This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json) Hash identifier: zhy8n4ljOdDEtQP2MrPe5GbxDYvlpRDSohVQh6Ds7Z4= Subject key identifier: D4:D9:DC:C6:FF:F4:1B:78:F5:C6:05:FB:FF:DD:2B:36:55:7D:3C:77 Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d Certificate serial: 019AF3C06873C486045DFDE98E4D76EE8047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft Manifest number: 14A4 Signing time: Sat 06 Dec 2025 13:01:04 +0000 Manifest this update: Sat 06 Dec 2025 13:01:04 +0000 Manifest next update: Sun 07 Dec 2025 13:01:04 +0000 Files and hashes: 1: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (hash: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=) 2: cl0W_dg6-SS2WR9dVPceKMDs_Vs.roa (hash: /pB+oHyiaUXmAAdbfPeCmqHZJhPFFFtRAcQpmJHE+pY=) 3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: BnMSl5B4pTY6TsBSX9VgrXOaFVtjOZwk3CUbvIfPeVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:68:73:c4:86:04:5d:fd:e9:8e:4d:76:ee:80:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d Validity Not Before: Dec 6 13:01:04 2025 GMT Not After : Dec 7 13:01:04 2025 GMT Subject: CN=d4d9dcc6fff41b78f5c605fbffdd2b36557d3c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:26:fa:0e:3e:10:ef:7a:a2:ca:59:05:0e: 51:f1:c2:00:be:50:42:12:a0:27:28:35:6f:e6:9d: 97:6c:93:ac:59:3b:e4:a8:3e:90:50:93:37:3e:5d: e5:e3:ba:f5:53:98:86:58:48:49:34:c6:c0:9d:fa: 32:53:2c:ed:a6:fd:ef:dd:0d:db:80:f1:b6:52:24: db:17:8c:26:00:c0:eb:2d:95:da:1f:65:5c:49:49: 0f:dd:bb:89:7f:81:d3:4a:b7:4d:b0:21:18:4c:a7: a3:fa:2a:d2:eb:b2:90:41:96:97:13:96:9e:52:88: e2:81:a8:a8:ce:51:53:b6:00:41:1a:60:ef:86:a4: 5b:5e:45:d0:70:72:dc:df:2b:ef:64:28:12:9d:ce: fa:37:a5:07:96:a0:b3:d9:30:b2:1f:33:25:07:91: 62:f9:d8:0c:32:a4:24:7c:4e:ef:31:a7:2b:04:56: 31:c0:0f:51:cd:c7:06:27:16:0f:b0:37:b9:50:cf: 2f:6d:31:12:8c:ff:54:15:ef:32:de:e1:f2:4a:1b: b8:91:97:97:70:7c:fe:7a:cb:e5:0e:37:0f:97:c7: 07:2e:6b:32:a9:bf:db:5a:88:fb:24:a5:21:61:38: 9a:f5:e2:80:b8:06:31:5a:13:6d:3c:84:3a:c7:a5: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D9:DC:C6:FF:F4:1B:78:F5:C6:05:FB:FF:DD:2B:36:55:7D:3C:77 X509v3 Authority Key Identifier: keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c9:4b:c7:fb:36:2a:4f:ca:41:54:d1:71:fd:fc:f5:d0:57: 36:1b:1c:02:69:ae:94:dc:44:a8:93:1b:f0:e7:42:07:95:00: e7:b5:d2:1b:fc:c6:11:03:55:03:8d:d6:70:08:3e:b0:ea:41: 97:58:fc:90:c5:1a:d1:ee:5d:a8:11:9e:98:c2:33:65:fc:da: 8f:4a:9a:89:f8:44:68:d6:e9:47:1a:d0:d6:43:a8:b0:dc:8a: 12:86:aa:e4:c1:8c:d3:9e:05:f3:0d:97:17:eb:55:c8:b1:43: 3e:4f:ad:88:44:54:cd:bf:62:d1:91:33:e7:89:e4:09:ca:23: 0c:1c:f8:24:14:05:4e:3e:3f:5c:f7:9c:8f:f8:a1:44:62:d2: 58:66:22:10:57:a9:9d:8d:ec:56:48:26:32:f0:3a:58:26:95: 0c:04:61:17:4e:c5:05:ec:5d:75:1b:fe:61:f5:2e:db:97:ca: 98:bc:42:eb:96:cb:15:01:25:08:db:c9:d2:f9:fc:2e:60:12: 1b:4e:30:29:5c:c6:34:45:8e:eb:64:a7:da:d9:5b:cf:42:e5: 9c:1f:61:be:0f:21:e8:91:f7:7c:d1:ba:a9:0b:d0:1c:65:25: 1d:9c:25:ab:fe:f1:83:aa:78:6a:a7:cf:ac:d2:7d:dd:e8:9a: 46:b1:2c:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwGhzxIYEXf3pjk127oBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTUyMThiNjllNTUxMTQzYzUxZmExZDkxOTUxMmUxYTQ0 YzVjOWQwHhcNMjUxMjA2MTMwMTA0WhcNMjUxMjA3MTMwMTA0WjAzMTEwLwYDVQQD EyhkNGQ5ZGNjNmZmZjQxYjc4ZjVjNjA1ZmJmZmRkMmIzNjU1N2QzYzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Em+g4+EO96ospZBQ5R8cIAvlBC EqAnKDVv5p2XbJOsWTvkqD6QUJM3Pl3l47r1U5iGWEhJNMbAnfoyUyztpv3v3Q3b gPG2UiTbF4wmAMDrLZXaH2VcSUkP3buJf4HTSrdNsCEYTKej+irS67KQQZaXE5ae UojigaiozlFTtgBBGmDvhqRbXkXQcHLc3yvvZCgSnc76N6UHlqCz2TCyHzMlB5Fi +dgMMqQkfE7vMacrBFYxwA9RzccGJxYPsDe5UM8vbTESjP9UFe8y3uHyShu4kZeX cHz+esvlDjcPl8cHLmsyqb/bWoj7JKUhYTia9eKAuAYxWhNtPIQ6x6UY+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTZ3Mb/9Bt49cYF+//dKzZVfTx3MB8GA1UdIwQY MBaAFJJVIYtp5VEUPFH6HZGVEuGkTFydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ODI4OTYtODI2YS00YmVkLWIxNGYt YWZmYmEyZGYzZDYyLzEva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ODI4OTYtODI2YS00YmVkLWIxNGYtYWZmYmEyZGYzZDYy LzEva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoclLx/s2 Kk/KQVTRcf389dBXNhscAmmulNxEqJMb8OdCB5UA57XSG/zGEQNVA43WcAg+sOpB l1j8kMUa0e5dqBGemMIzZfzaj0qaifhEaNbpRxrQ1kOosNyKEoaq5MGM054F8w2X F+tVyLFDPk+tiERUzb9i0ZEz54nkCcojDBz4JBQFTj4/XPecj/ihRGLSWGYiEFep nY3sVkgmMvA6WCaVDARhF07FBexddRv+YfUu25fKmLxC65bLFQElCNvJ0vn8LmAS G04wKVzGNEWO62Sn2tlbz0LlnB9hvg8h6JH3fNG6qQvQHGUlHZwlq/7xg6p4aqfP rNJ93eiaRrEsZw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:20 2025 by rpki-client