This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json) Hash identifier: ashFS5JAhIkm5+KXrdsTJLcqWFqDLLJ4NLICloGqPUU= Subject key identifier: 05:E5:F5:9E:C1:1D:E2:EF:53:77:F7:51:89:E6:DA:57:63:52:6A:F8 Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1 Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1 Certificate serial: 019AF42E86A303B9D287FDAC76074C263BFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 15:01:21 +0000 Manifest this update: Sat 06 Dec 2025 15:01:21 +0000 Manifest next update: Sun 07 Dec 2025 15:01:21 +0000 Files and hashes: 1: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (hash: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=) 2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: vUNNyMDjmAkKcmUKXDl06vXN/ehVYbTxNyAQW6u0ZvY=) 3: NA2ltT3Sfb3V_iisdx5vwEvFMeE.roa (hash: vazWrh+R+LWtlS3ZJjQYp6mVJnmrGyyhkAQ7rsXsUf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:86:a3:03:b9:d2:87:fd:ac:76:07:4c:26:3b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1 Validity Not Before: Dec 6 15:01:21 2025 GMT Not After : Dec 7 15:01:21 2025 GMT Subject: CN=05e5f59ec11de2ef5377f75189e6da5763526af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:b5:7c:a1:90:be:fc:27:d2:79:d9:78:3f: 5e:3d:e8:f8:36:b4:6c:6e:2b:8d:82:64:7f:f1:73: a6:54:7f:d8:35:0b:b9:c2:ea:c1:fd:d9:3c:7d:0a: 96:81:1f:13:58:6f:07:79:95:d7:4b:cc:30:68:eb: e4:2c:2b:50:5d:60:20:f7:40:c7:fc:fa:4a:65:e9: 28:e3:40:d5:b9:e3:bb:d2:c3:b6:d8:fc:33:fd:1b: ff:ea:d0:43:7d:7a:dd:cb:0e:1a:35:9d:32:e1:4a: ea:c8:aa:aa:4c:88:fd:22:c1:12:c5:7c:b2:25:b3: b8:05:d7:33:e3:28:0d:c4:e5:41:5a:44:49:fe:12: d6:9b:5d:a8:0a:b5:53:c5:d0:03:4f:f9:98:20:81: 55:8e:9b:5a:d9:90:6f:cd:3f:5a:a8:f4:e0:5a:32: 50:b9:40:0f:99:89:35:90:d0:ab:04:c2:2f:8b:8a: 95:97:a8:d6:86:da:d4:40:da:db:b2:fb:b3:e3:51: 27:05:26:96:38:70:fd:95:4a:f9:fd:b8:b6:96:97: 58:2e:d2:b2:a8:d8:36:25:ac:86:4d:39:32:dc:59: f2:48:3f:ff:0c:41:38:99:55:25:69:56:eb:18:2b: 9a:31:c0:e2:e3:26:bc:3a:f2:d2:b5:81:47:9d:ea: cc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E5:F5:9E:C1:1D:E2:EF:53:77:F7:51:89:E6:DA:57:63:52:6A:F8 X509v3 Authority Key Identifier: keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:86:a8:50:19:66:15:83:bf:d5:41:93:ea:8e:e6:b2:2c:e4: a2:bd:13:b1:a8:54:dc:75:df:67:a3:ab:6e:a4:d2:d5:48:23: 57:1d:88:fb:3e:8b:d4:85:b3:28:14:a6:b5:31:62:d6:86:f8: cf:a0:5c:27:1d:a9:fe:50:9c:f1:10:57:4c:de:b9:fc:e2:b3: c2:37:64:1f:e3:5a:cd:a5:a4:5a:7f:12:74:95:69:fb:9d:5d: 54:a9:b0:26:f8:b1:d3:5d:84:bd:92:01:83:e5:6a:cb:4b:4f: b9:2b:2b:47:82:b1:e8:e2:78:31:50:e9:34:60:45:3d:25:f6: 60:c8:42:f0:a9:af:3f:2e:48:60:b6:3c:d9:e0:48:21:76:00: 1c:32:70:fe:cd:37:db:69:46:41:f4:40:b5:66:aa:2a:00:ba: 3f:30:26:a2:9f:c5:83:08:43:b3:75:ad:b7:6e:fb:c0:bc:1c: 18:f6:d8:a0:f9:43:c5:35:34:42:98:ac:67:69:21:c1:33:7d: 2c:39:01:a9:fd:98:d2:1c:32:57:d5:09:5d:b1:fe:dd:03:0b: 16:e5:53:94:08:f7:a5:73:7e:8d:f5:43:a0:ff:b7:c4:bf:5a: f3:b5:95:21:fb:d3:bc:82:3f:d4:f4:44:c2:97:ec:ea:e5:6b: c2:94:32:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LoajA7nSh/2sdgdMJjv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMWU2NWY4MDgzYzg1OWJjZDBkMmM1MmExZTA2MWViNTEz MWY1ZjEwHhcNMjUxMjA2MTUwMTIxWhcNMjUxMjA3MTUwMTIxWjAzMTEwLwYDVQQD EygwNWU1ZjU5ZWMxMWRlMmVmNTM3N2Y3NTE4OWU2ZGE1NzYzNTI2YWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw21fKGQvvwn0nnZeD9ePej4NrRs biuNgmR/8XOmVH/YNQu5wurB/dk8fQqWgR8TWG8HeZXXS8wwaOvkLCtQXWAg90DH /PpKZeko40DVueO70sO22Pwz/Rv/6tBDfXrdyw4aNZ0y4UrqyKqqTIj9IsESxXyy JbO4Bdcz4ygNxOVBWkRJ/hLWm12oCrVTxdADT/mYIIFVjpta2ZBvzT9aqPTgWjJQ uUAPmYk1kNCrBMIvi4qVl6jWhtrUQNrbsvuz41EnBSaWOHD9lUr5/bi2lpdYLtKy qNg2JayGTTky3FnySD//DEE4mVUlaVbrGCuaMcDi4ya8OvLStYFHnerMyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXl9Z7BHeLvU3f3UYnm2ldjUmr4MB8GA1UdIwQY MBaAFCoeZfgIPIWbzQ0sUqHgYetRMfXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTIt Y2ZiOGRhNTQ5MDY3LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTItY2ZiOGRhNTQ5MDY3 LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4aoUBlm FYO/1UGT6o7msizkor0TsahU3HXfZ6OrbqTS1UgjVx2I+z6L1IWzKBSmtTFi1ob4 z6BcJx2p/lCc8RBXTN65/OKzwjdkH+NazaWkWn8SdJVp+51dVKmwJvix012EvZIB g+Vqy0tPuSsrR4Kx6OJ4MVDpNGBFPSX2YMhC8KmvPy5IYLY82eBIIXYAHDJw/s03 22lGQfRAtWaqKgC6PzAmop/FgwhDs3Wtt277wLwcGPbYoPlDxTU0QpisZ2khwTN9 LDkBqf2Y0hwyV9UJXbH+3QMLFuVTlAj3pXN+jfVDoP+3xL9a87WVIfvTvII/1PRE wpfs6uVrwpQysw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:32:10 2025 by rpki-client