This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json) Hash identifier: 6OFzEXdORt+87sRY4sLFl4/go0XzrVenzgVAbUrrekk= Subject key identifier: 79:8B:14:B4:AC:D0:B3:B1:66:E8:6F:05:D4:5B:32:9C:FE:83:8B:02 Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7 Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7 Certificate serial: 019B3C7E71CCCFEBDB5F3B476A1554E0FFD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 16:01:18 +0000 Manifest this update: Sat 20 Dec 2025 16:01:18 +0000 Manifest next update: Sun 21 Dec 2025 16:01:18 +0000 Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=) 2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=) 3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: tXGhHCrEV2kPQuoha8+rux5ZxWu2vnFyKdfsb32x2fE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:71:cc:cf:eb:db:5f:3b:47:6a:15:54:e0:ff:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7 Validity Not Before: Dec 20 16:01:18 2025 GMT Not After : Dec 21 16:01:18 2025 GMT Subject: CN=798b14b4acd0b3b166e86f05d45b329cfe838b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:a8:41:38:b4:2f:bf:4b:98:b7:a1:24:7d: f9:54:dc:bb:f7:b3:a9:09:f1:66:eb:85:59:b5:90: 63:15:02:01:c1:f8:1a:d7:dc:65:a8:eb:60:f1:ad: 85:33:13:13:ca:1e:4b:38:e9:8c:56:df:c2:88:2a: a4:d4:56:11:e4:96:f9:b0:8d:7e:e6:f1:d9:e6:5a: 60:9b:77:8b:e5:6d:dd:63:24:44:bd:a9:c0:60:51: 28:ae:5b:86:69:50:f3:5f:b8:23:61:25:27:d8:35: f3:66:0b:ac:8a:4e:03:ee:d8:39:75:c5:c2:07:dd: 29:f4:09:b4:9b:c1:e0:32:a3:ed:97:f4:db:d6:01: 76:41:64:17:34:82:da:6e:d6:7a:48:f0:4b:e1:7a: 0d:5b:ef:22:ef:15:29:8f:e5:bb:1b:87:7a:98:5e: b6:4c:c1:74:10:18:7c:dd:db:44:ca:34:77:3d:14: 89:c8:cd:ff:89:48:07:9c:01:70:b9:df:8c:e4:04: 6a:c8:3b:b2:f5:9e:f2:76:51:36:90:fa:05:e2:35: 82:30:c0:87:3c:fa:95:10:f0:1e:27:fb:d8:56:0d: c7:25:71:96:b1:7c:e5:53:c0:28:c5:55:e6:5e:f1: 6a:f4:de:18:37:a2:7b:8a:46:a3:64:3c:b0:df:fa: bd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8B:14:B4:AC:D0:B3:B1:66:E8:6F:05:D4:5B:32:9C:FE:83:8B:02 X509v3 Authority Key Identifier: keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:df:33:f6:94:c1:1f:44:5b:a4:6e:ff:d0:49:31:4a:3d:32: b8:2a:1b:68:ae:01:21:13:6a:46:8f:ec:0a:b8:5a:3e:69:55: 1f:0e:50:28:bd:c5:07:43:49:92:db:16:af:74:9a:b5:eb:58: 1b:b5:e4:c0:63:f0:44:df:3e:e9:09:d6:59:c9:37:2f:b6:6a: 04:6b:80:29:7d:26:70:75:ba:bd:38:65:55:d9:ef:36:85:16: f3:d8:9f:a5:1e:98:ae:87:00:4b:07:73:e8:61:8b:0f:df:2d: a7:03:df:3a:d9:d0:34:e5:d6:55:ee:ba:6b:81:a4:cc:62:dd: 05:19:65:d6:84:a0:9f:a2:f3:d5:93:1a:fa:5c:c9:71:23:4f: 3c:55:39:d1:c6:5d:58:72:ea:d0:fe:0c:62:13:c4:18:a7:db: 68:1a:3e:32:69:8c:0a:ea:05:b1:03:85:49:1b:50:6b:a5:10: c0:db:6b:7f:03:5d:48:6a:a9:c4:14:d7:a8:9a:1e:05:48:ae: 69:d3:6e:10:b9:44:62:95:09:2d:c2:aa:1e:8d:0c:d2:cc:59: 4d:0f:5f:a8:92:b7:a7:c7:04:2b:c5:2e:49:74:5b:ad:e5:40: 9a:c8:da:81:ae:1f:75:24:15:a0:2b:87:f6:e7:61:77:5b:d4: 4e:a4:34:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fnHMz+vbXztHahVU4P/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMTNmMmMyZDA2YzY0Yjg5NTQ1N2FiNTBmYzQ5MjAyODNh NDljYzcwHhcNMjUxMjIwMTYwMTE4WhcNMjUxMjIxMTYwMTE4WjAzMTEwLwYDVQQD Eyg3OThiMTRiNGFjZDBiM2IxNjZlODZmMDVkNDViMzI5Y2ZlODM4YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8moQTi0L79LmLehJH35VNy797Op CfFm64VZtZBjFQIBwfga19xlqOtg8a2FMxMTyh5LOOmMVt/CiCqk1FYR5Jb5sI1+ 5vHZ5lpgm3eL5W3dYyREvanAYFEorluGaVDzX7gjYSUn2DXzZgusik4D7tg5dcXC B90p9Am0m8HgMqPtl/Tb1gF2QWQXNILabtZ6SPBL4XoNW+8i7xUpj+W7G4d6mF62 TMF0EBh83dtEyjR3PRSJyM3/iUgHnAFwud+M5ARqyDuy9Z7ydlE2kPoF4jWCMMCH PPqVEPAeJ/vYVg3HJXGWsXzlU8AoxVXmXvFq9N4YN6J7ikajZDyw3/q9VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmLFLSs0LOxZuhvBdRbMpz+g4sCMB8GA1UdIwQY MBaAFJIT8sLQbGS4lUV6tQ/EkgKDpJzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmIt YjlkZmYzZTdhMzJlLzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmItYjlkZmYzZTdhMzJl LzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv98z9pTB H0RbpG7/0EkxSj0yuCobaK4BIRNqRo/sCrhaPmlVHw5QKL3FB0NJktsWr3SatetY G7XkwGPwRN8+6QnWWck3L7ZqBGuAKX0mcHW6vThlVdnvNoUW89ifpR6YrocASwdz 6GGLD98tpwPfOtnQNOXWVe66a4GkzGLdBRll1oSgn6Lz1ZMa+lzJcSNPPFU50cZd WHLq0P4MYhPEGKfbaBo+MmmMCuoFsQOFSRtQa6UQwNtrfwNdSGqpxBTXqJoeBUiu adNuELlEYpUJLcKqHo0M0sxZTQ9fqJK3p8cEK8UuSXRbreVAmsjaga4fdSQVoCuH 9udhd1vUTqQ0yQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:45:36 2025 by rpki-client