This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json) Hash identifier: MzThjomSsMTMylQJ5mLjyW6ypil9B2W/vUOeeWESrOk= Subject key identifier: 55:54:4D:FE:62:F4:42:BF:72:20:16:1C:21:30:A1:43:B7:D2:3A:AD Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5 Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5 Certificate serial: 019B25884C7F95E54FD218C53ACAB7A21C3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 05:00:47 +0000 Manifest this update: Tue 16 Dec 2025 05:00:47 +0000 Manifest next update: Wed 17 Dec 2025 05:00:47 +0000 Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: j84XgaU+VBLL45b3FVwwI6x4VOJMm0HsImROfIFoNqI=) 2: YzWazfZkDmpS6lnGJouGiR4vMgw.roa (hash: g+4T1wjwDSXCQUkHT41UwModEGJm2ijdNXqnxLEPkqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:4c:7f:95:e5:4f:d2:18:c5:3a:ca:b7:a2:1c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5 Validity Not Before: Dec 16 05:00:47 2025 GMT Not After : Dec 17 05:00:47 2025 GMT Subject: CN=55544dfe62f442bf7220161c2130a143b7d23aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:5e:35:2c:97:ac:9f:89:6b:92:a9:e6:47: fd:a0:12:b7:9a:d6:07:5b:13:b3:8f:00:46:c2:14: 45:35:af:67:57:87:51:a1:a8:cd:48:ae:d3:88:58: e0:9d:3c:de:9d:3a:8f:e1:8b:d2:b2:1f:ca:55:f7: 17:27:3f:3c:12:9a:1d:4f:10:70:fd:3e:26:b5:25: 9e:0a:29:33:6f:2a:90:ad:df:ca:1c:1d:93:92:04: ad:2b:4d:c7:32:3d:04:f4:6f:51:a8:c7:79:ef:fd: 1d:4b:b4:c8:7a:71:1e:4a:d2:f4:1f:ca:7e:19:08: b4:f4:31:80:de:65:49:a1:45:0c:85:86:e5:11:30: e4:c2:2b:ed:18:49:69:fc:5d:da:dd:4d:c8:6d:f4: 66:4c:85:3e:ea:2b:43:50:25:d4:64:a3:38:88:f5: 2a:be:91:7a:62:cf:41:28:a3:f6:9a:c2:5b:3e:78: d0:8e:b1:2c:17:e0:56:a5:53:37:c8:70:2a:99:b0: 18:e2:e9:9b:69:ef:48:1c:e3:7a:c0:11:02:59:fb: 2c:48:c9:9a:02:d0:ca:90:79:5e:49:62:58:f9:6a: 2b:0e:3a:e2:5f:03:d7:53:83:86:de:9e:3e:31:42: d1:99:61:a2:63:61:8a:48:d1:7a:8c:f9:d7:e7:43: bd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:54:4D:FE:62:F4:42:BF:72:20:16:1C:21:30:A1:43:B7:D2:3A:AD X509v3 Authority Key Identifier: keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:96:af:83:85:f7:4f:02:20:be:82:64:6b:19:ca:22:01:b5: 98:3a:39:13:93:35:8f:c4:ac:ce:2a:df:b0:77:a1:99:41:78: 2e:45:ba:63:70:ea:39:dd:85:bd:d8:aa:5a:5f:d6:1f:9f:85: e2:58:4d:de:5d:72:d9:64:3a:c8:f5:57:1e:df:9a:59:eb:9a: 85:35:e3:52:2d:46:d5:d9:a5:98:d1:2f:54:96:90:50:c5:13: 4c:e5:ac:76:2c:e6:6a:61:40:b7:36:bf:8a:dd:7f:66:c1:7f: 22:38:a4:82:d5:56:50:7f:be:a3:d0:18:8d:2d:16:fa:0f:4f: 20:a0:0d:6e:b5:ee:1b:ce:98:07:de:22:19:97:37:41:2e:d0: 22:0b:be:35:a3:b4:db:8a:2d:3f:58:8b:33:f9:f1:d8:e0:c2: c2:7f:09:33:57:04:ee:61:84:a1:12:f1:95:c6:2f:7c:49:31: 96:c6:05:02:81:71:75:4e:96:60:62:2b:f0:98:df:91:cd:11: 42:d9:ca:23:25:b1:7a:a9:2b:a2:f0:d2:57:2c:b3:f1:ea:3b: cd:62:c7:6c:19:80:b2:11:65:70:26:a9:c1:5b:8d:67:60:20: 27:a3:cd:2c:a3:57:15:fa:ee:19:f6:f1:95:39:ad:1d:f6:f9: e7:a3:a2:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliEx/leVP0hjFOsq3ohw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNDJhYjE1NmQ1YWUxNTNhZDE2NTI4ZTg3ZDljODQ3OWRj MGE0YTUwHhcNMjUxMjE2MDUwMDQ3WhcNMjUxMjE3MDUwMDQ3WjAzMTEwLwYDVQQD Eyg1NTU0NGRmZTYyZjQ0MmJmNzIyMDE2MWMyMTMwYTE0M2I3ZDIzYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSVeNSyXrJ+Ja5Kp5kf9oBK3mtYH WxOzjwBGwhRFNa9nV4dRoajNSK7TiFjgnTzenTqP4YvSsh/KVfcXJz88EpodTxBw /T4mtSWeCikzbyqQrd/KHB2TkgStK03HMj0E9G9RqMd57/0dS7TIenEeStL0H8p+ GQi09DGA3mVJoUUMhYblETDkwivtGElp/F3a3U3IbfRmTIU+6itDUCXUZKM4iPUq vpF6Ys9BKKP2msJbPnjQjrEsF+BWpVM3yHAqmbAY4umbae9IHON6wBECWfssSMma AtDKkHleSWJY+WorDjriXwPXU4OG3p4+MULRmWGiY2GKSNF6jPnX50O9AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVUTf5i9EK/ciAWHCEwoUO30jqtMB8GA1UdIwQY MBaAFNNCqxVtWuFTrRZSjofZyEedwKSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUt MDgxYTYzN2Y3MDNlLzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUtMDgxYTYzN2Y3MDNl LzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZavg4X3 TwIgvoJkaxnKIgG1mDo5E5M1j8SszirfsHehmUF4LkW6Y3DqOd2FvdiqWl/WH5+F 4lhN3l1y2WQ6yPVXHt+aWeuahTXjUi1G1dmlmNEvVJaQUMUTTOWsdizmamFAtza/ it1/ZsF/IjikgtVWUH++o9AYjS0W+g9PIKANbrXuG86YB94iGZc3QS7QIgu+NaO0 24otP1iLM/nx2ODCwn8JM1cE7mGEoRLxlcYvfEkxlsYFAoFxdU6WYGIr8Jjfkc0R QtnKIyWxeqkrovDSVyyz8eo7zWLHbBmAshFlcCapwVuNZ2AgJ6PNLKNXFfruGfbx lTmtHfb556OiJg== -----END CERTIFICATE-----Generated at Tue Dec 16 11:48:06 2025 by rpki-client