This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft File: KhmTnyGLthMV6bOzez24WWCXXRQ.mft (raw, json) Hash identifier: DSfeZ0UgKdfG1c3ZZOTPjMq05OhZnXnJoCI3+Dnv3TM= Subject key identifier: 6F:86:F1:85:30:8E:5D:C2:AF:7E:EB:BE:79:0C:FC:C8:1A:F8:F2:BF Authority key identifier: 2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14 Certificate issuer: /CN=2a19939f218bb61315e9b3b37b3db85960975d14 Certificate serial: 019B3D90E9F41C9E653A79D099E8214CD645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft Manifest number: 1183 Signing time: Sat 20 Dec 2025 21:01:05 +0000 Manifest this update: Sat 20 Dec 2025 21:01:05 +0000 Manifest next update: Sun 21 Dec 2025 21:01:05 +0000 Files and hashes: 1: ICnu7sUwpSSY15uEDFVsgADJKAc.roa (hash: OMIgQNcZqzMDzM+I0pk5KXUbjDdmpf89SBEO3vtX8ZE=) 2: KhmTnyGLthMV6bOzez24WWCXXRQ.crl (hash: dQUGqpLJL+aIgcU3AW9Ru9KJLnVqHbXTOm5zV9Hcz9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:e9:f4:1c:9e:65:3a:79:d0:99:e8:21:4c:d6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a19939f218bb61315e9b3b37b3db85960975d14 Validity Not Before: Dec 20 21:01:05 2025 GMT Not After : Dec 21 21:01:05 2025 GMT Subject: CN=6f86f185308e5dc2af7eebbe790cfcc81af8f2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:aa:91:9e:6b:e9:1d:53:89:00:6c:e1:4f: df:a4:de:20:72:8f:4c:54:16:b3:47:a4:5d:04:91: 3c:7b:61:db:b0:91:48:9f:db:b1:65:8c:41:ab:a1: 6b:85:81:53:27:77:b5:94:8b:f5:26:75:f7:84:ae: f2:7a:2b:a7:62:0b:c9:1f:ab:08:06:5b:cf:4b:af: d7:38:76:18:e2:98:1d:cd:a6:32:f8:e9:f6:99:b6: ef:f8:5d:4f:8f:39:25:f7:e1:4f:5b:2d:f1:c1:36: dc:cf:ae:16:50:fe:ed:54:5c:60:52:1f:ba:38:f8: fe:9f:74:97:ec:7e:03:30:35:16:26:98:28:01:39: 8b:d9:23:88:68:94:25:5e:3b:2d:24:c3:71:e4:23: 0c:5f:5e:8b:f6:d4:18:d1:10:8b:99:4d:9d:57:32: 36:fe:56:ed:8a:f6:89:72:9e:be:5e:ce:16:83:bf: b3:a3:8b:9d:43:3c:af:be:ad:09:0d:e9:d4:d3:55: 31:d8:a5:7c:30:4e:33:ca:42:4d:a1:ce:5e:7d:88: 62:2d:a6:62:a7:5b:cf:7b:a4:f4:58:ca:c2:79:e1: 4d:11:d7:72:04:99:c7:37:95:ae:d8:61:47:4b:90: aa:fb:32:37:ca:f6:24:40:3d:c1:23:84:f5:1c:55: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:86:F1:85:30:8E:5D:C2:AF:7E:EB:BE:79:0C:FC:C8:1A:F8:F2:BF X509v3 Authority Key Identifier: keyid:2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7b:70:28:ca:ca:ec:74:d0:c9:49:2d:b1:44:82:25:be:78: 00:d1:cc:8d:21:db:7d:23:3c:14:6c:47:75:99:68:3f:e6:18: 