This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft File: KhfSVHdMl6nGhansXSTy_GlomQg.mft (raw, json) Hash identifier: 06QUj581l+CM2pRcfAmSN1UdDF38758n8N2p+y7p7gE= Subject key identifier: D6:12:BA:81:CB:D5:DF:50:1D:42:1C:44:A8:7A:9B:96:46:A1:C2:75 Authority key identifier: 2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08 Certificate issuer: /CN=2a17d254774c97a9c685a9ec5d24f2fc69689908 Certificate serial: 019B39EAA1C06C4905F4A113CF9A57091247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft Manifest number: 14C2 Signing time: Sat 20 Dec 2025 04:00:36 +0000 Manifest this update: Sat 20 Dec 2025 04:00:36 +0000 Manifest next update: Sun 21 Dec 2025 04:00:36 +0000 Files and hashes: 1: 1ibpJfSu5zvmElDRsm3yBPA2Psc.roa (hash: fl2TXrWlprslHDoqKeFpyUnoLUsON1oTzkxdU0IwAjQ=) 2: KhfSVHdMl6nGhansXSTy_GlomQg.crl (hash: AMZbQd3DVm5yxnDcDRG3ZY5hZB6oTwqIOOts8wd1Mi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:a1:c0:6c:49:05:f4:a1:13:cf:9a:57:09:12:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a17d254774c97a9c685a9ec5d24f2fc69689908 Validity Not Before: Dec 20 04:00:36 2025 GMT Not After : Dec 21 04:00:36 2025 GMT Subject: CN=d612ba81cbd5df501d421c44a87a9b9646a1c275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:98:0e:19:09:5e:0c:9f:36:00:f3:08:78:63: 73:30:10:c6:5e:9e:65:cd:b8:fc:1c:77:1b:2c:1c: 94:51:e0:d8:3d:ff:86:4d:55:a3:5a:68:0a:65:94: 68:6a:cb:78:40:5e:d2:ce:0b:e8:f0:9c:47:44:3b: ce:4c:75:a6:cf:c5:0b:d3:3c:7f:16:d2:ff:19:48: 1e:ec:38:e3:b3:ae:8e:dd:84:64:7a:41:a1:18:5e: cd:63:a4:b7:1a:c1:9a:57:aa:59:fe:d3:e8:f3:58: f9:28:5c:1c:ae:f0:23:9a:75:d1:f1:6b:40:8d:a8: 7b:60:43:85:e1:7f:b3:c0:a7:e7:2c:05:0f:ad:86: 0d:fd:cd:94:58:16:4c:76:f2:85:4f:42:26:04:42: 8d:6e:2d:33:14:27:a5:3f:55:ce:1e:47:e4:54:8a: 57:82:d4:5b:2d:b7:4d:95:45:25:21:45:53:2d:dd: 3f:59:ed:53:6f:88:f5:b3:17:7e:7d:6a:6a:4e:c8: 68:a1:fb:cd:d5:27:89:cd:0e:eb:8c:12:cd:51:ad: 60:58:36:7e:cd:e1:e0:e3:87:79:fb:50:4f:ff:b6: cf:16:0c:9e:3c:1d:bf:c0:a0:6a:04:f4:d9:44:64: 41:7a:b5:a2:8e:bd:d0:1c:87:35:fe:9d:88:b0:7d: 56:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:12:BA:81:CB:D5:DF:50:1D:42:1C:44:A8:7A:9B:96:46:A1:C2:75 X509v3 Authority Key Identifier: keyid:2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:91:6e:45:37:93:6e:2e:99:b5:75:c8:c4:d5:62:d9:9c:da: 54:74:8e:27:06:37:c7:e2:27:51:86:45:d1:55:33:cf:10:33: