This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft File: KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft (raw, json) Hash identifier: 5eQbPymN7PNKqc1j+z59JnnTQZNzg2AXHirJHFYKTrA= Subject key identifier: 0B:8C:D1:40:B2:67:2A:64:8B:47:27:62:B2:19:C7:D7:73:E4:A8:C0 Authority key identifier: 2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0 Certificate issuer: /CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0 Certificate serial: 019AF50A3A6F594F30376E70989C6BF5FC12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft Manifest number: 0998 Signing time: Sat 06 Dec 2025 19:01:19 +0000 Manifest this update: Sat 06 Dec 2025 19:01:19 +0000 Manifest next update: Sun 07 Dec 2025 19:01:19 +0000 Files and hashes: 1: KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl (hash: r53tpTVYwjPcUMS4u1ap2boSWleQ36ccFssG4DBhqLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:3a:6f:59:4f:30:37:6e:70:98:9c:6b:f5:fc:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0 Validity Not Before: Dec 6 19:01:19 2025 GMT Not After : Dec 7 19:01:19 2025 GMT Subject: CN=0b8cd140b2672a648b472762b219c7d773e4a8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:5d:ee:4f:1f:a8:cf:ec:a3:41:ae:02:d5: f8:b1:df:c4:da:ae:34:e9:68:09:78:42:f1:b9:9a: 61:86:e0:d8:ce:07:98:f1:9a:c6:ad:79:5d:ff:40: 1f:a6:26:aa:f8:0e:b7:4d:bc:2d:f5:e3:f9:77:61: 5c:79:bf:a9:ff:86:2b:35:b4:fc:07:a8:e8:3f:9f: 4a:17:e6:54:05:a2:24:8b:87:a2:40:04:96:1f:87: 8c:f7:e7:dd:d2:17:03:05:ff:7c:6e:04:f8:c8:4f: aa:84:06:54:50:37:f0:fe:b3:ee:a1:b1:d6:14:8a: 44:b8:74:3f:96:65:ef:df:7b:fc:f3:1a:e0:f1:8c: 9b:07:ee:fc:d1:a3:0d:8e:e1:03:6e:b3:d4:e4:f6: 52:cf:78:ca:2d:31:6f:8a:d0:4c:5d:b9:38:fc:78: d7:09:dd:6f:70:f1:c0:a8:fa:a8:b3:79:bb:0d:9e: ba:82:12:78:f0:2b:0f:2f:2b:f1:be:8c:7f:ca:5a: d9:df:2c:86:24:ca:1c:f8:00:b0:89:6e:b1:cd:0e: a4:81:7a:ef:58:c8:af:d9:55:27:b5:c8:02:cd:0c: 5c:a2:0f:c1:3c:85:ad:ff:27:e0:ad:ae:6e:0c:c9: f5:50:ae:ee:1e:5b:d2:ab:f6:92:49:11:0c:8e:3d: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8C:D1:40:B2:67:2A:64:8B:47:27:62:B2:19:C7:D7:73:E4:A8:C0 X509v3 Authority Key Identifier: keyid:2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e8:69:8d:c8:02:86:43:d9:36:58:b8:38:11:75:d9:c2:d2: ac:66:c1:e4:df:f5:80:67:23:c2:20:d1:8c:ad:48:44:4f:ad: e4:f5:07:3f:07:7a:3a:2a:f9:79:dc:40:cc:c7:6f:08:1c:cb: 4f:27:56:e4:dc:b3:86:42:be:ca:c6:71:8e:6f:19:17:58:10: 2c:75:4f:62:ff:c1:d4:11:b4:30:7f:8d:f6:cf:a5:49:fb:84: b8:06:14:6b:0f:e6:db:2b:ed:da:8f:bb:5d:6e:bc:c7:1a:90: c0:8a:b5:7f:b6:bc:df:7f:7c:f7:43:68:3d:b8:e1:39:63:b6: b8:3a:05:f4:c1:da:46:22:27:16:11:ec:5b:a2:2e:63:be:c7: c7:d1:a1:e0:8c:4a:b9:2d:9f:8a:bf:29:95:52:58:c4:31:7e: 8b:eb:33:07:16:4f:71:8a:3a:8f:c5:e1:e2:b1:87:4f:3f:87: cb:69:ad:7e:49:db:52:d1:1a:70:7f:de:cc:22:10:45:77:4b: 4f:32:b3:a9:75:a9:e7:e6:6d:9d:96:1f:65:8d:71:7d:9c:73: 7b:a8:89:8e:46:df:7c:76:95:19:09:ad:c5:a7:49:94:b8:4e: 72:98:50:2f:bc:9b:ad:f0:c9:44:21:8c:0e:ad:b9:d4:03:01: 6e:31:e2:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjpvWU8wN25wmJxr9fwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMTQ5MTVlMjdmOGJmNDA1Y2NmY2E5NGI2YzUzMGJkNGQz ZTU0YzAwHhcNMjUxMjA2MTkwMTE5WhcNMjUxMjA3MTkwMTE5WjAzMTEwLwYDVQQD EygwYjhjZDE0MGIyNjcyYTY0OGI0NzI3NjJiMjE5YzdkNzczZTRhOGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ5d7k8fqM/so0GuAtX4sd/E2q40 6WgJeELxuZphhuDYzgeY8ZrGrXld/0Afpiaq+A63Tbwt9eP5d2Fceb+p/4YrNbT8 B6joP59KF+ZUBaIki4eiQASWH4eM9+fd0hcDBf98bgT4yE+qhAZUUDfw/rPuobHW FIpEuHQ/lmXv33v88xrg8YybB+780aMNjuEDbrPU5PZSz3jKLTFvitBMXbk4/HjX Cd1vcPHAqPqos3m7DZ66ghJ48CsPLyvxvox/ylrZ3yyGJMoc+ACwiW6xzQ6kgXrv WMiv2VUntcgCzQxcog/BPIWt/yfgra5uDMn1UK7uHlvSq/aSSREMjj2KfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuM0UCyZypki0cnYrIZx9dz5KjAMB8GA1UdIwQY MBaAFCoUkV4n+L9AXM/KlLbFML1NPlTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2hTUlhpZjR2MEJjejhxVXRzVXd2VTAtVk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80NzIxYWMtYzRmZC00NmFmLTlhOTEt NDBhZTkyNDdjYzY0LzEvS2hTUlhpZjR2MEJjejhxVXRzVXd2VTAtVk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80NzIxYWMtYzRmZC00NmFmLTlhOTEtNDBhZTkyNDdjYzY0 LzEvS2hTUlhpZjR2MEJjejhxVXRzVXd2VTAtVk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+hpjcgC hkPZNli4OBF12cLSrGbB5N/1gGcjwiDRjK1IRE+t5PUHPwd6Oir5edxAzMdvCBzL TydW5NyzhkK+ysZxjm8ZF1gQLHVPYv/B1BG0MH+N9s+lSfuEuAYUaw/m2yvt2o+7 XW68xxqQwIq1f7a8339890NoPbjhOWO2uDoF9MHaRiInFhHsW6IuY77Hx9Gh4IxK uS2fir8plVJYxDF+i+szBxZPcYo6j8Xh4rGHTz+Hy2mtfknbUtEacH/ezCIQRXdL TzKzqXWp5+ZtnZYfZY1xfZxze6iJjkbffHaVGQmtxadJlLhOcphQL7ybrfDJRCGM Dq251AMBbjHiMA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:17 2025 by rpki-client