This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json) Hash identifier: vlis9GWlyYKctkzBsV69oGJiPdoiF6dGgr/gRL9UCoo= Subject key identifier: 89:8D:71:47:79:EC:2F:D2:C5:9E:D2:E6:AC:9C:7E:8E:96:1F:E9:0B Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17 Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17 Certificate serial: 019AF2AD727D88DB68BD0FF1354C0197BFBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft Manifest number: 0F2A Signing time: Sat 06 Dec 2025 08:00:44 +0000 Manifest this update: Sat 06 Dec 2025 08:00:44 +0000 Manifest next update: Sun 07 Dec 2025 08:00:44 +0000 Files and hashes: 1: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: UPil3U1GPT3/eJQ5okZx2RnHsFq95Tm3ymLyBz6OuKI=) 2: tT2MkC3bDAt-AG9rSFm6itBZmH0.roa (hash: ZIroNCPsL/l7JhsPE9mGE4anIRCcdf9s2wEC0oqqzzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:72:7d:88:db:68:bd:0f:f1:35:4c:01:97:bf:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17 Validity Not Before: Dec 6 08:00:44 2025 GMT Not After : Dec 7 08:00:44 2025 GMT Subject: CN=898d714779ec2fd2c59ed2e6ac9c7e8e961fe90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:72:0e:9d:a7:33:71:59:1c:f3:fd:a7:f0: 4e:b2:04:4e:3b:fa:8f:5c:c6:54:72:d9:eb:d3:df: 19:3a:5e:36:15:f5:c2:0f:90:9d:d2:df:6d:6f:af: 78:4c:0c:4c:b6:44:56:08:ea:8d:dc:0c:20:0d:0d: 62:1d:9b:eb:4b:0f:43:ec:48:cf:84:47:1a:56:b6: ed:59:1e:8f:6a:eb:76:12:f2:66:c5:71:d8:0d:64: 90:a7:8f:55:6b:95:bb:9a:b7:e8:dc:1a:6a:18:b8: 79:17:2e:60:72:4d:47:c8:25:51:f8:6e:c0:c6:59: 8e:34:4b:8c:02:30:f5:bd:fe:94:b7:ae:fe:93:ce: 6e:9c:11:78:72:69:15:59:26:de:37:60:04:5c:73: 67:d1:15:07:29:f7:46:1b:89:fe:b7:d5:d1:de:87: e8:60:33:26:aa:bf:c3:27:81:dd:84:b4:af:7a:46: 12:2b:30:4d:6f:9c:24:4e:26:66:7c:3c:ca:22:90: 58:fb:c2:c4:6f:47:62:3e:6c:af:27:a3:97:1a:3a: ad:40:cc:7f:c8:62:19:67:56:24:b8:4e:7f:1d:46: 32:61:14:fe:7f:ae:4a:44:43:9e:a5:1d:66:a6:8f: 56:4e:19:d2:93:33:d8:56:ae:c0:3d:81:39:bc:93: bc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8D:71:47:79:EC:2F:D2:C5:9E:D2:E6:AC:9C:7E:8E:96:1F:E9:0B X509v3 Authority Key Identifier: keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f8:72:5e:5f:e9:43:b4:fd:06:da:cc:fc:53:20:fe:61:06: 7b:e6:1f:b6:76:bb:2e:71:b5:f0:17:1f:2b:9d:6a:47:51:15: a6:ce:38:17:50:82:f9:20:56:18:85:a7:dd:2f:c2:e8:e8:0d: 22:6d:5d:4d:0a:f0:41:ce:a9:7c:ff:c8:37:68:74:3e:12:da: 8b:31:d4:7d:ab:cd:27:99:09:f6:b7:51:31:6b:d1:e1:4a:b9: a2:40:32:2f:00:d7:37:c2:ff:5a:bb:53:fd:44:e3:de:e2:18: 9b:2c:ac:a7:22:6e:d8:b4:77:cc:80:35:9f:df:65:1e:33:f1: 37:29:46:06:17:b3:2e:3e:23:8c:0b:ca:1c:e5:d2:6e:64:f9: 90:05:ee:c6:84:58:1a:73:55:50:78:a9:ec:f5:e7:dc:cb:2f: b7:74:29:ef:0f:5b:ee:6d:0d:f2:e1:ea:51:c7:ee:5f:81:95: a3:62:27:59:d5:ee:37:77:9c:ab:7b:bb:0b:ff:26:8c:3f:9a: 4c:e8:90:37:8f:31:b0:db:cc:79:ed:65:a1:f8:65:29:13:0a: c2:ff:25:f9:ea:7d:4d:cf:46:09:4d:dd:07:c9:30:8a:7d:53: b1:55:69:7f:62:bd:7e:47:02:09:40:eb:5d:25:5b:3a:b4:0f: 79:15:1c:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXJ9iNtovQ/xNUwBl7+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYjE0M2Q3ZGIxMTU5NTdjNWRiOWFmODk1ZjRlN2UxNWI3 YjZiMTcwHhcNMjUxMjA2MDgwMDQ0WhcNMjUxMjA3MDgwMDQ0WjAzMTEwLwYDVQQD Eyg4OThkNzE0Nzc5ZWMyZmQyYzU5ZWQyZTZhYzljN2U4ZTk2MWZlOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTByDp2nM3FZHPP9p/BOsgROO/qP XMZUctnr098ZOl42FfXCD5Cd0t9tb694TAxMtkRWCOqN3AwgDQ1iHZvrSw9D7EjP hEcaVrbtWR6Paut2EvJmxXHYDWSQp49Va5W7mrfo3BpqGLh5Fy5gck1HyCVR+G7A xlmONEuMAjD1vf6Ut67+k85unBF4cmkVWSbeN2AEXHNn0RUHKfdGG4n+t9XR3ofo YDMmqr/DJ4HdhLSvekYSKzBNb5wkTiZmfDzKIpBY+8LEb0diPmyvJ6OXGjqtQMx/ yGIZZ1YkuE5/HUYyYRT+f65KREOepR1mpo9WThnSkzPYVq7APYE5vJO8swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImNcUd57C/SxZ7S5qycfo6WH+kLMB8GA1UdIwQY MBaAFJKxQ9fbEVlXxdua+JX05+Fbe2sXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTct NmQzYTg4MTUzNzY3LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTctNmQzYTg4MTUzNzY3 LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/hyXl/p Q7T9BtrM/FMg/mEGe+Yftna7LnG18BcfK51qR1EVps44F1CC+SBWGIWn3S/C6OgN Im1dTQrwQc6pfP/IN2h0PhLaizHUfavNJ5kJ9rdRMWvR4Uq5okAyLwDXN8L/WrtT /UTj3uIYmyyspyJu2LR3zIA1n99lHjPxNylGBhezLj4jjAvKHOXSbmT5kAXuxoRY GnNVUHip7PXn3Msvt3Qp7w9b7m0N8uHqUcfuX4GVo2InWdXuN3ecq3u7C/8mjD+a TOiQN48xsNvMee1lofhlKRMKwv8l+ep9Tc9GCU3dB8kwin1TsVVpf2K9fkcCCUDr XSVbOrQPeRUcAg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:20 2025 by rpki-client