This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
File:                     KHTka_Y26mPl0SNi9VG4CydxR4A.mft (raw, json)
Hash identifier:          eIdMJEV9bWuQdISn8c5SieGcFnf6e504ZdIVnXuFeAs=
Subject key identifier:   F1:4B:95:8F:13:6B:3A:CD:27:5C:2A:DE:F6:F0:8C:BC:EE:4E:5E:BC
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Certificate issuer:       /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial:       019AF12E11A8E38D31368270DAD4882101BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
Manifest number:          176E
Signing time:             Sat 06 Dec 2025 01:01:59 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:59 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:59 +0000
Files and hashes:         1: 8EzVvdqmnyUUlh032i_MVZutQmM.roa (hash: Y0OSVWz+Kd1Sv3rConcDjABoFQUY9BXVpm1Sb1N4NUM=)
                          2: F22dqci9sETpBxI71_zF8Iz2jLY.roa (hash: u1ifxP2pZLgjnEg+EL5SHToHcyGG9LmZXTUGx5mHKTM=)
                          3: KHTka_Y26mPl0SNi9VG4CydxR4A.crl (hash: 2oy6S82pR6DowD1AeBkvz9TYKXy7nzeP9rY7Cgkz5ZY=)
                          4: MWXFWupmeH0x6eo-nSAsEyxsUK4.roa (hash: FcrTWOvQwbii+S/ULF+HgAsrIKV1okSCxZzQQr84deE=)
                          5: dIzdm0MU2b1raqa6-Fa3gboaEHw.roa (hash: RhUt8j6Y3LtSCbxcVVykE8aP23CP8dgjIgS/GYTQNrg=)
                          6: iWBAR1OSSXBoMflzHe0qbIrF3FU.roa (hash: rpKSuxScT2SachfPDTxZm8SPZLmo9ym/QvFcyjf38Z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:11:a8:e3:8d:31:36:82:70:da:d4:88:21:01:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
        Validity
            Not Before: Dec  6 01:01:59 2025 GMT
            Not After : Dec  7 01:01:59 2025 GMT
        Subject: CN=f14b958f136b3acd275c2adef6f08cbcee4e5ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:2e:8e:11:37:a8:6f:2e:6e:e0:4d:d6:31:
                    0f:92:3f:0f:8e:62:2d:bf:a4:08:31:22:14:8b:54:
                    71:43:54:5c:17:83:ab:49:e1:b5:87:8d:f4:59:b3:
                    3e:ef:d5:5d:78:57:e4:8e:9e:1d:a3:07:96:c3:3d:
                    37:61:19:b1:a7:fb:6e:cf:d2:0f:ca:39:97:69:95:
                    7f:cf:13:e8:40:46:e7:b3:f3:4e:ad:8e:2c:c4:9f:
                    1e:8d:2e:6a:2a:cf:eb:30:72:cb:9f:b1:ea:b5:09:
                    1d:1c:9b:b0:f7:14:c1:32:e4:b5:7b:44:ba:b1:98:
                    49:b6:32:17:74:a6:3d:d0:1f:ff:2b:5d:3e:15:2c:
                    89:f4:bd:21:09:ee:0b:eb:92:5e:31:5a:6f:b5:bf:
                    53:c0:90:24:09:02:01:38:7b:7f:ba:af:58:3d:7e:
                    24:da:57:00:ad:4e:f3:f3:2a:54:df:29:ba:ad:66:
                    4f:eb:8c:18:c0:a2:07:56:96:5d:36:ad:40:85:a2:
                    08:75:fd:54:00:59:5d:ed:7a:0d:2e:28:e7:10:8d:
                    80:eb:88:3b:c6:ba:17:b8:67:63:b3:5f:98:df:2c:
