This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json) Hash identifier: n5ImfTpljxl++UEDzaJAUzDYe2GPwOQPlANP+zALmVc= Subject key identifier: 7F:A7:0F:50:0A:95:0C:02:0D:09:9A:16:A5:CA:C2:3B:26:35:F7:FA Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7 Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7 Certificate serial: 019B51BD45E4F61AEABA39C381FF0C61C66C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft Manifest number: 0E28 Signing time: Wed 24 Dec 2025 19:01:57 +0000 Manifest this update: Wed 24 Dec 2025 19:01:57 +0000 Manifest next update: Thu 25 Dec 2025 19:01:57 +0000 Files and hashes: 1: H_XRmIddIdPBZC4McGFtZFb7xLI.roa (hash: URusFpEY9p6Rr7dRogLTLrCEXbfHuzjHeSeeheoUdt4=) 2: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: 545wgkF1Jo6gP3qTkKmS90DkpvOIvbVY7E5ZNT+paK0=) 3: xh-we9d8ckMU7F7FFzCQ7FMsb3I.roa (hash: EaElHQr8TuQZrISDJ1FWoKtH8vNTIdcwsRa2JKICJyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:45:e4:f6:1a:ea:ba:39:c3:81:ff:0c:61:c6:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7 Validity Not Before: Dec 24 19:01:57 2025 GMT Not After : Dec 25 19:01:57 2025 GMT Subject: CN=7fa70f500a950c020d099a16a5cac23b2635f7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dd:ee:0c:6f:63:c2:38:8b:f8:91:ec:ca:9f: 1a:fb:5f:41:a2:06:0e:9f:51:9c:5e:d9:18:fa:a8: ba:4d:af:c5:a8:ed:03:86:f5:5b:85:69:fb:b2:73: f8:37:ba:53:86:52:b3:22:64:73:38:42:c6:6c:68: 30:82:bc:50:1c:da:95:72:37:b7:8c:cf:98:cd:49: 2e:1c:c6:5f:5f:2c:63:82:a4:12:84:2d:87:12:34: 0c:ea:db:6e:c4:c1:24:6b:95:4a:0f:87:49:e9:70: ff:31:e7:c7:9b:fd:ff:11:2b:c1:2c:6a:f9:c2:38: 49:80:e6:fb:bc:49:c3:de:ee:b1:12:a6:3e:cf:8f: 00:eb:ef:7c:75:61:c4:a0:d6:c2:03:71:70:b4:56: cf:40:37:6a:95:6f:96:2e:6e:9c:af:9c:0a:e3:38: 90:7a:07:db:d6:54:46:18:bc:ac:9f:77:b0:1b:0f: 27:68:0a:f3:24:29:5c:46:24:51:27:08:07:a0:a5: ab:38:b9:f5:6b:b5:a7:63:7d:cf:ae:b1:29:84:72: b0:29:84:c6:4c:22:3e:5b:64:be:2d:2d:e2:48:06: 1e:cc:60:c5:2a:6e:64:cb:f7:b7:d5:1d:f9:63:1f: 7a:a6:18:83:ac:25:d9:4d:7e:85:ed:df:09:14:3d: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A7:0F:50:0A:95:0C:02:0D:09:9A:16:A5:CA:C2:3B:26:35:F7:FA X509v3 Authority Key Identifier: keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:47:3e:10:ce:e4:a6:a3:01:5b:03:fa:3d:67:03:1b:50:cf: 02:fe:47:25:ce:5c:00:2a:48:78:28:e5:6e:c2:cf:36:48:2c: 41:63:c8:12:de:b7:d2:95:94:b0:bf:01:95:3d:d1:64:8f:8a: 1d:f2:e1:ef:71:dc:26:60:6a:04:95:1d:c6:70:6e:a9:e9:6b: e9:63:68:4c:7b:dc:23:f3:24:e7:9a:a1:22:51:d2:27:01:24: 79:f8:79:3d:c2:2c:bd:3b:29:7a:6c:cd:e3:dc:c8:17:1d:d9: 91:5e:e7:53:a7:97:56:92:d8:be:77:6f:4c:54:7f:70:8c:11: 4e:d3:a7:b6:c2:f3:36:68:e5:a7:c3:07:96:f5:37:7b:3a:45: 41:2f:59:dd:1c:e3:37:7a:9b:db:f8:52:04:cf:ea:31:28:6b: 65:b1:1f:af:54:cb:6d:73:93:b8:df:ec:b3:30:2e:31:15:02: 31:e4:e6:68:c7:2e:43:d7:79:57:06:d8:01:77:e4:36:34:4f: 7b:2f:46:59:cb:d0:8b:50:f4:cc:cb:38:d7:d3:92:5b:7a:6e: 83:b2:4f:29:e8:d1:c4:52:02:9d:f9:e5:1c:8a:6c:a5:78:51: 9c:26:6b:bb:c1:81:b9:d3:a4:f6:13:3f:82:56:a1:36:16:4e: 10:3b:85:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvUXk9hrqujnDgf8MYcZsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYmNjNWM2NjRhNGE4MjMwNTg5MmE4YzQzM2U5NGZmZTMy ZGFkYjcwHhcNMjUxMjI0MTkwMTU3WhcNMjUxMjI1MTkwMTU3WjAzMTEwLwYDVQQD Eyg3ZmE3MGY1MDBhOTUwYzAyMGQwOTlhMTZhNWNhYzIzYjI2MzVmN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld3uDG9jwjiL+JHsyp8a+19BogYO n1GcXtkY+qi6Ta/FqO0DhvVbhWn7snP4N7pThlKzImRzOELGbGgwgrxQHNqVcje3 jM+YzUkuHMZfXyxjgqQShC2HEjQM6ttuxMEka5VKD4dJ6XD/MefHm/3/ESvBLGr5 wjhJgOb7vEnD3u6xEqY+z48A6+98dWHEoNbCA3FwtFbPQDdqlW+WLm6cr5wK4ziQ egfb1lRGGLysn3ewGw8naArzJClcRiRRJwgHoKWrOLn1a7WnY33PrrEphHKwKYTG TCI+W2S+LS3iSAYezGDFKm5ky/e31R35Yx96phiDrCXZTX6F7d8JFD1nzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+nD1AKlQwCDQmaFqXKwjsmNff6MB8GA1UdIwQY MBaAFCq8xcZkpKgjBYkqjEM+lP/jLa23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAt NjVmYjEwYTA2ZTg5LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAtNjVmYjEwYTA2ZTg5 LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkc+EM7k pqMBWwP6PWcDG1DPAv5HJc5cACpIeCjlbsLPNkgsQWPIEt630pWUsL8BlT3RZI+K HfLh73HcJmBqBJUdxnBuqelr6WNoTHvcI/Mk55qhIlHSJwEkefh5PcIsvTspemzN 49zIFx3ZkV7nU6eXVpLYvndvTFR/cIwRTtOntsLzNmjlp8MHlvU3ezpFQS9Z3Rzj N3qb2/hSBM/qMShrZbEfr1TLbXOTuN/sszAuMRUCMeTmaMcuQ9d5VwbYAXfkNjRP ey9GWcvQi1D0zMs419OSW3pug7JPKejRxFICnfnlHIpspXhRnCZru8GBudOk9hM/ glahNhZOEDuFEQ== -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:13 2025 by rpki-client