This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json) Hash identifier: Hcv2RNcq4r1Wy08JssyMGM/77Tg1Vv5ovX3QLNgLnp8= Subject key identifier: AB:84:A1:D2:20:0D:65:FF:00:94:CD:26:85:68:E4:CC:2E:C3:EB:29 Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 019AF5E636F7B9868B23E752B8221CA61DDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft Manifest number: 176E Signing time: Sat 06 Dec 2025 23:01:36 +0000 Manifest this update: Sat 06 Dec 2025 23:01:36 +0000 Manifest next update: Sun 07 Dec 2025 23:01:36 +0000 Files and hashes: 1: 1-Fu8tQlmeJTnAPs_klN6k0sVtas.roa (hash: a3MzODKGqIz16CZMFFSjRzhUI5B7HYxJad8zpdAQZ4o=) 2: BE6iIPIX8zFmJc8BbYvpzoakrXE.roa (hash: zyf1exZFAT4j17OLfHltxLPlTiiX5aqGBHkZByoGZDo=) 3: TJJQIxFkBPcclxKSiBSE29OWp44.roa (hash: o//SaNRJoAMIebEbxmORe+ZFOyk3uvF1gz9qkdqBZAw=) 4: VNCm6_FzOH2wvD6zP5chPBaMMwY.roa (hash: Y0Swh/SNbMijU4wn94W5cEpLxOM8OyzH9BGZ9D0MVqQ=) 5: W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa (hash: IRDGgxnAqqWapeedP2vWmhEF4xJ1dwTUzVZaEKAfNbA=) 6: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: icfWaX7DIjew4cXyVR2pcs04AnCdQU4jfQuVv3TSeUw=) 7: mWVKLu7JIbWDRf6UwKQVpc3TeHk.roa (hash: /ILKWnYvC10gU3wVh36K0lsRGNP01gsP1Ff/pKP4YGQ=) 8: o715x5kcExne_D_D3zYLFnEa5s0.roa (hash: /1ud4mPQXWjniwbnuJIk+aU9+DH9Jasow43KC86v9gE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:36:f7:b9:86:8b:23:e7:52:b8:22:1c:a6:1d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Dec 6 23:01:36 2025 GMT Not After : Dec 7 23:01:36 2025 GMT Subject: CN=ab84a1d2200d65ff0094cd268568e4cc2ec3eb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:71:9c:e4:ea:54:8d:fc:fb:15:ed:9d:60:c6: ef:c6:db:aa:1a:04:0c:28:b8:e4:cf:a8:17:9e:a8: 0e:ca:be:b2:74:66:e2:12:a7:da:57:c7:7a:f2:30: 6d:a4:f4:ac:7f:92:d2:09:e1:fd:9b:a9:24:42:62: 16:4a:22:64:11:d7:a9:94:ba:88:a6:d2:93:4e:ac: 9d:a8:7d:27:ce:41:0e:f5:7c:bc:f5:01:4f:7c:24: ac:91:31:60:35:00:9b:23:cd:42:87:44:7a:b0:32: 60:20:89:52:f0:60:fe:1a:5e:2b:79:fa:5f:3c:eb: f9:72:66:51:75:16:50:01:c8:34:79:cb:1d:36:8b: eb:68:b1:fd:9b:dc:41:a6:24:5f:48:36:47:a4:59: 5d:46:49:a6:f7:c6:22:7f:2d:50:f2:d4:9d:02:4d: d6:a1:eb:03:a6:38:f6:c3:e4:3f:88:ba:a3:a6:5e: 8a:14:42:1a:5b:2c:d6:ee:e2:74:cf:12:23:0b:65: 4a:68:fc:ff:0a:bd:5f:9e:b9:f0:75:97:52:f6:75: 