This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json) Hash identifier: 5Yo9Akoiyl1W2WZnV+3d5hW+8XGS158lu5iXPaP8j2Y= Subject key identifier: 80:AC:F2:41:0C:BE:17:1F:A8:40:FB:CF:51:B9:94:CB:96:FA:D9:DE Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1 Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1 Certificate serial: 019B112644B2733A65F1D59287BD6E7BD2D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 06:01:19 +0000 Manifest this update: Fri 12 Dec 2025 06:01:19 +0000 Manifest next update: Sat 13 Dec 2025 06:01:19 +0000 Files and hashes: 1: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (hash: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=) 2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: onKr9j8IbuPNZWUAtZfzSGOB01/AZs+Tqb80DrV/rzk=) 3: NA2ltT3Sfb3V_iisdx5vwEvFMeE.roa (hash: vazWrh+R+LWtlS3ZJjQYp6mVJnmrGyyhkAQ7rsXsUf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:26:44:b2:73:3a:65:f1:d5:92:87:bd:6e:7b:d2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1 Validity Not Before: Dec 12 06:01:19 2025 GMT Not After : Dec 13 06:01:19 2025 GMT Subject: CN=80acf2410cbe171fa840fbcf51b994cb96fad9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:a8:ed:82:5b:1e:82:2a:95:ab:20:ad:98: 06:61:17:c4:2b:c1:b9:0b:80:e5:73:6c:a7:94:89: 6f:e3:fe:91:bf:2c:34:b7:f6:4d:96:f6:8c:3f:70: ec:a3:d6:99:3b:03:8d:81:21:66:47:a8:bc:04:a7: af:2c:4a:46:22:87:69:78:e8:06:72:46:96:34:71: c2:6a:d2:cd:f7:cb:72:6d:2c:38:71:f6:42:31:50: 76:a4:c2:3c:6d:d0:9e:14:c1:97:7e:93:6f:19:90: 1c:7a:e2:60:a7:28:e9:f3:17:da:09:36:38:22:ce: d2:c6:21:32:01:49:71:7b:6c:a5:f7:02:2a:ba:19: a7:af:fe:97:9d:88:17:19:f7:4f:d4:40:70:a0:76: 22:f6:34:f2:32:95:06:c7:a0:b0:0a:43:c4:26:c2: 52:69:ca:9e:95:33:c6:8f:7f:86:72:74:18:0f:de: dc:58:53:28:29:70:02:f3:52:7c:f1:fa:08:2a:a7: 3a:bf:8c:c7:e6:35:0a:9b:14:9f:a6:37:ed:1f:56: 00:7a:46:c8:bc:3e:6e:d6:12:f7:f3:4a:4f:06:11: 17:8e:ae:a0:70:64:52:a9:01:ef:d6:d2:1f:12:4e: 89:01:2c:86:d0:90:c4:d0:f6:9a:33:dc:97:58:64: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AC:F2:41:0C:BE:17:1F:A8:40:FB:CF:51:B9:94:CB:96:FA:D9:DE X509v3 Authority Key Identifier: keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:60:96:7c:29:f8:d9:ea:a9:33:7c:89:2a:86:59:48:fb:37: de:c3:86:6b:34:f6:09:af:06:03:f4:bc:f8:45:6a:20:46:65: 5a:2d:65:fe:03:f4:98:e8:1e:d2:fa:d5:61:21:3d:ce:24:4e: e3:3e:29:a4:42:f3:7a:8e:cc:81:a3:de:67:44:9b:64:12:f0: 4e:5f:e6:b5:7a:a8:39:06:5d:5f:9f:e7:85:d3:fa:ee:58:fe: c2:cf:48:6a:b0:d0:a0:eb:9d:68:76:09:be:c6:92:1b:08:7f: 39:ee:37:f7:0b:69:26:35:a3:8b:5f:97:ab:13:51:2b:28:08: d3:20:1c:9b:39:40:84:b9:99:02:c3:e7:23:47:40:81:92:bc: ef:a3:4c:66:25:de:6b:39:d2:f1:f9:4b:1c:84:98:a6:f1:2a: ec:23:af:4c:0a:4b:3b:04:6a:3d:62:69:22:5d:73:9d:c2:92: 2a:dc:02:e6:40:74:5d:76:83:5c:82:5e:d5:40:fa:1e:33:3a: ed:0d:e3:2d:9c:ed:2f:4e:25:02:98:09:c4:ba:ac:15:3a:d4: 91:9c:cb:06:b8:6d:01:a1:15:5e:88:14:7b:53:15:c5:38:18: 4b:77:dd:cb:4a:dc:d6:b2:47:46:fa:6f:7f:43:b7:cd:53:e2: e5:e0:a8:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJkSyczpl8dWSh71ue9LXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMWU2NWY4MDgzYzg1OWJjZDBkMmM1MmExZTA2MWViNTEz MWY1ZjEwHhcNMjUxMjEyMDYwMTE5WhcNMjUxMjEzMDYwMTE5WjAzMTEwLwYDVQQD Eyg4MGFjZjI0MTBjYmUxNzFmYTg0MGZiY2Y1MWI5OTRjYjk2ZmFkOWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXOo7YJbHoIqlasgrZgGYRfEK8G5 C4Dlc2ynlIlv4/6Rvyw0t/ZNlvaMP3Dso9aZOwONgSFmR6i8BKevLEpGIodpeOgG ckaWNHHCatLN98tybSw4cfZCMVB2pMI8bdCeFMGXfpNvGZAceuJgpyjp8xfaCTY4 Is7SxiEyAUlxe2yl9wIquhmnr/6XnYgXGfdP1EBwoHYi9jTyMpUGx6CwCkPEJsJS acqelTPGj3+GcnQYD97cWFMoKXAC81J88foIKqc6v4zH5jUKmxSfpjftH1YAekbI vD5u1hL380pPBhEXjq6gcGRSqQHv1tIfEk6JASyG0JDE0PaaM9yXWGQIfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICs8kEMvhcfqED7z1G5lMuW+tneMB8GA1UdIwQY MBaAFCoeZfgIPIWbzQ0sUqHgYetRMfXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTIt Y2ZiOGRhNTQ5MDY3LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTItY2ZiOGRhNTQ5MDY3 LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWCWfCn4 2eqpM3yJKoZZSPs33sOGazT2Ca8GA/S8+EVqIEZlWi1l/gP0mOge0vrVYSE9ziRO 4z4ppELzeo7MgaPeZ0SbZBLwTl/mtXqoOQZdX5/nhdP67lj+ws9IarDQoOudaHYJ vsaSGwh/Oe439wtpJjWji1+XqxNRKygI0yAcmzlAhLmZAsPnI0dAgZK876NMZiXe aznS8flLHISYpvEq7COvTApLOwRqPWJpIl1zncKSKtwC5kB0XXaDXIJe1UD6HjM6 7Q3jLZztL04lApgJxLqsFTrUkZzLBrhtAaEVXogUe1MVxTgYS3fdy0rc1rJHRvpv f0O3zVPi5eCozQ== -----END CERTIFICATE-----Generated at Fri Dec 12 09:23:52 2025 by rpki-client