34:52:66:e6:59:ed:
13:bd:0c:90:bd:cc:05:d2:26:3b:df:e5:76:c4:f1:
4d:38:b2:af:e9:38:65:f8:d7:92:66:cf:90:d9:f5:
f1:31:c3:77:21:8b:8b:18:6a:0f:2d:fc:fe:d7:0f:
0d:94:96:79:86:81:81:2a:eb:bd:93:fa:66:fc:ea:
6d:78:f5:fb:b2:3e:d4:f7:39:2b:68:b7:72:01:3d:
1c:ea:c9:fa:06:29:7b:b2:b1:0c:a5:c0:b6:3a:a5:
76:43:22:24:9d:1c:58:df:76:e7:03:2e:96:52:93:
73:7d:aa:f9:d0:b1:2d:3b:5d:44:37:91:2f:aa:e5:
48:d8:06:0f:77:2f:3f:e6:e2:d7:e0:67:34:18:44:
68:be:d4:ca:5e:44:5a:35:38:a0:85:5d:66:84:aa:
ff:a8:1a:d1:69:ad:69:fe:b8:31:e1:23:b2:cf:14:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:90:45:DE:B5:DB:90:E2:CF:6F:8E:79:9F:7F:E1:32:51:49:11:F8
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4c:e7:09:de:f2:87:01:54:18:e0:4e:7b:9e:76:6e:ca:5b:
20:33:2f:0c:6a:9a:ac:4b:ed:a9:54:89:29:cc:98:d0:1a:16:
8f:5c:72:ee:8e:b3:e7:62:fd:11:72:f2:46:f6:1c:5b:2e:d9:
b9:1e:18:6e:ef:a2:4e:98:79:4d:66:6a:e2:61:02:e3:ae:3b:
5b:93:ac:fa:86:ad:29:e1:b5:e2:0b:6d:a0:25:71:d9:1f:43:
f1:55:60:09:4f:19:69:4f:d0:0e:c8:a1:2d:9a:2f:f1:a2:38:
9f:4c:1d:f5:13:e5:c7:81:f3:08:0e:8c:cc:97:b6:48:da:de:
ae:93:ce:a9:ae:f0:44:30:a9:9a:4c:16:a9:eb:97:0c:ae:bb:
aa:6d:af:e2:38:8d:8b:d3:3b:84:fb:e0:33:ec:7a:71:34:92:
c6:4d:52:a4:80:42:97:19:25:47:7a:bb:b1:5d:29:98:1d:ac:
e9:18:9f:2b:f8:52:56:0d:34:03:2b:66:de:60:5a:eb:93:26:
70:3e:da:50:47:e8:6c:53:a6:fd:e9:6f:45:42:ad:81:3a:9c:
18:ce:f1:e0:39:29:14:40:1b:03:ce:82:ea:52:63:c2:29:af:
01:84:cb:09:2d:40:6e:8a:dd:7a:37:38:ab:a0:0a:00:07:29:
5a:f6:b5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:11:29 2025 by rpki-client