This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft File: KrMqUfAYgPSEFWkbYAi482mcND0.mft (raw, json) Hash identifier: DxtZOj1Cx5v4lOAgMpNhsoZWQ+pGzfyh+oXEyz7Nn/s= Subject key identifier: CA:FD:6B:AD:D2:96:0C:E2:1C:F8:A2:5C:A5:7C:17:C2:53:DA:8F:BE Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D Certificate issuer: /CN=2ab32a51f01880f48415691b6008b8f3699c343d Certificate serial: 019B3DC81A10AD556090D5C9D58A10EB29D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 22:01:22 +0000 Manifest this update: Sat 20 Dec 2025 22:01:22 +0000 Manifest next update: Sun 21 Dec 2025 22:01:22 +0000 Files and hashes: 1: KrMqUfAYgPSEFWkbYAi482mcND0.crl (hash: O48UzA8VMVduzsU/OXpy23MfB+Umh82XAsEN80qVaWs=) 2: i9bRqGmLoNeEMEQG2gZoK39jq_M.roa (hash: QM3nqUsH3GUvguf6sXYPTlR1T5XaS6Z20/NPBnkA7vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:1a:10:ad:55:60:90:d5:c9:d5:8a:10:eb:29:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d Validity Not Before: Dec 20 22:01:22 2025 GMT Not After : Dec 21 22:01:22 2025 GMT Subject: CN=cafd6badd2960ce21cf8a25ca57c17c253da8fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:59:f8:41:09:8e:58:98:44:92:47:3f:09: 6b:6e:09:07:a6:94:5e:ce:5d:5d:02:fa:55:3a:85: 1b:8b:cd:57:93:46:db:80:52:cd:72:72:22:e5:04: b0:47:24:29:d4:f1:b1:83:d7:19:26:bd:38:32:a5: 7b:95:4e:26:70:c3:2b:d3:54:8d:a1:0d:79:ee:62: bc:a6:f9:c8:a4:d3:06:eb:62:a0:7d:54:36:e7:d0: 98:9a:79:83:a0:39:b0:1a:89:c1:6b:97:01:12:b7: 7e:32:e3:5d:30:9f:81:4a:be:6e:e4:b0:54:d2:a6: 5c:d1:57:c0:82:19:60:6d:88:98:e2:64:3b:a4:ce: 7e:cf:53:08:e4:6a:fe:b2:1c:57:20:59:b0:84:68: 55:8c:aa:95:e7:4f:ed:75:37:de:94:29:b2:4b:a6: 4e:5b:2d:c6:b1:a4:9e:9e:00:e3:48:a5:55:b5:0e: d5:42:de:cd:9c:37:e7:73:0f:45:65:07:f2:53:26: 81:3b:d1:a9:02:15:d2:fc:cc:bc:88:da:b2:7d:6f: 12:a3:b5:95:df:89:26:bb:4d:ae:69:66:b7:fa:34: 6f:f2:82:75:53:46:32:a3:82:89:62:03:01:af:26: a2:cd:61:ed:7f:01:b4:19:de:f7:ac:bd:a6:01:4f: 7f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FD:6B:AD:D2:96:0C:E2:1C:F8:A2:5C:A5:7C:17:C2:53:DA:8F:BE X509v3 Authority Key Identifier: keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ad:89:b8:47:d3:61:18:28:2c:d7:01:f9:79:ec:8b:c7:2e: 96:72:3b:aa:13:47:5d:59:cb:45:8f:35:3f:c4:77:62:76:4b: 12:65:5b:9d:94:95:bd:1f:28:9f:77:3b:72:d9:51:a3:08:07: 57:4c:63:fa:f0:a0:f3:0e:f6:8d:de:50:c1:d4:cc:9f:da:07: bf:08:30:0c:14:31:2e:c9:13:a4:13:da:f1:1a:e1:73:53:ee: 58:64:03:79:39:88:8f:ae:04:85:0d:c4:6a:db:fa:fa:59:05: c6:d3:93:b1:b1:29:57:aa:65:90:95:a6:35:0b:a4:bb:33:cf: 47:0f:eb:80:a3:68:85:9c:ce:72:84:02:11:69:49:4c:68:4a: 5f:41:45:4a:c9:48:c0:30:73:98:85:77:de:68:75:cf:ef:ab: e2:8a:d2:bc:c6:8b:52:3c:31:6d:ea:cc:57:6c:d7:ca:91:74: 92:31:5b:fe:8b:8e:08:2e:36:e4:89:6a:84:57:87:d1:ac:25: 07:7c:84:31:59:3a:b1:75:24:70:81:07:95:f5:b5:cb:e2:12: 35:fe:56:68:d3:76:0c:2e:76:1b:5b:59:20:3a:a6:f7:5b:8d: 95:bc:b6:f1:df:c4:9f:cf:3d:b0:2c:d6:1a:4d:6f:42:99:4f: 95:5a:7d:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yBoQrVVgkNXJ1YoQ6ynRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYjMyYTUxZjAxODgwZjQ4NDE1NjkxYjYwMDhiOGYzNjk5 YzM0M2QwHhcNMjUxMjIwMjIwMTIyWhcNMjUxMjIxMjIwMTIyWjAzMTEwLwYDVQQD EyhjYWZkNmJhZGQyOTYwY2UyMWNmOGEyNWNhNTdjMTdjMjUzZGE4ZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu1Z+EEJjliYRJJHPwlrbgkHppRe zl1dAvpVOoUbi81Xk0bbgFLNcnIi5QSwRyQp1PGxg9cZJr04MqV7lU4mcMMr01SN oQ157mK8pvnIpNMG62KgfVQ259CYmnmDoDmwGonBa5cBErd+MuNdMJ+BSr5u5LBU 0qZc0VfAghlgbYiY4mQ7pM5+z1MI5Gr+shxXIFmwhGhVjKqV50/tdTfelCmyS6ZO Wy3GsaSengDjSKVVtQ7VQt7NnDfncw9FZQfyUyaBO9GpAhXS/My8iNqyfW8So7WV 34kmu02uaWa3+jRv8oJ1U0Yyo4KJYgMBryaizWHtfwG0Gd73rL2mAU9/ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMr9a63SlgziHPiiXKV8F8JT2o++MB8GA1UdIwQY MBaAFCqzKlHwGID0hBVpG2AIuPNpnDQ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNWFkODMtOTcxMS00NGIwLThjZDUt ZGZkZWY2Y2FhYmRmLzEvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wNWFkODMtOTcxMS00NGIwLThjZDUtZGZkZWY2Y2FhYmRm LzEvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIK2JuEfT YRgoLNcB+Xnsi8culnI7qhNHXVnLRY81P8R3YnZLEmVbnZSVvR8on3c7ctlRowgH V0xj+vCg8w72jd5QwdTMn9oHvwgwDBQxLskTpBPa8Rrhc1PuWGQDeTmIj64EhQ3E atv6+lkFxtOTsbEpV6plkJWmNQukuzPPRw/rgKNohZzOcoQCEWlJTGhKX0FFSslI wDBzmIV33mh1z++r4orSvMaLUjwxberMV2zXypF0kjFb/ouOCC425IlqhFeH0awl B3yEMVk6sXUkcIEHlfW1y+ISNf5WaNN2DC52G1tZIDqm91uNlby28d/En889sCzW Gk1vQplPlVp9+Q== -----END CERTIFICATE-----Generated at Sun Dec 21 05:38:25 2025 by rpki-client