This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json) Hash identifier: AgKsv49vZ9QY9cPYYV1Zu+b6hiYWjnom86M7TNoIyQs= Subject key identifier: 05:83:FD:D6:4F:88:7C:2A:E3:40:76:CC:E7:6E:A3:08:04:BA:54:59 Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0 Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0 Certificate serial: 019B4882A3AA5A633EB9948CE5015A426EF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft Manifest number: 149C Signing time: Tue 23 Dec 2025 00:01:19 +0000 Manifest this update: Tue 23 Dec 2025 00:01:19 +0000 Manifest next update: Wed 24 Dec 2025 00:01:19 +0000 Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: OowRUuiw5UKV4vLiVAJOzb68PEx6VoPBd21nchyFVNE=) 2: UtENKEhEm8aI0Ou7bKpM_GJZgfw.roa (hash: uJUKEvtya4FeDlxGJPwjMFWIfPRKUsKW7PNJHjdDHAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:a3:aa:5a:63:3e:b9:94:8c:e5:01:5a:42:6e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0 Validity Not Before: Dec 23 00:01:19 2025 GMT Not After : Dec 24 00:01:19 2025 GMT Subject: CN=0583fdd64f887c2ae34076cce76ea30804ba5459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f4:4e:0f:d1:8c:6c:f5:3e:33:75:46:da:22: 0b:82:ca:a6:6c:4c:1a:91:24:e4:94:50:da:21:44: 14:7c:6c:f3:5d:f9:c2:26:47:4b:ab:3d:55:22:fb: 06:1a:b5:b5:3c:d4:d0:66:6a:ec:ff:36:f1:30:25: 1f:c6:86:63:1b:87:4a:bf:6d:1c:4f:60:43:eb:13: 62:74:93:4f:b6:1b:4e:f3:02:82:54:3c:50:5e:cf: 0a:a1:5b:f3:d5:2e:8b:db:d8:19:8f:fd:80:c3:bb: c2:11:ea:6d:19:ef:f8:e4:d1:46:95:f6:48:8f:79: 36:02:4f:6b:2a:06:9d:9b:c6:f9:0c:d2:9b:da:9f: b4:6c:a4:04:18:f9:de:62:f1:bc:5b:81:b4:bc:a2: f5:c1:32:44:b2:3e:90:96:9f:ac:cc:2e:14:a0:b2: 3d:f1:96:b0:e7:cd:38:d5:c8:a2:cd:74:a7:da:8e: 63:9a:e9:82:c2:f3:03:52:6b:f7:47:bc:8d:98:a7: ab:b6:ce:53:37:10:17:b9:9a:35:c7:35:65:88:de: 8a:c3:b6:3f:d9:7d:18:9b:1b:8b:7d:19:73:29:4b: 9c:5d:72:4c:88:e7:b2:c2:db:47:e8:3a:90:eb:14: d8:8d:2c:b1:fc:9d:da:9e:9c:c9:83:dd:f6:78:14: b4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:83:FD:D6:4F:88:7C:2A:E3:40:76:CC:E7:6E:A3:08:04:BA:54:59 X509v3 Authority Key Identifier: keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:5d:a3:ab:58:e1:73:fc:2a:6e:b3:62:49:ff:3d:53:89:b5: 71:71:fa:d7:02:45:66:e6:12:3c:37:e6:7a:10:34:e6:b1:d6: 6c:53:34:e9:1d:d3:d1:3f:b9:dc:5a:1a:37:c1:54:0d:c9:9e: 0b:60:a2:97:ca:35:33:be:7b:8d:65:51:12:96:d4:15:f5:e1: 06:63:09:87:20:55:bc:e3:79:1c:9c:80:28:72:43:c5:df:2b: ec:00:18:37:df:84:63:f3:5a:fc:ae:37:48:a3:99:85:53:77: ff:d8:9d:13:e3:11:1e:42:7f:b3:65:69:cb:cb:07:b5:df:1d: 2a:9c:14:87:ff:23:55:da:5b:6d:5b:55:26:36:af:e3:1f:ba: 3e:2e:75:16:82:f5:b5:b7:4b:67:b8:9d:51:7a:84:a7:df:ea: 6c:b9:d4:fc:88:a6:92:2b:62:2c:da:b0:fc:2f:ff:6d:ca:89: 8f:0e:0f:5d:67:98:32:ac:73:ab:b9:a0:75:da:d8:4f:89:23: 10:16:77:fc:6e:c5:d4:6a:03:b8:2f:9c:bb:63:bb:5b:39:ae: 20:b8:a3:6d:de:61:21:09:75:6a:ca:fa:45:97:dd:b9:86:17: 6d:0a:55:1a:df:88:a0:15:55:6a:34:c2:f2:e0:23:b4:64:80: eb:de:b9:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgqOqWmM+uZSM5QFaQm71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MWQ4M2MzZjRiODc3Y2Y3ZDA4NGNiNTMwYzRhOWUzNmZj ZjdhZDAwHhcNMjUxMjIzMDAwMTE5WhcNMjUxMjI0MDAwMTE5WjAzMTEwLwYDVQQD EygwNTgzZmRkNjRmODg3YzJhZTM0MDc2Y2NlNzZlYTMwODA0YmE1NDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fROD9GMbPU+M3VG2iILgsqmbEwa kSTklFDaIUQUfGzzXfnCJkdLqz1VIvsGGrW1PNTQZmrs/zbxMCUfxoZjG4dKv20c T2BD6xNidJNPthtO8wKCVDxQXs8KoVvz1S6L29gZj/2Aw7vCEeptGe/45NFGlfZI j3k2Ak9rKgadm8b5DNKb2p+0bKQEGPneYvG8W4G0vKL1wTJEsj6Qlp+szC4UoLI9 8Zaw58041ciizXSn2o5jmumCwvMDUmv3R7yNmKerts5TNxAXuZo1xzVliN6Kw7Y/ 2X0YmxuLfRlzKUucXXJMiOeywttH6DqQ6xTYjSyx/J3anpzJg932eBS0cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWD/dZPiHwq40B2zOduowgEulRZMB8GA1UdIwQY MBaAFCkdg8P0uHfPfQhMtTDEqeNvz3rQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYt ZmZjZDQ3NzM0OWZjLzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYtZmZjZDQ3NzM0OWZj LzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuF2jq1jh c/wqbrNiSf89U4m1cXH61wJFZuYSPDfmehA05rHWbFM06R3T0T+53FoaN8FUDcme C2Cil8o1M757jWVREpbUFfXhBmMJhyBVvON5HJyAKHJDxd8r7AAYN9+EY/Na/K43 SKOZhVN3/9idE+MRHkJ/s2Vpy8sHtd8dKpwUh/8jVdpbbVtVJjav4x+6Pi51FoL1 tbdLZ7idUXqEp9/qbLnU/IimkitiLNqw/C//bcqJjw4PXWeYMqxzq7mgddrYT4kj EBZ3/G7F1GoDuC+cu2O7WzmuILijbd5hIQl1asr6RZfduYYXbQpVGt+IoBVVajTC 8uAjtGSA6965+g== -----END CERTIFICATE-----Generated at Tue Dec 23 07:52:21 2025 by rpki-client