This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json) Hash identifier: T1YT9FoBtVanZCKqOlKfQ26dvElvr0E7smb0eRv7aT4= Subject key identifier: DC:89:87:3A:39:9C:4C:AA:76:BA:1C:D9:F7:83:D2:3C:8F:1F:7E:CE Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Certificate serial: 019B22879A77058F44CBC284F9B45B8D7375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft Manifest number: 11C5 Signing time: Mon 15 Dec 2025 15:01:10 +0000 Manifest this update: Mon 15 Dec 2025 15:01:10 +0000 Manifest next update: Tue 16 Dec 2025 15:01:10 +0000 Files and hashes: 1: WCwlNGrnqXg0s07Q732U-2ylHg4.roa (hash: JC3pVBoWwnSgFg4cCXzdGvV9c4AWdX+y7n3AH9a1Lis=) 2: _qUQH-C47BNroyNwSiM_yIICM1Q.roa (hash: M7wXkFLCh1xf6ARJBINRS+CZ5o11Olshd9eYM5z+kMk=) 3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: evRfIH4s9PEBmDQwE4fq0b2bT3/ilQZvva8Fd3b+adw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:9a:77:05:8f:44:cb:c2:84:f9:b4:5b:8d:73:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Validity Not Before: Dec 15 15:01:10 2025 GMT Not After : Dec 16 15:01:10 2025 GMT Subject: CN=dc89873a399c4caa76ba1cd9f783d23c8f1f7ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:89:dd:43:99:53:5c:a2:af:15:1f:24:ac:e5: 7c:3b:1e:25:e5:30:ec:d7:6f:47:39:b5:59:ec:79: 2b:7f:cd:d5:52:68:aa:47:8a:a4:ac:28:7e:51:cc: 13:6d:26:3d:d5:e3:8c:7a:4e:dd:f4:03:96:09:1d: c0:3d:dc:82:d8:97:2a:a2:e3:93:1a:92:04:20:5a: bf:8c:9b:e3:e9:2b:e5:80:6d:55:7d:64:98:d5:e4: a4:04:d1:f5:e8:e5:c4:f7:0a:40:c7:f3:26:ba:b0: bc:19:aa:0a:57:dd:2a:1e:f6:82:4d:3a:8b:fe:3e: 19:99:13:70:d9:e6:19:97:43:e5:5b:79:df:94:34: b7:1c:43:40:24:d2:d0:3d:35:fd:d1:b5:af:28:6b: c8:eb:8f:8e:ed:a8:8c:b7:f2:76:cd:23:21:d7:1c: 2a:ae:82:fa:eb:22:f8:3b:07:aa:f1:ee:de:d7:da: b6:0b:aa:60:c5:a8:af:65:17:94:6a:77:cf:ae:c2: aa:9c:c7:34:d6:d9:9e:f2:90:4d:16:12:29:ed:9b: 3a:b6:5e:cf:38:84:ff:89:73:34:23:7b:75:63:7d: 6e:e5:f6:80:a2:1a:28:b4:fb:8f:21:68:b3:b4:fc: f1:d4:7f:dc:d1:4a:cc:3d:2c:31:96:5f:5a:25:62: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:89:87:3A:39:9C:4C:AA:76:BA:1C:D9:F7:83:D2:3C:8F:1F:7E:CE X509v3 Authority Key Identifier: keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5e:35:17:57:46:78:d9:de:05:34:a0:70:55:b1:1a:94:ad: 7e:38:82:05:d4:ed:30:d0:71:24:45:4f:44:56:57:b1:94:49: 12:7b:8e:28:af:52:60:12:14:3f:73:f8:b0:88:4c:95:d0:9e: fe:49:77:14:36:ee:e4:04:ca:1d:d0:e6:2d:6d:ac:55:29:2c: f5:97:06:b6:ad:7f:89:84:ad:32:d2:53:07:d9:e3:05:d9:db: d3:7d:62:f3:1b:01:24:22:5c:75:bc:03:0a:33:b0:b0:87:d4: 11:2c:b4:f6:a1:5c:66:a9:3a:8f:5c:a5:ad:89:ee:ab:c5:84: 05:86:cc:c9:17:40:34:e2:f2:88:26:d3:06:e0:bd:59:51:e0: cd:c7:39:57:0d:bf:a5:81:92:9f:4c:cd:73:99:34:a7:ec:9f: 80:e7:93:60:49:53:a7:5d:ad:ce:95:a1:17:c3:9d:d0:8e:11: e6:28:b0:b8:b8:a8:61:69:76:83:f5:5a:5a:97:65:ab:68:a0: af:b9:1c:fd:30:8d:63:4a:52:7e:5a:4b:1e:9e:f6:c5:cc:9b: a8:ae:ae:33:7d:9c:f9:79:ae:a4:bb:3c:6c:7c:8f:07:09:a5: fd:37:20:2a:12:a3:68:dd:60:99:73:ac:97:00:4d:c3:48:f8: d8:2a:f1:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih5p3BY9Ey8KE+bRbjXN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh MmQxMWIwHhcNMjUxMjE1MTUwMTEwWhcNMjUxMjE2MTUwMTEwWjAzMTEwLwYDVQQD EyhkYzg5ODczYTM5OWM0Y2FhNzZiYTFjZDlmNzgzZDIzYzhmMWY3ZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqondQ5lTXKKvFR8krOV8Ox4l5TDs 129HObVZ7Hkrf83VUmiqR4qkrCh+UcwTbSY91eOMek7d9AOWCR3APdyC2JcqouOT GpIEIFq/jJvj6SvlgG1VfWSY1eSkBNH16OXE9wpAx/MmurC8GaoKV90qHvaCTTqL /j4ZmRNw2eYZl0PlW3nflDS3HENAJNLQPTX90bWvKGvI64+O7aiMt/J2zSMh1xwq roL66yL4Oweq8e7e19q2C6pgxaivZReUanfPrsKqnMc01tme8pBNFhIp7Zs6tl7P OIT/iXM0I3t1Y31u5faAohootPuPIWiztPzx1H/c0UrMPSwxll9aJWLPfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyJhzo5nEyqdroc2feD0jyPH37OMB8GA1UdIwQY MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct MDA4NWEzNjVhMjVmLzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH141F1dG eNneBTSgcFWxGpStfjiCBdTtMNBxJEVPRFZXsZRJEnuOKK9SYBIUP3P4sIhMldCe /kl3FDbu5ATKHdDmLW2sVSks9ZcGtq1/iYStMtJTB9njBdnb031i8xsBJCJcdbwD CjOwsIfUESy09qFcZqk6j1ylrYnuq8WEBYbMyRdANOLyiCbTBuC9WVHgzcc5Vw2/ pYGSn0zNc5k0p+yfgOeTYElTp12tzpWhF8Od0I4R5iiwuLioYWl2g/VaWpdlq2ig r7kc/TCNY0pSflpLHp72xcybqK6uM32c+XmupLs8bHyPBwml/TcgKhKjaN1gmXOs lwBNw0j42Crx4A== -----END CERTIFICATE-----Generated at Mon Dec 15 20:59:52 2025 by rpki-client