This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json) Hash identifier: QlHbowhDCiTMuTOMq7voC4JA3HrIt+I/aaOrn3INZqk= Subject key identifier: 47:6D:44:2C:98:5A:36:B6:84:7C:64:DB:AD:70:92:F7:E1:14:08:B1 Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70 Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70 Certificate serial: 019B115CEF32FB2CC2B573D757965647978F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft Manifest number: 0356 Signing time: Fri 12 Dec 2025 07:01:01 +0000 Manifest this update: Fri 12 Dec 2025 07:01:01 +0000 Manifest next update: Sat 13 Dec 2025 07:01:01 +0000 Files and hashes: 1: 1-EYj7rCEm13C4ia18Eyfo_8k-RU.roa (hash: +ir98X5g2btNq9n+Pt6yr5mLVRkCwQv4UOQGouQJy1M=) 2: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: 5BROeV/v8tEWOybnAbBVuhjykihxc+KRiQ8xIJlmCsY=) 3: SccPUBWuljMHYcMk3K5QOdOVb6g.roa (hash: uBtJ4Y5vGvXPCHheXT9gg13uzVBy/aYh9vF63HwlhDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:ef:32:fb:2c:c2:b5:73:d7:57:96:56:47:97:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70 Validity Not Before: Dec 12 07:01:01 2025 GMT Not After : Dec 13 07:01:01 2025 GMT Subject: CN=476d442c985a36b6847c64dbad7092f7e11408b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:10:0b:23:26:5d:06:3b:66:88:e8:e0:88: f2:a0:d2:d3:c1:7e:a2:24:76:27:2f:59:f6:c0:27: 27:25:3c:9e:86:6f:04:82:bc:39:ae:c4:28:36:c9: d3:ff:26:26:49:b3:fa:8d:41:36:0e:39:28:37:0e: 93:bd:24:f3:22:d1:6a:d7:8d:05:91:ce:5e:99:e0: f5:cf:06:b2:e6:68:71:8d:a5:c4:96:59:ab:11:79: c6:06:6e:3a:a9:9d:9c:f7:db:4c:ec:a4:8a:8e:e5: b8:31:85:b5:02:39:c1:44:92:84:55:9e:f9:e7:2e: 23:6f:b0:4a:90:fa:76:1b:08:85:f5:c7:c6:67:c0: 24:27:db:d9:d8:e0:65:62:94:b7:5b:7d:ff:94:f8: 43:41:fe:30:58:d7:55:21:da:55:1d:63:32:10:21: e6:1f:ed:a8:0a:de:bb:be:0d:5d:03:97:7e:ce:4c: c0:41:6f:01:53:93:d9:96:1c:04:81:c9:1a:33:f5: c3:e4:fd:cb:bf:04:09:f6:69:e9:d9:da:d9:41:2d: 6e:0d:af:f7:37:2b:18:23:64:42:c8:19:47:0b:fd: ca:24:dc:94:c8:2a:60:cc:ae:f2:98:87:46:d8:ee: f7:9b:fd:5b:ec:99:ee:c8:6e:d8:61:74:c9:06:27: 33:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6D:44:2C:98:5A:36:B6:84:7C:64:DB:AD:70:92:F7:E1:14:08:B1 X509v3 Authority Key Identifier: keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d4:03:96:e0:71:39:67:be:ea:7e:cc:47:5e:a0:d0:a5:ad: 3c:84:d0:0e:fd:63:47:bd:1c:3b:13:3d:0a:cc:77:78:b6:60: 7a:b7:dd:fb:68:6a:f6:a3:67:1f:e2:87:c6:d3:91:90:f6:2b: 0d:24:70:7a:50:a2:9c:0d:87:37:17:af:5c:b1:84:55:8d:3f: f9:98:88:5c:1b:36:20:f2:19:4b:e1:f5:d3:ec:21:12:a7:10: a6:dc:a0:dd:e2:27:56:6e:58:70:75:4a:fe:53:94:22:3e:4b: 18:c3:3e:28:d4:8d:c1:24:24:8a:e6:34:7c:3c:d9:17:1b:cc: fe:50:85:80:22:58:42:40:42:e9:10:5c:ea:39:1b:1f:7d:26: 0d:53:2a:65:e6:21:30:ed:32:80:50:b6:88:58:2d:36:fc:6e: 94:9a:1d:5c:81:36:e6:56:f8:5c:e2:4c:f1:a4:c3:a8:85:0d: 84:8c:c5:cc:37:bf:a5:0d:5d:56:c1:c7:d0:b0:4e:36:eb:bc: 5e:d7:eb:20:65:22:5d:33:bc:d5:10:de:7e:a8:bc:ce:8e:63: 02:2e:41:4f:f8:c6:29:50:2b:5a:5e:65:da:c7:23:d0:59:51: e1:ac:be:92:b0:8d:a9:d3:a6:b1:0c:9f:41:75:22:2d:c4:8e: a3:52:92:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXO8y+yzCtXPXV5ZWR5ePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMTJlZmFlZTk5N2U5YTc2M2I0NjBhYjU5MmRkZGE2N2Ew ZGViNzAwHhcNMjUxMjEyMDcwMTAxWhcNMjUxMjEzMDcwMTAxWjAzMTEwLwYDVQQD Eyg0NzZkNDQyYzk4NWEzNmI2ODQ3YzY0ZGJhZDcwOTJmN2UxMTQwOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnsQCyMmXQY7Zojo4IjyoNLTwX6i JHYnL1n2wCcnJTyehm8Egrw5rsQoNsnT/yYmSbP6jUE2DjkoNw6TvSTzItFq140F kc5emeD1zway5mhxjaXEllmrEXnGBm46qZ2c99tM7KSKjuW4MYW1AjnBRJKEVZ75 5y4jb7BKkPp2GwiF9cfGZ8AkJ9vZ2OBlYpS3W33/lPhDQf4wWNdVIdpVHWMyECHm H+2oCt67vg1dA5d+zkzAQW8BU5PZlhwEgckaM/XD5P3LvwQJ9mnp2drZQS1uDa/3 NysYI2RCyBlHC/3KJNyUyCpgzK7ymIdG2O73m/1b7JnuyG7YYXTJBicz3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdtRCyYWja2hHxk261wkvfhFAixMB8GA1UdIwQY MBaAFCoS767pl+mnY7Rgq1kt3aZ6DetwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQt MDllZDc4MDBmZGZiLzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQtMDllZDc4MDBmZGZi LzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtQDluBx OWe+6n7MR16g0KWtPITQDv1jR70cOxM9Csx3eLZgerfd+2hq9qNnH+KHxtORkPYr DSRwelCinA2HNxevXLGEVY0/+ZiIXBs2IPIZS+H10+whEqcQptyg3eInVm5YcHVK /lOUIj5LGMM+KNSNwSQkiuY0fDzZFxvM/lCFgCJYQkBC6RBc6jkbH30mDVMqZeYh MO0ygFC2iFgtNvxulJodXIE25lb4XOJM8aTDqIUNhIzFzDe/pQ1dVsHH0LBONuu8 XtfrIGUiXTO81RDefqi8zo5jAi5BT/jGKVArWl5l2scj0FlR4ay+krCNqdOmsQyf QXUiLcSOo1KSKw== -----END CERTIFICATE-----Generated at Fri Dec 12 15:37:15 2025 by rpki-client