This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft File: KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json) Hash identifier: ydtUW+4RbHxplHk1CBJYJ8Frjze4EO/DSG/2umbOhvM= Subject key identifier: 9D:E7:5C:26:4B:65:64:A3:05:20:E4:5C:66:3E:29:F6:F5:8F:BC:F1 Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2 Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2 Certificate serial: 019B5A1A5D54D89E7CEDABC3E1547D5CAF7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft Manifest number: 05B9 Signing time: Fri 26 Dec 2025 10:00:35 +0000 Manifest this update: Fri 26 Dec 2025 10:00:35 +0000 Manifest next update: Sat 27 Dec 2025 10:00:35 +0000 Files and hashes: 1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: 1S6hu0kW1X/xRZEmzfAM8ONm/nSKBW7IIfmdHaHl1vY=) 2: lzjPjehPcPKbzhp_BORqJSFXL5w.roa (hash: o7m8VbYXK8WyV5y7PTGt6HIYSCCP18Dfj928jAcIW9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:5d:54:d8:9e:7c:ed:ab:c3:e1:54:7d:5c:af:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2 Validity Not Before: Dec 26 10:00:35 2025 GMT Not After : Dec 27 10:00:35 2025 GMT Subject: CN=9de75c264b6564a30520e45c663e29f6f58fbcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:06:c6:64:e3:5c:73:aa:50:14:46:a2:d7:39: 29:8a:73:9d:94:0e:61:d0:79:be:cb:10:4e:10:65: 12:3c:82:aa:32:c5:92:f1:bf:53:4d:64:c6:9a:5f: 0f:29:d7:f9:ba:31:1c:83:18:1d:83:46:ac:af:3d: 59:d8:ee:bf:15:1f:0f:0b:36:72:3f:8b:d4:71:b1: 2c:a4:7c:8d:86:f9:ba:58:cf:96:c7:4c:e6:41:8c: 60:6e:63:85:53:3a:c2:88:be:ef:b9:b7:12:d8:02: 02:80:3d:51:85:c0:ba:5c:95:10:73:a3:27:0f:a0: 6e:90:50:fd:11:f4:44:5d:50:46:a0:ec:bf:a7:50: fa:6d:26:f0:3d:f3:14:50:27:50:76:86:b8:c6:8b: 99:66:c3:29:97:27:04:ca:1e:cf:9f:01:f4:cc:ee: 19:97:95:1c:bf:cf:41:86:3f:b0:81:38:8b:55:21: e9:f7:cf:20:de:59:54:b5:94:89:dc:a7:7e:64:9a: 8c:b3:a2:e2:4a:53:0e:ad:1d:e5:c9:c9:3a:07:8c: 30:98:6b:5d:01:59:d2:36:9e:22:5c:6a:8d:e0:9b: 9b:ab:bf:23:36:59:af:85:9f:97:f9:5d:6a:07:15: 3e:2c:86:f2:b7:29:a8:33:b8:6f:bd:0e:f2:b6:db: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E7:5C:26:4B:65:64:A3:05:20:E4:5C:66:3E:29:F6:F5:8F:BC:F1 X509v3 Authority Key Identifier: keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:3e:7b:12:8b:4c:fb:c2:23:b1:a1:1f:9a:0e:da:be:3f:92: 5c:14:78:3a:01:44:21:b4:da:7c:43:b7:a6:dc:45:9a:e2:4e: d5:e6:db:d3:c8:42:9e:55:4c:dd:c2:10:98:c8:99:d0:ff:aa: 5d:c4:5d:ad:6e:5e:c2:4d:af:a2:b2:e4:a6:1d:32:d4:8b:3c: f2:ee:99:70:82:61:31:35:3a:2c:27:4b:c4:73:36:70:d0:72: 33:2c:20:b2:ab:10:ab:16:d7:99:bc:75:62:c1:b6:ba:1a:f9: cd:42:3d:db:03:c4:cd:9d:23:9c:d8:43:d9:05:29:bd:fa:af: da:b8:88:65:b3:b6:f0:9c:f1:cb:c2:a2:4e:e8:1c:cf:01:5e: cf:08:2f:8d:16:ee:db:41:39:40:fb:a0:8a:0b:ad:91:4b:03: 59:09:e2:9f:c0:2a:35:fc:2c:53:71:68:19:fd:d3:8f:99:13: d6:b0:37:f2:f8:7a:f6:cb:d9:48:f2:13:e5:de:4a:e9:42:6e: 05:f2:1d:39:a3:8d:9d:f4:97:93:d7:54:1b:49:72:28:eb:a7: 5d:2b:93:0e:ce:3c:57:58:90:95:a6:84:71:bf:47:ec:03:14: 3f:24:70:fe:d6:d6:2c:ec:34:3b:6f:dc:9e:60:3b:1d:8b:ab: 7a:23:93:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGl1U2J587avD4VR9XK96MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTk3YmM3MzMwZWE5OTkwMGY0ZmM5MTAzM2EzMzE3ZTU2 Zjc1ZTIwHhcNMjUxMjI2MTAwMDM1WhcNMjUxMjI3MTAwMDM1WjAzMTEwLwYDVQQD Eyg5ZGU3NWMyNjRiNjU2NGEzMDUyMGU0NWM2NjNlMjlmNmY1OGZiY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wbGZONcc6pQFEai1zkpinOdlA5h 0Hm+yxBOEGUSPIKqMsWS8b9TTWTGml8PKdf5ujEcgxgdg0asrz1Z2O6/FR8PCzZy P4vUcbEspHyNhvm6WM+Wx0zmQYxgbmOFUzrCiL7vubcS2AICgD1RhcC6XJUQc6Mn D6BukFD9EfREXVBGoOy/p1D6bSbwPfMUUCdQdoa4xouZZsMplycEyh7PnwH0zO4Z l5Ucv89Bhj+wgTiLVSHp988g3llUtZSJ3Kd+ZJqMs6LiSlMOrR3lyck6B4wwmGtd AVnSNp4iXGqN4Jubq78jNlmvhZ+X+V1qBxU+LIbytymoM7hvvQ7yttvz2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3nXCZLZWSjBSDkXGY+Kfb1j7zxMB8GA1UdIwQY MBaAFCkZe8czDqmZAPT8kQM6Mxflb3XiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMDQzYTctYjI3Ni00MGRjLTlmNjct MzUwMDRhZjVjOTM1LzEvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xMDQzYTctYjI3Ni00MGRjLTlmNjctMzUwMDRhZjVjOTM1 LzEvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiD57EotM +8IjsaEfmg7avj+SXBR4OgFEIbTafEO3ptxFmuJO1ebb08hCnlVM3cIQmMiZ0P+q XcRdrW5ewk2vorLkph0y1Is88u6ZcIJhMTU6LCdLxHM2cNByMywgsqsQqxbXmbx1 YsG2uhr5zUI92wPEzZ0jnNhD2QUpvfqv2riIZbO28Jzxy8KiTugczwFezwgvjRbu 20E5QPugigutkUsDWQnin8AqNfwsU3FoGf3Tj5kT1rA38vh69svZSPIT5d5K6UJu BfIdOaONnfSXk9dUG0lyKOunXSuTDs48V1iQlaaEcb9H7AMUPyRw/tbWLOw0O2/c nmA7HYureiOTUw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:15 2025 by rpki-client