This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json) Hash identifier: EgcOWkUuS31Km1zoAJeYwrqpfefSatEtY2U9kI6Yg54= Subject key identifier: 0E:3A:3C:FF:B9:0C:1C:E9:DB:2B:8B:CA:8F:DC:75:E0:4C:0E:54:BA Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8 Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8 Certificate serial: 019AF27689CB5AB79D6726660FE9C1CB8116 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft Manifest number: 0590 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: vt/NaUMkWwEKLdU3xMUAMel+tYSZtotevY+i2M9Pb70=) 2: zXilNDKWsxIaUq_LEMDiwJqBNJI.roa (hash: Eo6IWAeJUaI2CdPXL2mpqljbcAx/G9eShos6ic97+nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:89:cb:5a:b7:9d:67:26:66:0f:e9:c1:cb:81:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=0e3a3cffb90c1ce9db2b8bca8fdc75e04c0e54ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5e:ed:31:86:8c:37:c5:4d:cc:13:30:b2:f4: 77:92:0e:a6:73:9d:d9:3b:db:70:4e:2e:99:b9:23: b6:08:61:19:80:5d:6a:71:80:e5:c1:d4:ce:e3:2e: a5:d5:bf:a5:ea:e0:2e:a7:89:2d:6e:44:81:ae:77: 92:bb:a7:5e:da:bd:11:1a:ad:4a:c8:8a:12:48:b7: ec:22:49:9c:a7:98:12:a8:2d:51:f4:99:3a:5c:3a: 7c:19:43:cf:65:09:c4:f2:64:b2:2f:6e:25:71:a5: 17:43:5f:a3:ed:28:ca:3b:71:c5:a8:1e:ef:ac:89: 6b:ae:89:fb:88:34:dd:0d:2d:0b:a0:4a:3b:d8:98: 03:65:1d:d2:f5:fb:56:40:3c:26:80:31:40:97:e8: a9:75:23:69:5e:da:b3:93:f4:32:05:59:2d:5d:53: 5f:0f:03:e5:49:2d:0a:46:98:18:93:68:b3:9e:55: df:ae:c9:66:26:27:d8:de:6d:ec:dd:df:37:70:ed: d9:cd:ee:bc:f8:37:df:6e:d3:bd:c5:ad:f6:bf:32: 75:77:3f:1a:b0:a8:67:f7:d6:91:ab:cc:fc:0b:43: 21:04:06:7e:64:74:34:e8:fd:e9:46:2d:eb:30:cc: 9c:eb:a2:3b:47:d8:ce:bb:3d:b3:a9:6b:81:2b:ec: bb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3A:3C:FF:B9:0C:1C:E9:DB:2B:8B:CA:8F:DC:75:E0:4C:0E:54:BA X509v3 Authority Key Identifier: keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:9a:43:55:b0:8b:b6:2e:6a:be:a1:a6:c8:4c:13:45:79:a3: 9a:2e:ca:3e:7f:55:6f:ae:be:09:67:78:96:96:1c:49:6f:da: d7:af:78:bc:75:f9:a6:bd:0b:0e:bd:45:dc:79:82:b0:6e:45: 5c:20:69:0b:59:d0:5f:c2:ec:ec:ea:e1:4a:e6:37:6e:f8:f3: 98:66:66:3b:da:18:89:53:f0:59:f1:10:61:27:14:a4:4b:96: 7f:85:39:58:f5:83:d3:2b:c6:86:e2:0d:c8:e3:c8:f3:65:ba: 8d:af:a5:cf:cc:49:27:f9:3e:33:f8:37:bf:06:0a:8a:b1:9b: 55:5b:c7:aa:67:cf:b7:90:4c:25:cb:d7:8c:17:53:17:56:eb: 97:6c:eb:58:da:f2:fb:1a:e7:cf:d6:c1:ec:50:6e:6c:07:17: 3d:8b:cd:d9:cc:4b:2e:15:30:41:b2:bb:7f:0e:f5:83:53:b9: cb:cf:b3:b7:1c:c2:56:5c:c3:5d:77:58:76:6a:47:cf:bf:ae: 9f:c7:c6:d1:14:31:a2:1e:01:85:4a:ca:09:f1:01:0b:69:b5: c8:b5:76:32:e7:03:18:88:77:e5:f9:b1:6a:b6:93:fa:50:f1: 47:05:ca:03:d7:88:a2:bc:b9:42:06:b8:cd:4a:f6:42:5b:63: 37:5c:f7:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydonLWredZyZmD+nBy4EWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMTNmOTBhYTRkOGU0N2VhYmIzNDg1OTAxNTdmNDg3OGJm NzQ2ZjgwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD EygwZTNhM2NmZmI5MGMxY2U5ZGIyYjhiY2E4ZmRjNzVlMDRjMGU1NGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll7tMYaMN8VNzBMwsvR3kg6mc53Z O9twTi6ZuSO2CGEZgF1qcYDlwdTO4y6l1b+l6uAup4ktbkSBrneSu6de2r0RGq1K yIoSSLfsIkmcp5gSqC1R9Jk6XDp8GUPPZQnE8mSyL24lcaUXQ1+j7SjKO3HFqB7v rIlrron7iDTdDS0LoEo72JgDZR3S9ftWQDwmgDFAl+ipdSNpXtqzk/QyBVktXVNf DwPlSS0KRpgYk2iznlXfrslmJifY3m3s3d83cO3Zze68+DffbtO9xa32vzJ1dz8a sKhn99aRq8z8C0MhBAZ+ZHQ06P3pRi3rMMyc66I7R9jOuz2zqWuBK+y7PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA46PP+5DBzp2yuLyo/cdeBMDlS6MB8GA1UdIwQY MBaAFJIT+Qqk2OR+q7NIWQFX9IeL90b4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2hQNUNxVFk1SDZyczBoWkFWZjBoNHYzUnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZGZhY2UtMTkzYy00OWM4LWI0NWQt ZGIzZmNjZmI3ZGIxLzEva2hQNUNxVFk1SDZyczBoWkFWZjBoNHYzUnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iZGZhY2UtMTkzYy00OWM4LWI0NWQtZGIzZmNjZmI3ZGIx LzEva2hQNUNxVFk1SDZyczBoWkFWZjBoNHYzUnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJpDVbCL ti5qvqGmyEwTRXmjmi7KPn9Vb66+CWd4lpYcSW/a1694vHX5pr0LDr1F3HmCsG5F XCBpC1nQX8Ls7OrhSuY3bvjzmGZmO9oYiVPwWfEQYScUpEuWf4U5WPWD0yvGhuIN yOPI82W6ja+lz8xJJ/k+M/g3vwYKirGbVVvHqmfPt5BMJcvXjBdTF1brl2zrWNry +xrnz9bB7FBubAcXPYvN2cxLLhUwQbK7fw71g1O5y8+ztxzCVlzDXXdYdmpHz7+u n8fG0RQxoh4BhUrKCfEBC2m1yLV2MucDGIh35fmxaraT+lDxRwXKA9eIory5Qga4 zUr2QltjN1z3bw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:00 2025 by rpki-client