This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft File: KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json) Hash identifier: dFJr+yHwAeDpESiqInx3nAGD+zuUZRYtCc0rUf5rOSA= Subject key identifier: 50:59:3A:75:9B:07:F7:6E:A8:46:3E:66:FD:56:9C:93:9C:1B:A1:B4 Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d Certificate serial: 019AF0BEF760BC927B615B4775CA0DB8F81D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft Manifest number: 0BAC Signing time: Fri 05 Dec 2025 23:00:38 +0000 Manifest this update: Fri 05 Dec 2025 23:00:38 +0000 Manifest next update: Sat 06 Dec 2025 23:00:38 +0000 Files and hashes: 1: 1gJl5QGcLnfhKR4ZX5vkhukZyTU.roa (hash: NMFFqW5s2zQQWT6VrzvJinnOwTRcu4h6yTFNCCxpjXA=) 2: HlpYPKfUTSJ7pDq2oQziu1OJN70.roa (hash: 2/lnsP1apTOPlsNH0YhFprUwFbQM2G9j3yZLF5vZFt4=) 3: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: A1nXHn/DmDeAXr+UnvT80pXtcnlI2lfAPEBsbxKKqdA=) 4: n82Q14Y2YDik1JFdwsQlLlmUXCU.roa (hash: Pqu0KJ3PErrtF3waClxiFcaMqimhO+E9Mo28nI/aapw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f7:60:bc:92:7b:61:5b:47:75:ca:0d:b8:f8:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d Validity Not Before: Dec 5 23:00:38 2025 GMT Not After : Dec 6 23:00:38 2025 GMT Subject: CN=50593a759b07f76ea8463e66fd569c939c1ba1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8f:33:7f:d7:13:7e:32:54:ff:e3:dd:3a:e2: 6c:b3:f9:d9:65:b1:50:e5:17:f8:58:1a:21:43:27: 71:71:a1:16:20:00:42:80:13:95:6b:58:2c:93:3a: 54:e3:b8:bc:04:9b:8e:a4:82:61:e2:c0:b8:c5:ac: 3e:d8:b8:7b:99:38:dd:42:0f:ee:61:f2:45:03:d2: e7:5d:64:d7:c5:db:b7:d1:3d:fc:01:50:29:1c:e1: b9:42:cc:e5:76:c3:1b:50:8f:e8:8f:1f:9f:b0:6b: 70:a4:2c:14:07:80:4d:1b:12:05:04:1c:a4:d7:1a: 28:5f:4d:6f:56:ed:de:07:3a:e3:b4:39:70:9e:43: 8a:7a:9b:02:41:b9:f6:e4:56:35:8c:a3:fe:53:91: ce:68:a7:a9:dc:e9:7e:ce:ae:c4:9b:f6:6a:60:c6: 61:2d:20:01:bf:ed:4f:38:fe:3a:59:bc:c9:b2:b2: 3a:d9:13:b3:e5:48:92:41:48:df:f4:ef:b3:b3:09: a5:95:a1:cc:0e:54:1f:bb:9e:d8:13:dc:dd:29:27: ab:55:30:58:45:2c:f8:c9:d8:2c:cb:40:75:da:4f: 86:1b:5a:95:05:e9:1c:6a:f1:03:8e:8a:13:0c:c8: 83:a6:04:e7:34:7b:77:d0:ae:ed:a9:27:30:f1:af: 22:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:59:3A:75:9B:07:F7:6E:A8:46:3E:66:FD:56:9C:93:9C:1B:A1:B4 X509v3 Authority Key Identifier: keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e4:a5:b5:af:38:1e:b6:97:d7:f3:96:2d:f2:39:67:c0:a5: 92:43:7e:cf:5a:93:6d:a5:f1:3f:f8:52:d6:e3:3d:87:f2:91: 4e:1b:7c:2a:69:1b:ee:1c:66:ff:5c:2e:5a:2b:51:9c:66:66: 73:4d:33:6f:10:ba:50:e3:79:be:6a:5e:82:ee:18:53:81:5d: e6:e7:c0:cf:df:09:38:f2:09:5b:65:14:0e:46:8d:ab:a9:1b: 2d:08:a3:8d:4c:64:19:d4:12:48:10:99:00:fa:b9:b5:47:ba: b4:96:cc:b0:76:fe:3d:de:8a:e9:a4:f2:7f:1e:84:53:5c:89: bc:e3:fd:84:4f:39:c9:91:05:c9:98:90:4a:92:59:1a:01:54: 1e:12:a5:8f:19:00:f9:29:a0:cd:39:bb:bc:03:a4:b9:94:98: cc:4a:d9:b9:69:b7:6f:35:e4:6f:f8:45:58:88:fc:f5:1f:24: 20:1b:ae:e5:9c:08:8f:69:3c:b3:0b:e7:8a:88:82:15:94:55: 93:75:17:d6:e0:cc:cc:d9:e7:e9:6b:a7:7b:9a:30:4b:00:fd: ce:bf:65:3d:54:c8:e6:d2:09:7a:3c:c0:7f:0d:b6:a8:d4:ef: dd:ef:a5:ef:a1:e0:f7:4b:d7:5c:43:60:8d:0f:4e:d9:73:8d: 08:84:76:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvdgvJJ7YVtHdcoNuPgdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4N2UxYzk3ZjcxZjM1NTg2N2UzZmI4NzdmMjFhYTUxMzBi NmNmNWQwHhcNMjUxMjA1MjMwMDM4WhcNMjUxMjA2MjMwMDM4WjAzMTEwLwYDVQQD Eyg1MDU5M2E3NTliMDdmNzZlYTg0NjNlNjZmZDU2OWM5MzljMWJhMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI8zf9cTfjJU/+PdOuJss/nZZbFQ 5Rf4WBohQydxcaEWIABCgBOVa1gskzpU47i8BJuOpIJh4sC4xaw+2Lh7mTjdQg/u YfJFA9LnXWTXxdu30T38AVApHOG5QszldsMbUI/ojx+fsGtwpCwUB4BNGxIFBByk 1xooX01vVu3eBzrjtDlwnkOKepsCQbn25FY1jKP+U5HOaKep3Ol+zq7Em/ZqYMZh LSABv+1POP46WbzJsrI62ROz5UiSQUjf9O+zswmllaHMDlQfu57YE9zdKSerVTBY RSz4ydgsy0B12k+GG1qVBekcavEDjooTDMiDpgTnNHt30K7tqScw8a8i+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBZOnWbB/duqEY+Zv1WnJOcG6G0MB8GA1UdIwQY MBaAFCh+HJf3HzVYZ+P7h38hqlEwts9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hZjE2MWItZWY1MS00NGJkLThlMGEt OWViM2M2ODJiMDA5LzEvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hZjE2MWItZWY1MS00NGJkLThlMGEtOWViM2M2ODJiMDA5 LzEvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOSlta84 HraX1/OWLfI5Z8ClkkN+z1qTbaXxP/hS1uM9h/KRTht8Kmkb7hxm/1wuWitRnGZm c00zbxC6UON5vmpegu4YU4Fd5ufAz98JOPIJW2UUDkaNq6kbLQijjUxkGdQSSBCZ APq5tUe6tJbMsHb+Pd6K6aTyfx6EU1yJvOP9hE85yZEFyZiQSpJZGgFUHhKljxkA +SmgzTm7vAOkuZSYzErZuWm3bzXkb/hFWIj89R8kIBuu5ZwIj2k8swvnioiCFZRV k3UX1uDMzNnn6Wune5owSwD9zr9lPVTI5tIJejzAfw22qNTv3e+l76Hg90vXXENg jQ9O2XONCIR2eg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:24 2025 by rpki-client