This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json) Hash identifier: YekGOrXnsDKLwXLxLQTWUlzAR1ruAiMzbur4mTC8x0A= Subject key identifier: B4:11:59:7D:EB:4A:80:A0:B4:9E:9F:7F:BC:AF:96:50:54:BC:5B:42 Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53 Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553 Certificate serial: 019B52CF00E8058388A71CE2625B30057CB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft Manifest number: 086A Signing time: Thu 25 Dec 2025 00:00:56 +0000 Manifest this update: Thu 25 Dec 2025 00:00:56 +0000 Manifest next update: Fri 26 Dec 2025 00:00:56 +0000 Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: CIMBGWfUuX1Yb6+4qJxQXkbFA53Fk+SiTTPQ01bOR5M=) 2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:00:e8:05:83:88:a7:1c:e2:62:5b:30:05:7c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553 Validity Not Before: Dec 25 00:00:56 2025 GMT Not After : Dec 26 00:00:56 2025 GMT Subject: CN=b411597deb4a80a0b49e9f7fbcaf965054bc5b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:d9:2a:0c:17:d1:da:21:0f:60:95:ab:40: 5c:02:d7:84:8d:97:c8:59:20:df:20:37:8d:b4:78: 81:2c:8d:06:53:db:45:65:47:71:e7:0d:dc:3b:90: 7f:cf:f1:04:4e:84:1f:f3:c5:d7:d3:b7:4b:a3:36: e2:c3:73:40:ae:07:0c:5f:02:1b:18:e0:5e:11:9a: 29:27:2d:74:86:31:70:23:65:20:91:02:3c:84:5e: b7:1e:00:ad:ff:6a:61:30:55:68:01:f0:c0:1b:94: f5:03:45:ec:a1:cf:eb:d5:23:c7:76:04:d8:44:99: 17:30:8f:f7:f6:32:5f:9b:c3:5a:fc:05:c2:74:9f: 7d:97:64:8f:14:c8:fb:ee:07:0f:7c:69:37:03:d2: 45:64:47:af:fb:04:76:91:e1:b1:e5:5f:c0:8e:ff: 63:a7:89:71:bf:68:da:ed:d9:ab:6b:e7:c5:b4:39: 0b:e6:80:02:24:d4:67:84:14:40:35:5b:d7:50:3f: a8:b0:31:14:22:34:4f:06:fd:54:31:d7:43:34:e7: 27:c1:17:ce:17:97:51:e1:54:08:73:5f:15:c6:67: d8:a1:75:f4:81:b8:9d:32:ed:ad:40:43:37:72:65: 1e:e0:47:24:cd:4f:86:b2:51:a1:90:49:c6:4d:2f: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:11:59:7D:EB:4A:80:A0:B4:9E:9F:7F:BC:AF:96:50:54:BC:5B:42 X509v3 Authority Key Identifier: keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2e:d3:4d:5b:97:da:ef:e2:bb:7b:4f:c2:58:70:be:0e:3a: 70:4e:9a:80:d1:98:bb:4f:4a:19:40:32:d8:bc:d8:1f:e9:9d: c7:0a:a9:b4:c6:d9:19:e5:66:49:65:f1:f8:86:5d:f7:44:7d: a2:46:b6:b3:c2:4a:3f:df:cb:73:ee:44:21:76:a3:ad:af:ea: 5c:43:cb:e2:9d:4e:67:87:37:d3:ac:63:c4:53:9a:59:69:8d: 61:1c:87:a2:f6:e3:05:85:e6:ff:32:c7:0f:80:7e:8f:00:c3: 0d:8b:09:34:65:9c:ad:54:d9:e4:8b:93:90:1b:7f:49:57:b9: e3:11:3e:e2:7e:33:57:52:be:5c:97:de:08:09:34:ec:cb:e4: 63:48:3c:1f:97:ce:78:30:07:83:ef:ff:cd:83:de:a6:a6:62: ff:f7:c8:17:91:ec:a8:f9:54:f7:86:16:7a:6d:65:1d:bd:17: b1:dd:4e:e7:4d:da:07:aa:a8:ae:bd:56:44:a4:8b:4f:9c:01: 9d:47:cc:6f:6a:88:4b:05:94:f4:4f:1a:ff:37:a5:86:d4:69: e1:54:60:41:8b:2d:7a:68:31:ea:ac:29:a2:3d:95:4c:35:c6: 0b:03:13:f7:3e:fd:02:91:33:e8:37:b7:2b:ae:16:e2:1d:2d: b9:4d:b6:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzwDoBYOIpxziYlswBXyzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi ZmE1NTMwHhcNMjUxMjI1MDAwMDU2WhcNMjUxMjI2MDAwMDU2WjAzMTEwLwYDVQQD EyhiNDExNTk3ZGViNGE4MGEwYjQ5ZTlmN2ZiY2FmOTY1MDU0YmM1YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFPZKgwX0dohD2CVq0BcAteEjZfI WSDfIDeNtHiBLI0GU9tFZUdx5w3cO5B/z/EEToQf88XX07dLozbiw3NArgcMXwIb GOBeEZopJy10hjFwI2UgkQI8hF63HgCt/2phMFVoAfDAG5T1A0Xsoc/r1SPHdgTY RJkXMI/39jJfm8Na/AXCdJ99l2SPFMj77gcPfGk3A9JFZEev+wR2keGx5V/Ajv9j p4lxv2ja7dmra+fFtDkL5oACJNRnhBRANVvXUD+osDEUIjRPBv1UMddDNOcnwRfO F5dR4VQIc18VxmfYoXX0gbidMu2tQEM3cmUe4EckzU+GslGhkEnGTS8RTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQRWX3rSoCgtJ6ff7yvllBUvFtCMB8GA1UdIwQY MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0 LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOy7TTVuX 2u/iu3tPwlhwvg46cE6agNGYu09KGUAy2LzYH+mdxwqptMbZGeVmSWXx+IZd90R9 oka2s8JKP9/Lc+5EIXajra/qXEPL4p1OZ4c306xjxFOaWWmNYRyHovbjBYXm/zLH D4B+jwDDDYsJNGWcrVTZ5IuTkBt/SVe54xE+4n4zV1K+XJfeCAk07MvkY0g8H5fO eDAHg+//zYPepqZi//fIF5HsqPlU94YWem1lHb0Xsd1O503aB6qorr1WRKSLT5wB nUfMb2qISwWU9E8a/zelhtRp4VRgQYstemgx6qwpoj2VTDXGCwMT9z79ApEz6De3 K64W4h0tuU22ig== -----END CERTIFICATE-----Generated at Thu Dec 25 03:27:46 2025 by rpki-client