This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft File: KHTka_Y26mPl0SNi9VG4CydxR4A.mft (raw, json) Hash identifier: vdB80uY9IuF4uRlbIsuR+7ISIBcqP1fiDdqtXdVyHZM= Subject key identifier: 03:0A:8E:DE:73:8B:E1:EC:95:ED:82:F6:F7:17:1A:A6:D8:B8:01:F1 Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80 Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780 Certificate serial: 019B3DC7FA2D064B2DE79EE64ACD3B31D85D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft Manifest number: 1796 Signing time: Sat 20 Dec 2025 22:01:14 +0000 Manifest this update: Sat 20 Dec 2025 22:01:14 +0000 Manifest next update: Sun 21 Dec 2025 22:01:14 +0000 Files and hashes: 1: 8EzVvdqmnyUUlh032i_MVZutQmM.roa (hash: Y0OSVWz+Kd1Sv3rConcDjABoFQUY9BXVpm1Sb1N4NUM=) 2: F-TYi38RbnSmcT-iBPhfD7_Aypc.roa (hash: NWGkzYhG6vexC4TxYqZHCnEiLwpnvQTP0hcxb9Hq34A=) 3: KHTka_Y26mPl0SNi9VG4CydxR4A.crl (hash: axDoPL9wUKaPfEOtCve8qnHVHdS7RiQu/Bzmc6k8Gbg=) 4: MWXFWupmeH0x6eo-nSAsEyxsUK4.roa (hash: FcrTWOvQwbii+S/ULF+HgAsrIKV1okSCxZzQQr84deE=) 5: dIzdm0MU2b1raqa6-Fa3gboaEHw.roa (hash: RhUt8j6Y3LtSCbxcVVykE8aP23CP8dgjIgS/GYTQNrg=) 6: iWBAR1OSSXBoMflzHe0qbIrF3FU.roa (hash: rpKSuxScT2SachfPDTxZm8SPZLmo9ym/QvFcyjf38Z4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:fa:2d:06:4b:2d:e7:9e:e6:4a:cd:3b:31:d8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780 Validity Not Before: Dec 20 22:01:14 2025 GMT Not After : Dec 21 22:01:14 2025 GMT Subject: CN=030a8ede738be1ec95ed82f6f7171aa6d8b801f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:7a:22:1f:dd:f5:3d:c5:ba:0f:dd:51:9d: d1:29:5b:63:78:19:93:95:b5:a3:de:c2:ee:f1:dc: 1a:1e:71:c4:b4:5b:11:49:8e:46:6e:21:74:bc:92: 9a:03:ed:df:78:53:cb:8f:3e:95:47:45:ac:a2:3e: ae:ee:a9:8a:f1:cf:c9:b6:d5:75:1c:c4:7d:e2:4f: a7:d1:14:fc:36:bb:53:23:a0:e0:37:31:75:d4:82: 01:bf:42:dc:f4:0a:f4:b1:e8:13:21:7e:53:c2:17: 87:a5:76:a4:74:23:ae:95:45:a1:60:a5:0f:79:b9: 0c:f8:2f:77:31:9a:1b:1b:36:bf:f1:5b:02:18:06: 51:82:88:af:d0:53:43:72:c7:2f:b1:2d:8c:6c:22: b2:98:78:ec:32:c3:3a:cb:08:dc:dc:5d:7d:26:77: d9:db:63:cf:d1:a9:ac:1f:65:5d:87:fc:dd:ab:ec: 31:fa:99:dd:2a:6b:10:6e:53:aa:65:a2:61:d8:35: c9:14:a5:35:2a:fd:ee:11:8a:c4:07:26:4b:a4:78: c0:13:94:08:24:93:e7:12:74:b3:4f:49:10:51:e2: 66:5e:00:0c:64:80:f8:48:5b:7e:8b:c1:6a:e3:bc: 55:f9:ce:c6:27:7a:70:bf:44:81:8d:ee:88:6d:bb: 