This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json) Hash identifier: p2U2fTMWXh+O1ZcqQkTyeVDqOlGzaSPqObwqgodblM4= Subject key identifier: 2D:30:64:13:6F:AD:23:11:6F:FB:1A:87:7B:35:28:6C:AF:09:C2:E6 Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f Certificate serial: 019B35331CD7823C9BFA5A1648077E02BF61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft Manifest number: 178A Signing time: Fri 19 Dec 2025 06:01:40 +0000 Manifest this update: Fri 19 Dec 2025 06:01:40 +0000 Manifest next update: Sat 20 Dec 2025 06:01:40 +0000 Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=) 2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: sfUfXAM3jN7YIex1bIX1edJcOXqWZp0fL5nyUkFYpks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:1c:d7:82:3c:9b:fa:5a:16:48:07:7e:02:bf:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f Validity Not Before: Dec 19 06:01:40 2025 GMT Not After : Dec 20 06:01:40 2025 GMT Subject: CN=2d3064136fad23116ffb1a877b35286caf09c2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:0b:87:57:99:52:e8:28:43:87:6b:fc:a7: 92:b5:c6:d8:be:dd:7e:55:1a:a6:d9:dd:1a:a6:d7: 1b:7c:e1:b1:f3:b8:49:91:df:47:93:03:04:6a:6a: d8:9e:37:64:a3:fd:ee:06:bd:84:ef:62:7e:ce:04: 4c:07:49:33:1a:65:10:4b:d9:57:42:bc:c5:1d:29: 53:f8:01:21:36:92:c5:d0:a8:32:65:8b:94:a2:cd: 54:9d:79:91:f5:2f:63:9a:4b:90:65:e4:ef:8e:af: d3:ad:5b:b0:7c:68:f2:cb:a4:26:70:f1:f8:13:4d: c5:d8:2b:b6:be:02:09:69:80:38:1b:f2:a9:66:18: 2a:26:e1:b9:d4:70:5d:aa:d5:ff:ea:e1:aa:0d:a1: 86:e8:e4:fa:40:b3:d9:ce:bc:03:24:8b:cb:64:b2: 28:07:9d:9f:50:e3:12:7d:fb:e0:2c:55:6e:30:5c: fd:ad:e0:34:6a:53:90:84:19:98:da:34:ce:be:0d: 4b:f3:f3:df:32:e6:da:4b:9a:47:44:61:d7:59:9b: 40:7c:c6:d3:cf:80:12:4b:1c:e5:66:33:55:e7:f9: a4:b3:e5:4b:47:c8:7a:a9:7b:2e:f7:a9:7a:e2:f1: 7f:4a:33:50:db:39:12:bf:c6:47:f5:d5:be:5f:2f: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:30:64:13:6F:AD:23:11:6F:FB:1A:87:7B:35:28:6C:AF:09:C2:E6 X509v3 Authority Key Identifier: keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:1c:32:18:21:b3:b2:8c:80:27:17:e1:c9:90:29:b7:bb:c4: 52:2a:65:5b:b4:f5:13:c1:0d:08:4e:f1:3b:40:65:ae:97:56: 92:25:7b:15:f4:8f:56:21:03:29:5b:23:75:51:8c:7f:13:e3: 0c:30:dc:6a:a7:48:02:ee:6a:c5:b4:0d:93:dc:fe:70:c7:23: 9b:d0:23:f4:fc:6b:d6:31:07:bd:12:1a:9e:0c:a0:87:e5:73: c7:6e:ed:28:e4:d9:94:e2:b2:7c:2d:81:13:d4:9d:6b:ab:76: a3:3c:80:71:f5:01:85:81:54:ec:87:46:ab:74:3d:ed:38:55: 26:6c:a2:5d:bb:13:e5:10:9c:34:ff:1d:d5:ce:8d:93:25:c7: 0f:f0:4f:7a:74:4a:84:8c:a1:5f:d1:84:fd:af:7c:43:e9:9d: 1a:09:d9:5e:a3:40:17:8e:49:9a:5c:bf:58:56:9a:ca:24:c6: 52:28:05:2f:e4:f7:a3:33:1b:0f:a0:3d:13:50:1f:9a:ea:69: ca:2f:9a:cb:23:5f:da:07:fa:ae:45:04:1e:0d:48:55:a1:1d: 60:32:62:48:2f:b7:8d:2f:0b:86:7b:4c:7b:0a:98:35:45:d1: 83:fc:62:19:d7:21:67:d3:ad:55:30:36:25:83:4d:31:5b:7b: 44:32:b2:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MxzXgjyb+loWSAd+Ar9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTg3ZjgxMTU5N2RkMDM1MTNiZTQyZjQzMTU1YmMxNWEz YTBiM2YwHhcNMjUxMjE5MDYwMTQwWhcNMjUxMjIwMDYwMTQwWjAzMTEwLwYDVQQD EygyZDMwNjQxMzZmYWQyMzExNmZmYjFhODc3YjM1Mjg2Y2FmMDljMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVILh1eZUugoQ4dr/KeStcbYvt1+ VRqm2d0aptcbfOGx87hJkd9HkwMEamrYnjdko/3uBr2E72J+zgRMB0kzGmUQS9lX QrzFHSlT+AEhNpLF0KgyZYuUos1UnXmR9S9jmkuQZeTvjq/TrVuwfGjyy6QmcPH4 E03F2Cu2vgIJaYA4G/KpZhgqJuG51HBdqtX/6uGqDaGG6OT6QLPZzrwDJIvLZLIo B52fUOMSffvgLFVuMFz9reA0alOQhBmY2jTOvg1L8/PfMubaS5pHRGHXWZtAfMbT z4ASSxzlZjNV5/mks+VLR8h6qXsu96l64vF/SjNQ2zkSv8ZH9dW+Xy/McQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0wZBNvrSMRb/sah3s1KGyvCcLmMB8GA1UdIwQY MBaAFCkYf4EVl90DUTvkL0MVW8FaOgs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgt MjQ5OTRiMDQwZjQxLzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgtMjQ5OTRiMDQwZjQx LzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBwyGCGz soyAJxfhyZApt7vEUiplW7T1E8ENCE7xO0BlrpdWkiV7FfSPViEDKVsjdVGMfxPj DDDcaqdIAu5qxbQNk9z+cMcjm9Aj9Pxr1jEHvRIangygh+Vzx27tKOTZlOKyfC2B E9Sda6t2ozyAcfUBhYFU7IdGq3Q97ThVJmyiXbsT5RCcNP8d1c6NkyXHD/BPenRK hIyhX9GE/a98Q+mdGgnZXqNAF45Jmly/WFaayiTGUigFL+T3ozMbD6A9E1Afmupp yi+ayyNf2gf6rkUEHg1IVaEdYDJiSC+3jS8LhntMewqYNUXRg/xiGdchZ9OtVTA2 JYNNMVt7RDKypw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:13:12 2025 by rpki-client