This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json) Hash identifier: S1+A1VY6aC3AXTIKSZ+ZVgfsE8naG0U9SXXQMgwWhmA= Subject key identifier: CD:62:47:A5:03:AE:64:AE:8F:F5:7C:60:FB:24:6B:B2:E4:D3:5D:FA Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5 Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5 Certificate serial: 019B330D05F1E9EBAC396941489D9EA1913C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 20:00:50 +0000 Manifest this update: Thu 18 Dec 2025 20:00:50 +0000 Manifest next update: Fri 19 Dec 2025 20:00:50 +0000 Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: b+zxk32/776cx/pgnVC3dPjLaw9rFGazk79XqNb/u28=) 2: YzWazfZkDmpS6lnGJouGiR4vMgw.roa (hash: g+4T1wjwDSXCQUkHT41UwModEGJm2ijdNXqnxLEPkqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:05:f1:e9:eb:ac:39:69:41:48:9d:9e:a1:91:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5 Validity Not Before: Dec 18 20:00:50 2025 GMT Not After : Dec 19 20:00:50 2025 GMT Subject: CN=cd6247a503ae64ae8ff57c60fb246bb2e4d35dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:42:0f:45:30:40:78:b7:3d:36:df:49:1a: 9d:05:32:8d:10:25:56:df:5c:63:92:cb:23:b7:c4: 40:15:25:58:b7:2a:31:22:03:ae:58:ea:77:9e:23: 96:b5:ab:ab:31:13:a0:40:a7:fa:00:22:49:94:f7: e4:5c:d2:3a:c0:54:8b:3e:fd:1a:6f:da:25:8c:ac: 88:8e:d3:0e:e0:70:fb:c9:51:7f:68:ee:4b:16:68: 5f:9f:20:b9:1d:3b:5b:e2:22:e8:a9:64:d4:e8:76: b3:f5:0c:90:98:5d:84:57:60:32:05:83:01:93:4b: 1c:c5:b5:e8:8e:de:dc:08:30:c3:2b:9b:5c:6d:15: 87:9a:f3:03:a5:0c:84:78:0f:57:8b:3a:75:a4:0c: 84:64:92:2e:34:e1:96:ce:a4:c2:23:53:b8:3a:08: 47:a3:5a:e8:06:a4:85:de:cb:19:b0:7f:7f:93:01: bf:09:97:70:76:3d:79:b2:b7:5c:95:bc:79:13:a3: 6c:d2:1d:4c:fa:57:5b:f3:11:fe:a5:89:f3:2e:b9: ec:7c:ec:40:5c:f5:64:dc:03:78:65:5a:09:e2:42: 9c:4e:e2:8b:17:20:f5:16:a6:a9:28:a3:6a:89:a3: 41:a0:65:15:24:7c:96:d2:1f:db:83:5c:cb:98:e0: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:62:47:A5:03:AE:64:AE:8F:F5:7C:60:FB:24:6B:B2:E4:D3:5D:FA X509v3 Authority Key Identifier: keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6b:69:d0:d0:50:c5:b2:f5:ea:a9:60:ae:a9:27:6a:09:3f: 65:ca:c1:23:55:7a:b6:07:96:cb:63:d4:57:aa:38:6c:37:9c: fb:96:76:7b:f4:f8:c3:c8:22:6c:92:d7:75:1e:4b:b5:91:6f: fe:e3:47:e7:30:4d:32:57:a1:3d:10:f2:5e:9b:0e:a7:7f:49: f8:fa:4b:5e:ff:c7:7f:90:93:18:5a:12:a6:4d:34:24:28:7a: f4:19:79:62:7d:7c:ec:04:3c:2f:1c:b0:4e:7f:73:69:80:5a: c6:e4:4e:2e:8f:a9:da:9e:8b:2c:10:1c:01:d4:e1:29:49:d4: 18:4a:df:04:b0:5a:ba:aa:08:99:61:69:68:5d:fe:3c:8e:71: 62:89:b2:2a:c5:f1:8f:34:e4:08:a3:e2:1e:3e:18:dc:26:7e: 6f:1a:1f:fb:9e:7d:f7:74:45:79:e4:9a:ce:e1:f8:5a:07:55: f3:7e:1e:90:66:2f:de:2b:51:79:85:18:22:44:21:03:87:ed: a7:22:41:56:c0:86:05:0d:f3:8a:fd:59:80:6c:7a:01:e2:51: a5:25:91:0b:69:e2:98:2e:2d:4d:a8:b8:e8:60:81:17:67:8e: a4:71:0d:16:68:bd:d1:f3:ae:31:c0:c8:31:1f:1d:5e:e0:33: df:d2:91:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDQXx6eusOWlBSJ2eoZE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNDJhYjE1NmQ1YWUxNTNhZDE2NTI4ZTg3ZDljODQ3OWRj MGE0YTUwHhcNMjUxMjE4MjAwMDUwWhcNMjUxMjE5MjAwMDUwWjAzMTEwLwYDVQQD EyhjZDYyNDdhNTAzYWU2NGFlOGZmNTdjNjBmYjI0NmJiMmU0ZDM1ZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXRCD0UwQHi3PTbfSRqdBTKNECVW 31xjkssjt8RAFSVYtyoxIgOuWOp3niOWtaurMROgQKf6ACJJlPfkXNI6wFSLPv0a b9oljKyIjtMO4HD7yVF/aO5LFmhfnyC5HTtb4iLoqWTU6Haz9QyQmF2EV2AyBYMB k0scxbXojt7cCDDDK5tcbRWHmvMDpQyEeA9Xizp1pAyEZJIuNOGWzqTCI1O4OghH o1roBqSF3ssZsH9/kwG/CZdwdj15srdclbx5E6Ns0h1M+ldb8xH+pYnzLrnsfOxA XPVk3AN4ZVoJ4kKcTuKLFyD1FqapKKNqiaNBoGUVJHyW0h/bg1zLmOC97wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1iR6UDrmSuj/V8YPska7Lk0136MB8GA1UdIwQY MBaAFNNCqxVtWuFTrRZSjofZyEedwKSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUt MDgxYTYzN2Y3MDNlLzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUtMDgxYTYzN2Y3MDNl LzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmtp0NBQ xbL16qlgrqknagk/ZcrBI1V6tgeWy2PUV6o4bDec+5Z2e/T4w8gibJLXdR5LtZFv /uNH5zBNMlehPRDyXpsOp39J+PpLXv/Hf5CTGFoSpk00JCh69Bl5Yn187AQ8Lxyw Tn9zaYBaxuROLo+p2p6LLBAcAdThKUnUGErfBLBauqoImWFpaF3+PI5xYomyKsXx jzTkCKPiHj4Y3CZ+bxof+55993RFeeSazuH4WgdV834ekGYv3itReYUYIkQhA4ft pyJBVsCGBQ3ziv1ZgGx6AeJRpSWRC2nimC4tTai46GCBF2eOpHENFmi90fOuMcDI MR8dXuAz39KRog== -----END CERTIFICATE-----Generated at Thu Dec 18 22:37:27 2025 by rpki-client