This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json) Hash identifier: CC6uHVUPe5Qp4kkaAd2SDMPg3Z7/X/ori3CUKmGdlxg= Subject key identifier: E1:FD:9B:E2:04:90:B4:4B:1D:9C:DC:BB:70:7E:81:A3:16:40:AA:42 Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77 Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677 Certificate serial: 019B0C384780E7FC8162D14305DD672ACBBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft Manifest number: 11FA Signing time: Thu 11 Dec 2025 07:02:53 +0000 Manifest this update: Thu 11 Dec 2025 07:02:53 +0000 Manifest next update: Fri 12 Dec 2025 07:02:53 +0000 Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=) 2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: iMuNStMfnl1JZyZscve65Xgh0yT7jNBIPsiFp2WjQnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 07:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:38:47:80:e7:fc:81:62:d1:43:05:dd:67:2a:cb:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677 Validity Not Before: Dec 11 07:02:53 2025 GMT Not After : Dec 12 07:02:53 2025 GMT Subject: CN=e1fd9be20490b44b1d9cdcbb707e81a31640aa42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:82:5c:29:31:e5:09:82:a0:6c:fb:65:8c:c3: 2a:0f:2e:b7:71:e4:fa:1f:ff:b3:f7:1a:37:0f:56: f2:d7:a3:51:f9:d1:0d:f3:74:03:ac:94:75:22:1d: 14:0a:61:7b:e3:17:0c:79:d7:75:31:a0:fb:57:88: a3:de:de:26:87:70:ce:4c:18:1e:04:0a:43:b2:a2: 14:ac:71:ea:ad:07:4c:1a:0a:22:d5:98:72:8d:c5: 0d:94:ba:17:58:28:31:60:1f:10:0b:60:78:6a:87: 47:b5:70:45:17:67:72:d6:ba:1f:23:c1:da:38:0e: ed:cb:9f:c1:0f:13:3c:81:d3:ea:d3:98:4c:f7:a8: e8:56:cc:e9:51:76:75:fb:9d:c1:0f:57:94:3b:fb: 66:9c:ac:78:3e:84:46:39:e2:a6:3a:c3:27:d4:33: cc:f0:98:c4:5e:af:1a:e4:f1:07:18:f6:bf:de:82: 3d:a7:a2:6c:ae:11:a0:f4:11:2f:ad:71:bd:f5:78: 73:ab:c8:28:d8:09:79:19:70:c1:c5:25:82:28:89: c9:0e:db:3e:a7:ce:58:2f:76:73:48:e7:d8:54:64: 4a:a7:f0:3a:71:9a:1e:72:cc:c2:fa:eb:5b:c5:38: c4:8f:3a:c7:fe:cb:92:69:f2:d4:8b:09:0a:b4:8a: 41:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FD:9B:E2:04:90:B4:4B:1D:9C:DC:BB:70:7E:81:A3:16:40:AA:42 X509v3 Authority Key Identifier: keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:19:ba:3e:ae:5c:15:e1:49:01:34:be:45:68:bb:1e:cb:bd: 48:66:9b:df:00:37:13:d9:9b:68:6b:69:c4:5d:8c:e1:87:db: ad:6f:ac:df:13:13:6f:10:38:ea:93:e1:f2:22:26:5c:ae:ec: c1:19:b9:cc:d2:32:a7:a3:b6:48:e4:bc:f5:b5:2e:20:bb:03: 42:c7:f6:b3:85:32:6e:9f:98:3e:68:5f:e3:06:fc:c2:3b:a5: 96:1d:ca:5e:b4:35:2e:7c:e8:a4:71:90:d8:6f:56:24:09:0e: e8:9a:1f:f8:53:0e:ab:c8:a7:6e:29:83:33:49:12:f2:92:c6: 8a:67:4f:5b:b5:49:4f:1c:8d:51:82:94:e8:8b:52:59:04:d0: fb:c1:95:07:8e:7d:ab:cb:f1:c6:c2:a7:1f:f3:ac:9e:95:ae: c2:57:8a:97:c5:9f:05:1c:bd:72:16:39:e3:57:2b:54:f7:04: 90:78:0e:6b:2e:46:be:24:d0:7f:f3:25:12:78:16:d6:de:c7: 66:ac:91:da:31:be:24:4d:4d:89:05:2c:b1:68:e4:ef:5d:8c: 57:0b:23:4c:2a:54:c7:e0:4e:d6:72:58:9e:6b:73:af:9b:fb: 69:d5:fc:f0:a0:88:0e:bd:5e:20:c6:92:3f:31:c3:78:e4:1a: 94:89:fe:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMOEeA5/yBYtFDBd1nKsu6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTk0NjE4NDQ1NDk4MjQ1MDBiN2NkMWM0NTFkODI0YmE2 ZTU2NzcwHhcNMjUxMjExMDcwMjUzWhcNMjUxMjEyMDcwMjUzWjAzMTEwLwYDVQQD EyhlMWZkOWJlMjA0OTBiNDRiMWQ5Y2RjYmI3MDdlODFhMzE2NDBhYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIJcKTHlCYKgbPtljMMqDy63ceT6 H/+z9xo3D1by16NR+dEN83QDrJR1Ih0UCmF74xcMedd1MaD7V4ij3t4mh3DOTBge BApDsqIUrHHqrQdMGgoi1ZhyjcUNlLoXWCgxYB8QC2B4aodHtXBFF2dy1rofI8Ha OA7ty5/BDxM8gdPq05hM96joVszpUXZ1+53BD1eUO/tmnKx4PoRGOeKmOsMn1DPM 8JjEXq8a5PEHGPa/3oI9p6JsrhGg9BEvrXG99Xhzq8go2Al5GXDBxSWCKInJDts+ p85YL3ZzSOfYVGRKp/A6cZoecszC+utbxTjEjzrH/suSafLUiwkKtIpB2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOH9m+IEkLRLHZzcu3B+gaMWQKpCMB8GA1UdIwQY MBaAFCkZRhhEVJgkUAt80cRR2CS6blZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYt YjZlYTgyZjE5MjIwLzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYtYjZlYTgyZjE5MjIw LzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihm6Pq5c FeFJATS+RWi7Hsu9SGab3wA3E9mbaGtpxF2M4YfbrW+s3xMTbxA46pPh8iImXK7s wRm5zNIyp6O2SOS89bUuILsDQsf2s4Uybp+YPmhf4wb8wjullh3KXrQ1LnzopHGQ 2G9WJAkO6Jof+FMOq8inbimDM0kS8pLGimdPW7VJTxyNUYKU6ItSWQTQ+8GVB459 q8vxxsKnH/OsnpWuwleKl8WfBRy9chY541crVPcEkHgOay5GviTQf/MlEngW1t7H ZqyR2jG+JE1NiQUssWjk712MVwsjTCpUx+BO1nJYnmtzr5v7adX88KCIDr1eIMaS PzHDeOQalIn+8w== -----END CERTIFICATE-----Generated at Thu Dec 11 15:11:36 2025 by rpki-client