This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json) Hash identifier: xqyxLXgXOfLp3VyzEl+UrpO8k2E2Pqfxq8i/EBFGdyw= Subject key identifier: AB:B3:89:9F:23:75:E6:55:96:32:4E:56:5C:69:2A:0B:1F:32:D8:41 Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78 Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78 Certificate serial: 019B3B34BD9D96B12F997DA2AA3F10535AB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 10:01:10 +0000 Manifest this update: Sat 20 Dec 2025 10:01:10 +0000 Manifest next update: Sun 21 Dec 2025 10:01:10 +0000 Files and hashes: 1: 4pTe3zVq_LBaEng6PDXChOvOrYM.asa (hash: ajIeKP46hnwug0OLXYz0+5iBNt1utjAL/IG5/ovLQUU=) 2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: B5NPu7dKt17K2HIyHtkpkLEhThaFJVVbV7RnnvZbqKA=) 3: yGFlSDdiFlFUJBTzkBDJlODQZoY.roa (hash: 5kgFGMiEYqgnd4sbR3CvLQA6/mpT37R4CFK6/AUcK/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:bd:9d:96:b1:2f:99:7d:a2:aa:3f:10:53:5a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78 Validity Not Before: Dec 20 10:01:10 2025 GMT Not After : Dec 21 10:01:10 2025 GMT Subject: CN=abb3899f2375e65596324e565c692a0b1f32d841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ff:85:63:2e:f9:9e:a7:c2:30:ca:73:98:ce: 00:d3:1a:54:4f:02:d0:ff:35:74:62:15:54:fa:31: e4:ac:e7:dc:55:5c:0f:bf:10:3d:46:d6:2d:64:ce: 76:cc:a1:e6:6e:11:a7:ac:f0:f6:88:99:4a:0b:f1: 5b:10:fe:3a:1a:c0:05:5a:0f:dd:df:82:a5:2b:85: a4:1a:c2:e0:74:49:ff:0c:91:5f:d7:24:a3:93:1d: bf:e7:a5:8e:4c:a7:d0:fc:be:d7:f8:21:8e:06:94: 5e:0f:3a:4e:15:bc:91:9a:8a:df:78:5a:84:82:7b: 9f:d3:66:90:a2:8f:8a:48:cb:d9:75:5a:c6:55:46: 1e:fa:f6:1f:fa:9c:34:aa:a9:85:86:5f:e0:bd:34: 81:89:8a:b6:84:d5:2a:02:26:7d:20:22:b9:d1:d3: 1d:1b:6b:a6:74:b4:3f:0e:9a:08:0b:41:85:9e:ad: 1a:e4:2b:62:36:83:36:6d:48:8e:17:14:88:01:8b: e6:eb:46:60:6f:d2:75:2c:d1:39:4d:dc:f5:2a:23: 44:f6:86:b8:97:77:5d:70:d8:58:2e:88:be:63:ce: 9d:81:4a:dd:be:4a:1f:39:0f:5c:bf:60:70:28:70: 39:eb:56:c0:bc:22:cf:06:d2:fd:13:70:51:8a:ba: ff:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B3:89:9F:23:75:E6:55:96:32:4E:56:5C:69:2A:0B:1F:32:D8:41 X509v3 Authority Key Identifier: keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:31:c9:0d:44:d2:ce:26:ae:cc:a3:b7:4e:84:60:14:e0:80: c1:a8:5c:07:af:71:cb:f2:c5:8d:8d:5a:ab:8d:bb:fb:0e:6d: ae:54:4e:89:5d:21:f2:23:92:f2:3e:12:a3:76:7a:1d:74:e7: 96:3e:77:0e:42:c7:28:dd:12:f7:72:2e:e3:bb:9e:b9:54:24: c6:f9:13:5d:2f:5a:79:32:09:93:82:af:f7:53:cc:46:3b:39: c6:58:e6:d7:67:a7:07:f0:db:23:d0:cd:4a:fc:79:9d:b0:5c: 85:d0:a1:68:a9:a1:48:69:9e:69:f7:a7:6f:33:46:1a:b9:d5: 3b:28:82:3e:63:7d:4b:d9:4c:ff:7b:3f:d4:ca:26:27:22:31: 94:b1:10:9e:7b:ad:af:96:20:46:36:e2:7e:82:3c:cb:00:6e: fd:9d:e4:de:53:24:b8:9a:1c:8c:d2:19:81:69:30:5a:05:cb: d5:7d:5b:cd:e2:cf:4d:26:36:09:a7:a7:f5:fe:2f:1d:9c:41: c6:0f:09:8a:8c:86:f9:8b:89:83:c8:95:62:45:35:92:1f:0a: a9:83:b2:eb:55:8b:93:72:45:6b:96:fa:fa:4f:83:cf:b1:59: 04:b6:58:ba:05:a8:2b:f6:ad:0e:35:7e:15:93:08:93:28:34: d3:68:80:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NL2dlrEvmX2iqj8QU1q1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3 N2ZjNzgwHhcNMjUxMjIwMTAwMTEwWhcNMjUxMjIxMTAwMTEwWjAzMTEwLwYDVQQD EyhhYmIzODk5ZjIzNzVlNjU1OTYzMjRlNTY1YzY5MmEwYjFmMzJkODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f+FYy75nqfCMMpzmM4A0xpUTwLQ /zV0YhVU+jHkrOfcVVwPvxA9RtYtZM52zKHmbhGnrPD2iJlKC/FbEP46GsAFWg/d 34KlK4WkGsLgdEn/DJFf1ySjkx2/56WOTKfQ/L7X+CGOBpReDzpOFbyRmorfeFqE gnuf02aQoo+KSMvZdVrGVUYe+vYf+pw0qqmFhl/gvTSBiYq2hNUqAiZ9ICK50dMd G2umdLQ/DpoIC0GFnq0a5CtiNoM2bUiOFxSIAYvm60Zgb9J1LNE5Tdz1KiNE9oa4 l3ddcNhYLoi+Y86dgUrdvkofOQ9cv2BwKHA561bAvCLPBtL9E3BRirr/xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuziZ8jdeZVljJOVlxpKgsfMthBMB8GA1UdIwQY MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTHJDUTS ziauzKO3ToRgFOCAwahcB69xy/LFjY1aq427+w5trlROiV0h8iOS8j4So3Z6HXTn lj53DkLHKN0S93Iu47ueuVQkxvkTXS9aeTIJk4Kv91PMRjs5xljm12enB/DbI9DN Svx5nbBchdChaKmhSGmeafenbzNGGrnVOyiCPmN9S9lM/3s/1MomJyIxlLEQnnut r5YgRjbifoI8ywBu/Z3k3lMkuJocjNIZgWkwWgXL1X1bzeLPTSY2Caen9f4vHZxB xg8JioyG+YuJg8iVYkU1kh8KqYOy61WLk3JFa5b6+k+Dz7FZBLZYugWoK/atDjV+ FZMIkyg002iA3g== -----END CERTIFICATE-----Generated at Sat Dec 20 15:30:09 2025 by rpki-client