This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json) Hash identifier: LeJBZB6gYrLTo4BsMKc4FkF6cs5FyA535PWm4exUhJo= Subject key identifier: FE:80:C6:97:F1:7C:DB:50:19:60:22:EB:10:97:37:42:F7:07:1F:6A Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1 Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1 Certificate serial: 019B39B400E213F2160144F720F688EBA312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 03:00:56 +0000 Manifest this update: Sat 20 Dec 2025 03:00:56 +0000 Manifest next update: Sun 21 Dec 2025 03:00:56 +0000 Files and hashes: 1: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (hash: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=) 2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: FC4HsLuTjZgNIR/sITuQx+gCEeDp8+SLXdt0lWusjO0=) 3: NA2ltT3Sfb3V_iisdx5vwEvFMeE.roa (hash: vazWrh+R+LWtlS3ZJjQYp6mVJnmrGyyhkAQ7rsXsUf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:00:e2:13:f2:16:01:44:f7:20:f6:88:eb:a3:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1 Validity Not Before: Dec 20 03:00:56 2025 GMT Not After : Dec 21 03:00:56 2025 GMT Subject: CN=fe80c697f17cdb50196022eb10973742f7071f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8b:e8:a7:2d:a5:c1:8e:55:60:25:47:b9:4f: 60:67:e5:11:3e:0e:90:0a:e5:a3:38:62:5f:a8:68: ba:b3:04:77:e5:d0:23:68:88:6f:5d:0a:68:b7:66: a3:0f:79:b8:14:34:c3:1b:53:b7:d9:4c:9d:e1:4d: c4:ad:97:29:fa:58:49:bf:3c:27:29:d5:6e:63:2b: 5b:e2:54:66:b4:75:d2:64:46:ff:b9:af:e9:40:3e: c8:97:40:00:d4:96:59:ec:17:73:66:bd:ed:22:0b: 06:a8:fc:a8:08:9d:61:99:95:03:65:ec:d5:d4:29: 9f:8a:f9:85:18:78:ba:0d:d0:66:90:02:4e:cf:2b: 3f:75:f4:0f:57:9e:29:e6:67:e4:24:e0:78:74:15: c4:0e:85:3d:79:81:8e:47:94:35:8f:aa:c4:5a:05: 74:b9:34:91:2f:17:a9:59:c0:91:12:5b:78:0a:ca: 37:4e:be:61:11:10:74:a6:48:70:c4:e9:0a:67:a2: 30:24:65:cf:14:c8:ed:5a:37:1f:f5:b4:40:04:f2: fd:2c:b0:b5:af:4b:93:b4:d3:56:33:60:ce:4f:75: 0c:5d:b4:85:7b:71:ca:d7:bf:e2:e3:9f:15:82:a1: ec:ad:e9:3a:e9:f1:bf:71:c0:1d:88:e9:ca:db:d6: e7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:80:C6:97:F1:7C:DB:50:19:60:22:EB:10:97:37:42:F7:07:1F:6A X509v3 Authority Key Identifier: keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:97:a5:16:5c:10:36:55:d6:50:66:ea:ed:0f:7c:af:4b:2d: ad:4c:4e:13:b1:e4:c7:a5:3e:0f:16:eb:ab:0a:7c:b3:29:b8: b3:56:1f:20:71:47:6a:4b:67:bb:59:2c:8a:69:2e:86:88:97: 2c:d1:0e:3b:e8:86:4e:4a:26:17:0c:c5:71:80:7b:60:fc:6e: 90:33:1d:18:8d:09:55:3d:06:20:f9:6b:8d:42:38:d2:0b:c3: 76:c5:4d:d2:f1:1b:67:57:64:c6:bd:3b:af:78:6e:2f:d1:d6: b3:6c:38:03:41:0a:7a:8a:89:4f:24:7f:34:1c:c4:58:e9:36: 03:a4:6a:0e:36:3f:80:8a:c1:cd:93:50:91:62:46:59:43:dd: d5:9a:b3:20:8e:d3:63:8b:c1:90:4f:be:52:9d:69:7e:78:cb: b9:18:49:44:b3:85:2f:b8:a9:c9:d5:3f:82:94:df:0c:0c:7a: 59:30:7a:e2:a1:ba:11:3d:8a:d8:e6:89:6b:a4:0c:85:da:dc: 48:b1:e0:a3:03:03:89:15:76:25:39:9f:76:8e:9e:6e:d4:01: 37:a3:8b:d9:05:bc:2e:27:c9:6b:97:f6:c1:46:d9:6a:3a:57: 40:89:f9:ef:7c:6d:33:2d:1b:bc:99:9f:37:31:e7:cf:ab:da: 76:a1:63:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tADiE/IWAUT3IPaI66MSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMWU2NWY4MDgzYzg1OWJjZDBkMmM1MmExZTA2MWViNTEz MWY1ZjEwHhcNMjUxMjIwMDMwMDU2WhcNMjUxMjIxMDMwMDU2WjAzMTEwLwYDVQQD EyhmZTgwYzY5N2YxN2NkYjUwMTk2MDIyZWIxMDk3Mzc0MmY3MDcxZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ivopy2lwY5VYCVHuU9gZ+URPg6Q CuWjOGJfqGi6swR35dAjaIhvXQpot2ajD3m4FDTDG1O32Uyd4U3ErZcp+lhJvzwn KdVuYytb4lRmtHXSZEb/ua/pQD7Il0AA1JZZ7BdzZr3tIgsGqPyoCJ1hmZUDZezV 1CmfivmFGHi6DdBmkAJOzys/dfQPV54p5mfkJOB4dBXEDoU9eYGOR5Q1j6rEWgV0 uTSRLxepWcCRElt4Cso3Tr5hERB0pkhwxOkKZ6IwJGXPFMjtWjcf9bRABPL9LLC1 r0uTtNNWM2DOT3UMXbSFe3HK17/i458VgqHsrek66fG/ccAdiOnK29bn2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6AxpfxfNtQGWAi6xCXN0L3Bx9qMB8GA1UdIwQY MBaAFCoeZfgIPIWbzQ0sUqHgYetRMfXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTIt Y2ZiOGRhNTQ5MDY3LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTItY2ZiOGRhNTQ5MDY3 LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5elFlwQ NlXWUGbq7Q98r0strUxOE7Hkx6U+Dxbrqwp8sym4s1YfIHFHaktnu1ksimkuhoiX LNEOO+iGTkomFwzFcYB7YPxukDMdGI0JVT0GIPlrjUI40gvDdsVN0vEbZ1dkxr07 r3huL9HWs2w4A0EKeoqJTyR/NBzEWOk2A6RqDjY/gIrBzZNQkWJGWUPd1ZqzII7T Y4vBkE++Up1pfnjLuRhJRLOFL7ipydU/gpTfDAx6WTB64qG6ET2K2OaJa6QMhdrc SLHgowMDiRV2JTmfdo6ebtQBN6OL2QW8LifJa5f2wUbZajpXQIn573xtMy0bvJmf NzHnz6vadqFj5Q== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:03 2025 by rpki-client