This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json) Hash identifier: QGdyd6bNQCV2KA0w3wUoFVxk74zUdM7u+8WQF2UvEfU= Subject key identifier: 28:52:0D:E3:74:ED:2C:66:AB:01:D2:AB:DD:0B:58:FF:A2:3A:11:74 Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01 Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601 Certificate serial: 019B3A90CA71F921AAA1DB033F8A7B8738B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft Manifest number: 1117 Signing time: Sat 20 Dec 2025 07:02:06 +0000 Manifest this update: Sat 20 Dec 2025 07:02:06 +0000 Manifest next update: Sun 21 Dec 2025 07:02:06 +0000 Files and hashes: 1: 79LYqjKNTJN0ouKGzdcbqvTlAUQ.roa (hash: ql/wdfFz1qsER0EkZDThbVWptAlBg9mw+jziuKWlZyc=) 2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: 3de0+pkHseJkvBOPInCSBkBTtSwWiELbFBOCBJj73Yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:ca:71:f9:21:aa:a1:db:03:3f:8a:7b:87:38:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601 Validity Not Before: Dec 20 07:02:06 2025 GMT Not After : Dec 21 07:02:06 2025 GMT Subject: CN=28520de374ed2c66ab01d2abdd0b58ffa23a1174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:3f:ad:5f:b9:69:97:60:ed:2a:d3:5b:a6: 05:87:22:22:ae:df:ce:fb:b8:5e:09:3e:9a:92:a1: 8b:7e:84:41:94:8a:0f:eb:d2:95:7b:4f:a2:0b:b2: ab:ef:08:0e:49:75:26:56:ee:86:09:b9:01:34:26: 5c:0d:87:36:48:74:e3:a3:71:a6:cc:b8:b1:87:f3: 4f:27:d7:3c:eb:61:da:89:9f:03:46:f4:44:c2:28: bf:e1:43:ec:52:b7:26:b5:97:38:31:9a:54:07:cd: 16:ef:4d:d9:52:7b:2b:d2:17:a6:d1:55:c4:61:0a: 91:df:0e:b4:24:16:ed:2e:26:04:30:16:35:7c:6f: 30:c4:94:d3:be:1e:5c:0a:a0:0f:23:90:83:25:3e: 33:79:3e:26:fe:33:f7:55:0f:4f:eb:9c:61:64:74: 48:fd:68:e2:eb:3a:16:cb:49:c8:93:ea:2d:f5:db: d0:09:ed:d6:95:b2:de:9d:13:ce:c6:1b:08:a5:50: 58:e7:64:2e:f7:0f:00:89:3f:17:69:64:0a:b8:78: 9a:e5:38:37:4a:76:0e:23:cf:a9:ab:c1:32:07:d7: 3c:2d:a2:34:95:70:b2:84:80:e6:01:82:5b:24:20: 6a:9e:73:a2:8c:d9:74:25:95:72:30:d1:ac:57:12: 20:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:52:0D:E3:74:ED:2C:66:AB:01:D2:AB:DD:0B:58:FF:A2:3A:11:74 X509v3 Authority Key Identifier: keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:6d:80:68:ea:0e:7e:8a:cd:ad:17:88:16:82:6b:0e:79:d5: ed:33:9c:b0:d7:9b:8b:e6:b4:aa:0f:cd:5e:90:96:09:cd:72: 7d:72:62:f1:75:a2:6a:47:41:20:07:06:c0:81:eb:a2:fb:90: b9:20:44:e8:b8:6b:9c:bd:47:c6:a6:35:70:9d:29:02:86:bc: 1d:63:ff:7a:c9:05:44:15:69:78:d5:de:76:a2:54:61:a7:bc: 3b:91:28:c8:b2:7c:0d:6e:1e:27:8f:18:24:e5:04:e5:fb:16: 1b:87:65:49:79:6a:6b:ee:0b:fd:92:b8:64:75:a2:98:e4:b7: 81:cd:61:6b:e3:ef:8f:f7:bd:ca:74:21:cb:94:41:0d:d0:27: f6:87:b1:46:d5:07:95:84:1e:60:6b:c9:2b:9d:ab:ba:80:ee: 72:09:07:31:1f:6b:1a:45:e3:c4:1e:7f:ef:ed:97:98:69:d3: 70:f4:e9:31:82:d5:b6:f9:6e:d3:90:b8:64:2c:8f:01:7e:e5: d4:ba:96:c0:cf:76:e2:28:e9:ed:f9:72:12:1a:f6:0a:2c:1c: 02:50:ed:6f:22:ce:fe:61:b3:f4:a0:dd:0c:17:28:73:e3:e9: 99:7d:58:a8:6f:fd:fd:4d:10:af:bf:5e:19:91:07:20:c1:6f: a3:06:4c:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kMpx+SGqodsDP4p7hziyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNzZmNzdkYTg0MWI3Yjk0MjE1YjZmYWMyZDQxYTcxYzIx NTE2MDEwHhcNMjUxMjIwMDcwMjA2WhcNMjUxMjIxMDcwMjA2WjAzMTEwLwYDVQQD EygyODUyMGRlMzc0ZWQyYzY2YWIwMWQyYWJkZDBiNThmZmEyM2ExMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWk/rV+5aZdg7SrTW6YFhyIirt/O +7heCT6akqGLfoRBlIoP69KVe0+iC7Kr7wgOSXUmVu6GCbkBNCZcDYc2SHTjo3Gm zLixh/NPJ9c862HaiZ8DRvREwii/4UPsUrcmtZc4MZpUB80W703ZUnsr0hem0VXE YQqR3w60JBbtLiYEMBY1fG8wxJTTvh5cCqAPI5CDJT4zeT4m/jP3VQ9P65xhZHRI /Wji6zoWy0nIk+ot9dvQCe3WlbLenRPOxhsIpVBY52Qu9w8AiT8XaWQKuHia5Tg3 SnYOI8+pq8EyB9c8LaI0lXCyhIDmAYJbJCBqnnOijNl0JZVyMNGsVxIg3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChSDeN07SxmqwHSq90LWP+iOhF0MB8GA1UdIwQY MBaAFJB2932oQbe5QhW2+sLUGnHCFRYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lMWQ2YjctNTU1Yy00ZDliLWFmZTEt ZTYzY2U1NTM3MGViLzEva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lMWQ2YjctNTU1Yy00ZDliLWFmZTEtZTYzY2U1NTM3MGVi LzEva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARG2AaOoO forNrReIFoJrDnnV7TOcsNebi+a0qg/NXpCWCc1yfXJi8XWiakdBIAcGwIHrovuQ uSBE6LhrnL1HxqY1cJ0pAoa8HWP/eskFRBVpeNXedqJUYae8O5EoyLJ8DW4eJ48Y JOUE5fsWG4dlSXlqa+4L/ZK4ZHWimOS3gc1ha+Pvj/e9ynQhy5RBDdAn9oexRtUH lYQeYGvJK52ruoDucgkHMR9rGkXjxB5/7+2XmGnTcPTpMYLVtvlu05C4ZCyPAX7l 1LqWwM924ijp7flyEhr2CiwcAlDtbyLO/mGz9KDdDBcoc+PpmX1YqG/9/U0Qr79e GZEHIMFvowZMuw== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:41 2025 by rpki-client