This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft File: KhmTnyGLthMV6bOzez24WWCXXRQ.mft (raw, json) Hash identifier: +cfK8PaU3hIwr/kIxnnpeNOp9Cx6NY32NcV6mRUipIQ= Subject key identifier: 30:B0:F0:E0:EE:57:6E:64:40:49:95:E8:84:DC:57:E3:17:82:38:74 Authority key identifier: 2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14 Certificate issuer: /CN=2a19939f218bb61315e9b3b37b3db85960975d14 Certificate serial: 019B33E8F95A499945B3DCE2845811B4EF0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft Manifest number: 117E Signing time: Fri 19 Dec 2025 00:01:04 +0000 Manifest this update: Fri 19 Dec 2025 00:01:04 +0000 Manifest next update: Sat 20 Dec 2025 00:01:04 +0000 Files and hashes: 1: ICnu7sUwpSSY15uEDFVsgADJKAc.roa (hash: OMIgQNcZqzMDzM+I0pk5KXUbjDdmpf89SBEO3vtX8ZE=) 2: KhmTnyGLthMV6bOzez24WWCXXRQ.crl (hash: 6fDMcOHOPz5aJcVQnzeZVrOJoZS+jXXqSZFKSqNTmBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:f9:5a:49:99:45:b3:dc:e2:84:58:11:b4:ef:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a19939f218bb61315e9b3b37b3db85960975d14 Validity Not Before: Dec 19 00:01:04 2025 GMT Not After : Dec 20 00:01:04 2025 GMT Subject: CN=30b0f0e0ee576e64404995e884dc57e317823874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:28:7f:7b:07:3d:d6:96:41:3b:59:d0:f6: 64:c7:68:81:0e:e2:28:c2:7a:76:9b:27:ab:89:ed: 1f:c1:ac:62:49:51:1a:17:83:a9:24:18:c8:55:62: 87:36:11:93:41:46:bf:0d:3c:19:21:ea:36:a3:b2: 46:4b:20:ec:c6:ef:41:91:5a:5c:7e:ea:00:92:6f: bd:49:67:54:db:34:8e:d1:ba:84:40:8b:15:f3:55: bc:ca:56:74:4e:33:ca:80:c6:18:56:6c:4d:71:2b: 61:c7:6c:f3:95:01:ca:31:97:49:72:33:6a:03:0f: d1:48:e1:a8:e3:a8:d7:35:44:1c:a7:0f:64:c8:ea: 9e:c1:dc:75:b2:fe:89:56:12:ee:b7:1f:03:bb:f7: 8d:09:32:f4:a8:2d:5b:f1:a8:9c:99:2b:78:39:94: 0d:e0:4e:f0:25:96:e9:bd:02:d5:37:d3:c5:d7:b2: 8e:cb:f1:8b:54:77:b5:80:c1:09:7f:37:fc:c6:db: b1:c3:d3:c4:2a:fa:7a:9e:b7:fc:48:54:de:78:13: b6:ae:8b:48:7d:ce:75:6f:66:8f:03:04:65:d4:32: 20:46:c9:cb:1e:9a:44:17:94:9a:b6:26:a2:a5:2f: 00:75:64:32:ce:16:c3:80:09:b5:0c:11:6b:2c:3c: 7d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B0:F0:E0:EE:57:6E:64:40:49:95:E8:84:DC:57:E3:17:82:38:74 X509v3 Authority Key Identifier: keyid:2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3a:b3:82:f2:8e:30:90:7c:a9:fc:71:aa:f0:21:79:f6:02: 6e:58:28:a7:04:73:f4:7e:98:5e:c8:f7:04:6a:9f:91:a1:59: 