This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft File: KhfSVHdMl6nGhansXSTy_GlomQg.mft (raw, json) Hash identifier: ug/kdTE3XxpCpAO0erPxZ7YgRmqAzgxloY6uoEJZYpk= Subject key identifier: 52:E5:BB:DE:CE:68:35:8B:1D:D7:A1:57:D9:D6:2A:A0:C8:4C:7D:92 Authority key identifier: 2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08 Certificate issuer: /CN=2a17d254774c97a9c685a9ec5d24f2fc69689908 Certificate serial: 019B4392F1D61EE0A3A8DF0B849B2369C9F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft Manifest number: 14C7 Signing time: Mon 22 Dec 2025 01:01:01 +0000 Manifest this update: Mon 22 Dec 2025 01:01:01 +0000 Manifest next update: Tue 23 Dec 2025 01:01:01 +0000 Files and hashes: 1: 1ibpJfSu5zvmElDRsm3yBPA2Psc.roa (hash: fl2TXrWlprslHDoqKeFpyUnoLUsON1oTzkxdU0IwAjQ=) 2: KhfSVHdMl6nGhansXSTy_GlomQg.crl (hash: Ic5pGhkevu0+V0FUdHiRkU1klZR9tsj/nsYHYkBudRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:f1:d6:1e:e0:a3:a8:df:0b:84:9b:23:69:c9:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a17d254774c97a9c685a9ec5d24f2fc69689908 Validity Not Before: Dec 22 01:01:01 2025 GMT Not After : Dec 23 01:01:01 2025 GMT Subject: CN=52e5bbdece68358b1dd7a157d9d62aa0c84c7d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:fc:71:fb:7b:60:70:2f:d0:aa:bd:aa:db: 5b:49:26:b8:2d:a0:f9:06:27:1a:a9:d4:fb:6e:c3: eb:46:a3:90:3d:3e:d9:53:9d:a7:26:16:b6:5e:19: 9c:31:47:1b:63:51:cc:09:00:07:b6:12:05:ad:e8: 6d:69:f6:88:20:68:08:c6:df:fa:71:de:16:f5:29: 5c:d2:6e:41:85:f7:be:84:96:3c:c9:9b:5a:05:a9: 3c:d5:d6:69:8b:41:4b:cd:ea:68:5f:f0:ba:58:01: fc:48:42:42:2a:e3:0a:14:9f:4e:30:72:dd:78:24: 5b:76:1c:79:91:06:2b:59:45:ab:5f:fe:b2:dc:33: 0c:39:cc:6c:a5:5e:fd:b5:48:5a:4e:3c:2c:71:3d: 6d:01:15:79:f8:8a:c5:d3:e8:2b:39:00:08:82:79: 7f:4d:87:19:17:a1:f9:84:d6:9d:79:94:8f:99:18: d0:1b:33:9d:6c:20:9a:04:b6:77:d1:57:56:30:c5: d6:01:26:c0:c3:fe:29:b1:a2:ff:36:8f:b9:d4:44: 5f:22:4a:ed:e5:39:9c:9b:b1:e0:93:19:32:f1:af: 2d:ed:37:4d:00:63:76:21:84:b9:f6:7f:89:84:dd: 15:5b:21:67:12:32:43:fb:30:34:ca:1f:b3:b6:5a: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E5:BB:DE:CE:68:35:8B:1D:D7:A1:57:D9:D6:2A:A0:C8:4C:7D:92 X509v3 Authority Key Identifier: keyid:2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:15:6d:da:15:4e:26:92:54:c0:36:21:9f:d1:74:38:39:46: f6:57:ca:15:c4:24:32:8a:97:06:f1:c2:83:ba:92:c1:a9:03: 