This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json) Hash identifier: btMtFD36yHFEUSfikCbN6wWHbEaSBm8uJwlXU1HM1Xo= Subject key identifier: 4C:96:F4:5F:33:D7:D6:83:16:FE:23:F5:6F:B3:D4:B3:86:C4:F2:82 Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77 Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377 Certificate serial: 019AF20915CBF612E5C0FA57E265B1120E46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:12 +0000 Manifest this update: Sat 06 Dec 2025 05:01:12 +0000 Manifest next update: Sun 07 Dec 2025 05:01:12 +0000 Files and hashes: 1: DUHPPbMiJZ5g5-MVvzd1BoFThPs.roa (hash: jYJfj32NL3hL8Amv7vFPn8VdtIOctCQTglUuBNZ6asM=) 2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: 7fPOe2VEXsWMvZDBMeuuetEVnqAb/IECF4r1AlNNYBU=) 3: v7cahpSyhHNf-9u3vX0WVgp6xg4.roa (hash: An2ilVmevKfJ9Krr3t4y0gOa1n+BDhvcN3VZHuTlMls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:15:cb:f6:12:e5:c0:fa:57:e2:65:b1:12:0e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377 Validity Not Before: Dec 6 05:01:12 2025 GMT Not After : Dec 7 05:01:12 2025 GMT Subject: CN=4c96f45f33d7d68316fe23f56fb3d4b386c4f282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:62:c0:e8:23:9f:ae:d5:8a:d1:7e:19:8a: 31:47:9a:69:4d:da:48:28:5e:e2:e0:66:2a:8e:42: 79:db:cc:a1:a4:bf:4c:62:e3:ec:be:e7:a0:9a:db: de:bc:3c:49:c9:4b:2f:b7:86:8b:c4:32:94:6c:01: c5:f1:43:25:c9:bb:f2:e5:e3:1b:eb:e7:17:7a:d9: f7:ec:d4:7e:3e:c1:2c:1b:12:b7:fe:c8:ef:be:83: a4:29:6d:4d:1b:45:08:62:d9:d0:8b:5a:61:32:25: 81:9f:35:30:1e:53:87:8b:3d:c2:64:b5:18:31:31: c5:be:83:f6:d4:95:06:c6:85:cc:7e:22:ee:25:29: a2:05:4f:bb:3f:34:6e:5e:42:65:6c:29:93:ce:b4: 39:41:bf:fb:d0:31:1e:20:b4:70:1b:b7:c6:16:3d: 38:a6:22:6e:04:ad:1d:c6:73:9b:3b:7e:02:85:94: e6:8b:f8:43:13:4e:ef:c5:c3:40:f2:2b:66:24:cd: 97:0a:4b:9d:7a:2f:c4:69:5e:b2:bc:dc:43:7d:ee: 00:8e:8c:8c:64:85:92:7d:76:77:5e:2e:c4:4e:5a: 79:76:fb:79:2e:43:14:d8:9f:09:57:cc:9a:01:1a: 03:a5:43:fd:44:97:98:a1:5a:fa:40:71:af:3c:61: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:96:F4:5F:33:D7:D6:83:16:FE:23:F5:6F:B3:D4:B3:86:C4:F2:82 X509v3 Authority Key Identifier: keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:04:f0:39:70:6a:c0:9f:a9:46:60:ad:50:82:0d:86:98:fb: bd:f5:8b:b2:7a:f6:a2:23:00:bf:76:1b:e2:4b:c8:42:9e:72: 06:b2:8b:4c:83:c0:44:84:3a:30:27:e8:84:48:fc:da:7d:47: 63:de:b0:a9:4a:37:68:7e:1d:ef:0c:b2:23:73:53:36:97:83: b7:0d:73:88:cc:86:e7:75:1b:67:cf:cf:6d:aa:65:12:13:77: 0a:e2:9f:44:73:8f:e8:08:74:1a:bc:27:fe:76:0a:64:86:6b: 87:91:cd:77:a3:62:f6:a3:83:46:0e:94:dc:48:8d:e7:a2:69: d6:20:eb:09:69:19:fa:6a:cf:fb:fc:81:d1:a8:a1:48:4f:a3: 78:17:1a:3e:6f:41:ce:93:1c:c4:e3:1d:3b:a0:50:1f:91:b5: 5a:4d:2b:6b:ad:33:96:40:00:e4:ef:4b:07:16:9e:d5:c6:78: 21:88:94:6c:94:08:d1:36:58:0d:ca:68:ae:61:ac:d9:57:8c: 13:c0:65:25:fb:d0:8a:80:dc:18:df:70:f8:39:96:f0:0e:b8: 48:f4:6b:9c:05:fb:95:43:ae:6a:e3:88:e4:39:c6:4d:20:db: fb:04:26:44:10:66:1f:0c:1e:f9:88:52:7b:69:a3:05:7b:ea: 42:66:ca:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRXL9hLlwPpX4mWxEg5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NzVmMTg1ODIzZGJjNmE4MmQxMDViM2NhMTYwNzdkYjU3 MjkzNzcwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD Eyg0Yzk2ZjQ1ZjMzZDdkNjgzMTZmZTIzZjU2ZmIzZDRiMzg2YzRmMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7ViwOgjn67VitF+GYoxR5ppTdpI KF7i4GYqjkJ528yhpL9MYuPsvuegmtvevDxJyUsvt4aLxDKUbAHF8UMlybvy5eMb 6+cXetn37NR+PsEsGxK3/sjvvoOkKW1NG0UIYtnQi1phMiWBnzUwHlOHiz3CZLUY MTHFvoP21JUGxoXMfiLuJSmiBU+7PzRuXkJlbCmTzrQ5Qb/70DEeILRwG7fGFj04 piJuBK0dxnObO34ChZTmi/hDE07vxcNA8itmJM2XCkudei/EaV6yvNxDfe4AjoyM ZIWSfXZ3Xi7ETlp5dvt5LkMU2J8JV8yaARoDpUP9RJeYoVr6QHGvPGF8gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyW9F8z19aDFv4j9W+z1LOGxPKCMB8GA1UdIwQY MBaAFCh18YWCPbxqgtEFs8oWB321cpN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDct OTRlNWQ0OWNjNjI4LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDctOTRlNWQ0OWNjNjI4 LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQTwOXBq wJ+pRmCtUIINhpj7vfWLsnr2oiMAv3Yb4kvIQp5yBrKLTIPARIQ6MCfohEj82n1H Y96wqUo3aH4d7wyyI3NTNpeDtw1ziMyG53UbZ8/PbaplEhN3CuKfRHOP6Ah0Grwn /nYKZIZrh5HNd6Ni9qODRg6U3EiN56Jp1iDrCWkZ+mrP+/yB0aihSE+jeBcaPm9B zpMcxOMdO6BQH5G1Wk0ra60zlkAA5O9LBxae1cZ4IYiUbJQI0TZYDcpormGs2VeM E8BlJfvQioDcGN9w+DmW8A64SPRrnAX7lUOuauOI5DnGTSDb+wQmRBBmHwwe+YhS e2mjBXvqQmbKYw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:44:25 2025 by rpki-client