This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft File: khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json) Hash identifier: cavz5JZHajHIluMhlfQsedvEuhCrdYkrlAMFEFPXT2M= Subject key identifier: 61:53:E9:5B:BC:67:CE:E4:49:23:BC:A9:4A:53:56:99:08:D5:92:5F Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0 Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0 Certificate serial: 019AF1D25B719224E8178F72777E75C8CA32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft Manifest number: 1474 Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: K_0VKEBHZ8AzTGdtRKig6YmReAg.roa (hash: V6KL9KuDWKfGzsEoPpZURMCt8ttu62n0nd3Y+gExuwA=) 2: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: Dx1pQdC/wqn5Ej7xp6ZlUlcFi58Ke75IHWokb5xIFOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5b:71:92:24:e8:17:8f:72:77:7e:75:c8:ca:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0 Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=6153e95bbc67cee44923bca94a53569908d5925f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:39:20:70:f4:d2:e9:31:c7:6c:e3:55:ed: 17:13:2b:a8:76:61:e5:8d:a1:b4:13:29:57:d2:17: 69:f7:0c:c2:a8:ef:d2:eb:52:90:d0:80:36:b5:a7: f0:05:c7:7d:d8:32:bd:81:88:b0:f2:4c:9b:16:eb: 3f:46:b3:36:39:e1:9e:fc:47:c1:08:60:33:45:8b: e8:4f:0d:6e:4c:56:74:a1:d8:8e:90:62:5f:aa:00: c5:08:ce:fd:40:43:3f:18:db:0a:cd:ee:b4:80:31: 7e:59:08:1e:1d:8d:e7:07:f4:08:66:82:1e:1c:da: 70:06:27:db:2d:b0:ed:31:11:57:7c:96:40:2f:8d: c8:37:a1:bd:c6:77:89:08:36:15:a8:d3:4b:02:18: 91:c7:b0:34:94:8d:6c:98:88:aa:2c:8a:9b:ed:f4: 1d:c4:8d:93:ea:dc:89:99:d5:82:b1:8a:0a:4e:63: 5a:83:6d:aa:1c:93:2f:ce:ab:50:9b:40:3f:a1:75: e8:86:93:be:98:c6:05:c8:ad:2f:34:38:98:81:88: d3:4c:0e:2a:c3:44:a5:5e:f3:1a:10:92:73:ad:fc: f4:88:7b:ac:1c:71:d7:e1:7f:68:18:f6:3e:21:11: c9:a3:a8:2f:e7:17:4e:36:10:8a:1b:04:a6:f0:5b: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:53:E9:5B:BC:67:CE:E4:49:23:BC:A9:4A:53:56:99:08:D5:92:5F X509v3 Authority Key Identifier: keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:47:2d:35:4e:cc:fe:e9:fb:1d:14:50:41:c3:1f:a2:7b:55: 93:6c:90:35:cc:56:00:3b:b6:ad:1b:32:3d:96:cc:f4:20:09: e2:05:dd:15:cf:80:d8:c2:c8:fb:58:bc:41:54:f4:52:65:8f: 45:36:d3:0d:f7:81:e5:85:b3:a9:80:d2:37:cb:c5:71:50:33: 2b:03:3c:90:ff:c9:2d:ab:78:58:7f:59:d1:6a:87:67:b3:e7: fc:de:e9:0b:18:84:39:45:4c:a3:ca:c2:3a:aa:a7:b6:22:77: d5:d0:59:d4:da:e7:00:37:23:c9:8f:5a:64:ba:53:82:0b:b6: 0c:7a:ae:30:27:c4:3f:e6:52:5f:90:44:3b:01:60:82:26:dd: 1f:16:0f:2d:9e:6a:d3:e3:b0:4b:d5:36:ad:e5:98:a3:34:3a: f3:c8:84:f1:ea:7c:63:32:48:5a:35:c8:94:54:b3:a8:37:22: 3d:03:59:56:1d:85:75:a4:1e:37:c4:93:b7:66:02:e7:a7:c8: b6:78:0a:a1:c5:46:b9:18:40:3a:a8:af:6d:db:24:6a:08:26: 0a:61:e2:d0:11:1d:92:71:dd:74:f9:93:e4:95:61:b6:13:2b: c9:83:dc:68:14:cc:17:5d:8a:2b:2b:92:41:37:92:7e:33:9c: d6:d0:9e:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ltxkiToF49yd351yMoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMWM0ZmRhMzY3YzUzODNiMTVjMmE3MTQzYWQ0YjEwYzk1 NWNlYTAwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD Eyg2MTUzZTk1YmJjNjdjZWU0NDkyM2JjYTk0YTUzNTY5OTA4ZDU5MjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjs5IHD00ukxx2zjVe0XEyuodmHl jaG0EylX0hdp9wzCqO/S61KQ0IA2tafwBcd92DK9gYiw8kybFus/RrM2OeGe/EfB CGAzRYvoTw1uTFZ0odiOkGJfqgDFCM79QEM/GNsKze60gDF+WQgeHY3nB/QIZoIe HNpwBifbLbDtMRFXfJZAL43IN6G9xneJCDYVqNNLAhiRx7A0lI1smIiqLIqb7fQd xI2T6tyJmdWCsYoKTmNag22qHJMvzqtQm0A/oXXohpO+mMYFyK0vNDiYgYjTTA4q w0SlXvMaEJJzrfz0iHusHHHX4X9oGPY+IRHJo6gv5xdONhCKGwSm8FsZUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFT6Vu8Z87kSSO8qUpTVpkI1ZJfMB8GA1UdIwQY MBaAFJIcT9o2fFODsVwqcUOtSxDJVc6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zZDZiMWEtNmQ2MS00NGI4LThjYmIt MjM2MDhmNmFlMmVhLzEva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zZDZiMWEtNmQ2MS00NGI4LThjYmItMjM2MDhmNmFlMmVh LzEva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkctNU7M /un7HRRQQcMfontVk2yQNcxWADu2rRsyPZbM9CAJ4gXdFc+A2MLI+1i8QVT0UmWP RTbTDfeB5YWzqYDSN8vFcVAzKwM8kP/JLat4WH9Z0WqHZ7Pn/N7pCxiEOUVMo8rC OqqntiJ31dBZ1NrnADcjyY9aZLpTggu2DHquMCfEP+ZSX5BEOwFggibdHxYPLZ5q 0+OwS9U2reWYozQ688iE8ep8YzJIWjXIlFSzqDciPQNZVh2FdaQeN8STt2YC56fI tngKocVGuRhAOqivbdskaggmCmHi0BEdknHddPmT5JVhthMryYPcaBTMF12KKyuS QTeSfjOc1tCe1A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:25 2025 by rpki-client