This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft File: _KHkSHz41KLZYd1iLz51Ab3CSCk.mft (raw, json) Hash identifier: oeWNn2K42/n668spFUTVeie1n+Zi2XSqU07ArAJtaFw= Subject key identifier: 80:BA:6B:3B:6F:85:00:C5:50:F9:91:91:0E:75:2E:09:21:22:3D:CA Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29 Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829 Certificate serial: 019AF42E1ED9752B3CC48CEF02E88A511ABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft Manifest number: A1 Signing time: Sat 06 Dec 2025 15:00:54 +0000 Manifest this update: Sat 06 Dec 2025 15:00:54 +0000 Manifest next update: Sun 07 Dec 2025 15:00:54 +0000 Files and hashes: 1: 0SYfMOFLmlHWfOD7GGmjzxxApg0.roa (hash: 58074XIGQFehdiB8PI23Nifkeux3z5O0Tv2sRnC0yzo=) 2: _KHkSHz41KLZYd1iLz51Ab3CSCk.crl (hash: TUG8CQuk1KcNpt60MpxiCE4M9EwiL3yXCUs/jQXWltM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:1e:d9:75:2b:3c:c4:8c:ef:02:e8:8a:51:1a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829 Validity Not Before: Dec 6 15:00:54 2025 GMT Not After : Dec 7 15:00:54 2025 GMT Subject: CN=80ba6b3b6f8500c550f991910e752e0921223dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:06:25:6b:46:45:5d:da:83:ed:44:da:0c:0d: b8:1f:81:8c:02:f5:08:5f:e1:53:82:90:77:61:d2: dc:83:00:9a:4d:77:63:12:e2:5f:e1:08:f9:de:02: ae:d5:5a:9d:01:ef:bf:22:ac:e5:14:ec:3e:00:0b: da:36:63:2e:e0:9d:2c:4e:39:f0:b7:aa:6b:06:f6: 24:c6:0e:7f:d0:4a:82:e7:f4:38:f2:8a:e7:a8:61: 34:73:dd:f3:d4:0f:ed:e7:95:5b:f0:cc:49:37:98: dd:d3:10:35:32:a0:8f:a4:e1:08:cf:0d:c0:57:92: 0c:5b:07:89:9e:cf:4d:0f:ef:da:d4:62:0b:cb:86: b9:3f:29:93:cd:ef:f6:f4:61:76:40:6d:45:33:84: d2:65:82:e3:14:7c:f1:b7:a8:96:1a:a2:58:59:7c: 2d:ee:7e:54:a0:76:fa:e6:28:c5:cd:a3:5f:1c:b6: fa:15:5e:da:8b:26:42:ea:e9:a6:11:73:42:1a:29: 95:d2:2d:a7:0b:c7:89:02:6d:7a:e4:3b:65:43:2c: 0e:98:55:93:21:b6:b0:dc:14:8c:ca:4c:2e:a5:a3: 7d:e1:3e:39:9c:72:c5:dd:73:11:6d:f2:9a:06:07: c8:48:b3:f2:9b:10:39:12:7e:0b:2d:f8:40:66:08: 58:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BA:6B:3B:6F:85:00:C5:50:F9:91:91:0E:75:2E:09:21:22:3D:CA X509v3 Authority Key Identifier: keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:da:1e:52:1a:41:db:e0:3c:b2:af:92:f5:e8:09:08:26:f4: 6e:5b:7c:e9:ae:19:35:ab:42:f2:13:29:15:5e:04:49:84:f0: 9b:16:3b:3e:68:88:74:16:f8:1c:f0:32:df:e4:a7:c6:76:89: 72:3b:e6:40:c4:f9:74:a2:02:74:26:62:1b:da:80:9d:d3:23: 45:49:f5:df:9e:b5:ff:f4:70:02:f5:cf:89:7c:04:a6:ba:bc: 9d:8a:1c:26:27:1a:a2:ee:9d:6f:f4:07:97:34:43:b1:c9:50: 71:85:80:ba:6b:c0:cc:53:ca:2a:69:a3:ab:ca:e0:63:3c:ed: f0:9b:0e:3f:c3:6d:8b:31:dc:55:32:23:19:25:db:ff:ea:d6: 42:09:d7:81:fe:d6:7c:a9:dc:d0:7f:17:69:b3:aa:73:44:b1: ac:ff:80:a9:15:6d:63:19:90:9c:4f:c0:05:99:27:23:e6:0a: ec:07:69:ce:b9:ec:2a:e0:32:ba:c1:5d:36:cc:00:7b:07:33: 69:b4:89:fe:5a:a8:f4:97:07:94:25:5c:45:75:b0:1a:3e:a3: f7:a5:de:dd:c0:b0:d3:3c:6f:6b:ef:36:7e:5a:d1:7c:c9:32: a3:b9:3c:34:34:0b:cd:ae:b8:ff:22:56:22:e2:c0:4e:eb:19: 00:86:61:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lh7ZdSs8xIzvAuiKURq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTFlNDQ4N2NmOGQ0YTJkOTYxZGQ2MjJmM2U3NTAxYmRj MjQ4MjkwHhcNMjUxMjA2MTUwMDU0WhcNMjUxMjA3MTUwMDU0WjAzMTEwLwYDVQQD Eyg4MGJhNmIzYjZmODUwMGM1NTBmOTkxOTEwZTc1MmUwOTIxMjIzZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwYla0ZFXdqD7UTaDA24H4GMAvUI X+FTgpB3YdLcgwCaTXdjEuJf4Qj53gKu1VqdAe+/IqzlFOw+AAvaNmMu4J0sTjnw t6prBvYkxg5/0EqC5/Q48ornqGE0c93z1A/t55Vb8MxJN5jd0xA1MqCPpOEIzw3A V5IMWweJns9ND+/a1GILy4a5PymTze/29GF2QG1FM4TSZYLjFHzxt6iWGqJYWXwt 7n5UoHb65ijFzaNfHLb6FV7aiyZC6ummEXNCGimV0i2nC8eJAm165DtlQywOmFWT Ibaw3BSMykwupaN94T45nHLF3XMRbfKaBgfISLPymxA5En4LLfhAZghY4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIC6aztvhQDFUPmRkQ51LgkhIj3KMB8GA1UdIwQY MBaAFPyh5Eh8+NSi2WHdYi8+dQG9wkgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82NzI5NzQtNzJiMS00NGZkLTgyNmEt MWUyOTJjMGU5NWYxLzEvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82NzI5NzQtNzJiMS00NGZkLTgyNmEtMWUyOTJjMGU5NWYx LzEvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNoeUhpB 2+A8sq+S9egJCCb0blt86a4ZNatC8hMpFV4ESYTwmxY7PmiIdBb4HPAy3+SnxnaJ cjvmQMT5dKICdCZiG9qAndMjRUn13561//RwAvXPiXwEprq8nYocJicaou6db/QH lzRDsclQcYWAumvAzFPKKmmjq8rgYzzt8JsOP8NtizHcVTIjGSXb/+rWQgnXgf7W fKnc0H8XabOqc0SxrP+AqRVtYxmQnE/ABZknI+YK7AdpzrnsKuAyusFdNswAewcz abSJ/lqo9JcHlCVcRXWwGj6j96Xe3cCw0zxva+82flrRfMkyo7k8NDQLza64/yJW IuLATusZAIZhtA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:37:07 2025 by rpki-client