This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft File: khjNJev3TLGwBLAe5QVQP_8kbWE.mft (raw, json) Hash identifier: FTLCnHZBipcCwpRgUIy8YZOX4fUyA4Rta+fp1fvt3V8= Subject key identifier: E7:4A:B4:89:F7:15:7F:57:FB:4D:A2:FA:A9:77:59:35:C1:0E:02:83 Authority key identifier: 92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61 Certificate issuer: /CN=9218cd25ebf74cb1b004b01ee505503fff246d61 Certificate serial: 019AF12D12CC72895A3DC8B68BD7210C20CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft Manifest number: 0598 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: TrlRH64mTqxgPbbyg2lJDlsMeB0.roa (hash: Ar7RtZkoApHXI4MhYkDHCkz8Varr+3EYOSwaeqk+kiE=) 2: eWQbNDk7Bizpa1HJwWi556Oud3s.roa (hash: PwNs4nRmZS0NVFzVnjZatxVrXUe/B08COyWu1QU2ZLs=) 3: khjNJev3TLGwBLAe5QVQP_8kbWE.crl (hash: WZgVlFUYS3TfW6GO5JCjnNTBPrm3RjAs807M0h9Xs2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:12:cc:72:89:5a:3d:c8:b6:8b:d7:21:0c:20:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9218cd25ebf74cb1b004b01ee505503fff246d61 Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=e74ab489f7157f57fb4da2faa9775935c10e0283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:93:02:6d:a6:c2:b2:16:87:61:50:24:19: b2:e4:6e:0b:9f:d1:f9:da:c5:d7:96:64:4d:f5:26: 88:48:01:9b:36:51:6a:e8:53:74:b4:8b:56:09:01: ac:26:78:2c:06:8a:1e:bd:17:aa:b5:40:53:1d:c7: 80:96:50:15:6f:9d:6b:dd:e4:6c:fe:11:5d:4a:e1: 9a:9a:b9:19:04:a1:db:69:a9:55:6d:96:19:0a:ff: a0:38:55:95:f6:44:99:17:28:a7:7b:1d:c6:f5:32: 2e:37:b8:57:ad:b8:2a:70:50:b8:86:75:89:3a:8d: 44:4a:58:21:6f:a0:23:ca:09:55:55:04:f9:d9:9a: 8f:2d:f5:4f:07:01:94:02:4e:96:d0:e8:a6:d0:1c: 6c:bb:38:db:cd:29:fa:2c:16:f0:4e:8a:73:db:05: 59:8a:a4:37:b8:bb:c9:de:3c:44:de:d4:8f:6d:7c: 63:b3:76:e3:ef:8f:65:fc:5b:72:86:1d:4f:e8:02: 9a:5b:99:39:c9:7f:36:c6:a6:f8:85:c7:ac:3d:cc: 16:0c:38:d1:32:8f:b5:5d:6b:bf:fe:9f:9c:28:c1: 2e:b8:33:fd:dd:73:ec:92:a1:a7:92:40:c7:7b:1f: 97:dd:52:8f:d6:0a:a3:8b:a9:da:aa:df:f9:c2:f8: d0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4A:B4:89:F7:15:7F:57:FB:4D:A2:FA:A9:77:59:35:C1:0E:02:83 X509v3 Authority Key Identifier: keyid:92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:96:98:19:4f:0e:ea:f1:7e:65:70:66:68:9d:c1:c6:02:3c: e4:bc:97:b4:ca:b4:bf:74:47:a0:27:78:00:76:31:79:d3:82: f4:ff:96:f1:55:37:67:c2:52:cc:aa:6c:73:7f:75:98:c6:5d: db:f5:e5:1a:85:42:91:02:75:8c:de:2f:6b:ff:de:61:cf:45: be:40:89:71:90:e9:51:87:68:88:21:3a:a6:c5:91:d4:93:d2: 5a:22:09:1d:de:5c:a0:db:25:dd:37:fd:e9:0d:05:7f:f7:2a: 82:2b:e7:6e:98:06:d9:b7:89:5a:e8:d2:3f:44:52:52:f8:89: 79:ae:3b:59:b4:57:38:28:e0:45:69:33:0c:bb:bb:99:9d:fe: aa:55:7e:5e:ac:66:d8:ab:9d:85:dd:73:77:20:2a:13:ce:b7: 02:65:e0:48:d2:98:c2:8b:7d:3e:d6:76:4c:ba:20:89:be:32: fb:89:6e:13:fe:26:89:68:c8:03:ac:39:f6:77:5b:f8:fb:ad: fe:91:b0:99:84:b3:f9:68:60:46:bf:85:25:78:45:3c:9d:71: 61:a7:f6:38:ea:4f:43:c0:5a:8e:78:51:02:a7:52:7d:5a:19: 0f:ab:42:0c:3d:81:05:67:d8:59:ac:b1:46:db:08:10:a5:e4: 33:c2:21:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRLMcolaPci2i9chDCDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMThjZDI1ZWJmNzRjYjFiMDA0YjAxZWU1MDU1MDNmZmYy NDZkNjEwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD EyhlNzRhYjQ4OWY3MTU3ZjU3ZmI0ZGEyZmFhOTc3NTkzNWMxMGUwMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylWTAm2mwrIWh2FQJBmy5G4Ln9H5 2sXXlmRN9SaISAGbNlFq6FN0tItWCQGsJngsBooevReqtUBTHceAllAVb51r3eRs /hFdSuGamrkZBKHbaalVbZYZCv+gOFWV9kSZFyinex3G9TIuN7hXrbgqcFC4hnWJ Oo1ESlghb6AjyglVVQT52ZqPLfVPBwGUAk6W0Oim0BxsuzjbzSn6LBbwTopz2wVZ iqQ3uLvJ3jxE3tSPbXxjs3bj749l/Ftyhh1P6AKaW5k5yX82xqb4hcesPcwWDDjR Mo+1XWu//p+cKMEuuDP93XPskqGnkkDHex+X3VKP1gqji6naqt/5wvjQhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdKtIn3FX9X+02i+ql3WTXBDgKDMB8GA1UdIwQY MBaAFJIYzSXr90yxsASwHuUFUD//JG1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2hqTkpldjNUTEd3QkxBZTVRVlFQXzhrYldFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80NmUyMjMtNmQyMy00Nzk1LTk1MjUt YmM4NzdjZTkwNjFhLzEva2hqTkpldjNUTEd3QkxBZTVRVlFQXzhrYldFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni80NmUyMjMtNmQyMy00Nzk1LTk1MjUtYmM4NzdjZTkwNjFh LzEva2hqTkpldjNUTEd3QkxBZTVRVlFQXzhrYldFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpaYGU8O 6vF+ZXBmaJ3BxgI85LyXtMq0v3RHoCd4AHYxedOC9P+W8VU3Z8JSzKpsc391mMZd 2/XlGoVCkQJ1jN4va//eYc9FvkCJcZDpUYdoiCE6psWR1JPSWiIJHd5coNsl3Tf9 6Q0Ff/cqgivnbpgG2beJWujSP0RSUviJea47WbRXOCjgRWkzDLu7mZ3+qlV+Xqxm 2Kudhd1zdyAqE863AmXgSNKYwot9PtZ2TLogib4y+4luE/4miWjIA6w59ndb+Put /pGwmYSz+WhgRr+FJXhFPJ1xYaf2OOpPQ8BajnhRAqdSfVoZD6tCDD2BBWfYWayx RtsIEKXkM8Ih5A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:25 2025 by rpki-client