This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft File: kHpNEpJLU1fjAmev48XMc2QkEVg.mft (raw, json) Hash identifier: SDLLtpIPo17Z6VAVsCGkmgri1HyApUhHqCB/OdVkSbY= Subject key identifier: F1:79:14:E0:AC:77:CC:46:96:15:19:16:21:54:26:28:6E:9A:94:25 Authority key identifier: 90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58 Certificate issuer: /CN=907a4d12924b5357e30267afe3c5cc7364241158 Certificate serial: 019B6CC6889AF8F52A9008A0EDF519628292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft Manifest number: 11B6 Signing time: Tue 30 Dec 2025 01:01:48 +0000 Manifest this update: Tue 30 Dec 2025 01:01:48 +0000 Manifest next update: Wed 31 Dec 2025 01:01:48 +0000 Files and hashes: 1: kHpNEpJLU1fjAmev48XMc2QkEVg.crl (hash: 5jBPSH3KNja7bh2U1qxyZJypNkeIGbAwqMu7nJAODkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:88:9a:f8:f5:2a:90:08:a0:ed:f5:19:62:82:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=907a4d12924b5357e30267afe3c5cc7364241158 Validity Not Before: Dec 30 01:01:48 2025 GMT Not After : Dec 31 01:01:48 2025 GMT Subject: CN=f17914e0ac77cc4696151916215426286e9a9425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:45:6d:5b:d3:fc:98:45:bc:4e:cd:15:7b:d8: dd:b3:8d:ea:9a:21:34:80:34:fa:c1:e7:3d:f3:ba: 3b:06:5a:86:80:01:4c:6a:d1:06:ea:7a:9a:f9:28: 5a:95:c3:d9:18:47:44:eb:22:b1:cb:6f:08:77:52: 4e:8f:f2:99:33:dd:c9:34:95:1d:0a:36:0e:c3:79: d3:86:9b:51:fa:b1:57:6b:a5:e0:cd:b0:c5:84:22: 4b:9b:a0:d7:c1:4e:c8:83:93:11:24:68:6d:f6:78: 2f:1d:72:63:93:40:57:55:71:4c:e4:7e:80:89:00: 7d:20:26:b5:24:d4:6d:3e:32:f1:f9:d3:f0:f9:5c: 99:c3:8f:2e:06:a9:cc:1c:98:7a:8a:97:a9:1d:dd: 04:88:0c:24:7e:48:1e:1c:55:6f:08:fd:1e:56:0f: 84:c1:65:9b:c0:38:81:0a:55:95:ea:e6:38:ea:b1: e0:fb:41:6c:5c:ae:7c:ca:d6:bb:6f:7d:dd:06:5e: b8:65:5a:92:26:e8:14:e0:0d:70:43:44:37:cc:81: 06:8b:6a:69:83:f3:c3:44:49:ce:07:03:be:dc:7f: fc:38:e4:82:6e:1c:40:b0:5d:c8:f9:ef:44:be:b5: 61:a7:35:de:62:69:de:3d:24:07:1c:d0:32:cd:45: a7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:79:14:E0:AC:77:CC:46:96:15:19:16:21:54:26:28:6E:9A:94:25 X509v3 Authority Key Identifier: keyid:90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fd:73:6d:d3:00:fa:2a:8c:f5:1a:22:b7:55:8d:f4:52:b4: 2e:b0:1b:fb:35:aa:a5:49:5c:d9:58:b3:1a:87:7f:74:58:fa: 0f:b7:9e:47:5b:67:a6:c8:11:3a:a6:b9:28:5f:bc:87:52:cc: 