b5:a7:b6:e9:f2:da:3a:ad:d7:46:82:88:af:36:ef:64:48:8e: e8:2b:e2:34:b7:6c:44:1b:7e:79:b3:da:aa:bc:7b:b2:7e:b0: a7:59:13:4f:7b:5b:be:e0:8a:28:f1:ed:b0:38:1d:76:cf:19: de:34:d1:56:d4:f6:17:87:b0:7d:15:34:12:eb:5e:90:7c:8e: 68:b4:e9:ed:8f:bb:64:43:af:64:7c:e7:46:df:89:7c:4b:fc: ca:40:8b:6c:a6:95:66:7e:50:4f:6d:38:f1:76:57:ea:7b:75: 04:ae:21:d9:9e:bc:13:ce:f8:24:4a:54:60:ee:9d:94:76:cc: 42:9f:75:f7:c7:d0:7b:02:6f:ed:f5:14:b0:e8:90:3a:d5:b7: ae:98:7d:ff:08:86:40:a2:dd:0f:68:27:64:82:98:e6:14:ff: a4:ea:be:ea:b1:08:7d:d2:0e:89:4f:cd:3f:49:d8:a9:6d:c4: a7:de:7a:5f:0b:d5:7e:b1:13:b9:84:13:fc:e5:3d:fe:76:7c: 1a:05:0f:51:64:29:ee:31:2b:11:f5:07:03:d1:95:8b:25:8a: d9:61:8f:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56qHAbEkF9KETz5pXCRJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMTdkMjU0Nzc0Yzk3YTljNjg1YTllYzVkMjRmMmZjNjk2 ODk5MDgwHhcNMjUxMjIwMDQwMDM2WhcNMjUxMjIxMDQwMDM2WjAzMTEwLwYDVQQD EyhkNjEyYmE4MWNiZDVkZjUwMWQ0MjFjNDRhODdhOWI5NjQ2YTFjMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pgOGQleDJ82APMIeGNzMBDGXp5l zbj8HHcbLByUUeDYPf+GTVWjWmgKZZRoast4QF7Szgvo8JxHRDvOTHWmz8UL0zx/ FtL/GUge7Djjs66O3YRkekGhGF7NY6S3GsGaV6pZ/tPo81j5KFwcrvAjmnXR8WtA jah7YEOF4X+zwKfnLAUPrYYN/c2UWBZMdvKFT0ImBEKNbi0zFCelP1XOHkfkVIpX gtRbLbdNlUUlIUVTLd0/We1Tb4j1sxd+fWpqTshoofvN1SeJzQ7rjBLNUa1gWDZ+ zeHg44d5+1BP/7bPFgyePB2/wKBqBPTZRGRBerWijr3QHIc1/p2IsH1W5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYSuoHL1d9QHUIcRKh6m5ZGocJ1MB8GA1UdIwQY MBaAFCoX0lR3TJepxoWp7F0k8vxpaJkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2hmU1ZIZE1sNm5HaGFuc1hTVHlfR2xvbVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NmE0MzktY2YzMy00N2M1LTkyYWIt ODBiNTExOGFiYWY2LzEvS2hmU1ZIZE1sNm5HaGFuc1hTVHlfR2xvbVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NmE0MzktY2YzMy00N2M1LTkyYWItODBiNTExOGFiYWY2 LzEvS2hmU1ZIZE1sNm5HaGFuc1hTVHlfR2xvbVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJFuRTeT bi6ZtXXIxNVi2ZzaVHSOJwY3x+InUYZF0VUzzxAztae26fLaOq3XRoKIrzbvZEiO 6CviNLdsRBt+ebPaqrx7sn6wp1kTT3tbvuCKKPHtsDgdds8Z3jTRVtT2F4ewfRU0 EutekHyOaLTp7Y+7ZEOvZHznRt+JfEv8ykCLbKaVZn5QT2048XZX6nt1BK4h2Z68 E874JEpUYO6dlHbMQp9198fQewJv7fUUsOiQOtW3rph9/wiGQKLdD2gnZIKY5hT/ pOq+6rEIfdIOiU/NP0nYqW3Ep956XwvVfrETuYQT/OU9/nZ8GgUPUWQp7jErEfUH A9GViyWK2WGPxw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:45:08 2025 by rpki-client