This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft File: KrMqUfAYgPSEFWkbYAi482mcND0.mft (raw, json) Hash identifier: rHw+nFkDKbKq4iolbDW2TFw0oy6VRet2yEcypNuatOM= Subject key identifier: 08:DD:2F:08:32:45:46:B3:C9:08:3C:3B:D6:02:8F:46:0B:36:8A:5C Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D Certificate issuer: /CN=2ab32a51f01880f48415691b6008b8f3699c343d Certificate serial: 019B4F29B63BB1077F7E505FBABDA050606F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 07:01:32 +0000 Manifest this update: Wed 24 Dec 2025 07:01:32 +0000 Manifest next update: Thu 25 Dec 2025 07:01:32 +0000 Files and hashes: 1: KrMqUfAYgPSEFWkbYAi482mcND0.crl (hash: oafOC+zefQOwlyy2BJS68c3KgQwGOZbztHMhuXXOE/k=) 2: i9bRqGmLoNeEMEQG2gZoK39jq_M.roa (hash: QM3nqUsH3GUvguf6sXYPTlR1T5XaS6Z20/NPBnkA7vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:b6:3b:b1:07:7f:7e:50:5f:ba:bd:a0:50:60:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d Validity Not Before: Dec 24 07:01:32 2025 GMT Not After : Dec 25 07:01:32 2025 GMT Subject: CN=08dd2f08324546b3c9083c3bd6028f460b368a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2f:dd:b3:6b:06:83:c7:ed:36:d3:66:a9:59: 30:73:40:a4:b9:72:d6:a0:c2:a3:73:6a:6e:c2:2a: 69:e9:34:c6:bd:a7:07:42:69:ee:31:ce:71:82:c5: 01:f3:12:4f:dd:4e:65:5e:0d:5d:3c:e1:12:3a:8a: 10:96:5e:e0:e5:af:fd:18:95:19:b2:70:36:10:fd: 50:e0:5d:c0:6a:61:96:e9:d8:34:68:29:ec:00:5e: ae:2e:08:70:7e:d3:e1:10:41:ff:e1:f1:c4:45:42: a5:60:17:16:d6:f8:75:26:c5:42:3e:bb:d4:0c:f4: d0:65:cf:91:cf:c5:4b:52:91:0a:a5:4d:57:17:46: 59:37:7f:29:87:4e:c3:bd:ac:69:e0:83:7c:ef:f2: ba:82:de:58:41:95:e9:b7:ae:a2:3f:73:d7:d5:fc: cc:17:0f:07:0a:c4:21:b9:a9:d9:3a:0a:6f:1b:26: 87:d4:9e:1b:f0:af:aa:94:0e:47:e6:e2:14:cb:e1: 1b:1f:e1:d1:ac:e4:0d:a7:25:b7:bf:17:cb:ef:03: 7d:57:76:30:e7:41:c4:3f:df:fc:3c:41:05:de:34: cc:44:b1:b1:47:f9:b5:54:88:6d:d3:ea:29:38:86: 74:05:97:e7:8e:b5:b7:3a:af:71:7f:5c:83:9e:61: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DD:2F:08:32:45:46:B3:C9:08:3C:3B:D6:02:8F:46:0B:36:8A:5C X509v3 Authority Key Identifier: keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d5:85:d8:80:a3:85:28:1e:7d:a2:2d:0f:60:10:c8:36:aa: ee:10:35:be:e4:d0:2c:2a:36:fa:0e:c2:1f:bf:98:81:21:81: 2e:0f:5e:e0:66:a0:0e:18:f3:8e:11:29:81:fc:ea:fc:ae:8c: b3:61:76:dc:69:cb:de:68:99:fa:8c:0b:b3:e7:4a:12:a3:05: 7a:3d:1b:09:11:2a:15:1f:97:66:ee:22:41:25:84:a7:92:27: fe:10:17:1b:f2:1c:87:16:f0:2f:55:a6:e0:72:23:82:78:bc: b1:db:e1:eb:ff:53:7b:05:03:e9:3f:22:4f:e4:ad:6b:8b:11: 5b:05:38:46:ca:7e:1d:25:9c:56:2c:9d:a6:75:7d:50:94:31: ab:d5:41:ed:dd:5e:19:36:55:0a:b7:af:34:dd:c5:f9:89:86: a3:1b:66:30:93:7b:70:4f:55:80:27:e9:a0:b0:eb:90:5d:8c: 43:87:62:d4:bb:f9:09:63:c6:43:69:76:9d:53:0a:8a:b6:5f: f2:b8:6f:e1:c7:b5:70:82:e5:2a:00:a0:29:22:d4:c9:ad:e5: 4b:0e:f6:84:36:15:87:03:97:7e:3f:e1:20:22:c9:1c:7d:c9: 75:7d:14:ce:bf:89:46:80:90:cb:81:7d:4a:84:07:7e:e2:f7: 1e:44:a2:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKbY7sQd/flBfur2gUGBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYjMyYTUxZjAxODgwZjQ4NDE1NjkxYjYwMDhiOGYzNjk5 YzM0M2QwHhcNMjUxMjI0MDcwMTMyWhcNMjUxMjI1MDcwMTMyWjAzMTEwLwYDVQQD EygwOGRkMmYwODMyNDU0NmIzYzkwODNjM2JkNjAyOGY0NjBiMzY4YTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS/ds2sGg8ftNtNmqVkwc0CkuXLW oMKjc2puwipp6TTGvacHQmnuMc5xgsUB8xJP3U5lXg1dPOESOooQll7g5a/9GJUZ snA2EP1Q4F3AamGW6dg0aCnsAF6uLghwftPhEEH/4fHERUKlYBcW1vh1JsVCPrvU DPTQZc+Rz8VLUpEKpU1XF0ZZN38ph07Dvaxp4IN87/K6gt5YQZXpt66iP3PX1fzM Fw8HCsQhuanZOgpvGyaH1J4b8K+qlA5H5uIUy+EbH+HRrOQNpyW3vxfL7wN9V3Yw 50HEP9/8PEEF3jTMRLGxR/m1VIht0+opOIZ0BZfnjrW3Oq9xf1yDnmGQcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjdLwgyRUazyQg8O9YCj0YLNopcMB8GA1UdIwQY MBaAFCqzKlHwGID0hBVpG2AIuPNpnDQ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNWFkODMtOTcxMS00NGIwLThjZDUt ZGZkZWY2Y2FhYmRmLzEvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wNWFkODMtOTcxMS00NGIwLThjZDUtZGZkZWY2Y2FhYmRm LzEvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdWF2ICj hSgefaItD2AQyDaq7hA1vuTQLCo2+g7CH7+YgSGBLg9e4GagDhjzjhEpgfzq/K6M s2F23GnL3miZ+owLs+dKEqMFej0bCREqFR+XZu4iQSWEp5In/hAXG/IchxbwL1Wm 4HIjgni8sdvh6/9TewUD6T8iT+Sta4sRWwU4Rsp+HSWcViydpnV9UJQxq9VB7d1e GTZVCrevNN3F+YmGoxtmMJN7cE9VgCfpoLDrkF2MQ4di1Lv5CWPGQ2l2nVMKirZf 8rhv4ce1cILlKgCgKSLUya3lSw72hDYVhwOXfj/hICLJHH3JdX0Uzr+JRoCQy4F9 SoQHfuL3HkSiTw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:02 2025 by rpki-client