This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json) Hash identifier: wYjLZ6XSIp+k+tzrmL+CM5zGLIJ+SaPVz/+OUVs2OMg= Subject key identifier: 6B:E0:3B:70:25:A9:2B:E5:61:91:F3:48:32:E3:97:E7:6F:9A:7C:92 Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7 Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7 Certificate serial: 019AF31BD182B221A66BD8D304A95454D357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 10:01:17 +0000 Manifest this update: Sat 06 Dec 2025 10:01:17 +0000 Manifest next update: Sun 07 Dec 2025 10:01:17 +0000 Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=) 2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=) 3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: 8sMD2vfd2KehLTGOplSwlZ6Ur/Qc4pr3x8zJMue3cO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d1:82:b2:21:a6:6b:d8:d3:04:a9:54:54:d3:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7 Validity Not Before: Dec 6 10:01:17 2025 GMT Not After : Dec 7 10:01:17 2025 GMT Subject: CN=6be03b7025a92be56191f34832e397e76f9a7c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:27:33:08:1e:05:32:54:61:2b:eb:de:2c:f2: f2:02:a0:b3:8a:6f:b1:c2:50:e6:fb:e1:3e:b4:45: cd:25:83:26:d0:78:a3:5d:b4:54:93:3b:2f:96:03: a0:8f:d5:cf:36:f9:5a:0b:9d:21:64:63:d2:77:9b: 9f:81:ed:fc:9a:c5:cd:8a:25:0e:4a:8c:ae:c4:48: bf:3c:9c:d1:a4:f2:5a:ea:a0:e7:29:58:d5:2a:f4: be:23:ec:3e:01:97:45:de:95:08:b1:c1:74:d0:2c: 2d:2b:9b:d4:30:16:6f:9f:8b:93:00:96:73:94:92: 43:99:32:02:d8:27:40:33:8c:df:d1:ca:9e:18:99: ff:e0:38:74:e4:30:1a:db:af:8c:e2:a7:46:97:95: fc:f8:62:df:34:3a:43:a9:8f:6c:f7:96:69:72:87: 42:5f:97:87:ef:1f:59:f5:c7:3d:7a:20:6c:ac:ed: f7:24:1a:f8:48:73:ba:ca:73:4e:a5:09:23:31:a5: c9:ea:c9:ed:7d:56:1c:a4:37:ce:59:d3:44:5f:0d: 17:59:aa:96:19:7c:ee:8c:64:6f:42:59:af:fb:66: 8f:58:2b:a0:b3:2c:33:70:12:a8:d7:68:b0:f1:0b: 28:b4:0f:f0:1d:13:5a:2b:68:72:08:ac:4c:fa:34: 56:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E0:3B:70:25:A9:2B:E5:61:91:F3:48:32:E3:97:E7:6F:9A:7C:92 X509v3 Authority Key Identifier: keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:a5:e1:5d:a0:3b:0b:16:32:7d:37:3e:00:58:de:45:1b:89: 01:d8:1c:5f:d7:36:af:87:79:d1:a0:9f:e3:c9:db:dc:5b:5d: b9:ea:d5:44:b0:46:68:b4:20:a3:eb:7b:7f:f4:f0:fd:80:84: a6:de:1b:d4:a9:71:52:47:1a:4a:4e:cc:60:f4:b7:3f:af:fe: 68:31:45:53:bc:dc:cd:7d:5a:bd:89:b6:99:66:11:12:a0:14: 2e:36:46:40:83:c1:cd:4d:01:1d:7b:36:aa:4d:61:72:67:39: 16:26:1e:c4:98:bf:94:7b:b1:45:75:65:19:f0:27:5e:56:64: 89:09:37:12:6f:d7:90:c3:8e:b6:6a:95:8d:f8:ad:a3:13:23: 86:51:3f:c4:c3:15:d2:14:93:64:4e:08:7d:44:8d:c1:62:95: ba:46:63:8c:6c:85:b3:41:c2:b0:4b:d9:1d:39:d0:a5:ae:7c: ab:21:c7:75:ac:d4:87:62:3d:28:8b:1b:9e:6d:21:52:f7:0f: 03:ff:94:b0:53:59:be:dd:94:57:90:91:06:27:5a:df:a2:65: 05:29:db:ef:93:cd:55:2b:ab:26:b3:9c:f1:50:9e:20:65:c7: 18:a9:12:8c:7d:76:d3:70:5d:97:0a:8f:f4:23:f2:2d:27:ac: b1:87:c9:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9GCsiGma9jTBKlUVNNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMTNmMmMyZDA2YzY0Yjg5NTQ1N2FiNTBmYzQ5MjAyODNh NDljYzcwHhcNMjUxMjA2MTAwMTE3WhcNMjUxMjA3MTAwMTE3WjAzMTEwLwYDVQQD Eyg2YmUwM2I3MDI1YTkyYmU1NjE5MWYzNDgzMmUzOTdlNzZmOWE3YzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCczCB4FMlRhK+veLPLyAqCzim+x wlDm++E+tEXNJYMm0HijXbRUkzsvlgOgj9XPNvlaC50hZGPSd5ufge38msXNiiUO SoyuxEi/PJzRpPJa6qDnKVjVKvS+I+w+AZdF3pUIscF00CwtK5vUMBZvn4uTAJZz lJJDmTIC2CdAM4zf0cqeGJn/4Dh05DAa26+M4qdGl5X8+GLfNDpDqY9s95ZpcodC X5eH7x9Z9cc9eiBsrO33JBr4SHO6ynNOpQkjMaXJ6sntfVYcpDfOWdNEXw0XWaqW GXzujGRvQlmv+2aPWCugsywzcBKo12iw8QsotA/wHRNaK2hyCKxM+jRWvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvgO3AlqSvlYZHzSDLjl+dvmnySMB8GA1UdIwQY MBaAFJIT8sLQbGS4lUV6tQ/EkgKDpJzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmIt YjlkZmYzZTdhMzJlLzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmItYjlkZmYzZTdhMzJl LzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxaXhXaA7 CxYyfTc+AFjeRRuJAdgcX9c2r4d50aCf48nb3FtduerVRLBGaLQgo+t7f/Tw/YCE pt4b1KlxUkcaSk7MYPS3P6/+aDFFU7zczX1avYm2mWYREqAULjZGQIPBzU0BHXs2 qk1hcmc5FiYexJi/lHuxRXVlGfAnXlZkiQk3Em/XkMOOtmqVjfitoxMjhlE/xMMV 0hSTZE4IfUSNwWKVukZjjGyFs0HCsEvZHTnQpa58qyHHdazUh2I9KIsbnm0hUvcP A/+UsFNZvt2UV5CRBida36JlBSnb75PNVSurJrOc8VCeIGXHGKkSjH1203BdlwqP 9CPyLSessYfJXA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:30 2025 by rpki-client