This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json) Hash identifier: ojm6cLGV9Arrd27vac0ypZOeIx61z6n3hEWfbYIDpvw= Subject key identifier: F1:BD:ED:52:74:4D:07:CB:A6:C3:B8:D9:76:00:46:2B:0E:D1:87:08 Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53 Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553 Certificate serial: 019B3D9066117F91F01364F759C411A0999A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft Manifest number: 085F Signing time: Sat 20 Dec 2025 21:00:31 +0000 Manifest this update: Sat 20 Dec 2025 21:00:31 +0000 Manifest next update: Sun 21 Dec 2025 21:00:31 +0000 Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: HUn2hY5BupUd25IZOrlXFAZ7f6omuzxjA5CPS1JIP50=) 2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:66:11:7f:91:f0:13:64:f7:59:c4:11:a0:99:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553 Validity Not Before: Dec 20 21:00:31 2025 GMT Not After : Dec 21 21:00:31 2025 GMT Subject: CN=f1bded52744d07cba6c3b8d97600462b0ed18708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:c2:c0:b9:dc:82:2f:d7:40:ab:a4:3e:7e: 6e:c9:03:68:79:19:fa:1c:a6:79:6d:82:a6:2a:62: 47:f4:40:17:22:ef:9a:c4:bf:cb:7e:ee:97:86:a1: 81:20:52:7f:80:0e:8f:51:45:2c:ec:2a:14:4f:f8: cd:fb:3c:3a:72:60:c1:b0:a9:5f:ac:fb:e5:15:41: d3:18:20:57:b6:70:3c:e1:00:bd:62:91:71:4f:4a: 00:61:32:8d:3b:c7:d1:a9:8b:20:95:9b:fd:ce:b7: 2f:a8:3e:2d:21:98:21:eb:31:73:9f:ae:e0:d1:a9: b9:4f:d0:6e:ca:76:ed:de:f1:25:63:98:34:ff:b1: d7:78:db:59:60:44:f8:93:0e:b0:61:8a:ce:85:b2: 18:5c:d0:d2:32:86:92:9b:c7:4f:f4:15:1f:11:2f: c6:91:6c:18:83:43:48:8c:c6:50:48:82:7d:72:fb: 88:71:99:7d:03:59:23:b5:4f:16:fc:32:23:7c:be: a6:06:8f:50:03:cc:62:93:17:e4:96:5a:7d:82:ba: 7f:8b:1d:cc:b8:93:24:4a:7d:ce:81:54:24:79:00: a7:08:43:5d:bb:25:38:6e:37:9f:9c:84:f1:89:31: 9b:26:2f:40:1e:37:61:8f:28:2d:ee:f4:09:24:94: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BD:ED:52:74:4D:07:CB:A6:C3:B8:D9:76:00:46:2B:0E:D1:87:08 X509v3 Authority Key Identifier: keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:9f:a9:98:f9:1a:36:3c:fc:e4:17:5e:86:09:f3:df:c4:85: f3:e3:55:be:b1:47:f0:d5:90:a2:2f:e4:f5:21:91:25:68:b1: 1e:f4:16:8c:7e:1f:f8:61:03:3e:2f:87:4b:77:27:4e:da:a6: 5c:93:89:d0:1a:e0:94:5b:10:c1:36:16:0e:fa:86:bc:e7:62: f7:44:40:e7:0a:d0:a8:3d:27:bf:94:9b:17:f9:ce:cf:d0:16: e3:8d:8a:9a:1c:96:41:1c:8d:72:41:d9:4c:9f:64:54:28:01: af:b7:0f:0a:53:cc:60:49:29:6c:35:f3:a0:3b:68:26:0e:4a: 1f:dd:00:4d:4f:2a:7b:ba:18:61:79:7d:2a:ae:45:a7:5e:11: 1d:dc:48:6d:2c:6c:d4:da:5d:83:70:11:06:24:b7:7c:92:bf: 85:98:0f:3c:e9:cf:03:f6:cc:8f:59:33:dc:33:76:a2:96:ca: 0e:37:81:c1:e5:55:0f:48:24:c3:84:8a:31:93:00:81:93:e6: 0d:d6:52:16:48:b3:33:ba:07:28:6b:df:29:79:69:85:f6:c9: 20:ab:f9:8d:0b:e1:04:b3:e3:1b:e5:cf:f7:ba:5f:49:85:f4: a8:82:64:8e:5a:34:bd:60:81:b0:6f:60:4d:ac:86:df:d7:e7: 65:b1:b2:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kGYRf5HwE2T3WcQRoJmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi ZmE1NTMwHhcNMjUxMjIwMjEwMDMxWhcNMjUxMjIxMjEwMDMxWjAzMTEwLwYDVQQD EyhmMWJkZWQ1Mjc0NGQwN2NiYTZjM2I4ZDk3NjAwNDYyYjBlZDE4NzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYPCwLncgi/XQKukPn5uyQNoeRn6 HKZ5bYKmKmJH9EAXIu+axL/Lfu6XhqGBIFJ/gA6PUUUs7CoUT/jN+zw6cmDBsKlf rPvlFUHTGCBXtnA84QC9YpFxT0oAYTKNO8fRqYsglZv9zrcvqD4tIZgh6zFzn67g 0am5T9Buynbt3vElY5g0/7HXeNtZYET4kw6wYYrOhbIYXNDSMoaSm8dP9BUfES/G kWwYg0NIjMZQSIJ9cvuIcZl9A1kjtU8W/DIjfL6mBo9QA8xikxfkllp9grp/ix3M uJMkSn3OgVQkeQCnCENduyU4bjefnITxiTGbJi9AHjdhjygt7vQJJJQabwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPG97VJ0TQfLpsO42XYARisO0YcIMB8GA1UdIwQY MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0 LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZ+pmPka Njz85Bdehgnz38SF8+NVvrFH8NWQoi/k9SGRJWixHvQWjH4f+GEDPi+HS3cnTtqm XJOJ0BrglFsQwTYWDvqGvOdi90RA5wrQqD0nv5SbF/nOz9AW442KmhyWQRyNckHZ TJ9kVCgBr7cPClPMYEkpbDXzoDtoJg5KH90ATU8qe7oYYXl9Kq5Fp14RHdxIbSxs 1Npdg3ARBiS3fJK/hZgPPOnPA/bMj1kz3DN2opbKDjeBweVVD0gkw4SKMZMAgZPm DdZSFkizM7oHKGvfKXlphfbJIKv5jQvhBLPjG+XP97pfSYX0qIJkjlo0vWCBsG9g TayG39fnZbGybw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:47:30 2025 by rpki-client