This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json) Hash identifier: L9xzOYMZloR78kIVdLQG6kbCav2j3R2YxVXxgPFBbxE= Subject key identifier: 0E:6A:3F:2F:C0:66:96:00:39:CB:CD:43:84:85:BF:9E:51:3B:00:89 Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70 Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70 Certificate serial: 019B6FFDE5B8E554189835DA0CB38A22F0B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft Manifest number: 0387 Signing time: Tue 30 Dec 2025 16:01:08 +0000 Manifest this update: Tue 30 Dec 2025 16:01:08 +0000 Manifest next update: Wed 31 Dec 2025 16:01:08 +0000 Files and hashes: 1: 1-EYj7rCEm13C4ia18Eyfo_8k-RU.roa (hash: +ir98X5g2btNq9n+Pt6yr5mLVRkCwQv4UOQGouQJy1M=) 2: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: JUB27CjdfJuNkDpuNAhi51QfQz1pX7Jdb0XxEZ/+hRQ=) 3: SccPUBWuljMHYcMk3K5QOdOVb6g.roa (hash: uBtJ4Y5vGvXPCHheXT9gg13uzVBy/aYh9vF63HwlhDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 16:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:e5:b8:e5:54:18:98:35:da:0c:b3:8a:22:f0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70 Validity Not Before: Dec 30 16:01:08 2025 GMT Not After : Dec 31 16:01:08 2025 GMT Subject: CN=0e6a3f2fc066960039cbcd438485bf9e513b0089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:a5:d1:f7:43:2d:2e:4a:c5:59:46:c2:75: 14:f9:b9:4e:0f:56:9d:3c:ab:41:23:62:a1:e5:e7: 1b:25:e2:0e:1a:6d:c0:fc:1f:51:98:a3:09:91:85: 0b:e9:a4:83:81:1f:66:33:fd:e0:05:dc:82:de:14: de:40:4c:bf:9b:76:ee:6f:99:71:d3:0c:e6:e7:58: a8:fb:9f:7d:eb:59:f3:3e:a4:d1:bc:9a:0f:f6:39: d1:c8:c3:76:83:81:4c:27:4f:54:49:7c:21:17:fd: 2f:24:bc:1b:47:ea:07:7f:df:d8:c2:c3:84:7b:76: 47:ed:6f:62:ea:5e:99:08:bb:9d:6c:b0:18:1b:c9: 48:7e:21:46:04:f6:ca:4a:20:f0:29:34:0c:cb:98: 23:e9:83:b2:61:b7:4e:fc:53:e3:52:9b:f5:6b:21: a1:e0:ee:32:01:c6:f3:5d:ad:3d:4b:7d:87:93:b2: e7:ab:74:fa:c9:65:f2:dd:6c:18:af:cb:01:4b:92: 4a:be:fb:89:70:5b:ae:65:41:28:ef:26:87:5f:9a: 87:34:36:8c:e4:6b:fd:ca:a4:bc:0e:b7:bc:d0:79: 56:de:d1:37:0d:1b:2c:fd:28:d2:76:01:c7:3a:f4: c9:87:a7:e7:d4:1e:b4:cb:0e:3d:39:2b:4a:03:63: c0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6A:3F:2F:C0:66:96:00:39:CB:CD:43:84:85:BF:9E:51:3B:00:89 X509v3 Authority Key Identifier: keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d2:fd:09:f9:2a:ba:72:08:05:72:44:df:23:fe:4a:2b:86: ed:f1:d8:84:d0:1f:28:0d:49:10:e6:df:b0:43:fa:53:3f:e7: ea:eb:07:04:e6:c3:17:41:c9:b7:1d:e8:f6:fa:30:73:a7:89: 84:ee:bb:3e:43:d2:36:81:ba:31:5c:83:d4:28:5e:52:77:9d: 02:aa:9e:5b:ad:e7:b4:0d:58:48:91:06:ea:7b:0a:02:da:e8: 87:4a:73:ea:c2:f0:08:4f:d9:80:39:3d:50:f7:19:fe:40:9f: 93:21:e2:c2:bd:15:02:bd:1a:65:09:d2:b6:b6:f6:13:41:04: f9:90:67:7e:35:b5:1c:54:3c:c4:e8:a3:24:19:94:48:7f:9f: 2f:bc:a6:39:82:7c:48:f3:ff:92:0d:bf:43:96:53:24:36:32: 60:82:e8:d2:2d:57:9f:61:ac:7a:b1:6c:19:43:da:97:68:60: e4:84:a8:e8:a4:85:00:36:d0:fc:59:93:8c:91:87:21:4b:fa: a3:cb:e8:9e:ed:33:eb:48:21:db:9b:24:67:5e:1f:77:d0:fb: 92:8c:20:08:6f:89:94:4e:b3:23:12:75:b3:6c:5b:79:c1:66: 17:3f:95:f1:51:53:f3:c1:d4:86:1c:9d:98:d2:c3:05:3c:89: a7:f2:f1:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/eW45VQYmDXaDLOKIvCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMTJlZmFlZTk5N2U5YTc2M2I0NjBhYjU5MmRkZGE2N2Ew ZGViNzAwHhcNMjUxMjMwMTYwMTA4WhcNMjUxMjMxMTYwMTA4WjAzMTEwLwYDVQQD EygwZTZhM2YyZmMwNjY5NjAwMzljYmNkNDM4NDg1YmY5ZTUxM2IwMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyByl0fdDLS5KxVlGwnUU+blOD1ad PKtBI2Kh5ecbJeIOGm3A/B9RmKMJkYUL6aSDgR9mM/3gBdyC3hTeQEy/m3bub5lx 0wzm51io+59961nzPqTRvJoP9jnRyMN2g4FMJ09USXwhF/0vJLwbR+oHf9/YwsOE e3ZH7W9i6l6ZCLudbLAYG8lIfiFGBPbKSiDwKTQMy5gj6YOyYbdO/FPjUpv1ayGh 4O4yAcbzXa09S32Hk7Lnq3T6yWXy3WwYr8sBS5JKvvuJcFuuZUEo7yaHX5qHNDaM 5Gv9yqS8Dre80HlW3tE3DRss/SjSdgHHOvTJh6fn1B60yw49OStKA2PAoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5qPy/AZpYAOcvNQ4SFv55ROwCJMB8GA1UdIwQY MBaAFCoS767pl+mnY7Rgq1kt3aZ6DetwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQt MDllZDc4MDBmZGZiLzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQtMDllZDc4MDBmZGZi LzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdL9Cfkq unIIBXJE3yP+SiuG7fHYhNAfKA1JEObfsEP6Uz/n6usHBObDF0HJtx3o9vowc6eJ hO67PkPSNoG6MVyD1CheUnedAqqeW63ntA1YSJEG6nsKAtroh0pz6sLwCE/ZgDk9 UPcZ/kCfkyHiwr0VAr0aZQnStrb2E0EE+ZBnfjW1HFQ8xOijJBmUSH+fL7ymOYJ8 SPP/kg2/Q5ZTJDYyYILo0i1Xn2GserFsGUPal2hg5ISo6KSFADbQ/FmTjJGHIUv6 o8vonu0z60gh25skZ14fd9D7kowgCG+JlE6zIxJ1s2xbecFmFz+V8VFT88HUhhyd mNLDBTyJp/LxVQ== -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:33 2025 by rpki-client