4d:82:c4:cc:0f:4d:d1:00:77:82:1b:20:73:e6:78:fa:1f:1e: 45:8d:4f:a6:19:33:b1:31:b7:8a:82:33:0f:da:fe:4c:1c:3d: 67:cf:04:44:b7:33:83:81:63:03:69:60:3c:bc:3b:43:38:6d: 5e:56:18:ee:0b:b5:d3:b7:4c:3c:34:ab:31:17:a7:de:f1:e5: 6f:49:23:02:9e:e5:13:e8:9f:3d:ee:c8:f5:57:8e:51:0a:f3: af:c6:97:db:94:82:d1:7c:f1:c4:56:12:b6:db:f9:f7:ec:85: 95:2b:e4:df:65:4e:26:f4:bc:83:3d:ee:b9:ca:4d:c9:84:06: 5d:ee:2d:cd:24:26:70:9e:68:48:e8:1d:32:b6:90:cf:64:61: bf:56:13:83:cc:31:f4:d4:57:88:f2:66:d8:36:6e:ea:7f:03: 29:9b:4a:00:0e:af:01:47:6f:2d:87:98:60:02:1b:00:fc:b5: 12:9c:13:18:48:95:f2:c3:d5:7b:09:92:29:3f:55:8d:6e:b3: 23:ff:83:ed:55:c0:33:e4:62:67:47:97:cf:90:86:c1:39:09: e1:49:70:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kOn0HJ5lOnnQmeghTNZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMTk5MzlmMjE4YmI2MTMxNWU5YjNiMzdiM2RiODU5NjA5 NzVkMTQwHhcNMjUxMjIwMjEwMTA1WhcNMjUxMjIxMjEwMTA1WjAzMTEwLwYDVQQD Eyg2Zjg2ZjE4NTMwOGU1ZGMyYWY3ZWViYmU3OTBjZmNjODFhZjhmMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwziqkZ5r6R1TiQBs4U/fpN4gco9M VBazR6RdBJE8e2HbsJFIn9uxZYxBq6FrhYFTJ3e1lIv1JnX3hK7yeiunYgvJH6sI BlvPS6/XOHYY4pgdzaYy+On2mbbv+F1Pjzkl9+FPWy3xwTbcz64WUP7tVFxgUh+6 OPj+n3SX7H4DMDUWJpgoATmL2SOIaJQlXjstJMNx5CMMX16L9tQY0RCLmU2dVzI2 /lbtivaJcp6+Xs4Wg7+zo4udQzyvvq0JDenU01Ux2KV8ME4zykJNoc5efYhiLaZi p1vPe6T0WMrCeeFNEddyBJnHN5Wu2GFHS5Cq+zI3yvYkQD3BI4T1HFXenwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+G8YUwjl3Cr37rvnkM/Mga+PK/MB8GA1UdIwQY MBaAFCoZk58hi7YTFemzs3s9uFlgl10UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2htVG55R0x0aE1WNmJPemV6MjRXV0NYWFJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81NGU0OTgtZTYyOS00MWU4LThhYmMt ZGY1ZjIwZGQ3NmFkLzEvS2htVG55R0x0aE1WNmJPemV6MjRXV0NYWFJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81NGU0OTgtZTYyOS00MWU4LThhYmMtZGY1ZjIwZGQ3NmFk LzEvS2htVG55R0x0aE1WNmJPemV6MjRXV0NYWFJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArntwKMrK 7HTQyUktsUSCJb54ANHMjSHbfSM8FGxHdZloP+YYTYLEzA9N0QB3ghsgc+Z4+h8e RY1PphkzsTG3ioIzD9r+TBw9Z88ERLczg4FjA2lgPLw7QzhtXlYY7gu107dMPDSr MRen3vHlb0kjAp7lE+ifPe7I9VeOUQrzr8aX25SC0XzxxFYSttv59+yFlSvk32VO JvS8gz3uucpNyYQGXe4tzSQmcJ5oSOgdMraQz2Rhv1YTg8wx9NRXiPJm2DZu6n8D KZtKAA6vAUdvLYeYYAIbAPy1EpwTGEiV8sPVewmSKT9VjW6zI/+D7VXAM+RiZ0eX z5CGwTkJ4UlwNw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:52 2025 by rpki-client