This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json) Hash identifier: bU4g3TvUVWYgJcYDPBtpArivRee3yCM39xYZurBP/6E= Subject key identifier: 6D:0D:3D:18:AB:EC:89:97:B3:59:EA:04:B6:77:46:13:ED:19:E3:38 Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b Certificate serial: 019AF2771D95280C0D5A7F6959D1D74075BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft Manifest number: 0909 Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: kOytkd0iiqHMPZ8O7KP45edkfFii5Be/t3302xARodY=) 2: x6k0RFp7Tx1S2sYvTKRUnwMB54o.roa (hash: Kj0Dd36Z9ZII60RmdvUVufyE+PZ0m6JPvwn/WhUbw7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1d:95:28:0c:0d:5a:7f:69:59:d1:d7:40:75:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=6d0d3d18abec8997b359ea04b6774613ed19e338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b2:75:45:0f:3f:82:4b:e0:11:fe:99:d3:14: 90:30:5f:f3:32:7f:46:74:8d:4f:dd:3b:78:c3:4e: 87:87:3d:63:96:c3:e1:a2:0c:57:30:ed:93:40:69: c8:b2:17:b6:a2:42:93:5c:c8:e5:ce:1d:7f:37:a9: 22:80:7e:9a:6f:a4:b9:75:9b:99:bc:5e:a7:f2:40: ea:50:6a:4b:1f:4e:76:90:bc:48:1b:83:65:cb:10: 62:04:aa:c9:ae:84:98:ef:77:4a:3a:71:10:18:30: a3:4c:2f:40:9a:0d:c7:94:c8:0e:98:12:27:bc:4d: 8c:54:59:76:49:9e:be:d0:35:cf:a8:45:ea:72:af: 2f:71:93:ec:f7:ee:52:1a:94:c1:34:33:72:ce:4e: db:5b:3f:12:9d:37:08:5b:96:91:74:ab:ef:50:fd: d2:bf:99:ec:df:da:00:00:63:fe:58:f3:a1:b2:18: fc:f2:7d:ae:6b:0e:88:5f:ad:e4:d3:6c:bd:69:67: 01:df:75:04:af:3b:76:5c:b2:58:92:c1:d4:3a:dd: 7c:55:eb:c3:4e:cd:03:2e:07:34:88:b4:04:15:df: d9:36:32:11:da:65:92:b4:7a:a7:78:cb:ab:44:7b: fc:56:4f:9d:67:ba:1d:37:f8:7a:d2:e3:e8:b8:e2: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0D:3D:18:AB:EC:89:97:B3:59:EA:04:B6:77:46:13:ED:19:E3:38 X509v3 Authority Key Identifier: keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e0:94:02:3c:8f:8c:2d:54:d6:e9:7b:76:ef:df:de:4e:25: 78:40:10:db:bb:e4:96:49:af:67:8d:88:b3:dc:14:4a:5b:5d: c6:08:09:25:29:c2:4a:35:fd:eb:81:0c:f7:c8:43:b4:57:79: 9f:f0:7b:24:d1:50:74:58:86:df:dd:ef:06:bc:1e:9a:e8:3b: 16:2c:4b:8e:cb:43:b7:c0:3d:18:a6:83:49:2c:4d:5d:67:58: 32:88:64:05:5d:a7:9a:f1:ba:a2:01:00:2a:b5:f0:32:64:bf: 80:6c:04:ba:f8:37:f7:93:e0:a4:aa:26:3f:93:af:d7:14:f1: 61:b3:46:cc:43:86:52:0a:be:25:30:75:e7:55:9e:35:84:7b: 17:8a:a7:bc:e8:40:67:f7:df:fd:42:53:6a:af:07:2d:b4:10: 0a:85:8a:51:77:dc:52:af:99:9c:fe:61:aa:7e:07:6c:64:5c: d1:62:52:26:fb:77:fd:18:6f:17:55:cc:c9:8a:e5:a4:72:25: 0b:84:b4:77:03:7e:df:7e:4e:57:a0:97:f6:10:c7:93:8f:32: b0:6f:2b:cd:bf:19:13:73:f2:1e:1f:2f:70:25:d0:47:ef:01: 86:36:b9:de:9c:72:54:54:ac:b7:86:79:e4:3c:14:a0:19:a8: 79:c7:d4:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydx2VKAwNWn9pWdHXQHW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYWFlNTE0YzVmOTk0MDM5MTQzNTYxNGQ3OTQwNGJlZTEy MDliM2IwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD Eyg2ZDBkM2QxOGFiZWM4OTk3YjM1OWVhMDRiNjc3NDYxM2VkMTllMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rJ1RQ8/gkvgEf6Z0xSQMF/zMn9G dI1P3Tt4w06Hhz1jlsPhogxXMO2TQGnIshe2okKTXMjlzh1/N6kigH6ab6S5dZuZ vF6n8kDqUGpLH052kLxIG4NlyxBiBKrJroSY73dKOnEQGDCjTC9Amg3HlMgOmBIn vE2MVFl2SZ6+0DXPqEXqcq8vcZPs9+5SGpTBNDNyzk7bWz8SnTcIW5aRdKvvUP3S v5ns39oAAGP+WPOhshj88n2uaw6IX63k02y9aWcB33UErzt2XLJYksHUOt18VevD Ts0DLgc0iLQEFd/ZNjIR2mWStHqneMurRHv8Vk+dZ7odN/h60uPouOJyoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0NPRir7ImXs1nqBLZ3RhPtGeM4MB8GA1UdIwQY MBaAFPyq5RTF+ZQDkUNWFNeUBL7hIJs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEt NjdhOThlMjU2Y2M3LzEvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEtNjdhOThlMjU2Y2M3 LzEvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+CUAjyP jC1U1ul7du/f3k4leEAQ27vklkmvZ42Is9wUSltdxggJJSnCSjX964EM98hDtFd5 n/B7JNFQdFiG393vBrwemug7FixLjstDt8A9GKaDSSxNXWdYMohkBV2nmvG6ogEA KrXwMmS/gGwEuvg395PgpKomP5Ov1xTxYbNGzEOGUgq+JTB151WeNYR7F4qnvOhA Z/ff/UJTaq8HLbQQCoWKUXfcUq+ZnP5hqn4HbGRc0WJSJvt3/RhvF1XMyYrlpHIl C4S0dwN+335OV6CX9hDHk48ysG8rzb8ZE3PyHh8vcCXQR+8Bhja53pxyVFSst4Z5 5DwUoBmoecfUig== -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:26 2025 by rpki-client