This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json) Hash identifier: 4H9jNz4MjWlsLJgU3uWaN7V9XJhU57Cot4goOAdS22U= Subject key identifier: 21:2B:93:A8:8B:48:59:63:01:0B:90:00:9E:1E:4B:93:7D:77:17:48 Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12 Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12 Certificate serial: 019B4A03A5FB80EDEE33E36EB1982C754C5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft Manifest number: 16B5 Signing time: Tue 23 Dec 2025 07:01:51 +0000 Manifest this update: Tue 23 Dec 2025 07:01:51 +0000 Manifest next update: Wed 24 Dec 2025 07:01:51 +0000 Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=) 2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: uEpBgxWHwk6FDT2bDA2TYHk16Al8gObVGOJdbcCBZjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:a5:fb:80:ed:ee:33:e3:6e:b1:98:2c:75:4c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12 Validity Not Before: Dec 23 07:01:51 2025 GMT Not After : Dec 24 07:01:51 2025 GMT Subject: CN=212b93a88b485963010b90009e1e4b937d771748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:55:8c:f7:8f:21:37:32:b5:f3:98:6a:b6:a2: bb:60:3f:3d:bd:02:43:26:66:3e:09:83:7e:5b:04: 3d:e0:05:52:79:f2:d5:93:7f:0b:69:de:84:ba:59: da:d4:93:a2:52:8e:84:20:da:e9:e8:a7:a8:f3:9a: 0f:02:96:a4:83:18:49:5f:46:88:17:ff:cd:95:bd: 95:c1:e3:00:33:03:2a:2b:f3:bf:85:70:07:83:e1: 93:8d:91:84:7c:e7:14:9d:c3:47:27:20:dc:e9:17: f6:89:b3:7c:2b:eb:f4:db:27:73:c5:a4:7c:54:c1: 24:3f:ec:5d:1f:80:0d:54:ce:8c:5e:9b:bc:52:1e: 83:b3:6b:1c:d8:fa:2e:ec:bd:30:b1:06:cc:4e:7a: 14:aa:a2:54:06:c3:41:f2:d5:56:dc:ce:c9:29:ce: 77:94:84:7b:41:e8:c3:87:ee:c1:86:ef:09:3b:97: 61:df:25:eb:a0:43:0c:dd:73:9f:92:a9:23:6e:4b: ad:b6:e6:37:73:f2:ec:d8:95:e7:12:c9:b0:91:c8: cd:95:ae:9e:71:4b:f8:22:23:db:15:b9:9d:39:fc: cf:41:64:d8:aa:5f:90:59:35:6c:b0:a9:85:48:34: 70:c4:12:ca:4b:1a:68:4e:c2:d0:dd:54:ed:4d:ec: 4e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2B:93:A8:8B:48:59:63:01:0B:90:00:9E:1E:4B:93:7D:77:17:48 X509v3 Authority Key Identifier: keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:74:62:9b:ba:8b:08:e4:11:45:b5:db:52:0d:24:1d:7a:c1: ae:37:1b:45:dc:5a:ea:5c:94:10:57:96:36:5c:46:6e:f4:fb: d9:77:c5:fd:48:f8:c6:4f:c0:24:e7:2e:12:0d:fd:7f:d8:4b: 64:1c:96:b4:cc:fa:33:1d:2a:7c:ab:d3:e0:04:5e:1c:be:0c: da:de:0d:42:8c:8e:2e:0a:f3:d3:c8:e2:b2:c1:df:cd:f9:fd: c4:1e:76:fc:22:95:57:c2:67:25:ce:30:16:1a:11:f2:9a:2b: e6:30:a5:25:53:96:47:b9:a5:2e:14:e4:b1:48:42:0c:4a:fe: b8:3b:de:a8:9a:e5:5a:4e:77:18:95:89:b4:b8:38:5a:a2:1f: c5:aa:aa:af:f8:26:f6:64:e4:dc:c9:93:1e:bd:00:66:b2:af: 61:52:f1:f2:17:53:3a:d6:1d:f7:34:3d:95:36:66:b0:94:ce: 3e:e4:f5:d0:56:fe:35:93:f9:43:72:62:db:7d:3d:5e:76:16: e9:c6:aa:a1:d3:39:7f:a1:53:f6:a7:68:e6:45:87:14:71:35: 5e:16:d3:19:61:ce:66:4d:8d:38:02:8d:bc:97:2e:be:9a:cf: ad:b6:19:a1:a1:4a:38:86:a0:41:26:d9:d1:fa:28:bb:53:24: ca:91:26:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA6X7gO3uM+NusZgsdUxeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYjVhYzg4ZjJjZGIxNDkzNDgzMGMxYWMwOTZhNWVmNzMw OThmMTIwHhcNMjUxMjIzMDcwMTUxWhcNMjUxMjI0MDcwMTUxWjAzMTEwLwYDVQQD EygyMTJiOTNhODhiNDg1OTYzMDEwYjkwMDA5ZTFlNGI5MzdkNzcxNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFWM948hNzK185hqtqK7YD89vQJD JmY+CYN+WwQ94AVSefLVk38Lad6Eulna1JOiUo6EINrp6Keo85oPApakgxhJX0aI F//Nlb2VweMAMwMqK/O/hXAHg+GTjZGEfOcUncNHJyDc6Rf2ibN8K+v02ydzxaR8 VMEkP+xdH4ANVM6MXpu8Uh6Ds2sc2Pou7L0wsQbMTnoUqqJUBsNB8tVW3M7JKc53 lIR7QejDh+7Bhu8JO5dh3yXroEMM3XOfkqkjbkuttuY3c/Ls2JXnEsmwkcjNla6e cUv4IiPbFbmdOfzPQWTYql+QWTVssKmFSDRwxBLKSxpoTsLQ3VTtTexOKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCErk6iLSFljAQuQAJ4eS5N9dxdIMB8GA1UdIwQY MBaAFJK1rIjyzbFJNIMMGsCWpe9zCY8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjct MzZjNDZmOTBkOWE1LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjctMzZjNDZmOTBkOWE1 LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXRim7qL COQRRbXbUg0kHXrBrjcbRdxa6lyUEFeWNlxGbvT72XfF/Uj4xk/AJOcuEg39f9hL ZByWtMz6Mx0qfKvT4AReHL4M2t4NQoyOLgrz08jissHfzfn9xB52/CKVV8JnJc4w FhoR8por5jClJVOWR7mlLhTksUhCDEr+uDveqJrlWk53GJWJtLg4WqIfxaqqr/gm 9mTk3MmTHr0AZrKvYVLx8hdTOtYd9zQ9lTZmsJTOPuT10Fb+NZP5Q3Ji2309XnYW 6caqodM5f6FT9qdo5kWHFHE1XhbTGWHOZk2NOAKNvJcuvprPrbYZoaFKOIagQSbZ 0foou1MkypEmCw== -----END CERTIFICATE-----Generated at Tue Dec 23 12:31:40 2025 by rpki-client