1a:d9:e5:52:ff:83:3d:27:bb:d4:40:53:5e:67:b2: 25:49:35:3a:65:1b:f0:88:ca:dd:10:8a:b8:d4:e2: 9c:f4:30:9f:2e:33:84:69:2d:7d:78:65:3e:2d:29: eb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:84:A1:D2:20:0D:65:FF:00:94:CD:26:85:68:E4:CC:2E:C3:EB:29 X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f3:80:4a:68:ad:7d:f4:7e:3e:8d:bf:08:4d:0f:3a:34:16: a7:ab:b4:13:36:32:40:95:ab:63:fa:13:51:dd:33:24:dd:26: 34:ce:0a:d8:0f:aa:69:59:89:39:80:e1:99:62:fb:14:88:a6: 73:fb:46:94:58:6b:ff:74:6b:66:aa:12:82:ac:04:6a:a9:1c: 81:78:f9:2e:4b:4e:ff:2e:fb:a5:77:2f:9d:14:57:16:dd:a7: 8c:b5:c8:41:9e:aa:a5:fa:52:c9:ae:59:4c:23:e6:89:75:3a: ac:40:8b:8e:11:e7:6a:b7:ea:10:07:e5:49:09:24:d9:fa:3b: b2:8a:e2:57:32:94:dd:c6:1d:bb:8e:70:ff:33:27:50:e7:c1: 35:23:10:34:6b:8a:9d:9f:27:06:cc:10:b4:72:61:d4:69:d5: ae:77:0c:3d:e2:b9:31:89:a9:15:6c:77:6f:41:c7:c4:e3:2e: 56:d1:0a:35:3a:bb:7c:45:4e:42:74:b8:9a:96:25:88:8a:14: 10:72:d1:70:6f:9d:05:e8:2f:32:f1:0f:76:c6:df:5a:0c:88: da:b9:a4:ca:1b:55:9e:0b:7b:0c:3e:a1:80:c8:87:7a:0a:17: 4d:c2:54:f5:5a:82:bd:37:f1:3b:1e:f0:08:56:89:19:7c:5f: 64:06:aa:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15jb3uYaLI+dSuCIcph3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjUxMjA2MjMwMTM2WhcNMjUxMjA3MjMwMTM2WjAzMTEwLwYDVQQD EyhhYjg0YTFkMjIwMGQ2NWZmMDA5NGNkMjY4NTY4ZTRjYzJlYzNlYjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HGc5OpUjfz7Fe2dYMbvxtuqGgQM KLjkz6gXnqgOyr6ydGbiEqfaV8d68jBtpPSsf5LSCeH9m6kkQmIWSiJkEdeplLqI ptKTTqydqH0nzkEO9Xy89QFPfCSskTFgNQCbI81Ch0R6sDJgIIlS8GD+Gl4refpf POv5cmZRdRZQAcg0ecsdNovraLH9m9xBpiRfSDZHpFldRkmm98Yify1Q8tSdAk3W oesDpjj2w+Q/iLqjpl6KFEIaWyzW7uJ0zxIjC2VKaPz/Cr1fnrnwdZdS9nUa2eVS /4M9J7vUQFNeZ7IlSTU6ZRvwiMrdEIq41OKc9DCfLjOEaS19eGU+LSnrhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuEodIgDWX/AJTNJoVo5Mwuw+spMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/OASmit ffR+Po2/CE0POjQWp6u0EzYyQJWrY/oTUd0zJN0mNM4K2A+qaVmJOYDhmWL7FIim c/tGlFhr/3RrZqoSgqwEaqkcgXj5LktO/y77pXcvnRRXFt2njLXIQZ6qpfpSya5Z TCPmiXU6rECLjhHnarfqEAflSQkk2fo7soriVzKU3cYdu45w/zMnUOfBNSMQNGuK nZ8nBswQtHJh1GnVrncMPeK5MYmpFWx3b0HHxOMuVtEKNTq7fEVOQnS4mpYliIoU EHLRcG+dBegvMvEPdsbfWgyI2rmkyhtVngt7DD6hgMiHegoXTcJU9VqCvTfxOx7w CFaJGXxfZAaqpw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:53:43 2025 by rpki-client