This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json) Hash identifier: U8IcTjHhC5LGazqB0xu0s/17a1CYtsZ90IJCI6Vfy3o= Subject key identifier: 00:40:DA:C9:65:42:5B:D5:B6:33:38:1D:BA:18:A2:01:AD:F3:5A:69 Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1 Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1 Certificate serial: 019B18DF0E35F8B96FCA4A7C54DA9F77B771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft Manifest number: 1775 Signing time: Sat 13 Dec 2025 18:00:29 +0000 Manifest this update: Sat 13 Dec 2025 18:00:29 +0000 Manifest next update: Sun 14 Dec 2025 18:00:29 +0000 Files and hashes: 1: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (hash: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=) 2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: TIYGrvbQvHXkNF244arJM+bFmjhE2BjIYwLteLE5FDk=) 3: NA2ltT3Sfb3V_iisdx5vwEvFMeE.roa (hash: vazWrh+R+LWtlS3ZJjQYp6mVJnmrGyyhkAQ7rsXsUf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:0e:35:f8:b9:6f:ca:4a:7c:54:da:9f:77:b7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1 Validity Not Before: Dec 13 18:00:29 2025 GMT Not After : Dec 14 18:00:29 2025 GMT Subject: CN=0040dac965425bd5b633381dba18a201adf35a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:c8:2e:0b:0c:46:2a:5a:84:d8:3d:b2:9b: 35:d2:ac:69:33:5a:bc:d3:3e:c7:bd:52:05:3b:b8: 24:11:52:96:4c:0e:7e:75:d7:e3:d3:ff:31:15:4f: 94:97:4c:2f:2c:08:90:1a:5f:74:a6:f7:d4:4f:12: 8a:bf:c9:45:34:a4:71:9b:d9:35:3c:74:17:dc:e0: b2:9e:37:b8:8c:68:4c:a5:38:9b:7d:cb:6a:5d:7e: d7:30:48:1b:37:9a:a9:3c:c2:28:87:dc:95:94:10: f8:e6:b2:c7:43:94:39:8f:2f:6a:45:d2:9e:be:57: ad:05:9d:75:15:d1:23:9b:27:45:a2:38:f1:e3:09: 1d:45:97:50:5f:f8:ac:d5:d3:d0:a5:df:f8:a6:be: 1f:db:3a:cf:4f:26:b9:8e:a0:db:4c:94:fc:8c:a3: 4e:27:24:a9:9b:a3:18:3f:67:3a:90:c4:9c:4f:39: db:3b:94:36:c3:45:c1:72:7b:28:80:6a:1a:ad:09: 84:3b:1b:8d:7d:e1:18:d9:05:7b:6e:68:93:1a:7e: 8f:47:ff:ad:e6:e3:65:8d:d4:64:0f:3c:bb:b8:5e: f1:df:bd:8a:32:22:87:82:ed:36:f7:79:d7:30:3b: 7d:69:49:f9:fd:7c:c3:47:06:bd:a4:72:4f:1a:32: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:40:DA:C9:65:42:5B:D5:B6:33:38:1D:BA:18:A2:01:AD:F3:5A:69 X509v3 Authority Key Identifier: keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cf:b4:78:82:44:15:cf:fe:87:b3:6a:2c:1b:39:f1:a0:6e: 2d:55:03:d0:d2:7b:ad:4b:ca:fe:54:7f:c6:3a:fd:c8:f9:9e: 24:73:1e:ba:15:dd:37:89:d8:9d:d9:6f:39:ac:84:11:71:e4: fe:25:5c:1e:1c:0b:38:e4:9b:80:aa:71:13:0d:49:86:8e:89: 0a:c4:cd:74:1d:e2:e0:d3:2e:76:89:f4:49:3a:6f:71:60:68: 62:2a:9b:bc:9f:e6:65:c7:06:a7:f1:b8:07:bc:20:e0:e6:24: 35:5b:f4:10:38:21:8d:46:a6:7f:79:f6:51:cf:58:eb:ee:7f: ac:56:f9:f4:10:64:65:1f:8d:c7:64:fd:32:bb:cb:60:15:55: e5:71:96:71:b4:f8:1f:a2:b7:eb:d1:14:1f:dc:1a:06:6e:e0: ed:8e:30:c0:c3:9e:39:47:dc:5c:2b:a0:e7:2c:b5:f5:e9:9c: 5b:d9:3f:64:e6:90:84:1f:ea:84:e3:c8:45:76:0e:38:36:77: 85:41:77:01:0b:3e:6d:f1:a4:c9:58:0b:e6:b0:35:81:ec:7d: c6:7a:a9:1a:3c:51:37:f0:af:ed:d0:a5:dc:8d:36:38:f4:cd: 29:af:96:f6:7a:60:d4:5c:cc:5e:1a:b4:0d:f6:69:4e:30:e3: d3:9f:68:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY3w41+Llvykp8VNqfd7dxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMWU2NWY4MDgzYzg1OWJjZDBkMmM1MmExZTA2MWViNTEz MWY1ZjEwHhcNMjUxMjEzMTgwMDI5WhcNMjUxMjE0MTgwMDI5WjAzMTEwLwYDVQQD EygwMDQwZGFjOTY1NDI1YmQ1YjYzMzM4MWRiYTE4YTIwMWFkZjM1YTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/jILgsMRipahNg9sps10qxpM1q8 0z7HvVIFO7gkEVKWTA5+ddfj0/8xFU+Ul0wvLAiQGl90pvfUTxKKv8lFNKRxm9k1 PHQX3OCynje4jGhMpTibfctqXX7XMEgbN5qpPMIoh9yVlBD45rLHQ5Q5jy9qRdKe vletBZ11FdEjmydFojjx4wkdRZdQX/is1dPQpd/4pr4f2zrPTya5jqDbTJT8jKNO JySpm6MYP2c6kMScTznbO5Q2w0XBcnsogGoarQmEOxuNfeEY2QV7bmiTGn6PR/+t 5uNljdRkDzy7uF7x372KMiKHgu0293nXMDt9aUn5/XzDRwa9pHJPGjLCFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABA2sllQlvVtjM4HboYogGt81ppMB8GA1UdIwQY MBaAFCoeZfgIPIWbzQ0sUqHgYetRMfXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTIt Y2ZiOGRhNTQ5MDY3LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTItY2ZiOGRhNTQ5MDY3 LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8+0eIJE Fc/+h7NqLBs58aBuLVUD0NJ7rUvK/lR/xjr9yPmeJHMeuhXdN4nYndlvOayEEXHk /iVcHhwLOOSbgKpxEw1Jho6JCsTNdB3i4NMudon0STpvcWBoYiqbvJ/mZccGp/G4 B7wg4OYkNVv0EDghjUamf3n2Uc9Y6+5/rFb59BBkZR+Nx2T9MrvLYBVV5XGWcbT4 H6K369EUH9waBm7g7Y4wwMOeOUfcXCug5yy19emcW9k/ZOaQhB/qhOPIRXYOODZ3 hUF3AQs+bfGkyVgL5rA1gex9xnqpGjxRN/Cv7dCl3I02OPTNKa+W9npg1FzMXhq0 DfZpTjDj059onQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:50 2025 by rpki-client