This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft File: _KHkSHz41KLZYd1iLz51Ab3CSCk.mft (raw, json) Hash identifier: 2w/WKT3NCUG7CNWiJfGCZ3wkzi4jhp6/NB0MnUwTvLk= Subject key identifier: 8A:3D:4C:82:36:21:50:52:C7:FB:40:F3:49:49:11:A3:50:C6:F1:9C Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29 Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829 Certificate serial: 019B37C58EADAAF7AEFA864856C61BE707EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft Manifest number: C4 Signing time: Fri 19 Dec 2025 18:00:52 +0000 Manifest this update: Fri 19 Dec 2025 18:00:52 +0000 Manifest next update: Sat 20 Dec 2025 18:00:52 +0000 Files and hashes: 1: 0SYfMOFLmlHWfOD7GGmjzxxApg0.roa (hash: 58074XIGQFehdiB8PI23Nifkeux3z5O0Tv2sRnC0yzo=) 2: _KHkSHz41KLZYd1iLz51Ab3CSCk.crl (hash: LER7gjlOG71xjVsE6CIJHk4YubJC+EnRIpjjAykL3U0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:8e:ad:aa:f7:ae:fa:86:48:56:c6:1b:e7:07:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829 Validity Not Before: Dec 19 18:00:52 2025 GMT Not After : Dec 20 18:00:52 2025 GMT Subject: CN=8a3d4c8236215052c7fb40f3494911a350c6f19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:01:39:ff:f1:d2:22:d6:84:22:79:65:f4: 6f:5e:91:48:af:90:08:17:65:16:a9:96:e2:ff:ba: 07:1f:c2:aa:89:86:c8:60:df:0a:9a:dc:75:a8:78: 18:9a:e1:13:d1:ba:1e:89:7f:48:8c:74:f0:ef:aa: 90:24:e4:a6:91:6e:84:0b:da:79:f9:7b:6a:c1:8c: d0:6f:04:ae:ed:bf:23:ce:04:00:1b:d7:d3:3a:d5: 99:7f:3b:df:fc:7b:42:df:db:4c:f3:83:09:0b:0d: a2:30:13:e9:c2:e3:30:70:78:06:6e:0c:d7:8a:bc: e9:a0:bc:a5:03:cb:5c:4d:b4:3a:0d:ad:24:8b:79: 1b:ad:32:b2:8e:e5:16:68:ce:24:4b:59:de:cb:f3: 3c:08:58:d6:2d:48:e7:75:79:59:a9:4e:9c:e2:16: 9f:7c:00:6f:75:a2:78:23:71:91:49:c5:f1:3c:b8: 8a:6a:bb:32:2e:20:d9:81:20:6c:5b:2d:6e:7b:f1: fa:0b:fe:34:15:88:af:09:d6:f7:a6:64:f8:0b:83: 10:57:c6:49:9d:1c:e5:e2:8f:78:de:06:08:23:61: 7f:55:de:78:04:da:69:bc:f3:cb:de:eb:5f:46:84: f7:45:70:94:bf:8d:37:d9:7e:f6:d1:cd:26:86:6e: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3D:4C:82:36:21:50:52:C7:FB:40:F3:49:49:11:A3:50:C6:F1:9C X509v3 Authority Key Identifier: keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:21:1a:03:06:47:67:64:e2:69:4b:3e:c4:b0:fa:70:5c:9e: df:11:da:9b:f6:98:6d:6f:35:24:de:5f:7b:16:66:df:fe:67: 67:56:9f:b3:33:6e:87:83:28:f4:b6:39:ce:12:89:2e:0d:95: d0:9e:36:f8:3b:ba:41:01:b8:98:13:aa:45:22:81:f8:fc:54: 7a:6f:63:ff:3c:8e:65:b6:85:46:92:e9:4f:ba:ed:bd:e6:61: e4:60:ee:dc:38:8d:00:34:b2:80:b1:1c:1f:c0:e4:3e:55:2a: c1:5a:27:7e:ff:c7:8d:f2:37:1d:55:76:32:3a:f3:cf:46:df: b0:59:0e:16:44:c0:89:3e:ce:4c:87:ab:50:0e:e7:ed:1e:54: 49:83:e5:16:f8:a4:2a:12:10:fd:2b:90:cc:d1:23:b4:d2:fd: 7c:ce:5e:d9:4c:69:2f:50:b8:ea:52:47:2b:2c:1f:5b:20:13: 0f:2a:c5:97:fb:68:0f:92:fe:d8:2e:96:6e:e3:5f:8f:62:a5: f1:18:91:f4:de:9a:e8:90:bf:29:6b:01:87:2c:9c:d3:7a:e0: 7f:43:79:fb:9e:50:ae:56:b8:86:d5:6d:e4:80:7a:c9:8a:d7: f0:56:69:f7:02:e7:a5:be:55:5c:35:c5:6d:3a:b0:2e:c5:53: 09:12:7f:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xY6tqveu+oZIVsYb5wfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTFlNDQ4N2NmOGQ0YTJkOTYxZGQ2MjJmM2U3NTAxYmRj MjQ4MjkwHhcNMjUxMjE5MTgwMDUyWhcNMjUxMjIwMTgwMDUyWjAzMTEwLwYDVQQD Eyg4YTNkNGM4MjM2MjE1MDUyYzdmYjQwZjM0OTQ5MTFhMzUwYzZmMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXgBOf/x0iLWhCJ5ZfRvXpFIr5AI F2UWqZbi/7oHH8KqiYbIYN8Kmtx1qHgYmuET0boeiX9IjHTw76qQJOSmkW6EC9p5 +XtqwYzQbwSu7b8jzgQAG9fTOtWZfzvf/HtC39tM84MJCw2iMBPpwuMwcHgGbgzX irzpoLylA8tcTbQ6Da0ki3kbrTKyjuUWaM4kS1ney/M8CFjWLUjndXlZqU6c4haf fABvdaJ4I3GRScXxPLiKarsyLiDZgSBsWy1ue/H6C/40FYivCdb3pmT4C4MQV8ZJ nRzl4o943gYII2F/Vd54BNppvPPL3utfRoT3RXCUv4032X720c0mhm4HbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIo9TII2IVBSx/tA80lJEaNQxvGcMB8GA1UdIwQY MBaAFPyh5Eh8+NSi2WHdYi8+dQG9wkgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82NzI5NzQtNzJiMS00NGZkLTgyNmEt MWUyOTJjMGU5NWYxLzEvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82NzI5NzQtNzJiMS00NGZkLTgyNmEtMWUyOTJjMGU5NWYx LzEvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCEaAwZH Z2TiaUs+xLD6cFye3xHam/aYbW81JN5fexZm3/5nZ1afszNuh4Mo9LY5zhKJLg2V 0J42+Du6QQG4mBOqRSKB+PxUem9j/zyOZbaFRpLpT7rtveZh5GDu3DiNADSygLEc H8DkPlUqwVonfv/HjfI3HVV2Mjrzz0bfsFkOFkTAiT7OTIerUA7n7R5USYPlFvik KhIQ/SuQzNEjtNL9fM5e2UxpL1C46lJHKywfWyATDyrFl/toD5L+2C6WbuNfj2Kl 8RiR9N6a6JC/KWsBhyyc03rgf0N5+55Qrla4htVt5IB6yYrX8FZp9wLnpb5VXDXF bTqwLsVTCRJ/hQ== -----END CERTIFICATE-----Generated at Sat Dec 20 03:35:00 2025 by rpki-client