8f:2a:89:62:c3:85:e3:26:b8:93:c3:99:8e:20:6b:df:1f:01: 13:c1:6e:8e:b4:8c:a0:6b:30:2e:e0:0a:94:b1:24:fb:64:52: ca:31:aa:68:08:12:e2:d8:10:f1:89:ff:ac:f5:fb:ba:bc:50: 16:74:dd:41:50:24:18:5a:bf:51:fe:a9:7a:34:28:9b:2a:9b: a6:bf:73:fa:23:76:f5:ca:58:65:0d:73:4a:84:98:32:6c:47: 53:f7:35:8f:fa:27:e9:54:71:d5:c7:d4:a8:15:5e:93:2b:f1: 1b:d5:50:3b:24:cf:57:45:7e:47:fa:e9:e9:ca:14:99:c3:44: ac:eb:6e:bb:49:0c:e6:da:81:e5:cb:16:bd:5d:34:be:34:61: 0d:c1:9b:b2:a7:b9:b0:31:3c:a5:62:93:9f:ad:f5:ea:b3:24: 7a:17:ec:42:7e:47:32:81:ee:be:5a:27:79:ca:fa:92:75:3d: 7a:7d:fd:e4:1f:fb:15:79:9e:3f:bf:ff:10:47:03:b3:9e:3e: 63:5c:a4:89:83:a8:60:3f:a8:bf:e8:5c:c2:46:ad:f4:23:91: 83:fe:ed:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6PlaSZlFs9zihFgRtO8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMTk5MzlmMjE4YmI2MTMxNWU5YjNiMzdiM2RiODU5NjA5 NzVkMTQwHhcNMjUxMjE5MDAwMTA0WhcNMjUxMjIwMDAwMTA0WjAzMTEwLwYDVQQD EygzMGIwZjBlMGVlNTc2ZTY0NDA0OTk1ZTg4NGRjNTdlMzE3ODIzODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYUof3sHPdaWQTtZ0PZkx2iBDuIo wnp2myerie0fwaxiSVEaF4OpJBjIVWKHNhGTQUa/DTwZIeo2o7JGSyDsxu9BkVpc fuoAkm+9SWdU2zSO0bqEQIsV81W8ylZ0TjPKgMYYVmxNcSthx2zzlQHKMZdJcjNq Aw/RSOGo46jXNUQcpw9kyOqewdx1sv6JVhLutx8Du/eNCTL0qC1b8aicmSt4OZQN 4E7wJZbpvQLVN9PF17KOy/GLVHe1gMEJfzf8xtuxw9PEKvp6nrf8SFTeeBO2rotI fc51b2aPAwRl1DIgRsnLHppEF5SatiaipS8AdWQyzhbDgAm1DBFrLDx9dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCw8ODuV25kQEmV6ITcV+MXgjh0MB8GA1UdIwQY MBaAFCoZk58hi7YTFemzs3s9uFlgl10UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2htVG55R0x0aE1WNmJPemV6MjRXV0NYWFJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81NGU0OTgtZTYyOS00MWU4LThhYmMt ZGY1ZjIwZGQ3NmFkLzEvS2htVG55R0x0aE1WNmJPemV6MjRXV0NYWFJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81NGU0OTgtZTYyOS00MWU4LThhYmMtZGY1ZjIwZGQ3NmFk LzEvS2htVG55R0x0aE1WNmJPemV6MjRXV0NYWFJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTqzgvKO MJB8qfxxqvAhefYCblgopwRz9H6YXsj3BGqfkaFZjyqJYsOF4ya4k8OZjiBr3x8B E8FujrSMoGswLuAKlLEk+2RSyjGqaAgS4tgQ8Yn/rPX7urxQFnTdQVAkGFq/Uf6p ejQomyqbpr9z+iN29cpYZQ1zSoSYMmxHU/c1j/on6VRx1cfUqBVekyvxG9VQOyTP V0V+R/rp6coUmcNErOtuu0kM5tqB5csWvV00vjRhDcGbsqe5sDE8pWKTn6316rMk ehfsQn5HMoHuvlonecr6knU9en395B/7FXmeP7//EEcDs54+Y1ykiYOoYD+ov+hc wkat9CORg/7tqw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:00:35 2025 by rpki-client