This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft File: kmhshS82--n8i-d8QJtSJqbuVNU.mft (raw, json) Hash identifier: PcRY12t+vcwNmI/KK8SRR4kY5IEK9itabDw8T8rfYWk= Subject key identifier: 07:29:F0:FF:FF:8C:E0:87:F0:41:4F:8B:4D:7F:EE:0B:E2:EF:EE:75 Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5 Certificate issuer: /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5 Certificate serial: 019B44DCDB189E38DB80953DFF6D64503400 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 07:01:23 +0000 Manifest this update: Mon 22 Dec 2025 07:01:23 +0000 Manifest next update: Tue 23 Dec 2025 07:01:23 +0000 Files and hashes: 1: IvJ7HvT-6tCK5GKbaPNyk54ml9M.roa (hash: 7zWh/VLAgd5GsVxZJpmQ4YamOZV0jGAf5fVHM29zO30=) 2: kmhshS82--n8i-d8QJtSJqbuVNU.crl (hash: KmYtRJayfOJQgOjvFLuglB9+aCHTHe1JYvpDHFiOVA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:db:18:9e:38:db:80:95:3d:ff:6d:64:50:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5 Validity Not Before: Dec 22 07:01:23 2025 GMT Not After : Dec 23 07:01:23 2025 GMT Subject: CN=0729f0ffff8ce087f0414f8b4d7fee0be2efee75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:7d:dc:60:1f:6d:ec:89:4b:d6:77:21:a5: c1:8a:3b:aa:e0:18:cd:41:14:36:1a:fa:67:80:53: a4:a5:01:f4:b4:7f:3e:f5:da:fa:68:0b:99:44:2b: 9d:03:f7:98:31:f7:f2:bb:a7:6f:3c:d2:fc:88:50: f0:5b:dc:47:94:83:3f:fe:78:2d:3b:88:0e:d8:a1: 64:ad:07:f2:c7:9b:1c:39:ed:f2:14:a6:40:d7:6f: 39:58:fc:f1:46:0f:82:a2:01:8a:87:e9:34:15:41: 92:90:bb:8b:4b:d6:61:26:8b:13:9a:ea:7f:93:cd: 22:1d:ab:1b:0c:de:d0:d5:51:93:cf:34:2c:1a:9d: 75:bd:ad:84:3e:c7:ca:62:29:74:8f:63:2b:f2:43: db:ec:83:fb:8e:aa:5b:61:f6:57:c1:fc:02:e8:27: b7:de:87:89:1b:50:af:39:17:e4:f7:48:94:af:18: f6:1d:a3:8b:d1:8c:7e:f8:3c:3f:ec:d2:b7:d4:2e: 66:f4:9c:e0:9e:f1:89:4e:27:d8:2e:53:cc:e6:38: 67:d3:4f:bd:b5:8a:c2:94:81:fc:bf:37:c7:4b:23: 19:06:a2:5a:f9:2e:76:b6:61:3c:0d:db:00:4f:3a: ca:31:5b:91:2a:18:35:37:5f:56:76:3f:e1:54:98: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:29:F0:FF:FF:8C:E0:87:F0:41:4F:8B:4D:7F:EE:0B:E2:EF:EE:75 X509v3 Authority Key Identifier: keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:16:ff:e9:06:eb:cc:46:7c:2b:f9:fc:cf:d1:de:05:49:0e: 67:c5:ec:39:8e:8b:c7:74:41:d6:60:0a:a8:00:f3:51:53:f4: 13:03:c9:47:da:5a:93:8a:96:ea:66:0e:be:06:e1:1b:7b:92: 