This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json) Hash identifier: OYQTqBKleshsvdgrwSqpDRaws5+W9i40EMhSKSbADeg= Subject key identifier: 8F:20:FC:5E:77:7A:51:4E:A6:FF:F2:99:E2:59:24:B7:CF:29:CA:ED Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77 Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677 Certificate serial: 019AF12EB30270B3BF041F56D93F71F0B489 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft Manifest number: 11EC Signing time: Sat 06 Dec 2025 01:02:40 +0000 Manifest this update: Sat 06 Dec 2025 01:02:40 +0000 Manifest next update: Sun 07 Dec 2025 01:02:40 +0000 Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=) 2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: R+K2z6J/O1wllxLMOu7IiM7cX9ygQUzhrtZoHbMcNLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b3:02:70:b3:bf:04:1f:56:d9:3f:71:f0:b4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677 Validity Not Before: Dec 6 01:02:40 2025 GMT Not After : Dec 7 01:02:40 2025 GMT Subject: CN=8f20fc5e777a514ea6fff299e25924b7cf29caed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a3:19:8c:b0:ff:e0:25:cb:02:eb:9b:00:f6: 26:7b:d1:a9:df:e9:96:34:21:9a:03:b7:eb:82:1d: c5:22:cc:9a:76:49:f2:15:13:d9:fc:c1:8a:97:1d: e3:4b:c8:00:4c:ad:6d:4d:04:fa:ca:73:9b:ad:f7: 69:83:d2:3f:4f:97:bf:ad:5d:e9:31:21:76:28:94: d9:c8:df:d0:51:4c:64:61:9f:33:e9:d4:47:01:91: 62:50:ea:22:ff:4f:88:51:cd:31:b2:33:5e:1a:96: 4c:36:ed:64:6b:cf:74:6f:4b:16:43:72:1b:a4:5e: 53:0a:7f:8f:f5:7e:e0:fa:f0:65:82:b8:fa:0c:9d: 75:5e:b1:59:28:64:ce:c1:8e:16:25:07:88:fe:1d: 82:b8:1a:6f:88:6c:db:15:f1:1a:f4:35:fa:88:a7: e3:3d:de:1d:6f:99:6f:8e:6e:d8:d1:35:89:ef:5d: 82:7b:09:a4:5e:d2:c6:7a:33:d5:1d:80:bf:ab:6a: 3b:7e:6c:9d:23:77:30:92:1f:b2:3f:80:f1:de:a5: bb:f6:5c:20:9d:47:27:30:12:e8:c5:76:64:c3:3c: 6c:09:b2:2a:67:b0:c8:54:fb:0b:8d:43:34:8e:a6: b8:b6:a2:0d:8b:5c:42:49:df:5d:1c:f5:d4:ff:93: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:20:FC:5E:77:7A:51:4E:A6:FF:F2:99:E2:59:24:B7:CF:29:CA:ED X509v3 Authority Key Identifier: keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3b:b6:b1:62:ef:fa:9b:d3:14:42:53:55:b8:c2:f3:14:8a: 7e:d7:63:ae:d5:cf:ac:e1:5c:01:6c:23:ec:5f:c9:61:73:2b: ec:c7:75:fa:1d:84:6e:1b:03:04:ae:c1:e3:8a:7e:f8:89:d0: ef:27:4c:4a:bb:ca:39:0a:93:cd:85:26:c8:62:c9:6e:c6:af: a1:46:aa:6f:ac:21:8c:22:5a:66:55:c2:c9:96:ae:28:84:cf: ae:9d:4e:0d:1b:eb:92:86:0b:13:b3:06:52:1a:a9:29:35:e1: 54:35:41:d7:0a:8c:7f:e5:ae:76:44:83:76:82:a4:4c:ff:0c: 93:55:2a:f3:bf:cb:f6:77:b6:aa:06:f7:d7:62:96:d6:4a:88: 3b:ff:f4:bf:c4:44:ce:e4:87:cf:a2:e8:08:7e:fb:eb:9d:c3: 36:ab:cf:13:36:d1:c3:df:e2:d6:73:36:89:85:6d:f5:f3:98: 95:9b:5c:85:3c:85:f5:80:ca:2c:32:01:39:2d:34:3e:51:3c: c1:59:b1:1c:87:ee:31:6c:ff:6e:c7:e2:3b:76:9e:0e:a3:66: 7e:91:9f:f9:d9:c5:72:d6:71:04:23:77:41:7f:b0:90:c6:98: e9:5a:22:51:9a:51:b5:69:5d:cb:7d:c0:cf:fb:21:8a:59:b9: 98:b2:3a:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrMCcLO/BB9W2T9x8LSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTk0NjE4NDQ1NDk4MjQ1MDBiN2NkMWM0NTFkODI0YmE2 ZTU2NzcwHhcNMjUxMjA2MDEwMjQwWhcNMjUxMjA3MDEwMjQwWjAzMTEwLwYDVQQD Eyg4ZjIwZmM1ZTc3N2E1MTRlYTZmZmYyOTllMjU5MjRiN2NmMjljYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKMZjLD/4CXLAuubAPYme9Gp3+mW NCGaA7frgh3FIsyadknyFRPZ/MGKlx3jS8gATK1tTQT6ynObrfdpg9I/T5e/rV3p MSF2KJTZyN/QUUxkYZ8z6dRHAZFiUOoi/0+IUc0xsjNeGpZMNu1ka890b0sWQ3Ib pF5TCn+P9X7g+vBlgrj6DJ11XrFZKGTOwY4WJQeI/h2CuBpviGzbFfEa9DX6iKfj Pd4db5lvjm7Y0TWJ712CewmkXtLGejPVHYC/q2o7fmydI3cwkh+yP4Dx3qW79lwg nUcnMBLoxXZkwzxsCbIqZ7DIVPsLjUM0jqa4tqINi1xCSd9dHPXU/5P5xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8g/F53elFOpv/ymeJZJLfPKcrtMB8GA1UdIwQY MBaAFCkZRhhEVJgkUAt80cRR2CS6blZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYt YjZlYTgyZjE5MjIwLzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYtYjZlYTgyZjE5MjIw LzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbju2sWLv +pvTFEJTVbjC8xSKftdjrtXPrOFcAWwj7F/JYXMr7Md1+h2EbhsDBK7B44p++InQ 7ydMSrvKOQqTzYUmyGLJbsavoUaqb6whjCJaZlXCyZauKITPrp1ODRvrkoYLE7MG UhqpKTXhVDVB1wqMf+WudkSDdoKkTP8Mk1Uq87/L9ne2qgb312KW1kqIO//0v8RE zuSHz6LoCH77653DNqvPEzbRw9/i1nM2iYVt9fOYlZtchTyF9YDKLDIBOS00PlE8 wVmxHIfuMWz/bsfiO3aeDqNmfpGf+dnFctZxBCN3QX+wkMaY6VoiUZpRtWldy33A z/shilm5mLI6rQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:18 2025 by rpki-client