This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json) Hash identifier: ibdKu/FarIDUldnNRsm2CmA4WUWHg5H1K/jcXSon9+E= Subject key identifier: 2D:C8:6D:CE:80:4C:AE:72:39:10:4F:37:42:37:99:35:0F:FA:2C:79 Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17 Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17 Certificate serial: 019B5907EEBDC798F9AB79934BADCCA5D7CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft Manifest number: 0F5F Signing time: Fri 26 Dec 2025 05:00:50 +0000 Manifest this update: Fri 26 Dec 2025 05:00:50 +0000 Manifest next update: Sat 27 Dec 2025 05:00:50 +0000 Files and hashes: 1: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: p+gCNtxLeNO97+Z3MOyoKvOexh6BOhKx239HuRuRde8=) 2: tT2MkC3bDAt-AG9rSFm6itBZmH0.roa (hash: ZIroNCPsL/l7JhsPE9mGE4anIRCcdf9s2wEC0oqqzzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:ee:bd:c7:98:f9:ab:79:93:4b:ad:cc:a5:d7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17 Validity Not Before: Dec 26 05:00:50 2025 GMT Not After : Dec 27 05:00:50 2025 GMT Subject: CN=2dc86dce804cae7239104f37423799350ffa2c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:7a:d2:60:2e:85:c9:09:f2:44:f4:de:f9: b2:ba:69:ff:1a:e2:58:4e:4c:2c:07:fe:06:ca:fd: 23:29:93:a8:ea:58:ed:be:47:e5:2a:b8:63:bc:86: 35:d0:b6:b7:c9:77:70:9a:c5:80:fc:62:64:f5:ac: d6:18:86:9d:24:d5:d0:61:e1:65:df:6c:51:2f:3b: 7a:fd:db:d6:48:0a:7c:bd:31:ad:2c:8f:cb:30:7a: 60:ae:70:44:13:57:01:d4:21:3d:27:19:c2:8b:cd: f0:dd:f3:d4:da:16:6b:5e:a5:17:71:bc:7b:62:48: bd:48:69:44:a9:7f:99:89:6b:e8:81:b1:6c:76:09: 25:36:4d:da:99:91:21:35:0c:f1:3e:37:17:96:de: 5f:12:f6:b4:29:55:84:0a:c9:dc:00:d8:37:1e:e3: 11:77:49:cf:c6:ba:86:5c:7c:2a:25:fd:5b:35:95: 69:f9:3a:92:ac:bb:ad:04:60:7e:77:73:ae:6c:c5: cb:03:54:7f:a0:7c:4d:a0:80:66:cd:6c:f6:c3:92: 02:84:10:ac:be:28:bf:a4:2b:ab:95:88:91:7f:84: 7a:d7:bf:4b:41:40:3c:d5:c4:96:18:27:39:5f:11: d5:53:aa:48:28:f5:bf:fb:35:5c:4c:c2:f4:f6:69: 94:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C8:6D:CE:80:4C:AE:72:39:10:4F:37:42:37:99:35:0F:FA:2C:79 X509v3 Authority Key Identifier: keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:59:32:d5:d6:f8:90:db:84:23:17:76:45:c8:14:54:70:c0: 16:14:bc:c6:9c:a0:cc:3d:d8:ee:93:01:73:2c:e1:30:19:69: 57:ea:63:4f:30:f9:bd:1e:21:4d:76:d5:1b:ff:7c:97:be:db: d2:6a:c4:9c:b3:bd:05:91:c6:5c:30:3d:91:19:07:8b:a1:ce: a6:39:09:af:7d:f2:f7:ca:b4:eb:99:03:1d:fa:db:7a:e3:45: 9d:2d:19:ad:4c:de:64:b3:58:33:d7:4c:d0:dc:55:bb:a6:49: 9b:83:f1:f2:fd:7c:93:bf:7a:a2:05:b7:61:57:de:2b:a0:d9: 85:a3:2f:cf:e7:d1:40:ee:32:bd:48:59:ad:29:dd:38:ad:a8: bd:fb:75:9a:2a:76:70:f4:b7:20:dd:32:dc:8c:fb:4e:e0:b0: 91:75:98:a1:2e:63:09:76:41:7f:ae:04:b6:6c:7b:92:17:3b: c0:1f:a0:e1:fa:3f:22:4c:5a:b7:76:d0:2a:65:f5:59:46:45: 68:31:45:5e:4e:0e:af:52:65:30:12:27:d6:ea:e7:34:1d:fb: 56:83:f7:f7:4d:26:d4:9d:37:86:30:51:14:cc:74:1c:f7:4d: cb:fe:df:a2:93:90:76:87:f7:5c:84:69:cb:d1:2c:74:b8:68: 07:a6:32:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB+69x5j5q3mTS63MpdfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYjE0M2Q3ZGIxMTU5NTdjNWRiOWFmODk1ZjRlN2UxNWI3 YjZiMTcwHhcNMjUxMjI2MDUwMDUwWhcNMjUxMjI3MDUwMDUwWjAzMTEwLwYDVQQD EygyZGM4NmRjZTgwNGNhZTcyMzkxMDRmMzc0MjM3OTkzNTBmZmEyYzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyx60mAuhckJ8kT03vmyumn/GuJY TkwsB/4Gyv0jKZOo6ljtvkflKrhjvIY10La3yXdwmsWA/GJk9azWGIadJNXQYeFl 32xRLzt6/dvWSAp8vTGtLI/LMHpgrnBEE1cB1CE9JxnCi83w3fPU2hZrXqUXcbx7 Yki9SGlEqX+ZiWvogbFsdgklNk3amZEhNQzxPjcXlt5fEva0KVWECsncANg3HuMR d0nPxrqGXHwqJf1bNZVp+TqSrLutBGB+d3OubMXLA1R/oHxNoIBmzWz2w5IChBCs vii/pCurlYiRf4R6179LQUA81cSWGCc5XxHVU6pIKPW/+zVcTML09mmUbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3Ibc6ATK5yORBPN0I3mTUP+ix5MB8GA1UdIwQY MBaAFJKxQ9fbEVlXxdua+JX05+Fbe2sXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTct NmQzYTg4MTUzNzY3LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTctNmQzYTg4MTUzNzY3 LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVky1db4 kNuEIxd2RcgUVHDAFhS8xpygzD3Y7pMBcyzhMBlpV+pjTzD5vR4hTXbVG/98l77b 0mrEnLO9BZHGXDA9kRkHi6HOpjkJr33y98q065kDHfrbeuNFnS0ZrUzeZLNYM9dM 0NxVu6ZJm4Px8v18k796ogW3YVfeK6DZhaMvz+fRQO4yvUhZrSndOK2ovft1mip2 cPS3IN0y3Iz7TuCwkXWYoS5jCXZBf64Etmx7khc7wB+g4fo/Ikxat3bQKmX1WUZF aDFFXk4Or1JlMBIn1urnNB37VoP3900m1J03hjBRFMx0HPdNy/7fopOQdof3XIRp y9EsdLhoB6YyAA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:50 2025 by rpki-client