This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft File: khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json) Hash identifier: o5Yt93Yq+nBArzLmHE1vPDIWr7JDYlIcB75RPVxhkN0= Subject key identifier: 65:4C:80:AB:F2:AA:AC:CF:08:16:2D:26:A5:09:83:26:55:CD:95:56 Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0 Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0 Certificate serial: 019B698D70A526864BA117446E3B9F5BAB66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft Manifest number: 14B2 Signing time: Mon 29 Dec 2025 10:00:35 +0000 Manifest this update: Mon 29 Dec 2025 10:00:35 +0000 Manifest next update: Tue 30 Dec 2025 10:00:35 +0000 Files and hashes: 1: K_0VKEBHZ8AzTGdtRKig6YmReAg.roa (hash: V6KL9KuDWKfGzsEoPpZURMCt8ttu62n0nd3Y+gExuwA=) 2: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: aYMvvk7+kLrh40njh6wRdfX4xfrc6HbxS6kJs/069s0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:8d:70:a5:26:86:4b:a1:17:44:6e:3b:9f:5b:ab:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0 Validity Not Before: Dec 29 10:00:35 2025 GMT Not After : Dec 30 10:00:35 2025 GMT Subject: CN=654c80abf2aaaccf08162d26a509832655cd9556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:4f:5b:b1:8c:67:1c:03:56:fb:af:13:61: 22:f3:2f:f0:b8:e9:10:8e:7d:92:c7:3e:4d:20:34: 6b:a5:b0:1f:ea:7c:cd:82:f8:70:cf:12:81:0e:c7: 06:74:2c:86:80:79:43:5a:92:88:6e:e7:52:2f:d2: bd:a1:10:d9:13:2d:eb:da:da:81:3b:b0:60:f8:f0: a8:9a:55:7f:13:3b:c2:82:89:ce:86:ab:a5:b7:07: fe:4c:b5:d9:25:3c:96:64:41:a1:b9:1b:d3:2c:c5: 1e:31:e6:a5:ab:02:18:47:7f:0f:4d:47:ce:06:eb: 03:9b:fb:4c:ee:1c:f1:17:ad:f8:5d:71:d7:bb:03: 76:c1:b8:9f:d1:bf:f3:40:d9:74:86:03:a9:89:3c: ad:b8:65:3a:c2:8a:66:fd:d1:ba:8e:3d:1d:0e:5c: de:01:f2:6d:a3:72:fd:0f:ee:b7:a7:75:10:1a:fd: 87:7e:3a:32:7a:f7:0a:dd:40:09:04:c9:35:81:08: bd:8f:14:42:6e:f6:d9:ab:63:42:99:09:3f:f2:93: 1a:16:9a:2f:e4:0f:4a:c2:2d:71:54:77:dd:20:b1: 9f:40:cc:a7:52:ed:d9:6b:2b:9f:a2:3e:c1:06:84: 13:4a:0b:6e:26:be:15:92:ea:75:f3:56:36:56:be: 3b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:80:AB:F2:AA:AC:CF:08:16:2D:26:A5:09:83:26:55:CD:95:56 X509v3 Authority Key Identifier: keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:0d:19:c7:8e:91:48:bb:dc:49:9b:a8:d2:19:cc:17:8d:01: 70:dd:82:13:55:0f:2e:74:f3:fa:0d:9a:2d:53:80:cc:52:70: f3:68:d8:52:b3:19:a9:52:b3:14:61:75:b6:23:69:4e:72:96: a9:34:be:7d:e9:8e:43:6f:31:03:ef:9f:67:36:bf:6b:c5:41: ce:b8:b0:d2:86:6d:14:7d:28:48:22:a3:42:bb:43:12:15:92: 04:b5:d0:9e:5a:bf:50:93:29:d1:bb:eb:6e:66:f0:9c:4a:b0: 38:5f:00:bc:a9:d0:2c:4a:e8:22:7b:51:14:9e:77:a0:d2:19: c0:8c:7a:5b:16:95:7f:ec:f2:6a:b7:9f:2a:b2:8a:0f:7e:9d: 86:9b:e7:d0:e4:88:60:47:d9:14:4a:ce:c5:68:07:61:d5:62: fe:17:2f:e1:a1:07:b3:83:55:e0:14:16:7e:6d:68:a6:6b:c6: 5b:34:8c:29:2e:0e:08:dd:76:4f:5d:35:c3:21:ec:7c:0c:15: 72:77:20:02:b4:e4:6b:46:f6:49:65:db:d7:1c:03:74:59:18: 9a:26:ba:a6:08:fc:2d:39:f3:8e:ec:36:62:1c:a8:96:aa:2c: e6:a7:b9:93:f5:47:f3:e8:78:8f:93:c3:47:58:14:14:47:12: ef:0b:40:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpjXClJoZLoRdEbjufW6tmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMWM0ZmRhMzY3YzUzODNiMTVjMmE3MTQzYWQ0YjEwYzk1 NWNlYTAwHhcNMjUxMjI5MTAwMDM1WhcNMjUxMjMwMTAwMDM1WjAzMTEwLwYDVQQD Eyg2NTRjODBhYmYyYWFhY2NmMDgxNjJkMjZhNTA5ODMyNjU1Y2Q5NTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gNPW7GMZxwDVvuvE2Ei8y/wuOkQ jn2Sxz5NIDRrpbAf6nzNgvhwzxKBDscGdCyGgHlDWpKIbudSL9K9oRDZEy3r2tqB O7Bg+PComlV/EzvCgonOhqultwf+TLXZJTyWZEGhuRvTLMUeMealqwIYR38PTUfO BusDm/tM7hzxF634XXHXuwN2wbif0b/zQNl0hgOpiTytuGU6wopm/dG6jj0dDlze AfJto3L9D+63p3UQGv2HfjoyevcK3UAJBMk1gQi9jxRCbvbZq2NCmQk/8pMaFpov 5A9Kwi1xVHfdILGfQMynUu3Zayufoj7BBoQTSgtuJr4Vkup181Y2Vr47ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVMgKvyqqzPCBYtJqUJgyZVzZVWMB8GA1UdIwQY MBaAFJIcT9o2fFODsVwqcUOtSxDJVc6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zZDZiMWEtNmQ2MS00NGI4LThjYmIt MjM2MDhmNmFlMmVhLzEva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zZDZiMWEtNmQ2MS00NGI4LThjYmItMjM2MDhmNmFlMmVh LzEva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxA0Zx46R SLvcSZuo0hnMF40BcN2CE1UPLnTz+g2aLVOAzFJw82jYUrMZqVKzFGF1tiNpTnKW qTS+femOQ28xA++fZza/a8VBzriw0oZtFH0oSCKjQrtDEhWSBLXQnlq/UJMp0bvr bmbwnEqwOF8AvKnQLEroIntRFJ53oNIZwIx6WxaVf+zyarefKrKKD36dhpvn0OSI YEfZFErOxWgHYdVi/hcv4aEHs4NV4BQWfm1opmvGWzSMKS4OCN12T101wyHsfAwV cncgArTka0b2SWXb1xwDdFkYmia6pgj8LTnzjuw2Yhyolqos5qe5k/VH8+h4j5PD R1gUFEcS7wtAyA== -----END CERTIFICATE-----Generated at Mon Dec 29 13:23:16 2025 by rpki-client