This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft File: KrMqUfAYgPSEFWkbYAi482mcND0.mft (raw, json) Hash identifier: kYuVYt9gW7Uzoz/t5rkmefQb5gMCxtBL5qCf+7Vpub4= Subject key identifier: BB:40:A7:9C:A3:52:9D:F2:75:28:A5:B3:36:E0:FC:AB:A9:B9:FE:C5 Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D Certificate issuer: /CN=2ab32a51f01880f48415691b6008b8f3699c343d Certificate serial: 019AF0882E1F9363EE407E7FDFDB7AC42EF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:00:47 +0000 Manifest this update: Fri 05 Dec 2025 22:00:47 +0000 Manifest next update: Sat 06 Dec 2025 22:00:47 +0000 Files and hashes: 1: KrMqUfAYgPSEFWkbYAi482mcND0.crl (hash: eRV8EYTXXfh0Nx2c9kK3mmypSq/VYF2h8jfzLyXmOcg=) 2: i9bRqGmLoNeEMEQG2gZoK39jq_M.roa (hash: QM3nqUsH3GUvguf6sXYPTlR1T5XaS6Z20/NPBnkA7vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:2e:1f:93:63:ee:40:7e:7f:df:db:7a:c4:2e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d Validity Not Before: Dec 5 22:00:47 2025 GMT Not After : Dec 6 22:00:47 2025 GMT Subject: CN=bb40a79ca3529df27528a5b336e0fcaba9b9fec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:84:e7:6c:0f:88:c8:84:3c:a5:4d:38:3e: 26:cf:01:63:b4:c1:f7:3e:c2:20:f3:13:2a:0b:9c: 00:fc:00:ec:ea:5b:e2:0c:ce:c8:52:aa:c8:6c:37: cc:18:57:43:4f:39:7d:65:41:c2:d6:72:13:ce:22: 8e:9d:f0:a4:54:be:17:77:6f:41:91:34:7f:73:90: 5a:25:33:2a:f3:1a:61:31:e4:e5:c7:ac:99:8c:9c: d0:40:09:bd:83:ec:b3:f9:a6:fe:bb:bd:37:fe:39: cc:ee:b6:a3:e8:d6:1d:8e:af:e5:6d:2d:f9:ea:67: bb:fe:ef:d0:14:7e:45:5d:6a:3a:7e:e7:e3:4e:b0: 6e:2d:77:bb:1a:d3:0a:c9:01:b8:f6:4b:ec:ea:ef: 7b:6b:f1:07:e1:30:51:86:6c:6b:45:8e:e0:cd:06: 88:87:02:f6:ba:4e:b8:1f:4d:d4:ba:84:d3:ba:56: 7c:11:bd:c6:a7:38:b7:8e:fe:ef:40:d0:c6:bb:a6: f1:75:ca:04:b5:a4:97:a9:bd:4b:c0:0a:2b:62:73: e4:e0:d1:f1:ac:f7:07:e4:94:ad:34:30:fc:3d:2d: 3d:fd:09:01:6d:9c:cd:2c:e0:ad:7a:be:81:9b:84: 53:31:38:d4:01:d4:0b:dc:3d:a6:21:cd:b7:0e:8e: 3a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:40:A7:9C:A3:52:9D:F2:75:28:A5:B3:36:E0:FC:AB:A9:B9:FE:C5 X509v3 Authority Key Identifier: keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:29:95:26:f9:db:55:12:56:19:61:bd:b0:b8:8a:51:db:9c: f8:f3:a2:48:69:de:7a:ee:6a:4f:22:5f:29:fd:13:fb:bd:0d: 90:a2:1c:f1:79:a2:cb:a3:6f:de:97:ac:37:4f:62:f3:0b:ae: 93:09:7d:92:b2:f7:50:c2:3e:e4:4f:0d:06:32:2b:a6:44:8a: 9f:6b:90:d5:4e:84:8d:da:25:f2:15:b1:23:35:b4:d8:d0:30: c6:be:ba:7a:7d:54:a4:a3:29:bf:22:c6:f0:d2:7a:30:b1:0b: b8:3b:31:d1:b3:62:87:9e:ed:80:55:17:5a:61:46:55:62:0d: 28:16:13:16:de:27:f3:2d:26:1b:eb:eb:08:42:c7:8f:c0:7a: 6c:75:16:6d:32:12:e0:aa:17:f0:14:4a:57:51:21:98:1b:9c: dd:2f:25:b7:96:21:39:23:ec:71:ab:e0:74:de:fa:c7:6b:28: 8e:59:3b:9e:b0:ad:db:38:09:68:4b:92:47:eb:00:9d:ad:b2: e4:1d:38:fc:e9:d6:91:fd:b2:a5:ab:11:b6:40:61:85:f2:34: b4:62:36:44:f6:e4:12:1c:5f:fa:4a:6b:53:18:2c:d7:ee:51: 48:28:9d:8a:b4:50:b6:48:a1:b4:e7:46:26:f8:a9:55:81:ad: 38:93:bb:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiC4fk2PuQH5/39t6xC75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYjMyYTUxZjAxODgwZjQ4NDE1NjkxYjYwMDhiOGYzNjk5 YzM0M2QwHhcNMjUxMjA1MjIwMDQ3WhcNMjUxMjA2MjIwMDQ3WjAzMTEwLwYDVQQD EyhiYjQwYTc5Y2EzNTI5ZGYyNzUyOGE1YjMzNmUwZmNhYmE5YjlmZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniGE52wPiMiEPKVNOD4mzwFjtMH3 PsIg8xMqC5wA/ADs6lviDM7IUqrIbDfMGFdDTzl9ZUHC1nITziKOnfCkVL4Xd29B kTR/c5BaJTMq8xphMeTlx6yZjJzQQAm9g+yz+ab+u703/jnM7raj6NYdjq/lbS35 6me7/u/QFH5FXWo6fufjTrBuLXe7GtMKyQG49kvs6u97a/EH4TBRhmxrRY7gzQaI hwL2uk64H03UuoTTulZ8Eb3Gpzi3jv7vQNDGu6bxdcoEtaSXqb1LwAorYnPk4NHx rPcH5JStNDD8PS09/QkBbZzNLOCter6Bm4RTMTjUAdQL3D2mIc23Do46YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtAp5yjUp3ydSilszbg/Kupuf7FMB8GA1UdIwQY MBaAFCqzKlHwGID0hBVpG2AIuPNpnDQ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNWFkODMtOTcxMS00NGIwLThjZDUt ZGZkZWY2Y2FhYmRmLzEvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wNWFkODMtOTcxMS00NGIwLThjZDUtZGZkZWY2Y2FhYmRm LzEvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCmVJvnb VRJWGWG9sLiKUduc+POiSGneeu5qTyJfKf0T+70NkKIc8Xmiy6Nv3pesN09i8wuu kwl9krL3UMI+5E8NBjIrpkSKn2uQ1U6Ejdol8hWxIzW02NAwxr66en1UpKMpvyLG 8NJ6MLELuDsx0bNih57tgFUXWmFGVWINKBYTFt4n8y0mG+vrCELHj8B6bHUWbTIS 4KoX8BRKV1EhmBuc3S8lt5YhOSPscavgdN76x2sojlk7nrCt2zgJaEuSR+sAna2y 5B04/OnWkf2ypasRtkBhhfI0tGI2RPbkEhxf+kprUxgs1+5RSCidirRQtkihtOdG JvipVYGtOJO7Ug== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:21 2025 by rpki-client