08:61:15:51:11:6d:d7:a4:01:3b:74:bc:23:2f:ac:86:03:4b: 7c:0a:37:45:e3:6b:49:3b:c7:f2:b6:db:b0:26:1c:93:28:fe: 16:1f:3c:51:b4:69:37:8b:9f:ad:e1:2d:b7:43:2f:87:8f:9d: 61:8a:a5:85:6f:89:07:ad:fc:ba:c4:30:78:ba:68:4c:3d:0b: dc:22:2b:81:2e:a1:63:2a:dc:6b:fd:ed:40:37:a4:03:d1:57: e1:7a:6c:11:ae:56:11:58:32:4b:63:90:61:64:68:ea:70:01: 1e:b7:05:96:69:69:91:f9:33:fc:c4:24:b7:b5:83:c5:2a:a4: f1:82:d0:ee:8e:b3:36:87:58:e5:47:ee:35:3c:5f:79:0f:3f: 75:5d:69:2e:76:aa:3a:84:c3:60:70:fd:b8:1a:a1:b9:a2:45: c2:42:6e:28:ed:dc:fb:e9:4e:80:dd:bf:c8:30:f6:01:b3:13: 59:3d:60:ed:53:40:99:83:f7:d2:04:94:70:f1:42:6e:9d:ea: d5:1c:83:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxoia+PUqkAig7fUZYoKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwN2E0ZDEyOTI0YjUzNTdlMzAyNjdhZmUzYzVjYzczNjQy NDExNTgwHhcNMjUxMjMwMDEwMTQ4WhcNMjUxMjMxMDEwMTQ4WjAzMTEwLwYDVQQD EyhmMTc5MTRlMGFjNzdjYzQ2OTYxNTE5MTYyMTU0MjYyODZlOWE5NDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEVtW9P8mEW8Ts0Ve9jds43qmiE0 gDT6wec987o7BlqGgAFMatEG6nqa+ShalcPZGEdE6yKxy28Id1JOj/KZM93JNJUd CjYOw3nThptR+rFXa6XgzbDFhCJLm6DXwU7Ig5MRJGht9ngvHXJjk0BXVXFM5H6A iQB9ICa1JNRtPjLx+dPw+VyZw48uBqnMHJh6ipepHd0EiAwkfkgeHFVvCP0eVg+E wWWbwDiBClWV6uY46rHg+0FsXK58yta7b33dBl64ZVqSJugU4A1wQ0Q3zIEGi2pp g/PDREnOBwO+3H/8OOSCbhxAsF3I+e9EvrVhpzXeYmnePSQHHNAyzUWnxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPF5FOCsd8xGlhUZFiFUJihumpQlMB8GA1UdIwQY MBaAFJB6TRKSS1NX4wJnr+PFzHNkJBFYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0hwTkVwSkxVMWZqQW1ldjQ4WE1jMlFrRVZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZWY0NGYtY2JkZi00MTIwLTg0ZjEt NjIxYTJiYjQwYzY2LzEva0hwTkVwSkxVMWZqQW1ldjQ4WE1jMlFrRVZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZWY0NGYtY2JkZi00MTIwLTg0ZjEtNjIxYTJiYjQwYzY2 LzEva0hwTkVwSkxVMWZqQW1ldjQ4WE1jMlFrRVZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJf1zbdMA +iqM9Roit1WN9FK0LrAb+zWqpUlc2VizGod/dFj6D7eeR1tnpsgROqa5KF+8h1LM CGEVURFt16QBO3S8Iy+shgNLfAo3ReNrSTvH8rbbsCYckyj+Fh88UbRpN4ufreEt t0Mvh4+dYYqlhW+JB638usQweLpoTD0L3CIrgS6hYyrca/3tQDekA9FX4XpsEa5W EVgyS2OQYWRo6nABHrcFlmlpkfkz/MQkt7WDxSqk8YLQ7o6zNodY5UfuNTxfeQ8/ dV1pLnaqOoTDYHD9uBqhuaJFwkJuKO3c++lOgN2/yDD2AbMTWT1g7VNAmYP30gSU cPFCbp3q1RyD4g== -----END CERTIFICATE-----Generated at Tue Dec 30 10:53:18 2025 by rpki-client