1f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0A:8E:DE:73:8B:E1:EC:95:ED:82:F6:F7:17:1A:A6:D8:B8:01:F1 X509v3 Authority Key Identifier: keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:36:0d:d8:e4:43:ca:73:84:49:26:da:e9:6b:3d:61:a5:dd: 08:00:b0:5a:97:36:cf:c4:bf:5e:be:b5:cb:c3:b2:d6:56:75: 2b:17:83:12:0e:02:ae:c9:1e:dc:60:8c:0e:29:dc:b7:79:ba: 48:e6:a0:2e:d2:b8:a2:15:cd:7e:5d:a5:b0:b5:a6:81:a3:01: 81:17:88:22:d8:71:54:c3:25:a7:7e:66:38:a9:0e:b6:68:85: d3:c7:7c:12:56:23:09:04:02:23:18:33:60:ec:2f:8a:c4:10: 15:1e:5e:b2:fe:15:46:fb:37:57:65:b0:67:9a:2f:87:74:c3: 15:cc:dd:c7:0b:b6:29:50:81:dd:53:a7:89:dc:f2:27:84:28: 0f:46:79:c8:9d:fe:c2:7e:74:a8:fd:52:52:d6:39:c2:bd:3c: fa:df:30:94:09:e0:0f:c3:8e:ed:35:fd:86:e0:51:ed:52:0b: 53:96:ac:30:76:9b:39:0b:c6:33:c2:d1:c6:19:85:53:16:88: e6:2b:8d:7a:4e:6c:ec:f2:fe:39:94:46:7b:16:6c:f9:b8:e1: 29:0e:a2:9e:52:ee:0d:37:8e:57:7c:47:4e:6f:75:a6:46:dd: f7:71:60:0c:d6:38:b7:f9:66:18:97:df:3c:07:d2:4a:60:da: 2b:9c:ff:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x/otBkst557mSs07MdhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NzRlNDZiZjYzNmVhNjNlNWQxMjM2MmY1NTFiODBiMjc3 MTQ3ODAwHhcNMjUxMjIwMjIwMTE0WhcNMjUxMjIxMjIwMTE0WjAzMTEwLwYDVQQD EygwMzBhOGVkZTczOGJlMWVjOTVlZDgyZjZmNzE3MWFhNmQ4YjgwMWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGJ6Ih/d9T3Fug/dUZ3RKVtjeBmT lbWj3sLu8dwaHnHEtFsRSY5GbiF0vJKaA+3feFPLjz6VR0Wsoj6u7qmK8c/JttV1 HMR94k+n0RT8NrtTI6DgNzF11IIBv0Lc9Ar0segTIX5TwheHpXakdCOulUWhYKUP ebkM+C93MZobGza/8VsCGAZRgoiv0FNDcscvsS2MbCKymHjsMsM6ywjc3F19JnfZ 22PP0amsH2Vdh/zdq+wx+pndKmsQblOqZaJh2DXJFKU1Kv3uEYrEByZLpHjAE5QI JJPnEnSzT0kQUeJmXgAMZID4SFt+i8Fq47xV+c7GJ3pwv0SBje6IbbsfpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMKjt5zi+Hsle2C9vcXGqbYuAHxMB8GA1UdIwQY MBaAFCh05Gv2Nupj5dEjYvVRuAsncUeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYt YzEwZGE2YWFjMWIxLzEvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYtYzEwZGE2YWFjMWIx LzEvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTYN2ORD ynOESSba6Ws9YaXdCACwWpc2z8S/Xr61y8Oy1lZ1KxeDEg4Crske3GCMDinct3m6 SOagLtK4ohXNfl2lsLWmgaMBgReIIthxVMMlp35mOKkOtmiF08d8ElYjCQQCIxgz YOwvisQQFR5esv4VRvs3V2WwZ5ovh3TDFczdxwu2KVCB3VOnidzyJ4QoD0Z5yJ3+ wn50qP1SUtY5wr08+t8wlAngD8OO7TX9huBR7VILU5asMHabOQvGM8LRxhmFUxaI 5iuNek5s7PL+OZRGexZs+bjhKQ6inlLuDTeOV3xHTm91pkbd93FgDNY4t/lmGJff PAfSSmDaK5z/dg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:19 2025 by rpki-client