This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft File: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json) Hash identifier: Czy5NtHtcgBTvJkxqYvFnBK841p5ZuboK1SjqQdnNe4= Subject key identifier: 75:FE:21:1C:71:18:9C:30:DA:2E:E7:1E:01:27:09:A7:2F:87:E1:1C Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4 Certificate issuer: /CN=2abb5cd85f525302fd04ff2b6721862b204064d4 Certificate serial: 019B58D188ECC9CAA57FBF0723C4BD5EBE02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft Manifest number: 0837 Signing time: Fri 26 Dec 2025 04:01:25 +0000 Manifest this update: Fri 26 Dec 2025 04:01:25 +0000 Manifest next update: Sat 27 Dec 2025 04:01:25 +0000 Files and hashes: 1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: Oo6Zfs/6Vzt6AnqW+10pbWz45T9FNNVFNeRwNaz2J3w=) 2: rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa (hash: jRbiNS0Ka01gqXF1TeFMzqMm+Pa1Z/+jEZGkmARhwF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:88:ec:c9:ca:a5:7f:bf:07:23:c4:bd:5e:be:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4 Validity Not Before: Dec 26 04:01:25 2025 GMT Not After : Dec 27 04:01:25 2025 GMT Subject: CN=75fe211c71189c30da2ee71e012709a72f87e11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b4:15:33:f5:d0:57:bc:52:92:2d:ac:8f:db: 47:2f:c7:82:bf:2e:c9:61:54:30:9b:af:a4:df:af: 00:f8:c4:43:c3:1a:cb:81:e4:19:a3:92:01:6d:e2: b1:25:4a:b1:70:25:55:78:39:4e:2f:e5:e4:08:a2: 04:1c:22:6e:35:7c:82:23:ff:2c:e0:ae:f5:92:92: 8f:a1:df:53:df:bf:32:34:72:d6:f1:69:0a:9e:a1: f7:62:9b:03:46:9d:a6:76:0d:f0:c1:18:4d:46:be: df:2c:e8:18:6a:4b:30:ad:8b:d4:fe:7e:1a:28:8c: 58:bc:04:c2:d2:00:4c:19:c4:8b:00:a7:30:45:f6: c9:36:c6:35:c4:94:e6:c9:cb:c9:ed:b9:f6:6f:d6: 57:66:75:60:07:77:43:36:34:cc:7e:ac:fa:c6:b7: fe:86:ce:5c:8d:07:09:73:be:e5:ac:ca:7a:92:7c: b3:4d:a7:20:0e:fd:81:c4:1f:6e:1e:ae:19:ef:8a: 4d:e7:ab:67:94:de:b1:74:47:93:85:72:d9:92:22: 7a:23:e6:5f:14:cd:91:85:38:fc:b7:dd:9f:46:56: 4f:7b:a6:bf:e4:fa:6e:3c:01:f9:54:e2:9c:97:c5: 21:44:f8:5c:8b:1a:99:3b:76:0b:61:57:ec:f8:35: 97:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FE:21:1C:71:18:9C:30:DA:2E:E7:1E:01:27:09:A7:2F:87:E1:1C X509v3 Authority Key Identifier: keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:78:32:ea:93:ac:27:ff:39:35:1e:71:6b:53:5a:3d:8d:0a: 88:9c:45:58:25:a5:40:91:3e:3b:c4:8e:e3:e3:86:5a:ea:44: 1f:9d:75:9c:c8:1a:01:5c:78:ee:89:cb:04:10:3d:70:d3:10: ff:31:35:67:84:a4:a3:ac:90:21:eb:d9:53:b3:76:b0:90:55: a6:85:d0:dc:bc:5d:a3:af:3e:4d:0f:9a:7a:72:c2:eb:ef:1a: 9f:9a:a7:83:d0:a8:ba:59:46:0b:11:00:1b:87:c0:ab:cc:44: b3:a9:d6:e7:94:be:e6:64:3a:a5:58:d1:ab:01:3b:fa:d6:a5: 0a:71:c4:9e:33:a4:41:63:0b:34:4a:fc:a3:d0:07:e0:a0:89: 3e:b1:19:16:46:c2:6f:c7:8b:76:ae:83:32:1e:ad:e4:2b:d1: ba:2a:78:63:88:91:f1:35:3e:2d:07:ea:bb:25:3a:4f:20:a0: 1b:f8:40:6b:a1:86:80:c3:f7:c3:06:0b:ec:41:2c:af:fb:b8: 72:ec:72:1d:71:11:71:b3:cf:d1:72:ff:b8:64:fb:ac:1c:be: 81:e7:2d:93:ea:2a:46:54:63:f2:97:23:ff:4a:29:59:85:2e: 6f:81:ad:d7:8a:89:f9:9a:5c:f2:a2:c1:24:2a:c8:f5:09:7c: f1:d2:39:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0Yjsycqlf78HI8S9Xr4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYmI1Y2Q4NWY1MjUzMDJmZDA0ZmYyYjY3MjE4NjJiMjA0 MDY0ZDQwHhcNMjUxMjI2MDQwMTI1WhcNMjUxMjI3MDQwMTI1WjAzMTEwLwYDVQQD Eyg3NWZlMjExYzcxMTg5YzMwZGEyZWU3MWUwMTI3MDlhNzJmODdlMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLQVM/XQV7xSki2sj9tHL8eCvy7J YVQwm6+k368A+MRDwxrLgeQZo5IBbeKxJUqxcCVVeDlOL+XkCKIEHCJuNXyCI/8s 4K71kpKPod9T378yNHLW8WkKnqH3YpsDRp2mdg3wwRhNRr7fLOgYakswrYvU/n4a KIxYvATC0gBMGcSLAKcwRfbJNsY1xJTmycvJ7bn2b9ZXZnVgB3dDNjTMfqz6xrf+ hs5cjQcJc77lrMp6knyzTacgDv2BxB9uHq4Z74pN56tnlN6xdEeThXLZkiJ6I+Zf FM2RhTj8t92fRlZPe6a/5PpuPAH5VOKcl8UhRPhcixqZO3YLYVfs+DWXVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHX+IRxxGJww2i7nHgEnCacvh+EcMB8GA1UdIwQY MBaAFCq7XNhfUlMC/QT/K2chhisgQGTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3J0YzJGOVNVd0w5QlA4clp5R0dLeUJBWk5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82OTA0ODItOWRlYy00OWYyLWFiNTUt NzIxZDI1MmYzNTI2LzEvS3J0YzJGOVNVd0w5QlA4clp5R0dLeUJBWk5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi82OTA0ODItOWRlYy00OWYyLWFiNTUtNzIxZDI1MmYzNTI2 LzEvS3J0YzJGOVNVd0w5QlA4clp5R0dLeUJBWk5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXgy6pOs J/85NR5xa1NaPY0KiJxFWCWlQJE+O8SO4+OGWupEH511nMgaAVx47onLBBA9cNMQ /zE1Z4Sko6yQIevZU7N2sJBVpoXQ3Lxdo68+TQ+aenLC6+8an5qng9CoullGCxEA G4fAq8xEs6nW55S+5mQ6pVjRqwE7+talCnHEnjOkQWMLNEr8o9AH4KCJPrEZFkbC b8eLdq6DMh6t5CvRuip4Y4iR8TU+LQfquyU6TyCgG/hAa6GGgMP3wwYL7EEsr/u4 cuxyHXERcbPP0XL/uGT7rBy+gectk+oqRlRj8pcj/0opWYUub4Gt14qJ+Zpc8qLB JCrI9Ql88dI5Sw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:08 2025 by rpki-client