This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json) Hash identifier: 8mObOoHQz+jICn/YNEJ6USgCQnbL0jJw/5ZOC/G0GFs= Subject key identifier: 5B:EB:9E:58:D4:ED:A0:EF:F0:68:2F:32:5A:7D:99:52:BB:15:80:A0 Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b Certificate serial: 019B3DC793802977D7177D7A9102D1EC1604 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft Manifest number: 0930 Signing time: Sat 20 Dec 2025 22:00:48 +0000 Manifest this update: Sat 20 Dec 2025 22:00:48 +0000 Manifest next update: Sun 21 Dec 2025 22:00:48 +0000 Files and hashes: 1: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: ngmGGt3hbMKxitHi7NQNYa6W9EXZEcr79Rfl1c45rrg=) 2: x6k0RFp7Tx1S2sYvTKRUnwMB54o.roa (hash: Kj0Dd36Z9ZII60RmdvUVufyE+PZ0m6JPvwn/WhUbw7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:93:80:29:77:d7:17:7d:7a:91:02:d1:ec:16:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b Validity Not Before: Dec 20 22:00:48 2025 GMT Not After : Dec 21 22:00:48 2025 GMT Subject: CN=5beb9e58d4eda0eff0682f325a7d9952bb1580a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:03:62:6e:5d:12:42:00:59:89:f4:bb:61: a9:aa:30:05:17:3c:13:c1:ec:5c:06:06:2b:ca:53: f9:fb:47:ef:57:26:cd:97:0d:7c:9b:6c:26:54:79: 31:51:f5:85:d4:ea:25:db:dd:37:3e:6a:81:5f:ca: f6:8e:d8:ca:58:4a:d0:38:2e:b8:10:90:d9:9d:bf: 82:c4:25:45:7e:22:20:a1:c0:b3:06:3d:fa:97:c0: 1d:29:05:a8:23:7d:12:29:da:a3:d0:21:50:d1:89: fd:26:78:4c:02:db:cf:20:2f:69:cf:05:12:4a:5a: bf:cd:da:e7:93:74:0c:3a:83:64:ed:ba:6e:bd:73: 2f:e5:a0:6b:33:21:1b:f2:22:fc:68:e8:3e:d7:7a: 7d:36:8a:51:87:0c:6d:9e:9f:1e:92:7a:6b:47:c3: 84:2c:07:92:60:62:da:51:f3:6e:b4:c0:b5:8e:35: 98:f5:2f:cb:af:72:75:f0:56:62:0c:d0:be:77:2a: 2d:bc:54:33:89:bc:2c:c1:48:9e:c2:d0:3f:a5:3b: f8:49:06:18:a9:f6:f0:f6:4b:bd:16:25:1c:c4:ca: b6:1f:e0:97:a5:e3:5a:eb:46:89:4b:6f:05:8f:c4: bc:65:8e:cb:4b:c2:04:02:74:e0:08:9f:d6:28:96: c5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EB:9E:58:D4:ED:A0:EF:F0:68:2F:32:5A:7D:99:52:BB:15:80:A0 X509v3 Authority Key Identifier: keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:14:6f:d8:89:51:63:e9:d6:1c:08:5e:ef:e6:98:49:39:ae: 97:a2:67:5d:ed:9c:30:f1:78:36:e8:19:c0:79:9a:45:65:91: cd:28:ed:ac:9b:c7:e3:3a:77:2e:f3:a0:7e:1e:70:13:ab:be: db:20:3d:d7:b9:72:99:41:67:49:20:6f:e5:69:22:73:6c:01: 6f:99:44:b4:ea:41:3f:fa:80:57:9d:c4:00:a6:12:11:c1:ac: b5:19:7b:54:fe:c0:d3:a9:0c:77:02:1b:e7:6a:8b:1b:bc:28: a6:91:f4:85:3d:48:e2:1a:a9:6b:f0:9f:c8:a9:5c:0f:c9:7a: 73:96:6b:14:be:50:20:d6:ed:7d:2f:08:0d:f3:c9:ae:bc:33: ba:ae:f6:a4:c1:3b:0c:c7:04:4f:65:42:4a:83:b7:3b:c0:5f: 1b:1b:07:ce:13:62:88:42:d6:f5:83:f9:63:59:74:3d:4a:ae: 70:e8:3c:e7:41:f1:98:36:08:a7:a8:ea:fd:c7:be:3d:78:9f: b5:22:3b:2a:eb:b4:c2:5a:bb:6a:6c:a5:4c:3e:f3:0c:67:6d: 68:00:d0:ca:a2:ac:81:35:d3:cc:eb:d9:9d:b3:8d:45:8e:7e: fa:8d:b8:c0:2f:c3:22:09:c9:a7:22:48:12:dc:41:84:9c:39: b0:99:e9:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x5OAKXfXF316kQLR7BYEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYWFlNTE0YzVmOTk0MDM5MTQzNTYxNGQ3OTQwNGJlZTEy MDliM2IwHhcNMjUxMjIwMjIwMDQ4WhcNMjUxMjIxMjIwMDQ4WjAzMTEwLwYDVQQD Eyg1YmViOWU1OGQ0ZWRhMGVmZjA2ODJmMzI1YTdkOTk1MmJiMTU4MGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ADYm5dEkIAWYn0u2GpqjAFFzwT wexcBgYrylP5+0fvVybNlw18m2wmVHkxUfWF1Ool2903PmqBX8r2jtjKWErQOC64 EJDZnb+CxCVFfiIgocCzBj36l8AdKQWoI30SKdqj0CFQ0Yn9JnhMAtvPIC9pzwUS Slq/zdrnk3QMOoNk7bpuvXMv5aBrMyEb8iL8aOg+13p9NopRhwxtnp8eknprR8OE LAeSYGLaUfNutMC1jjWY9S/Lr3J18FZiDNC+dyotvFQzibwswUiewtA/pTv4SQYY qfbw9ku9FiUcxMq2H+CXpeNa60aJS28Fj8S8ZY7LS8IEAnTgCJ/WKJbF3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvrnljU7aDv8GgvMlp9mVK7FYCgMB8GA1UdIwQY MBaAFPyq5RTF+ZQDkUNWFNeUBL7hIJs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEt NjdhOThlMjU2Y2M3LzEvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEtNjdhOThlMjU2Y2M3 LzEvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRRv2IlR Y+nWHAhe7+aYSTmul6JnXe2cMPF4NugZwHmaRWWRzSjtrJvH4zp3LvOgfh5wE6u+ 2yA917lymUFnSSBv5Wkic2wBb5lEtOpBP/qAV53EAKYSEcGstRl7VP7A06kMdwIb 52qLG7woppH0hT1I4hqpa/CfyKlcD8l6c5ZrFL5QINbtfS8IDfPJrrwzuq72pME7 DMcET2VCSoO3O8BfGxsHzhNiiELW9YP5Y1l0PUqucOg850HxmDYIp6jq/ce+PXif tSI7Kuu0wlq7amylTD7zDGdtaADQyqKsgTXTzOvZnbONRY5++o24wC/DIgnJpyJI EtxBhJw5sJnp/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 03:53:02 2025 by rpki-client