This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft File: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json) Hash identifier: ca/7MrEimrQZVoVrqPikmZrOpkbkF4XBN3pxiunaBtY= Subject key identifier: CF:57:FC:68:AF:57:E6:58:DF:8A:D9:41:4B:0E:5B:36:75:71:C7:1C Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4 Certificate issuer: /CN=2abb5cd85f525302fd04ff2b6721862b204064d4 Certificate serial: 019AF27733CF4393E7717480B670C649885F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft Manifest number: 0802 Signing time: Sat 06 Dec 2025 07:01:29 +0000 Manifest this update: Sat 06 Dec 2025 07:01:29 +0000 Manifest next update: Sun 07 Dec 2025 07:01:29 +0000 Files and hashes: 1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: h1FUToNP1dCWvSW6x7cbb5B0edAvL6yRtWrDPkv53j0=) 2: rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa (hash: jRbiNS0Ka01gqXF1TeFMzqMm+Pa1Z/+jEZGkmARhwF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:33:cf:43:93:e7:71:74:80:b6:70:c6:49:88:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4 Validity Not Before: Dec 6 07:01:29 2025 GMT Not After : Dec 7 07:01:29 2025 GMT Subject: CN=cf57fc68af57e658df8ad9414b0e5b367571c71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:82:04:45:b0:b9:94:66:50:16:c9:1e:b3:12: c8:fb:01:e7:06:3c:b3:2e:23:ef:75:5a:8d:8f:16: 54:c0:26:2a:fc:4c:3e:ca:29:53:91:39:33:18:9f: 6a:37:12:a2:aa:61:36:b0:0c:53:df:7e:e6:55:1c: 05:d4:9b:0a:bf:38:f3:35:b2:f1:27:1a:ff:87:e6: b5:94:b4:2d:44:6a:6f:d1:d1:4e:5a:e9:bf:a1:21: e1:c9:b6:a0:60:7b:91:8b:1a:79:1b:ce:08:9f:a8: a7:b8:3d:7b:5c:47:df:73:14:41:c0:99:ba:3e:11: 81:46:e3:fa:68:d6:bb:38:6b:da:dc:2b:9d:b1:ce: 19:52:b0:be:af:7a:43:b4:3f:2a:7b:60:2e:20:6f: 98:ee:a9:0a:08:fd:2d:6a:a4:dd:72:18:83:39:14: a0:7c:a6:08:ef:5a:ea:16:9a:c2:74:c3:7e:cb:41: a4:d2:44:77:fb:81:4c:6c:2b:be:a1:ca:60:8a:74: 57:3f:72:b7:e6:fa:82:9f:4a:ba:e4:e1:48:1a:a5: 87:9e:55:4e:0f:3e:9e:08:28:94:fb:bc:ed:80:65: 91:38:71:22:74:c7:54:cb:3d:42:a3:f3:b2:22:17: 37:95:59:96:10:3c:4a:a0:1f:ab:99:5a:f0:99:27: 5d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:57:FC:68:AF:57:E6:58:DF:8A:D9:41:4B:0E:5B:36:75:71:C7:1C X509v3 Authority Key Identifier: keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:e5:91:9d:38:03:56:ff:32:2f:a0:93:ba:e8:9b:2c:73:b8: e5:3d:a4:aa:31:c1:73:d0:ea:0b:f2:05:4f:5f:5d:68:eb:a3: b4:63:03:43:29:5e:a5:11:69:77:f2:bf:69:91:19:69:16:f3: 81:12:dc:16:4f:5c:e5:34:1e:b8:a4:3d:1b:2b:7a:6e:04:c2: a9:00:91:b8:89:67:6d:ff:2b:00:8a:2c:46:a0:83:8e:70:86: 8f:60:7b:87:c0:2e:ef:ef:13:37:0a:1b:7a:76:c8:a9:c1:30: b5:2c:b5:91:c3:d4:a1:23:92:41:bc:08:3a:48:53:f1:e1:4c: 9d:a1:a2:8c:9c:4a:f4:29:8c:8f:21:78:bd:3e:34:e9:82:c3: 0a:00:39:db:d7:c1:17:9d:37:74:bb:1e:02:11:ab:73:b5:2f: 3d:40:81:d6:42:dc:25:ed:c4:17:49:3c:97:c4:19:e3:95:7c: 1d:e3:3d:0a:4e:6d:ae:03:42:f1:d4:90:a8:9c:45:51:16:c2: e8:0f:dd:0b:4e:76:bf:41:9f:ed:35:c2:79:2d:53:88:ed:65: e3:75:60:04:41:58:53:b5:0b:c1:3f:9e:45:4a:3e:7a:34:e4: bb:ff:3f:5f:65:ff:9d:da:32:e6:bf:a3:ba:3e:94:a3:77:f8: 70:52:a5:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzPPQ5PncXSAtnDGSYhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYmI1Y2Q4NWY1MjUzMDJmZDA0ZmYyYjY3MjE4NjJiMjA0 MDY0ZDQwHhcNMjUxMjA2MDcwMTI5WhcNMjUxMjA3MDcwMTI5WjAzMTEwLwYDVQQD EyhjZjU3ZmM2OGFmNTdlNjU4ZGY4YWQ5NDE0YjBlNWIzNjc1NzFjNzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YIERbC5lGZQFskesxLI+wHnBjyz LiPvdVqNjxZUwCYq/Ew+yilTkTkzGJ9qNxKiqmE2sAxT337mVRwF1JsKvzjzNbLx Jxr/h+a1lLQtRGpv0dFOWum/oSHhybagYHuRixp5G84In6inuD17XEffcxRBwJm6 PhGBRuP6aNa7OGva3Cudsc4ZUrC+r3pDtD8qe2AuIG+Y7qkKCP0taqTdchiDORSg fKYI71rqFprCdMN+y0Gk0kR3+4FMbCu+ocpginRXP3K35vqCn0q65OFIGqWHnlVO Dz6eCCiU+7ztgGWROHEidMdUyz1Co/OyIhc3lVmWEDxKoB+rmVrwmSddIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9X/GivV+ZY34rZQUsOWzZ1ccccMB8GA1UdIwQY MBaAFCq7XNhfUlMC/QT/K2chhisgQGTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3J0YzJGOVNVd0w5QlA4clp5R0dLeUJBWk5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82OTA0ODItOWRlYy00OWYyLWFiNTUt NzIxZDI1MmYzNTI2LzEvS3J0YzJGOVNVd0w5QlA4clp5R0dLeUJBWk5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi82OTA0ODItOWRlYy00OWYyLWFiNTUtNzIxZDI1MmYzNTI2 LzEvS3J0YzJGOVNVd0w5QlA4clp5R0dLeUJBWk5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3eWRnTgD Vv8yL6CTuuibLHO45T2kqjHBc9DqC/IFT19daOujtGMDQylepRFpd/K/aZEZaRbz gRLcFk9c5TQeuKQ9Gyt6bgTCqQCRuIlnbf8rAIosRqCDjnCGj2B7h8Au7+8TNwob enbIqcEwtSy1kcPUoSOSQbwIOkhT8eFMnaGijJxK9CmMjyF4vT406YLDCgA529fB F503dLseAhGrc7UvPUCB1kLcJe3EF0k8l8QZ45V8HeM9Ck5trgNC8dSQqJxFURbC 6A/dC052v0Gf7TXCeS1TiO1l43VgBEFYU7ULwT+eRUo+ejTku/8/X2X/ndoy5r+j uj6Uo3f4cFKlJw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:11 2025 by rpki-client