This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json) Hash identifier: MhA41B8obLsBQDWSoEyrOw89HGOIPt06qxykSLQv7vY= Subject key identifier: D4:C6:7C:8F:88:B4:F4:C3:A8:52:A2:DA:28:0B:DC:00:C1:A9:53:87 Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8 Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8 Certificate serial: 019B58D146BE65BF0B269181EC0031144C4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft Manifest number: 05C5 Signing time: Fri 26 Dec 2025 04:01:08 +0000 Manifest this update: Fri 26 Dec 2025 04:01:08 +0000 Manifest next update: Sat 27 Dec 2025 04:01:08 +0000 Files and hashes: 1: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: pcKs4Ga7iirczetoz4Nlk1rJT4Yx/Sx6ATcVgNsP+t0=) 2: zXilNDKWsxIaUq_LEMDiwJqBNJI.roa (hash: Eo6IWAeJUaI2CdPXL2mpqljbcAx/G9eShos6ic97+nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:46:be:65:bf:0b:26:91:81:ec:00:31:14:4c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8 Validity Not Before: Dec 26 04:01:08 2025 GMT Not After : Dec 27 04:01:08 2025 GMT Subject: CN=d4c67c8f88b4f4c3a852a2da280bdc00c1a95387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:8d:69:8b:f3:52:04:e1:79:f9:88:d6:f9: 5c:b8:60:cd:d6:e5:f7:4a:e9:42:a2:81:7e:0c:0a: 22:9b:e0:fa:cb:92:7a:58:5b:6f:ee:38:15:0a:ff: 45:3c:62:31:8a:3d:4e:c8:ba:f6:d7:03:64:e0:3b: 27:c9:af:b3:b1:20:e8:3a:bc:ca:0e:4a:db:1f:74: c3:88:79:fd:ef:b2:38:81:02:a3:ad:69:b1:6a:8c: 6c:ac:7d:b6:d5:10:f9:5b:a6:94:dd:7d:6c:65:be: 0a:d7:17:7a:e0:2f:70:94:56:33:14:71:04:78:b9: d0:f5:50:82:27:29:3a:e9:ba:88:da:d2:6b:bc:03: ca:e8:17:f1:ab:00:04:1f:3a:0c:f1:43:d1:60:d7: c9:3a:4c:cd:9c:88:53:3a:61:d9:a3:f3:c2:f0:0a: 1f:9e:52:43:06:8f:a5:e8:09:52:05:5d:7a:07:56: 83:6f:dc:ca:3e:77:f4:f9:97:df:14:ab:b9:86:d0: 37:02:c5:d6:8a:a7:da:e9:87:52:a7:f9:cf:f7:38: e2:8b:7f:0d:a4:86:46:8c:ca:65:3e:2c:fe:d5:53: b8:09:bb:36:4e:f5:22:a0:5a:c6:2e:65:46:3a:a3: a0:79:cf:f2:61:c7:74:36:28:b0:89:46:82:b0:30: 26:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C6:7C:8F:88:B4:F4:C3:A8:52:A2:DA:28:0B:DC:00:C1:A9:53:87 X509v3 Authority Key Identifier: keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:36:0a:12:95:77:84:c0:15:8e:5b:89:ea:07:fe:b9:de:40: 6c:e3:d4:c9:47:e6:e9:87:85:eb:4a:9f:d4:d1:d1:88:13:a5: ba:4a:e4:8f:9f:f7:6b:98:16:d0:2b:08:69:ea:46:87:be:f6: 76:12:22:bf:e0:74:4f:ee:34:c3:87:0e:6e:11:a8:69:34:66: d6:f9:ec:34:a0:14:28:8c:fc:7d:86:31:8d:e6:d4:15:d9:1c: 2d:25:da:05:5c:96:a3:a1:e9:2a:fa:cf:2e:94:3e:9d:30:db: ec:4a:45:72:49:86:3b:00:a4:d6:c9:77:a2:13:4d:28:3d:4a: 8c:41:29:a5:ab:8f:b9:5e:de:d2:c9:e3:2e:e6:6d:ed:da:26: 2c:44:c1:3c:d5:9e:32:43:0d:18:00:9c:b8:56:5d:aa:3a:92: e1:0e:d0:04:5b:0c:e4:91:f8:47:43:09:c1:93:76:4e:d5:31: 2d:8f:52:4e:7d:0f:13:43:55:26:0c:68:6a:68:93:fc:8b:ac: db:66:e2:c8:30:6f:55:4f:52:12:de:80:a9:3e:a7:2f:aa:bd: b9:96:70:1f:ee:0b:0d:ce:79:02:10:c3:5d:38:72:b5:55:9e: 6f:06:13:32:e8:f2:d6:e3:1e:25:10:76:5e:1b:86:6f:f9:51: 5e:07:ee:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0Ua+Zb8LJpGB7AAxFExMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMTNmOTBhYTRkOGU0N2VhYmIzNDg1OTAxNTdmNDg3OGJm NzQ2ZjgwHhcNMjUxMjI2MDQwMTA4WhcNMjUxMjI3MDQwMTA4WjAzMTEwLwYDVQQD EyhkNGM2N2M4Zjg4YjRmNGMzYTg1MmEyZGEyODBiZGMwMGMxYTk1Mzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXONaYvzUgThefmI1vlcuGDN1uX3 SulCooF+DAoim+D6y5J6WFtv7jgVCv9FPGIxij1OyLr21wNk4Dsnya+zsSDoOrzK DkrbH3TDiHn977I4gQKjrWmxaoxsrH221RD5W6aU3X1sZb4K1xd64C9wlFYzFHEE eLnQ9VCCJyk66bqI2tJrvAPK6BfxqwAEHzoM8UPRYNfJOkzNnIhTOmHZo/PC8Aof nlJDBo+l6AlSBV16B1aDb9zKPnf0+ZffFKu5htA3AsXWiqfa6YdSp/nP9zjii38N pIZGjMplPiz+1VO4Cbs2TvUioFrGLmVGOqOgec/yYcd0NiiwiUaCsDAmJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTGfI+ItPTDqFKi2igL3ADBqVOHMB8GA1UdIwQY MBaAFJIT+Qqk2OR+q7NIWQFX9IeL90b4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2hQNUNxVFk1SDZyczBoWkFWZjBoNHYzUnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZGZhY2UtMTkzYy00OWM4LWI0NWQt ZGIzZmNjZmI3ZGIxLzEva2hQNUNxVFk1SDZyczBoWkFWZjBoNHYzUnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iZGZhY2UtMTkzYy00OWM4LWI0NWQtZGIzZmNjZmI3ZGIx LzEva2hQNUNxVFk1SDZyczBoWkFWZjBoNHYzUnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADYKEpV3 hMAVjluJ6gf+ud5AbOPUyUfm6YeF60qf1NHRiBOlukrkj5/3a5gW0CsIaepGh772 dhIiv+B0T+40w4cObhGoaTRm1vnsNKAUKIz8fYYxjebUFdkcLSXaBVyWo6HpKvrP LpQ+nTDb7EpFckmGOwCk1sl3ohNNKD1KjEEppauPuV7e0snjLuZt7domLETBPNWe MkMNGACcuFZdqjqS4Q7QBFsM5JH4R0MJwZN2TtUxLY9STn0PE0NVJgxoamiT/Ius 22biyDBvVU9SEt6AqT6nL6q9uZZwH+4LDc55AhDDXThytVWebwYTMujy1uMeJRB2 XhuGb/lRXgfurQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:23 2025 by rpki-client