This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json) Hash identifier: 5jj9k3zSFXaM97MFgG/L3/3qZkkO5Xk5DES3Wa/ZQnU= Subject key identifier: D5:E9:0D:BD:00:96:4F:82:D3:95:A5:79:C1:77:9D:67:DE:81:68:38 Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77 Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677 Certificate serial: 019B4BF312F0593EDEBC94AD8EEF8359DE68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft Manifest number: 121B Signing time: Tue 23 Dec 2025 16:02:59 +0000 Manifest this update: Tue 23 Dec 2025 16:02:59 +0000 Manifest next update: Wed 24 Dec 2025 16:02:59 +0000 Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=) 2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: 5wL/hRPZ7OrnMZelwzWuUSd2XMIJorvFkdaazUeq/z4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f3:12:f0:59:3e:de:bc:94:ad:8e:ef:83:59:de:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677 Validity Not Before: Dec 23 16:02:59 2025 GMT Not After : Dec 24 16:02:59 2025 GMT Subject: CN=d5e90dbd00964f82d395a579c1779d67de816838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:41:46:11:df:59:66:98:5e:e8:6b:98:aa: 86:7e:d1:1a:f9:be:d0:ec:18:b8:ef:74:ae:68:e1: b0:a8:fe:ed:28:e6:1b:71:69:17:6b:44:d2:83:65: 00:37:68:b4:5b:03:11:8b:b4:48:48:35:50:5b:d4: eb:9f:9f:1a:b9:11:5f:56:36:5d:5c:63:16:52:9c: a7:dc:33:5d:91:56:78:77:2d:73:a3:ff:59:52:20: 19:24:c4:15:0a:6b:4b:2b:ed:6b:28:28:bb:63:b1: 42:16:16:b4:ea:f0:28:d2:cf:eb:53:1e:2d:f6:8c: 95:ab:fc:15:bf:8d:9f:0e:d1:2a:c4:6d:09:d8:98: 5f:9b:36:10:2c:d9:29:1a:e3:3b:2d:b5:11:e7:75: aa:61:3f:05:4b:23:ec:12:30:a4:5e:41:35:40:14: 22:71:15:1f:05:6f:f1:be:a8:15:dd:d7:cc:32:7f: 82:e7:cf:08:76:21:59:0e:e1:6d:18:2e:a1:91:e1: 63:05:14:e8:50:8a:e9:3a:27:be:60:35:d5:c0:0f: 02:81:d9:e9:9c:d2:37:76:22:f7:c5:33:cd:13:33: 59:8c:ab:e2:f9:b6:5f:1c:40:e6:1b:6d:65:92:66: 06:67:5e:d6:b9:f0:14:7d:cb:02:bb:5a:22:33:28: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E9:0D:BD:00:96:4F:82:D3:95:A5:79:C1:77:9D:67:DE:81:68:38 X509v3 Authority Key Identifier: keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:2a:b4:bd:ea:76:45:a3:96:f6:a5:c5:a2:ff:d7:8a:39:2e: 14:47:00:5b:b2:76:df:01:e4:58:83:eb:9a:d6:cb:ba:3e:a8: be:b8:71:61:8a:56:83:0c:1b:7d:79:81:75:ed:a1:1f:14:74: c1:d1:1e:2d:c8:60:ae:79:c7:f5:2e:ac:73:cf:1d:bc:f7:dc: 58:a4:ec:d2:51:fc:a7:12:10:24:9b:38:18:3a:b6:9c:9d:73: d8:0d:d5:97:69:06:2e:0c:b0:40:e9:1c:9e:89:5f:66:e2:5a: 1f:fc:8b:05:6f:3d:ae:45:44:94:65:df:64:e1:e1:81:02:8e: bc:c2:0f:cd:92:62:c7:d9:80:4a:ef:9d:a7:00:7d:fb:1c:e0: 98:39:69:99:29:53:11:ce:0d:1a:8f:51:63:e8:a7:71:40:cf: 03:b4:1c:4b:4e:5e:57:c5:8f:56:97:7c:d1:6a:5f:38:a0:b3: 88:3d:ee:8d:4e:b2:5d:3f:1c:8d:1a:87:b9:b0:95:49:2d:48: 25:70:46:97:6d:26:86:fe:50:d1:69:ec:b4:55:1e:ec:c6:1a: 91:63:aa:9d:cc:ae:37:78:96:6f:27:78:6f:27:35:9d:14:e7: 32:ec:ec:80:71:60:dd:ae:5e:a4:3f:a8:58:3b:38:62:e7:e6: 53:d9:81:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8xLwWT7evJStju+DWd5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTk0NjE4NDQ1NDk4MjQ1MDBiN2NkMWM0NTFkODI0YmE2 ZTU2NzcwHhcNMjUxMjIzMTYwMjU5WhcNMjUxMjI0MTYwMjU5WjAzMTEwLwYDVQQD EyhkNWU5MGRiZDAwOTY0ZjgyZDM5NWE1NzljMTc3OWQ2N2RlODE2ODM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiRBRhHfWWaYXuhrmKqGftEa+b7Q 7Bi473SuaOGwqP7tKOYbcWkXa0TSg2UAN2i0WwMRi7RISDVQW9Trn58auRFfVjZd XGMWUpyn3DNdkVZ4dy1zo/9ZUiAZJMQVCmtLK+1rKCi7Y7FCFha06vAo0s/rUx4t 9oyVq/wVv42fDtEqxG0J2JhfmzYQLNkpGuM7LbUR53WqYT8FSyPsEjCkXkE1QBQi cRUfBW/xvqgV3dfMMn+C588IdiFZDuFtGC6hkeFjBRToUIrpOie+YDXVwA8Cgdnp nNI3diL3xTPNEzNZjKvi+bZfHEDmG21lkmYGZ17WufAUfcsCu1oiMyj1sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXpDb0Alk+C05WlecF3nWfegWg4MB8GA1UdIwQY MBaAFCkZRhhEVJgkUAt80cRR2CS6blZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYt YjZlYTgyZjE5MjIwLzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYtYjZlYTgyZjE5MjIw LzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryq0vep2 RaOW9qXFov/XijkuFEcAW7J23wHkWIPrmtbLuj6ovrhxYYpWgwwbfXmBde2hHxR0 wdEeLchgrnnH9S6sc88dvPfcWKTs0lH8pxIQJJs4GDq2nJ1z2A3Vl2kGLgywQOkc nolfZuJaH/yLBW89rkVElGXfZOHhgQKOvMIPzZJix9mASu+dpwB9+xzgmDlpmSlT Ec4NGo9RY+incUDPA7QcS05eV8WPVpd80WpfOKCziD3ujU6yXT8cjRqHubCVSS1I JXBGl20mhv5Q0WnstFUe7MYakWOqncyuN3iWbyd4byc1nRTnMuzsgHFg3a5epD+o WDs4YufmU9mBPQ== -----END CERTIFICATE-----Generated at Tue Dec 23 22:16:49 2025 by rpki-client