This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft File: KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft (raw, json) Hash identifier: xIdDY7hweA3C+LSAe6UdH63iK2+5aHEXL28Tc2D47e0= Subject key identifier: 0E:CD:F6:89:78:07:6E:8E:BD:29:93:BF:CD:35:E0:ED:6D:95:4A:B4 Authority key identifier: 29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3 Certificate issuer: /CN=29184647248b55523999cbb7fe5b20a99fe73be3 Certificate serial: 019B51F33ECF8770D245D8F19EF3604FC3A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 20:00:54 +0000 Manifest this update: Wed 24 Dec 2025 20:00:54 +0000 Manifest next update: Thu 25 Dec 2025 20:00:54 +0000 Files and hashes: 1: KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl (hash: gAY6T8HnWHBdkKhvjR/z/rxz/fG7sF336gbaKH+lo8I=) 2: be3Xk9pNKz5fO0j2jzivTfhyiiM.roa (hash: bsSd5F64tTbetVVoY+neNE5lEskWYAlXiyMGJS0XuJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:3e:cf:87:70:d2:45:d8:f1:9e:f3:60:4f:c3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29184647248b55523999cbb7fe5b20a99fe73be3 Validity Not Before: Dec 24 20:00:54 2025 GMT Not After : Dec 25 20:00:54 2025 GMT Subject: CN=0ecdf68978076e8ebd2993bfcd35e0ed6d954ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:08:1e:6a:d7:7d:c9:fc:7c:03:b9:7b:7e:41: 4a:40:ef:7a:91:0a:c8:c8:ff:df:3b:0e:f7:1d:64: 27:93:09:3e:e0:1e:60:83:d5:16:d5:99:5e:7b:80: 0a:05:3f:4c:9e:f2:af:5a:3f:e4:c1:51:8e:60:ae: 42:d2:01:2a:b0:45:81:7e:e6:04:83:ed:0f:f1:f3: ad:9d:00:fb:71:72:a1:1d:d5:be:2e:e5:f3:68:8f: 80:a0:37:49:d5:7b:c8:58:c8:b2:4e:8d:bb:f9:7a: 93:59:76:d1:dc:53:6b:19:bb:7a:b4:ca:3b:51:7d: 7b:c9:66:ec:24:90:44:88:02:a7:26:3c:6d:45:9e: 70:05:a5:75:cb:51:3d:5c:45:e5:7c:d0:06:70:29: 62:b3:f0:de:f0:11:c6:bb:19:74:4f:7e:a3:09:64: b3:37:ff:ca:85:87:25:5c:32:6c:27:82:bf:51:85: e7:35:4f:23:ad:d1:61:4a:a7:46:cc:09:bf:96:cb: 7a:fe:69:b4:15:28:bd:b5:c1:7f:03:eb:7c:75:d8: 17:a8:3d:a0:5b:a3:c0:ca:b7:d6:18:24:22:20:89: ea:06:0d:ad:d8:bf:94:4d:98:dc:95:d5:40:6b:13: 68:5e:0e:82:c5:b0:09:ec:91:37:e3:df:29:16:cb: 1f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CD:F6:89:78:07:6E:8E:BD:29:93:BF:CD:35:E0:ED:6D:95:4A:B4 X509v3 Authority Key Identifier: keyid:29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:52:dc:04:3e:bf:76:96:32:fe:38:5a:ee:f1:13:ed:f8:04: 49:fb:17:58:3d:29:21:02:16:bd:aa:bc:e4:bd:57:9f:6d:05: 8d:33:3c:82:70:9e:15:c3:42:e0:eb:24:e9:7f:5a:70:e7:74: 82:34:ba:64:63:22:a6:0d:8a:76:69:67:a0:29:a6:44:da:fa: ad:1e:d3:a0:f8:37:05:71:70:a1:33:0f:31:ef:f9:a0:89:d5: 3b:c5:d0:a9:5c:0d:ec:69:45:90:37:fc:6a:b3:e7:4e:84:11: 1b:48:4f:45:ab:98:c9:55:d6:d8:83:ad:f6:fa:75:e5:d6:48: eb:b0:38:03:f4:f0:eb:e0:4c:4a:01:42:7c:23:4a:e4:db:ec: af:ae:b2:17:aa:fd:e5:f3:0b:28:bc:6a:b9:bf:97:45:12:34: ae:fb:53:32:fe:a9:69:9c:bd:27:7e:76:da:c0:6a:61:78:a7: 6b:80:80:98:cc:ed:eb:ee:56:6b:93:03:17:1b:ba:fa:ea:f9: 52:b3:73:22:64:c6:57:cc:45:80:de:df:2c:eb:6f:8e:7f:23: 4f:48:e2:e5:09:8f:02:82:50:ab:f6:5c:ae:ea:53:47:23:88: 9e:12:20:b6:d9:ef:6e:a4:6b:8c:56:41:0c:19:26:2f:6e:e9: cc:b0:3d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8z7Ph3DSRdjxnvNgT8OkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTg0NjQ3MjQ4YjU1NTIzOTk5Y2JiN2ZlNWIyMGE5OWZl NzNiZTMwHhcNMjUxMjI0MjAwMDU0WhcNMjUxMjI1MjAwMDU0WjAzMTEwLwYDVQQD EygwZWNkZjY4OTc4MDc2ZThlYmQyOTkzYmZjZDM1ZTBlZDZkOTU0YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQgeatd9yfx8A7l7fkFKQO96kQrI yP/fOw73HWQnkwk+4B5gg9UW1Zlee4AKBT9MnvKvWj/kwVGOYK5C0gEqsEWBfuYE g+0P8fOtnQD7cXKhHdW+LuXzaI+AoDdJ1XvIWMiyTo27+XqTWXbR3FNrGbt6tMo7 UX17yWbsJJBEiAKnJjxtRZ5wBaV1y1E9XEXlfNAGcClis/De8BHGuxl0T36jCWSz N//KhYclXDJsJ4K/UYXnNU8jrdFhSqdGzAm/lst6/mm0FSi9tcF/A+t8ddgXqD2g W6PAyrfWGCQiIInqBg2t2L+UTZjcldVAaxNoXg6CxbAJ7JE3498pFssfawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7N9ol4B26OvSmTv8014O1tlUq0MB8GA1UdIwQY MBaAFCkYRkcki1VSOZnLt/5bIKmf5zvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81NjAzNmItMjNkOC00YjM3LWI1NDYt OGZjMjM3M2ZjMjZlLzEvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS81NjAzNmItMjNkOC00YjM3LWI1NDYtOGZjMjM3M2ZjMjZl LzEvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1LcBD6/ dpYy/jha7vET7fgESfsXWD0pIQIWvaq85L1Xn20FjTM8gnCeFcNC4Osk6X9acOd0 gjS6ZGMipg2KdmlnoCmmRNr6rR7ToPg3BXFwoTMPMe/5oInVO8XQqVwN7GlFkDf8 arPnToQRG0hPRauYyVXW2IOt9vp15dZI67A4A/Tw6+BMSgFCfCNK5Nvsr66yF6r9 5fMLKLxqub+XRRI0rvtTMv6paZy9J3522sBqYXina4CAmMzt6+5Wa5MDFxu6+ur5 UrNzImTGV8xFgN7fLOtvjn8jT0ji5QmPAoJQq/ZcrupTRyOInhIgttnvbqRrjFZB DBkmL27pzLA95A== -----END CERTIFICATE-----Generated at Wed Dec 24 21:50:32 2025 by rpki-client