This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json) Hash identifier: 7/xZ1e/soJAYvfjrc9aPko1B3CRVcopBIAo/QgNw5eo= Subject key identifier: 17:27:86:DA:28:4F:ED:12:48:40:B8:46:B6:90:91:7D:94:03:FF:0A Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77 Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677 Certificate serial: 019B3E6DFAED90771395DFDC5DB1A6CBB35E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft Manifest number: 1214 Signing time: Sun 21 Dec 2025 01:02:33 +0000 Manifest this update: Sun 21 Dec 2025 01:02:33 +0000 Manifest next update: Mon 22 Dec 2025 01:02:33 +0000 Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=) 2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: D0U0EppjyK+RywJw6BZOEebY3a2gnJRT/T0HuMU40tA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:fa:ed:90:77:13:95:df:dc:5d:b1:a6:cb:b3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677 Validity Not Before: Dec 21 01:02:33 2025 GMT Not After : Dec 22 01:02:33 2025 GMT Subject: CN=172786da284fed124840b846b690917d9403ff0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:ce:e1:ce:2c:96:bf:c9:dc:8c:59:5e:43: cd:91:1e:3b:1b:0c:2c:db:d0:2b:55:a6:e1:92:82: 14:9b:e3:7f:6e:df:7a:f2:76:b2:b7:53:f7:d6:30: a2:7f:40:30:bd:cb:16:0e:01:31:e0:f5:9a:96:f8: 56:4d:ce:b4:30:86:e0:d7:08:c6:ba:a7:fa:d0:1d: 44:b8:44:cb:15:b8:d9:2a:3c:b5:2f:cc:09:34:57: f5:aa:04:99:98:5e:4b:5e:d3:cf:9c:09:0c:a4:1a: f6:6a:c2:c6:23:cb:dd:39:97:5d:55:5d:ad:c4:52: 27:29:02:eb:ad:cc:b3:9a:82:9e:95:9c:bc:b5:4c: 49:74:0a:17:a1:99:9b:b7:22:0f:a9:f7:c2:69:c3: 14:d7:49:ce:da:cf:6b:0e:d4:f4:e0:28:a5:4d:36: 97:ce:f1:99:6e:c0:fd:cb:c8:a8:3c:ce:55:10:b1: fc:e9:0a:8b:72:70:e5:72:4e:10:10:07:ce:2e:d0: c5:2c:1c:cb:44:7f:48:7d:0a:5c:b6:dd:de:d1:6d: 5c:82:20:42:ba:de:98:2b:c7:89:f6:2c:4c:eb:42: 1b:0c:18:c8:53:4f:4f:7c:57:52:a9:f6:f9:4e:17: ec:bf:35:be:86:04:ce:d6:6d:fd:be:00:46:0a:8d: 36:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:27:86:DA:28:4F:ED:12:48:40:B8:46:B6:90:91:7D:94:03:FF:0A X509v3 Authority Key Identifier: keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:fa:44:ea:61:85:f0:48:25:6f:ae:d8:9d:09:81:d3:e8:76: b4:ab:58:17:7c:7e:cc:a9:22:78:8b:93:49:62:8d:13:86:e2: 9d:ed:e4:01:65:f0:e0:da:ac:82:6d:b6:57:9e:3a:a4:a5:19: 7e:e7:a6:e3:e0:18:8f:91:e4:23:5c:dc:c3:87:74:11:e7:ee: 98:d7:76:bc:51:cd:eb:d7:75:3d:74:55:d5:df:e1:db:2b:57: c5:1e:ce:26:86:0e:75:4b:49:3a:a2:ab:00:4c:f6:52:68:1d: e5:3f:19:bb:ec:fc:4d:04:c4:5c:d6:4f:c7:c6:4f:9f:61:cf: 15:a4:a9:ad:59:de:a5:62:0f:d5:58:1b:60:f5:1e:29:a1:95: 22:42:54:f7:cd:53:62:4b:a9:7e:b4:5c:bf:52:4b:ee:86:67: d4:29:45:9d:d1:ba:34:99:30:26:38:3d:79:91:50:bd:6b:b3: 80:55:0b:b7:98:81:c8:6c:0c:c2:d8:fe:dc:79:e7:94:fd:1e: f1:d1:9e:0c:db:ff:1d:7c:7c:62:86:9c:55:24:13:74:56:0f: 69:a2:d7:b8:c3:b8:8b:90:8d:af:63:ed:a2:93:dd:e9:27:63: a6:00:88:9c:37:56:16:53:e4:0a:58:a2:45:bf:bd:9a:4c:8c: ad:93:cd:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bfrtkHcTld/cXbGmy7NeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTk0NjE4NDQ1NDk4MjQ1MDBiN2NkMWM0NTFkODI0YmE2 ZTU2NzcwHhcNMjUxMjIxMDEwMjMzWhcNMjUxMjIyMDEwMjMzWjAzMTEwLwYDVQQD EygxNzI3ODZkYTI4NGZlZDEyNDg0MGI4NDZiNjkwOTE3ZDk0MDNmZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/PO4c4slr/J3IxZXkPNkR47Gwws 29ArVabhkoIUm+N/bt968nayt1P31jCif0AwvcsWDgEx4PWalvhWTc60MIbg1wjG uqf60B1EuETLFbjZKjy1L8wJNFf1qgSZmF5LXtPPnAkMpBr2asLGI8vdOZddVV2t xFInKQLrrcyzmoKelZy8tUxJdAoXoZmbtyIPqffCacMU10nO2s9rDtT04CilTTaX zvGZbsD9y8ioPM5VELH86QqLcnDlck4QEAfOLtDFLBzLRH9IfQpctt3e0W1cgiBC ut6YK8eJ9ixM60IbDBjIU09PfFdSqfb5ThfsvzW+hgTO1m39vgBGCo021QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcnhtooT+0SSEC4RraQkX2UA/8KMB8GA1UdIwQY MBaAFCkZRhhEVJgkUAt80cRR2CS6blZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYt YjZlYTgyZjE5MjIwLzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYtYjZlYTgyZjE5MjIw LzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfpE6mGF 8Eglb67YnQmB0+h2tKtYF3x+zKkieIuTSWKNE4bine3kAWXw4Nqsgm22V546pKUZ fuem4+AYj5HkI1zcw4d0EefumNd2vFHN69d1PXRV1d/h2ytXxR7OJoYOdUtJOqKr AEz2Umgd5T8Zu+z8TQTEXNZPx8ZPn2HPFaSprVnepWIP1VgbYPUeKaGVIkJU981T YkupfrRcv1JL7oZn1ClFndG6NJkwJjg9eZFQvWuzgFULt5iByGwMwtj+3HnnlP0e 8dGeDNv/HXx8YoacVSQTdFYPaaLXuMO4i5CNr2PtopPd6SdjpgCInDdWFlPkClii Rb+9mkyMrZPNMg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:09:03 2025 by rpki-client