69:7a:0d:16:3d:d1:0f:69:da:f7:ae:7b:a8:0d:34:d4:df:3f: 9e:c3:dc:15:c6:13:a8:46:cb:aa:54:31:64:61:7d:c8:55:f3: ce:69:72:cd:f3:b6:1a:2a:4c:95:da:85:ce:a9:b1:c6:81:f9: 96:9c:7d:ac:ad:5e:ec:59:22:fa:de:74:f6:92:bf:c7:7b:e1: 98:42:da:0b:83:e6:9c:97:66:95:10:0d:90:f6:89:e5:3c:12: 13:1b:d8:d1:b0:59:a3:d6:28:27:a5:d0:bd:a3:83:9d:7d:8a: 0c:1a:fe:8e:35:46:9b:79:f6:bc:cb:f7:d1:7e:e8:56:85:5c: 26:22:8c:af:8a:c4:9a:b0:71:7b:e4:81:fc:a1:6c:bb:bb:52: 55:aa:31:7a:5a:58:0f:3c:3a:c9:5f:24:4c:dd:76:bc:3b:f9: a7:58:5c:1e:81:03:91:9c:0b:2d:87:65:d6:56:cf:d7:16:bf: ca:2b:ca:b7:1d:58:e5:72:5a:d9:da:a5:86:36:fb:20:c1:92: c7:f9:8b:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3NsYnjjbgJU9/21kUDQAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNjg2Yzg1MmYzNmZiZTlmYzhiZTc3YzQwOWI1MjI2YTZl ZTU0ZDUwHhcNMjUxMjIyMDcwMTIzWhcNMjUxMjIzMDcwMTIzWjAzMTEwLwYDVQQD EygwNzI5ZjBmZmZmOGNlMDg3ZjA0MTRmOGI0ZDdmZWUwYmUyZWZlZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiZ93GAfbeyJS9Z3IaXBijuq4BjN QRQ2GvpngFOkpQH0tH8+9dr6aAuZRCudA/eYMffyu6dvPNL8iFDwW9xHlIM//ngt O4gO2KFkrQfyx5scOe3yFKZA1285WPzxRg+CogGKh+k0FUGSkLuLS9ZhJosTmup/ k80iHasbDN7Q1VGTzzQsGp11va2EPsfKYil0j2Mr8kPb7IP7jqpbYfZXwfwC6Ce3 3oeJG1CvORfk90iUrxj2HaOL0Yx++Dw/7NK31C5m9JzgnvGJTifYLlPM5jhn00+9 tYrClIH8vzfHSyMZBqJa+S52tmE8DdsATzrKMVuRKhg1N19Wdj/hVJg9pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcp8P//jOCH8EFPi01/7gvi7+51MB8GA1UdIwQY MBaAFJJobIUvNvvp/IvnfECbUiam7lTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva21oc2hTODItLW44aS1kOFFKdFNKcWJ1Vk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNTU5YjItNGIzMy00ZjhkLTlkMjEt YmE3MWZiZGIwMzc0LzEva21oc2hTODItLW44aS1kOFFKdFNKcWJ1Vk5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kNTU5YjItNGIzMy00ZjhkLTlkMjEtYmE3MWZiZGIwMzc0 LzEva21oc2hTODItLW44aS1kOFFKdFNKcWJ1Vk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERb/6Qbr zEZ8K/n8z9HeBUkOZ8XsOY6Lx3RB1mAKqADzUVP0EwPJR9pak4qW6mYOvgbhG3uS aXoNFj3RD2na9657qA001N8/nsPcFcYTqEbLqlQxZGF9yFXzzmlyzfO2GipMldqF zqmxxoH5lpx9rK1e7Fki+t509pK/x3vhmELaC4PmnJdmlRANkPaJ5TwSExvY0bBZ o9YoJ6XQvaODnX2KDBr+jjVGm3n2vMv30X7oVoVcJiKMr4rEmrBxe+SB/KFsu7tS VaoxelpYDzw6yV8kTN12vDv5p1hcHoEDkZwLLYdl1lbP1xa/yivKtx1Y5XJa2dql hjb7IMGSx/mL1w== -----END CERTIFICATE-----Generated at Mon Dec 22 09:49:12 2025 by rpki-client