This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft File: KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json) Hash identifier: 6LI6RkBKrltb+gdpQEFneXTHPUYwaucB9l9MdpWUP4s= Subject key identifier: 1F:1E:07:41:AE:45:D0:68:D1:23:BF:4A:2D:EC:96:E2:06:29:F2:EC Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0 Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0 Certificate serial: 019B2F67ACCE963B5A94B2FB3FF495BDC034 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 03:01:22 +0000 Manifest this update: Thu 18 Dec 2025 03:01:22 +0000 Manifest next update: Fri 19 Dec 2025 03:01:22 +0000 Files and hashes: 1: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: uCCtLjdDPWuKNMoQu2RmOI4PjmxRuzakBcUVLYKqqdI=) 2: iinwbjaCpK6V8_stsXvEKtBkl8w.roa (hash: M1V1vtHFjPXfduw3ijubEwFy3tYmjuQ7qndUwyTCfGk=) 3: uJWKugGWqtQl6VVyKAzx1i_N0aA.roa (hash: BJfTtZgXbkNAvLFFTKLvaiDNDprXBJ4/kR9lJ8wjqSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:ac:ce:96:3b:5a:94:b2:fb:3f:f4:95:bd:c0:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0 Validity Not Before: Dec 18 03:01:22 2025 GMT Not After : Dec 19 03:01:22 2025 GMT Subject: CN=1f1e0741ae45d068d123bf4a2dec96e20629f2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:dc:99:4f:cc:67:8c:98:35:45:6f:24:b3:8d: 7d:fb:89:a9:c4:46:ce:33:37:e4:fb:d8:52:86:28: 8f:1e:bc:56:df:e5:70:af:b4:91:79:dc:84:13:1c: 30:c6:47:3b:44:23:1c:2a:50:cb:cb:ca:07:56:8f: 10:5b:dd:03:38:4c:0e:04:86:23:03:07:22:1e:2c: 88:de:c7:e3:16:f8:3a:f1:00:fc:17:da:41:70:00: 1d:a8:96:ca:b9:82:a5:a8:18:44:98:8b:14:65:e3: 6f:04:1c:ae:5b:6b:5d:91:07:48:78:1c:5f:d6:9f: 50:b7:eb:b6:19:d2:77:85:41:c0:72:71:1e:96:bf: 0b:15:68:9f:4c:82:ab:b8:c6:49:69:b3:06:a4:52: de:05:67:6f:10:87:7d:e2:3b:ee:0e:5c:dc:ee:d2: 2f:f9:d9:d1:69:56:7f:fc:f2:0f:d9:b9:4c:f2:d7: 83:30:1e:1c:27:0d:a6:45:84:8c:40:22:16:18:9f: b6:4e:8c:22:8a:60:1b:49:0e:66:27:2f:3f:e1:61: fa:b4:d1:62:25:d9:3f:3d:3a:56:29:9f:8c:ab:84: be:4f:f6:a0:d9:2f:d5:64:8d:4d:37:98:1e:e5:63: db:ac:33:73:85:5e:b5:1a:75:51:6a:75:fa:ef:7a: c5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1E:07:41:AE:45:D0:68:D1:23:BF:4A:2D:EC:96:E2:06:29:F2:EC X509v3 Authority Key Identifier: keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f7:3c:2b:32:13:6c:36:75:7e:45:73:d4:e2:f6:6b:ab:94: 6d:3a:3d:ac:2e:99:84:d3:55:81:e8:53:9d:c2:f3:f8:c7:f8: