This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json) Hash identifier: OpG/fsKOmdcYMUr5djSL7YBSVct7D3jqi06G+5+KNXk= Subject key identifier: 15:DE:08:B2:72:01:07:B3:6A:E3:27:A0:19:14:F2:50:8B:BC:E6:7F Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17 Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17 Certificate serial: 019B4F5FFC08A9DF50E04DAA391C1E5B1965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft Manifest number: 0F5A Signing time: Wed 24 Dec 2025 08:00:49 +0000 Manifest this update: Wed 24 Dec 2025 08:00:49 +0000 Manifest next update: Thu 25 Dec 2025 08:00:49 +0000 Files and hashes: 1: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: qYiufTnhCMCemz5Zqmn/8X22WI4+xpa6sDw+kWQBJTk=) 2: tT2MkC3bDAt-AG9rSFm6itBZmH0.roa (hash: ZIroNCPsL/l7JhsPE9mGE4anIRCcdf9s2wEC0oqqzzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5f:fc:08:a9:df:50:e0:4d:aa:39:1c:1e:5b:19:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17 Validity Not Before: Dec 24 08:00:49 2025 GMT Not After : Dec 25 08:00:49 2025 GMT Subject: CN=15de08b2720107b36ae327a01914f2508bbce67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:9b:c5:7a:52:ed:06:f8:ef:0e:ae:be:f6: a7:6a:c5:c9:5d:5e:ad:06:77:44:50:9f:25:74:f3: 88:2d:89:a2:3f:91:5f:fb:73:96:38:30:1a:5e:e8: a2:75:11:3f:c6:d2:ba:fc:e4:0c:6c:75:15:13:24: 5d:16:0b:2e:54:f7:ec:08:2c:30:1d:34:3b:58:5f: 5a:89:57:36:05:a4:74:e6:42:96:47:5a:ac:9e:94: 3c:2a:35:c5:75:92:ce:1f:a5:66:68:b8:f2:e8:33: 14:ea:9c:00:ff:2c:c9:12:fb:fc:5e:f9:93:97:78: 7f:d0:08:88:46:04:ad:c1:b7:9d:63:16:7c:1e:6b: 4e:c1:3b:36:68:08:22:df:5d:85:84:de:e8:21:f4: e9:e8:58:e3:35:b3:4d:a4:44:62:a9:6f:64:68:4c: 74:d5:f1:57:84:60:e2:de:f0:cf:87:6d:b1:f5:75: 1f:00:05:31:a0:56:1c:d0:63:cc:30:5b:5a:8f:a9: e6:a3:7d:59:80:64:16:01:20:2c:96:b6:0b:ae:55: ff:12:b2:bd:b6:a0:ee:26:03:d5:92:91:48:b6:c4: 0a:98:a8:4c:5f:11:52:91:81:f8:8a:c8:a6:47:ec: b2:7c:df:78:45:88:dd:df:e9:d5:25:18:cc:ea:c1: 88:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DE:08:B2:72:01:07:B3:6A:E3:27:A0:19:14:F2:50:8B:BC:E6:7F X509v3 Authority Key Identifier: keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:62:a6:92:d5:e4:d9:0b:11:ef:79:23:fe:58:9b:49:d1:4d: af:26:a8:94:8d:3e:43:e0:fe:77:d3:b4:94:8b:66:21:af:d6: c0:38:ac:5c:5f:73:03:ad:a5:bb:80:1f:73:90:ce:bf:b5:4f: 82:92:06:38:65:93:fd:69:e5:18:a4:25:99:5a:ee:dc:97:27: b6:86:94:81:26:fb:ba:ca:27:27:0c:9f:7a:4e:93:3d:2d:93: 61:10:ce:72:a8:da:6d:9f:87:83:32:78:f7:cd:02:c9:ff:6c: f2:6d:ea:ae:3f:a5:b1:f9:d4:b8:0b:9b:76:51:ae:02:e6:15: 92:f7:8a:fe:11:79:ed:13:50:d4:60:59:c9:df:94:c2:af:f6: 64:ca:df:fc:51:3d:a5:58:90:32:94:7d:41:6b:98:b5:3b:d4: f9:04:31:83:56:32:e0:54:6c:da:f6:f1:a0:77:f0:45:43:f1: 62:1c:b5:ec:e7:5a:45:e9:66:fa:71:e2:0e:ea:a4:a9:9c:b0: b3:94:ab:91:93:76:5f:df:43:69:bc:c5:66:c6:49:a1:3c:0a: 21:ab:6e:1b:e2:0d:74:bd:c2:ab:0b:80:d7:5e:7d:e7:2f:a6: c8:b2:80:bf:16:6b:65:bd:5a:da:51:d5:2b:05:b1:63:3d:3a: b6:e3:88:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPX/wIqd9Q4E2qORweWxllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYjE0M2Q3ZGIxMTU5NTdjNWRiOWFmODk1ZjRlN2UxNWI3 YjZiMTcwHhcNMjUxMjI0MDgwMDQ5WhcNMjUxMjI1MDgwMDQ5WjAzMTEwLwYDVQQD EygxNWRlMDhiMjcyMDEwN2IzNmFlMzI3YTAxOTE0ZjI1MDhiYmNlNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDybxXpS7Qb47w6uvvanasXJXV6t BndEUJ8ldPOILYmiP5Ff+3OWODAaXuiidRE/xtK6/OQMbHUVEyRdFgsuVPfsCCww HTQ7WF9aiVc2BaR05kKWR1qsnpQ8KjXFdZLOH6VmaLjy6DMU6pwA/yzJEvv8XvmT l3h/0AiIRgStwbedYxZ8HmtOwTs2aAgi312FhN7oIfTp6FjjNbNNpERiqW9kaEx0 1fFXhGDi3vDPh22x9XUfAAUxoFYc0GPMMFtaj6nmo31ZgGQWASAslrYLrlX/ErK9 tqDuJgPVkpFItsQKmKhMXxFSkYH4isimR+yyfN94RYjd3+nVJRjM6sGI+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXeCLJyAQezauMnoBkU8lCLvOZ/MB8GA1UdIwQY MBaAFJKxQ9fbEVlXxdua+JX05+Fbe2sXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTct NmQzYTg4MTUzNzY3LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTctNmQzYTg4MTUzNzY3 LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimKmktXk 2QsR73kj/libSdFNryaolI0+Q+D+d9O0lItmIa/WwDisXF9zA62lu4Afc5DOv7VP gpIGOGWT/WnlGKQlmVru3JcntoaUgSb7usonJwyfek6TPS2TYRDOcqjabZ+HgzJ4 980Cyf9s8m3qrj+lsfnUuAubdlGuAuYVkveK/hF57RNQ1GBZyd+Uwq/2ZMrf/FE9 pViQMpR9QWuYtTvU+QQxg1Yy4FRs2vbxoHfwRUPxYhy17OdaRelm+nHiDuqkqZyw s5SrkZN2X99DabzFZsZJoTwKIatuG+INdL3CqwuA11595y+myLKAvxZrZb1a2lHV KwWxYz06tuOI2g== -----END CERTIFICATE-----Generated at Wed Dec 24 12:00:24 2025 by rpki-client