                    d9:e2:f2:4d:24:9e:73:6a:b5:c6:71:ee:6b:39:bc:
                    0e:76:c1:16:41:e5:09:58:c4:3c:53:75:43:ea:ab:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4B:95:8F:13:6B:3A:CD:27:5C:2A:DE:F6:F0:8C:BC:EE:4E:5E:BC
            X509v3 Authority Key Identifier:
                keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:c1:15:42:fc:f2:2f:c9:16:f4:25:39:e0:01:98:d6:cd:
         86:85:cc:a4:01:25:e7:af:50:19:ef:8b:36:99:0f:bd:7e:97:
         da:26:cc:2a:c5:45:d9:75:9d:21:14:35:89:75:c0:40:88:b1:
         91:09:c7:71:7f:24:b5:4c:00:53:95:43:f3:26:1f:37:98:c5:
         24:5c:7b:55:a1:4b:fa:ce:c2:06:ca:87:66:2b:9d:2f:7c:ef:
         2a:f8:d8:c8:fb:b5:ae:ed:d8:af:ad:8b:10:ee:16:89:f5:12:
         5b:2d:e3:2c:6a:23:be:11:a9:1a:5c:cf:fb:b6:78:1b:89:12:
         ae:23:51:02:25:80:2b:4b:8b:d1:13:7b:ef:67:a2:3f:ae:93:
         99:a7:a7:38:b5:31:4f:e4:d4:65:51:2d:6f:5c:d1:93:58:6a:
         e2:6f:dc:5b:19:34:32:a4:c4:98:a2:53:25:27:5b:6c:8c:52:
         93:b6:7c:64:24:0c:a1:ad:13:fb:72:6c:16:aa:0a:7e:5a:3f:
         a3:fe:d6:1a:26:ef:52:e0:f2:f6:75:e6:bc:a5:78:cc:8c:47:
         31:75:89:0b:ca:f5:5a:75:e0:04:8c:5d:5b:97:c9:6e:5b:49:
         d0:b0:d5:c4:a3:6e:47:4d:24:06:7b:7f:1e:cb:3b:5c:69:b3:
         c6:3c:7c:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLhGo440xNoJw2tSIIQG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NzRlNDZiZjYzNmVhNjNlNWQxMjM2MmY1NTFiODBiMjc3
MTQ3ODAwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD
EyhmMTRiOTU4ZjEzNmIzYWNkMjc1YzJhZGVmNmYwOGNiY2VlNGU1ZWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneoujhE3qG8ubuBN1jEPkj8PjmIt
v6QIMSIUi1RxQ1RcF4OrSeG1h430WbM+79VdeFfkjp4doweWwz03YRmxp/tuz9IP
yjmXaZV/zxPoQEbns/NOrY4sxJ8ejS5qKs/rMHLLn7HqtQkdHJuw9xTBMuS1e0S6
sZhJtjIXdKY90B//K10+FSyJ9L0hCe4L65JeMVpvtb9TwJAkCQIBOHt/uq9YPX4k
2lcArU7z8ypU3ym6rWZP64wYwKIHVpZdNq1AhaIIdf1UAFld7XoNLijnEI2A64g7
xroXuGdjs1+Y3yzZ4vJNJJ5zarXGce5rObwOdsEWQeUJWMQ8U3VD6qtSFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFLlY8TazrNJ1wq3vbwjLzuTl68MB8GA1UdIwQY
MBaAFCh05Gv2Nupj5dEjYvVRuAsncUeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYt
YzEwZGE2YWFjMWIxLzEvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYtYzEwZGE2YWFjMWIx
LzEvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJvBFUL8
8i/JFvQlOeABmNbNhoXMpAEl569QGe+LNpkPvX6X2ibMKsVF2XWdIRQ1iXXAQIix
kQnHcX8ktUwAU5VD8yYfN5jFJFx7VaFL+s7CBsqHZiudL3zvKvjYyPu1ru3Yr62L
EO4WifUSWy3jLGojvhGpGlzP+7Z4G4kSriNRAiWAK0uL0RN772eiP66TmaenOLUx
T+TUZVEtb1zRk1hq4m/cWxk0MqTEmKJTJSdbbIxSk7Z8ZCQMoa0T+3JsFqoKflo/
o/7WGibvUuDy9nXmvKV4zIxHMXWJC8r1WnXgBIxdW5fJbltJ0LDVxKNuR00kBnt/
Hss7XGmzxjx8Nw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:08 2025 by rpki-client