This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json) Hash identifier: xf0nDKIiRFU/gckFBn7T6mYkl3J9k8FPGN3XF6468Iw= Subject key identifier: 64:44:8A:BF:ED:24:FA:7F:89:2D:14:61:01:CA:6C:2D:DC:8D:08:17 Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f Certificate serial: 019B3CECB3A58C789B12808C08C067DBCBB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 18:01:43 +0000 Manifest this update: Sat 20 Dec 2025 18:01:43 +0000 Manifest next update: Sun 21 Dec 2025 18:01:43 +0000 Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=) 2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: NDIR9f0c7X2Idu6taWXovaePQ2ZUMp6ST2x+T3rUmmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:b3:a5:8c:78:9b:12:80:8c:08:c0:67:db:cb:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f Validity Not Before: Dec 20 18:01:43 2025 GMT Not After : Dec 21 18:01:43 2025 GMT Subject: CN=64448abfed24fa7f892d146101ca6c2ddc8d0817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d0:f2:f8:cd:0b:2c:b6:66:03:43:94:5e:f0: ce:e5:d1:2a:5a:1c:6f:46:7c:da:b1:15:7a:4b:b9: c5:5b:9b:f4:aa:26:1f:61:a5:e9:32:8a:c3:dd:7e: 17:22:2c:bc:7d:5e:f6:c4:74:15:70:cc:dc:5a:78: 48:f1:1f:95:68:d0:0d:48:13:02:34:bc:e2:95:2f: 0a:57:89:a1:4f:a8:29:7c:fa:4e:e8:3f:55:58:0f: e2:15:59:74:86:ef:0f:fa:62:4b:bc:66:9f:d9:ca: ad:f2:fb:53:5e:17:59:69:ff:fe:d6:26:7b:e6:5f: 75:ae:f9:b9:ad:62:60:42:06:bd:d2:00:b2:06:45: 6c:ca:ad:30:64:26:2b:bc:76:8e:4a:4c:0a:d4:b0: c3:0c:78:10:27:51:92:83:d4:aa:b3:e3:c8:40:9c: af:71:b1:d8:c9:b2:2e:6a:78:83:e6:0a:39:ec:84: 8e:78:30:6d:29:b1:86:b2:eb:20:33:eb:37:d5:5b: f8:f4:d7:80:72:e2:69:91:0c:2f:f1:2e:80:3d:ee: 03:cd:a7:1b:85:bc:1e:ef:3f:ca:d1:d7:52:8b:ff: 5d:92:c1:23:eb:52:99:e4:4e:5c:ab:af:d8:58:91: 42:c3:05:47:32:60:47:ed:53:8e:7f:2f:9e:67:c7: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:44:8A:BF:ED:24:FA:7F:89:2D:14:61:01:CA:6C:2D:DC:8D:08:17 X509v3 Authority Key Identifier: keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:23:43:24:5b:4b:de:b5:c7:90:e2:48:d9:cc:2d:40:f9:a7: 49:fe:b1:73:8b:9c:d2:c5:a6:c7:d6:ea:28:cc:d2:72:d0:79: e6:c4:1c:fd:b9:4c:6b:a1:24:24:a9:6d:ab:da:40:4d:c8:d3: 80:b3:6b:44:e8:8b:c4:6e:a8:12:f8:ab:63:00:96:aa:84:b4: 5e:32:25:46:87:72:b8:a9:e4:7c:6a:61:9c:ad:f0:63:4e:4c: a1:9c:b9:38:c1:e7:47:c9:2f:c6:fb:32:89:1b:e8:cb:2a:74: 0e:4b:4f:43:62:e7:d0:16:74:fd:48:fd:1e:e6:3a:5a:e7:58: e2:85:d0:15:e6:c9:d9:2f:93:82:4c:8c:db:6e:a2:84:99:c1: 15:b3:69:b4:de:9d:07:a5:43:5b:ec:40:09:3d:8c:fe:69:64: 12:68:cb:36:72:05:b7:6a:d4:2f:2b:06:2e:3b:f7:99:ff:98: 01:71:28:d8:5a:76:0b:d1:1f:9d:07:79:38:94:7f:16:8f:74: 1d:df:2d:be:b1:71:dc:57:58:98:3c:c6:3b:7a:70:8a:d2:cc: 01:53:3e:49:3d:c1:b8:cd:80:23:dd:d4:a7:34:3d:4f:8c:18: f4:e6:f8:df:4c:9e:bd:15:15:f7:07:b1:1c:cf:1d:23:4d:6d: 83:3e:97:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87LOljHibEoCMCMBn28u3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTg3ZjgxMTU5N2RkMDM1MTNiZTQyZjQzMTU1YmMxNWEz YTBiM2YwHhcNMjUxMjIwMTgwMTQzWhcNMjUxMjIxMTgwMTQzWjAzMTEwLwYDVQQD Eyg2NDQ0OGFiZmVkMjRmYTdmODkyZDE0NjEwMWNhNmMyZGRjOGQwODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9Dy+M0LLLZmA0OUXvDO5dEqWhxv RnzasRV6S7nFW5v0qiYfYaXpMorD3X4XIiy8fV72xHQVcMzcWnhI8R+VaNANSBMC NLzilS8KV4mhT6gpfPpO6D9VWA/iFVl0hu8P+mJLvGaf2cqt8vtTXhdZaf/+1iZ7 5l91rvm5rWJgQga90gCyBkVsyq0wZCYrvHaOSkwK1LDDDHgQJ1GSg9Sqs+PIQJyv cbHYybIuaniD5go57ISOeDBtKbGGsusgM+s31Vv49NeAcuJpkQwv8S6APe4Dzacb hbwe7z/K0ddSi/9dksEj61KZ5E5cq6/YWJFCwwVHMmBH7VOOfy+eZ8fgKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGREir/tJPp/iS0UYQHKbC3cjQgXMB8GA1UdIwQY MBaAFCkYf4EVl90DUTvkL0MVW8FaOgs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgt MjQ5OTRiMDQwZjQxLzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgtMjQ5OTRiMDQwZjQx LzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiNDJFtL 3rXHkOJI2cwtQPmnSf6xc4uc0sWmx9bqKMzSctB55sQc/blMa6EkJKltq9pATcjT gLNrROiLxG6oEvirYwCWqoS0XjIlRodyuKnkfGphnK3wY05MoZy5OMHnR8kvxvsy iRvoyyp0DktPQ2Ln0BZ0/Uj9HuY6WudY4oXQFebJ2S+TgkyM226ihJnBFbNptN6d B6VDW+xACT2M/mlkEmjLNnIFt2rULysGLjv3mf+YAXEo2Fp2C9EfnQd5OJR/Fo90 Hd8tvrFx3FdYmDzGO3pwitLMAVM+ST3BuM2AI93UpzQ9T4wY9Ob430yevRUV9wex HM8dI01tgz6Xng== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:21 2025 by rpki-client