This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json) Hash identifier: eeEV+WauPE84bVbemd+ukLWKbdrnsVELMoNoXK+mvU0= Subject key identifier: B7:D5:3E:01:81:45:FD:B4:69:96:42:28:BC:3D:CD:44:88:FC:44:30 Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d Certificate serial: 019B3BD9117C7464258CA0ABB69206F3E235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 13:00:40 +0000 Manifest this update: Sat 20 Dec 2025 13:00:40 +0000 Manifest next update: Sun 21 Dec 2025 13:00:40 +0000 Files and hashes: 1: bOAoo9Xlbcl-PK-rbfwF58rAKlc.roa (hash: Vn8yXcKwSTNwIZccCZWqjun9GvkjZC8dYUcNBhWRmco=) 2: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: 520Hy4PLjZvhip3zjIS/cfCexK3G6fe3a+gU2d1YfeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:11:7c:74:64:25:8c:a0:ab:b6:92:06:f3:e2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d Validity Not Before: Dec 20 13:00:40 2025 GMT Not After : Dec 21 13:00:40 2025 GMT Subject: CN=b7d53e018145fdb469964228bc3dcd4488fc4430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:89:0e:34:1f:60:ec:fd:a1:1f:ae:e7:f0: ae:f9:3d:45:e4:11:66:02:24:0c:d1:8f:23:b6:86: 2c:c0:e0:39:88:74:d1:cb:69:50:11:d6:01:48:3c: c1:3f:9b:3d:59:e8:6b:dd:2e:12:aa:07:43:70:1f: 28:9e:10:22:a3:13:4a:6c:3d:f5:6c:ad:16:cb:5f: ca:15:70:6e:b9:1b:f5:2a:03:fb:0d:23:9c:79:a0: 58:db:f5:ae:5f:cd:7f:62:56:28:57:66:74:e2:40: 0e:7d:38:20:69:48:94:b1:75:48:3f:45:71:80:8f: f3:60:83:25:9d:84:74:92:8e:98:94:3a:a7:9a:3e: de:d5:af:43:a0:8e:45:96:8f:3a:e9:97:5b:aa:5c: 2e:57:c5:98:41:6c:59:39:56:42:e7:75:7f:16:53: 9d:57:05:52:c8:ac:9d:ed:61:96:9d:fe:54:16:da: 89:47:00:1b:fd:a1:a7:21:0b:f1:4a:0b:34:57:13: e3:b2:2c:ea:30:35:59:76:06:c1:a4:9a:6e:75:f7: 08:b1:2a:d3:c9:38:b2:f3:c8:19:d0:6f:f0:aa:bf: 76:f2:fd:21:54:f5:e7:d6:c9:de:64:54:ec:f6:a1: 5f:6e:04:12:86:46:32:44:ef:f0:b1:c7:aa:8e:98: 28:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D5:3E:01:81:45:FD:B4:69:96:42:28:BC:3D:CD:44:88:FC:44:30 X509v3 Authority Key Identifier: keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:65:ac:49:59:29:fb:ff:92:e6:f2:d5:ed:f9:6f:6e:5b:42: 79:ff:60:4f:40:42:33:c4:65:c4:e8:2a:b0:c5:12:4a:44:d9: 5b:76:50:a9:60:46:64:2d:38:7d:b3:09:03:98:dd:cc:83:33: aa:f5:6b:db:d8:7e:13:24:5a:6b:58:7c:95:fd:1d:71:35:70: 3d:23:1c:d2:57:fa:02:e0:d8:37:56:d6:0a:de:5e:af:c1:eb: 78:f4:a5:cb:73:40:d1:84:da:bb:63:8d:1f:d1:7b:ea:32:60: a2:55:02:c2:ca:75:32:43:48:2a:38:36:8c:12:aa:f8:fe:ba: 9c:00:ff:96:eb:59:48:1b:6e:c1:0b:d8:3f:69:4b:d6:8c:d6: c7:f9:71:14:d5:b8:c6:7b:96:41:03:76:0d:ba:a3:3e:af:23: c8:77:a7:05:a9:f5:27:e0:e2:6d:95:21:51:6a:79:95:c2:7d: c5:d0:85:18:f9:00:cf:c4:0d:6d:8d:c4:95:a7:06:0b:0b:eb: e7:ba:a3:9e:a2:e7:61:17:be:dc:ab:6e:8c:6d:6f:3f:81:40: db:bc:22:c7:a6:e2:d1:0b:c5:52:dd:d4:3f:40:3a:8f:be:a3: a2:97:fb:12:69:be:20:cb:37:67:e5:99:7d:99:2b:3b:a1:31: a9:af:d9:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72RF8dGQljKCrtpIG8+I1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmQyNWI2YjlmM2NmZTA3ODVmZmQ0ZTVlNTQwMjgzM2I0 YTRmOGQwHhcNMjUxMjIwMTMwMDQwWhcNMjUxMjIxMTMwMDQwWjAzMTEwLwYDVQQD EyhiN2Q1M2UwMTgxNDVmZGI0Njk5NjQyMjhiYzNkY2Q0NDg4ZmM0NDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAuJDjQfYOz9oR+u5/Cu+T1F5BFm AiQM0Y8jtoYswOA5iHTRy2lQEdYBSDzBP5s9Wehr3S4SqgdDcB8onhAioxNKbD31 bK0Wy1/KFXBuuRv1KgP7DSOceaBY2/WuX81/YlYoV2Z04kAOfTggaUiUsXVIP0Vx gI/zYIMlnYR0ko6YlDqnmj7e1a9DoI5Flo866ZdbqlwuV8WYQWxZOVZC53V/FlOd VwVSyKyd7WGWnf5UFtqJRwAb/aGnIQvxSgs0VxPjsizqMDVZdgbBpJpudfcIsSrT yTiy88gZ0G/wqr928v0hVPXn1sneZFTs9qFfbgQShkYyRO/wsceqjpgoOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfVPgGBRf20aZZCKLw9zUSI/EQwMB8GA1UdIwQY MBaAFJK9Jba588/geF/9Tl5UAoM7Sk+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3IwbHRybnp6LUI0WF8xT1hsUUNnenRLVDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wMmM2OGItY2VkZi00MzE3LTgyYjgt MmNkOGM5MTM5MDMwLzEva3IwbHRybnp6LUI0WF8xT1hsUUNnenRLVDQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wMmM2OGItY2VkZi00MzE3LTgyYjgtMmNkOGM5MTM5MDMw LzEva3IwbHRybnp6LUI0WF8xT1hsUUNnenRLVDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2WsSVkp +/+S5vLV7flvbltCef9gT0BCM8RlxOgqsMUSSkTZW3ZQqWBGZC04fbMJA5jdzIMz qvVr29h+EyRaa1h8lf0dcTVwPSMc0lf6AuDYN1bWCt5er8HrePSly3NA0YTau2ON H9F76jJgolUCwsp1MkNIKjg2jBKq+P66nAD/lutZSBtuwQvYP2lL1ozWx/lxFNW4 xnuWQQN2DbqjPq8jyHenBan1J+DibZUhUWp5lcJ9xdCFGPkAz8QNbY3ElacGCwvr 57qjnqLnYRe+3KtujG1vP4FA27wix6bi0QvFUt3UP0A6j76jopf7Emm+IMs3Z+WZ fZkrO6Exqa/Z7w== -----END CERTIFICATE-----Generated at Sat Dec 20 19:04:22 2025 by rpki-client