f5:df:8a:2b:bc:16:4e:1b:cf:18:73:08:de:df:2b:f5:e6:ef: 04:cc:a7:d4:1f:80:a1:48:b8:2a:6a:50:ee:d1:c3:62:3c:fc: c9:f9:ba:ec:8d:54:70:34:ca:a7:f1:42:ca:10:af:c0:bc:82: fe:13:67:c8:f6:de:0e:b8:45:25:ac:40:67:44:86:6b:49:41: ff:58:96:a4:ca:32:32:28:b0:03:cf:2c:01:10:6c:b1:38:87: 55:3a:85:9f:51:17:ea:da:8a:3b:ff:f1:bf:83:b6:fd:ed:0a: 44:26:f6:42:12:44:96:f2:7a:7d:9e:fa:6b:47:2d:30:04:06: 3d:5d:45:b1:b6:a0:de:3a:36:c9:46:54:16:88:b7:60:47:1a: 04:3f:3d:5c:36:5f:cd:25:99:ff:74:dd:0e:5d:2a:f8:10:9c: ad:55:db:a3:c1:e5:3b:df:52:82:c9:c1:f8:04:59:77:17:34: b3:3c:2e:15:60:4d:1e:fe:57:5c:17:18:f8:33:0a:bd:01:10: be:17:7a:8b:40:0c:b6:f2:48:b8:b8:52:ed:c8:f3:a8:4f:ec: c5:21:87:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ6zOljtalLL7P/SVvcA0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTA5ZGE2NjJmOWQzMDJmZmYyYzVjNGI0YWZiOGY5NDdm ZWMxYzAwHhcNMjUxMjE4MDMwMTIyWhcNMjUxMjE5MDMwMTIyWjAzMTEwLwYDVQQD EygxZjFlMDc0MWFlNDVkMDY4ZDEyM2JmNGEyZGVjOTZlMjA2MjlmMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tyZT8xnjJg1RW8ks419+4mpxEbO Mzfk+9hShiiPHrxW3+Vwr7SRedyEExwwxkc7RCMcKlDLy8oHVo8QW90DOEwOBIYj AwciHiyI3sfjFvg68QD8F9pBcAAdqJbKuYKlqBhEmIsUZeNvBByuW2tdkQdIeBxf 1p9Qt+u2GdJ3hUHAcnEelr8LFWifTIKruMZJabMGpFLeBWdvEId94jvuDlzc7tIv +dnRaVZ//PIP2blM8teDMB4cJw2mRYSMQCIWGJ+2TowiimAbSQ5mJy8/4WH6tNFi Jdk/PTpWKZ+Mq4S+T/ag2S/VZI1NN5ge5WPbrDNzhV61GnVRanX673rFdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8eB0GuRdBo0SO/Si3sluIGKfLsMB8GA1UdIwQY MBaAFCkQnaZi+dMC//LFxLSvuPlH/sHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JDZHBtTDUwd0xfOHNYRXRLLTQtVWYtd2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85MzAyNzktMzE4Ny00N2E1LTgxMzct ZjRmYjVjODgwNTA5LzEvS1JDZHBtTDUwd0xfOHNYRXRLLTQtVWYtd2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS85MzAyNzktMzE4Ny00N2E1LTgxMzctZjRmYjVjODgwNTA5 LzEvS1JDZHBtTDUwd0xfOHNYRXRLLTQtVWYtd2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPc8KzIT bDZ1fkVz1OL2a6uUbTo9rC6ZhNNVgehTncLz+Mf49d+KK7wWThvPGHMI3t8r9ebv BMyn1B+AoUi4KmpQ7tHDYjz8yfm67I1UcDTKp/FCyhCvwLyC/hNnyPbeDrhFJaxA Z0SGa0lB/1iWpMoyMiiwA88sARBssTiHVTqFn1EX6tqKO//xv4O2/e0KRCb2QhJE lvJ6fZ76a0ctMAQGPV1Fsbag3jo2yUZUFoi3YEcaBD89XDZfzSWZ/3TdDl0q+BCc rVXbo8HlO99SgsnB+ARZdxc0szwuFWBNHv5XXBcY+DMKvQEQvhd6i0AMtvJIuLhS 7cjzqE/sxSGHLw== -----END CERTIFICATE-----Generated at Thu Dec 18 10:27:13 2025 by rpki-client