This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json) Hash identifier: u3mBUPOTAJLAfWTQob504WKnDXZNn3UF4IQNlmnhao4= Subject key identifier: 62:11:E6:0D:8A:72:E8:86:74:D4:2A:60:02:2F:A9:D2:DE:FE:96:A2 Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7 Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7 Certificate serial: 019B3A8F88B3A0D11E2420C56E6DF2677F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft Manifest number: 0E1C Signing time: Sat 20 Dec 2025 07:00:43 +0000 Manifest this update: Sat 20 Dec 2025 07:00:43 +0000 Manifest next update: Sun 21 Dec 2025 07:00:43 +0000 Files and hashes: 1: H_XRmIddIdPBZC4McGFtZFb7xLI.roa (hash: URusFpEY9p6Rr7dRogLTLrCEXbfHuzjHeSeeheoUdt4=) 2: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: /vV2N803ex6hxIe1affxjBChUejyWjyyZviq3HIaiiU=) 3: xh-we9d8ckMU7F7FFzCQ7FMsb3I.roa (hash: EaElHQr8TuQZrISDJ1FWoKtH8vNTIdcwsRa2JKICJyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:88:b3:a0:d1:1e:24:20:c5:6e:6d:f2:67:7f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7 Validity Not Before: Dec 20 07:00:43 2025 GMT Not After : Dec 21 07:00:43 2025 GMT Subject: CN=6211e60d8a72e88674d42a60022fa9d2defe96a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:34:20:fa:b9:42:ec:2e:ae:a7:83:c6:6a: 20:34:e6:e6:b4:a5:72:fc:2b:1d:2f:bc:3d:33:97: d9:cd:6a:af:b4:96:53:01:ff:00:6b:d0:75:a6:3c: 98:cf:09:3b:67:90:34:e7:a0:1f:83:7f:bb:c5:bd: d7:10:f9:7f:96:a5:5a:1d:5a:7d:91:96:30:2f:bc: e2:0b:a8:3c:9f:f8:99:62:3c:ee:22:5f:a1:6a:ad: 19:2d:ba:1f:bd:15:5a:66:97:b0:6a:05:6e:ef:78: 93:67:f6:95:6e:40:c0:ea:8a:70:10:73:ca:5f:a9: 90:50:15:8d:26:68:cd:c6:f6:95:f0:86:e8:49:2d: 50:fa:0b:d1:12:2d:cf:8f:b0:26:2c:a9:8e:6e:77: 47:8b:0a:52:46:99:a2:48:de:df:87:a2:79:76:9a: b1:f9:4d:08:fb:a2:68:f8:6e:bf:e4:2f:07:51:d5: e7:ff:23:42:a0:de:45:75:28:13:c5:54:91:9d:38: cf:79:13:20:09:66:21:f3:81:cd:16:a1:6c:52:ea: 7c:79:ac:1f:51:ff:7e:17:3b:f9:c5:e4:a1:89:b7: 24:32:22:32:94:3f:3e:cf:b7:b7:10:62:dd:65:5f: ed:e3:9c:79:26:2d:b1:fc:62:8b:58:ce:7c:1d:bf: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:11:E6:0D:8A:72:E8:86:74:D4:2A:60:02:2F:A9:D2:DE:FE:96:A2 X509v3 Authority Key Identifier: keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4a:22:d8:dc:cd:32:54:8b:a9:47:e0:a7:50:6f:38:04:40: 5d:50:a0:86:64:97:a4:a6:d8:f5:72:2c:cc:6c:ed:bb:e3:b7: 9e:43:9b:18:69:27:64:f7:10:60:ef:36:08:60:a6:f2:7d:41: c2:46:59:74:dc:b2:61:a3:f9:d8:40:a2:4e:1e:11:0d:a0:ce: 39:36:9e:a0:2e:48:be:73:f8:71:0a:50:e9:fc:93:f7:4d:d1: ee:2a:eb:58:0b:81:28:a4:55:71:87:e9:fd:ae:b6:fb:36:cc: d6:b9:90:2d:e5:80:a5:de:91:d6:59:81:8a:57:6e:5f:3b:52: 19:32:77:42:a0:00:9b:6f:18:e8:ae:be:7b:96:5d:d7:41:d9: f0:95:e4:5e:56:5b:d1:21:86:46:d7:ef:11:c0:6b:b6:9a:29: 7e:1d:e2:17:23:2b:23:8a:cd:88:d3:2c:20:5b:90:a9:c4:44: e9:bf:f9:45:9d:6e:2e:3b:81:f9:6c:19:95:f4:85:d7:6c:c4: e6:31:04:42:0b:d7:f3:c5:2a:c3:16:9a:ce:d0:53:4b:d3:c9: 5c:9f:5b:41:7f:56:37:0a:72:93:75:a0:e5:56:b9:59:93:ce: 1b:63:0e:fe:5c:ed:83:91:1b:8b:4b:56:ea:65:46:70:62:89: 7f:87:7f:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j4izoNEeJCDFbm3yZ3+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYmNjNWM2NjRhNGE4MjMwNTg5MmE4YzQzM2U5NGZmZTMy ZGFkYjcwHhcNMjUxMjIwMDcwMDQzWhcNMjUxMjIxMDcwMDQzWjAzMTEwLwYDVQQD Eyg2MjExZTYwZDhhNzJlODg2NzRkNDJhNjAwMjJmYTlkMmRlZmU5NmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEk0IPq5QuwurqeDxmogNObmtKVy /CsdL7w9M5fZzWqvtJZTAf8Aa9B1pjyYzwk7Z5A056Afg3+7xb3XEPl/lqVaHVp9 kZYwL7ziC6g8n/iZYjzuIl+haq0ZLbofvRVaZpewagVu73iTZ/aVbkDA6opwEHPK X6mQUBWNJmjNxvaV8IboSS1Q+gvREi3Pj7AmLKmObndHiwpSRpmiSN7fh6J5dpqx +U0I+6Jo+G6/5C8HUdXn/yNCoN5FdSgTxVSRnTjPeRMgCWYh84HNFqFsUup8eawf Uf9+Fzv5xeShibckMiIylD8+z7e3EGLdZV/t45x5Ji2x/GKLWM58Hb8BqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIR5g2KcuiGdNQqYAIvqdLe/paiMB8GA1UdIwQY MBaAFCq8xcZkpKgjBYkqjEM+lP/jLa23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAt NjVmYjEwYTA2ZTg5LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAtNjVmYjEwYTA2ZTg5 LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkoi2NzN MlSLqUfgp1BvOARAXVCghmSXpKbY9XIszGztu+O3nkObGGknZPcQYO82CGCm8n1B wkZZdNyyYaP52ECiTh4RDaDOOTaeoC5IvnP4cQpQ6fyT903R7irrWAuBKKRVcYfp /a62+zbM1rmQLeWApd6R1lmBilduXztSGTJ3QqAAm28Y6K6+e5Zd10HZ8JXkXlZb 0SGGRtfvEcBrtpopfh3iFyMrI4rNiNMsIFuQqcRE6b/5RZ1uLjuB+WwZlfSF12zE 5jEEQgvX88UqwxaaztBTS9PJXJ9bQX9WNwpyk3Wg5Va5WZPOG2MO/lztg5Ebi0tW 6mVGcGKJf4d/Fw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:25:33 2025 by rpki-client