This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json) Hash identifier: 7IvJ14P/9otwduXDCMowZYWlghqCXwmO+fXIlmUTntk= Subject key identifier: 7C:F7:AB:66:63:46:18:9A:1B:A7:81:7B:B9:4A:A6:15:A9:00:27:1D Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7 Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7 Certificate serial: 019B0E25803DAAA13449A8A63364A4067A71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft Manifest number: 1775 Signing time: Thu 11 Dec 2025 16:01:37 +0000 Manifest this update: Thu 11 Dec 2025 16:01:37 +0000 Manifest next update: Fri 12 Dec 2025 16:01:37 +0000 Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=) 2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=) 3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: NpcMA7gjiR+NZznfZbwPZ3+icWCzZk5LW/WQVZ6ivq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:80:3d:aa:a1:34:49:a8:a6:33:64:a4:06:7a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7 Validity Not Before: Dec 11 16:01:37 2025 GMT Not After : Dec 12 16:01:37 2025 GMT Subject: CN=7cf7ab666346189a1ba7817bb94aa615a900271d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:95:d3:49:9a:8b:f2:bc:a2:f2:7f:e1:ad:cb: 93:62:26:dc:8f:aa:10:9d:4f:a6:2e:d9:31:9d:12: 6b:90:4e:be:fe:97:f9:1c:3f:47:58:31:57:30:63: 70:dc:95:24:ba:b6:6f:49:a8:b8:9b:3d:c3:c3:08: 40:b8:4f:2e:2e:a8:af:ea:ad:e2:71:9e:3a:be:f9: 45:7f:34:7b:2e:cf:95:e3:a5:f3:92:96:48:fe:54: 65:88:42:82:98:71:98:11:9e:32:20:16:ec:38:82: 3a:66:10:90:5f:10:2c:c6:2e:3a:45:70:50:11:4b: aa:3a:ff:a5:96:0c:1d:a2:65:f7:a2:22:b4:4e:de: 48:5f:b0:88:3a:ba:cb:53:37:3f:28:7a:3e:4a:a9: 25:51:35:50:7a:36:19:70:1a:01:75:f7:e4:a3:55: eb:8f:2e:4c:e3:0f:94:e1:ed:cf:96:54:f5:9c:25: f3:e9:c9:fd:7d:1b:bf:a9:ca:db:70:fa:9b:d9:3e: 1b:fb:0f:72:e8:14:c3:f4:72:2d:7e:f7:bc:d5:cf: 9d:54:a3:bb:24:fe:2d:4c:38:b8:9c:13:45:32:da: ec:28:65:25:4c:1c:5d:1c:1f:fa:81:f7:b7:a9:02: 44:69:bb:bd:dc:61:12:5e:7d:a1:61:a7:11:87:c4: 5a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F7:AB:66:63:46:18:9A:1B:A7:81:7B:B9:4A:A6:15:A9:00:27:1D X509v3 Authority Key Identifier: keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:16:60:60:f1:2c:a8:ff:0c:93:44:3f:1d:3b:5f:b2:7f:e8: 24:7a:2d:d3:2c:dc:d0:2e:cf:04:9a:21:56:16:39:dd:cf:1d: 07:55:67:51:e5:c2:52:d7:1e:8b:e6:9d:42:e6:4d:37:f4:99: f1:90:2c:0c:c4:50:ca:c7:57:1e:c9:d4:a7:aa:05:a1:32:f8: cf:2c:4b:89:5a:c3:8d:4d:37:bf:fd:70:de:9b:c6:a2:fb:9b: 4b:69:51:2a:4a:62:87:c5:b7:74:08:44:17:78:08:22:1e:82: 7f:eb:c5:77:c1:19:10:6b:eb:fb:f0:46:71:be:82:9e:2d:08: 84:94:ee:ec:f9:5e:e5:ee:5a:07:64:23:c5:a1:3c:e4:81:37: 2a:01:87:81:3d:e8:f9:7c:3f:29:4b:7f:9e:7a:f1:98:cc:a7: 36:95:61:68:86:8e:bf:ea:4b:80:6a:38:ab:6b:23:7c:72:e6: e7:36:7d:d5:02:be:1e:f9:01:30:e5:8e:f6:e9:34:be:34:4a: 31:bf:0c:70:48:a5:12:08:ed:69:2f:e2:35:10:61:30:50:5b: f4:77:5f:60:21:05:fa:15:be:1f:1e:13:24:f9:5e:c3:5a:cf: af:d1:49:7a:30:ba:66:ce:4e:b9:35:62:a6:eb:c4:71:79:61: 25:48:1a:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJYA9qqE0SaimM2SkBnpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMTNmMmMyZDA2YzY0Yjg5NTQ1N2FiNTBmYzQ5MjAyODNh NDljYzcwHhcNMjUxMjExMTYwMTM3WhcNMjUxMjEyMTYwMTM3WjAzMTEwLwYDVQQD Eyg3Y2Y3YWI2NjYzNDYxODlhMWJhNzgxN2JiOTRhYTYxNWE5MDAyNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5XTSZqL8ryi8n/hrcuTYibcj6oQ nU+mLtkxnRJrkE6+/pf5HD9HWDFXMGNw3JUkurZvSai4mz3DwwhAuE8uLqiv6q3i cZ46vvlFfzR7Ls+V46XzkpZI/lRliEKCmHGYEZ4yIBbsOII6ZhCQXxAsxi46RXBQ EUuqOv+llgwdomX3oiK0Tt5IX7CIOrrLUzc/KHo+SqklUTVQejYZcBoBdffko1Xr jy5M4w+U4e3PllT1nCXz6cn9fRu/qcrbcPqb2T4b+w9y6BTD9HItfve81c+dVKO7 JP4tTDi4nBNFMtrsKGUlTBxdHB/6gfe3qQJEabu93GESXn2hYacRh8RaGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHz3q2ZjRhiaG6eBe7lKphWpACcdMB8GA1UdIwQY MBaAFJIT8sLQbGS4lUV6tQ/EkgKDpJzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmIt YjlkZmYzZTdhMzJlLzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmItYjlkZmYzZTdhMzJl LzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURZgYPEs qP8Mk0Q/HTtfsn/oJHot0yzc0C7PBJohVhY53c8dB1VnUeXCUtcei+adQuZNN/SZ 8ZAsDMRQysdXHsnUp6oFoTL4zyxLiVrDjU03v/1w3pvGovubS2lRKkpih8W3dAhE F3gIIh6Cf+vFd8EZEGvr+/BGcb6Cni0IhJTu7Ple5e5aB2QjxaE85IE3KgGHgT3o +Xw/KUt/nnrxmMynNpVhaIaOv+pLgGo4q2sjfHLm5zZ91QK+HvkBMOWO9uk0vjRK Mb8McEilEgjtaS/iNRBhMFBb9HdfYCEF+hW+Hx4TJPlew1rPr9FJejC6Zs5OuTVi puvEcXlhJUgaKg== -----END CERTIFICATE-----Generated at Thu Dec 11 21:17:41 2025 by rpki-client