62:bc:8d:13:ae:3e:12:fd:ec:34:35:6d:3e:14:48:95:a9:95: c3:87:e6:fd:14:b6:4d:08:8f:c7:8c:bc:36:7e:6c:34:95:4e: ca:2b:48:e4:a0:c3:df:87:3c:54:e6:5c:8d:bb:e3:36:82:c2: fa:bd:73:ad:61:8a:f5:e1:bf:b9:fe:d2:e8:07:35:4a:7f:6f: 70:53:a8:ad:c1:72:52:c7:82:68:27:7d:c5:28:51:95:32:23: 27:07:74:d6:05:e5:5e:a8:dc:b2:d2:b5:59:dd:4c:8d:8f:3e: d9:34:e9:7c:4b:4c:a2:9f:90:0a:04:63:b3:1b:4d:bc:c8:9d: 35:a0:9d:56:35:9e:42:9e:88:ed:91:7a:77:9a:27:8b:0a:fb: 6a:8d:84:83:84:9e:a5:6e:3e:2b:5c:cb:b0:af:3a:67:b0:93: a9:af:06:2d:5b:84:2a:c9:f1:3d:7b:b9:43:bc:51:17:a8:40: 84:20:45:8e:42:2a:c3:b2:89:51:dd:30:0a:75:43:25:a4:f4: 80:ff:88:d5:2b:ce:b1:c2:f7:c7:c9:15:0c:9a:bb:24:08:2e: d6:26:5f:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkvHWHuCjqN8LhJsjacn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMTdkMjU0Nzc0Yzk3YTljNjg1YTllYzVkMjRmMmZjNjk2 ODk5MDgwHhcNMjUxMjIyMDEwMTAxWhcNMjUxMjIzMDEwMTAxWjAzMTEwLwYDVQQD Eyg1MmU1YmJkZWNlNjgzNThiMWRkN2ExNTdkOWQ2MmFhMGM4NGM3ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxH8cft7YHAv0Kq9qttbSSa4LaD5 BicaqdT7bsPrRqOQPT7ZU52nJha2XhmcMUcbY1HMCQAHthIFrehtafaIIGgIxt/6 cd4W9Slc0m5Bhfe+hJY8yZtaBak81dZpi0FLzepoX/C6WAH8SEJCKuMKFJ9OMHLd eCRbdhx5kQYrWUWrX/6y3DMMOcxspV79tUhaTjwscT1tARV5+IrF0+grOQAIgnl/ TYcZF6H5hNadeZSPmRjQGzOdbCCaBLZ30VdWMMXWASbAw/4psaL/No+51ERfIkrt 5Tmcm7Hgkxky8a8t7TdNAGN2IYS59n+JhN0VWyFnEjJD+zA0yh+ztlpRBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLlu97OaDWLHdehV9nWKqDITH2SMB8GA1UdIwQY MBaAFCoX0lR3TJepxoWp7F0k8vxpaJkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2hmU1ZIZE1sNm5HaGFuc1hTVHlfR2xvbVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NmE0MzktY2YzMy00N2M1LTkyYWIt ODBiNTExOGFiYWY2LzEvS2hmU1ZIZE1sNm5HaGFuc1hTVHlfR2xvbVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NmE0MzktY2YzMy00N2M1LTkyYWItODBiNTExOGFiYWY2 LzEvS2hmU1ZIZE1sNm5HaGFuc1hTVHlfR2xvbVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBVt2hVO JpJUwDYhn9F0ODlG9lfKFcQkMoqXBvHCg7qSwakDYryNE64+Ev3sNDVtPhRIlamV w4fm/RS2TQiPx4y8Nn5sNJVOyitI5KDD34c8VOZcjbvjNoLC+r1zrWGK9eG/uf7S 6Ac1Sn9vcFOorcFyUseCaCd9xShRlTIjJwd01gXlXqjcstK1Wd1MjY8+2TTpfEtM op+QCgRjsxtNvMidNaCdVjWeQp6I7ZF6d5oniwr7ao2Eg4SepW4+K1zLsK86Z7CT qa8GLVuEKsnxPXu5Q7xRF6hAhCBFjkIqw7KJUd0wCnVDJaT0gP+I1SvOscL3x8kV DJq7JAgu1iZf6g== -----END CERTIFICATE-----Generated at Mon Dec 22 10:38:02 2025 by rpki-client