This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft File: KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json) Hash identifier: dR5CMCwsotKHq2iX/bPW5n/rC7mJgHYuPpCZLeAZF+8= Subject key identifier: 99:E5:ED:21:DD:D7:8A:A4:17:67:4C:41:63:EF:25:50:18:A9:F8:13 Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2 Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2 Certificate serial: 019AF1D24A9D22DC2C8D291A94808CFFB4DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft Manifest number: 0583 Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: LYhmhuTbxgEi5I8n8K3rDetLVvyfxaKbosomKUsG0wU=) 2: lzjPjehPcPKbzhp_BORqJSFXL5w.roa (hash: o7m8VbYXK8WyV5y7PTGt6HIYSCCP18Dfj928jAcIW9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4a:9d:22:dc:2c:8d:29:1a:94:80:8c:ff:b4:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2 Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=99e5ed21ddd78aa417674c4163ef255018a9f813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:14:6c:2c:f0:1b:2d:b1:f1:38:5d:26:61:75: 3f:ce:87:27:31:9c:39:67:c7:f0:7a:45:fb:fe:76: 62:a2:43:11:e1:19:ce:8f:7a:d3:3f:4a:91:1b:71: 40:31:8a:81:23:66:5f:fb:76:41:64:e4:e0:6b:f2: ce:61:07:d9:0b:9e:cc:0b:12:e0:93:ba:de:ee:b3: 90:1e:5d:63:5e:f6:f5:1d:70:4b:b7:33:7c:64:62: e2:34:e2:76:19:59:6b:a1:63:12:49:2f:80:34:d2: 7b:76:7c:fc:1a:5a:98:3d:79:d5:e6:f4:ec:66:03: ad:88:87:ed:88:6a:ba:13:7d:d4:f3:f1:25:3b:82: 59:7f:bf:f2:4d:56:2a:87:cc:05:72:b7:b0:54:1d: a6:5b:6d:e3:e9:80:32:52:cf:ba:53:14:28:fb:42: d9:af:91:5b:82:b1:9a:68:5f:a5:b7:7d:75:76:d5: 32:65:1a:15:32:eb:a3:cc:36:d9:9b:25:4c:d5:4f: f7:a3:95:d7:66:5d:4a:68:f3:bb:0c:13:1c:b1:f1: 3c:04:3d:d8:60:68:5b:bc:b4:64:18:eb:e0:30:d2: 2e:42:7e:a2:56:b8:8e:3a:d2:d2:bc:c3:61:01:35: 15:e4:53:07:41:35:40:8d:cf:e5:5d:ba:5a:64:22: f6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E5:ED:21:DD:D7:8A:A4:17:67:4C:41:63:EF:25:50:18:A9:F8:13 X509v3 Authority Key Identifier: keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:26:97:80:c7:16:92:9d:65:ce:ed:06:34:57:33:ee:ab:1f: d7:c8:24:e9:29:00:9f:9a:1a:87:d0:96:0d:d7:65:21:6c:c0: cf:df:86:e8:88:a1:69:8b:85:70:b9:6b:2f:c0:c5:e5:36:fd: 56:d5:60:28:bd:d8:49:8a:08:43:30:94:ec:42:16:4e:5c:1a: 7a:fc:3b:15:18:48:03:85:00:a4:86:52:12:ea:be:dc:9f:f3: 63:64:57:78:90:eb:d8:15:e7:75:26:9e:95:8a:a5:04:91:49: 89:35:f7:73:01:6a:e4:25:09:50:70:d6:58:d8:71:a0:6b:b6: 97:91:3b:4d:5a:51:52:2b:15:f7:2a:28:ce:02:b5:cf:a1:c8: 34:14:67:1d:21:50:4a:3b:fc:b3:e1:c3:68:b9:a6:4b:8c:4f: 2f:83:59:f2:fc:92:88:af:05:13:91:aa:a6:62:67:82:03:6a: b3:3f:2a:e7:af:77:4f:87:a5:cf:af:1f:10:38:86:0f:db:19: 33:fd:44:85:3e:39:8d:7d:06:12:56:b8:52:ea:2a:b8:aa:36: 7f:b9:96:68:35:3f:ea:31:c2:1e:f8:86:fa:45:fb:2b:73:4d: 71:95:83:42:b6:4b:32:2a:41:ec:30:c6:24:b3:52:3e:e4:b9: 38:1a:7a:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kqdItwsjSkalICM/7TdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTk3YmM3MzMwZWE5OTkwMGY0ZmM5MTAzM2EzMzE3ZTU2 Zjc1ZTIwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD Eyg5OWU1ZWQyMWRkZDc4YWE0MTc2NzRjNDE2M2VmMjU1MDE4YTlmODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BRsLPAbLbHxOF0mYXU/zocnMZw5 Z8fwekX7/nZiokMR4RnOj3rTP0qRG3FAMYqBI2Zf+3ZBZOTga/LOYQfZC57MCxLg k7re7rOQHl1jXvb1HXBLtzN8ZGLiNOJ2GVlroWMSSS+ANNJ7dnz8GlqYPXnV5vTs ZgOtiIftiGq6E33U8/ElO4JZf7/yTVYqh8wFcrewVB2mW23j6YAyUs+6UxQo+0LZ r5FbgrGaaF+lt311dtUyZRoVMuujzDbZmyVM1U/3o5XXZl1KaPO7DBMcsfE8BD3Y YGhbvLRkGOvgMNIuQn6iVriOOtLSvMNhATUV5FMHQTVAjc/lXbpaZCL26QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnl7SHd14qkF2dMQWPvJVAYqfgTMB8GA1UdIwQY MBaAFCkZe8czDqmZAPT8kQM6Mxflb3XiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMDQzYTctYjI3Ni00MGRjLTlmNjct MzUwMDRhZjVjOTM1LzEvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xMDQzYTctYjI3Ni00MGRjLTlmNjctMzUwMDRhZjVjOTM1 LzEvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyaXgMcW kp1lzu0GNFcz7qsf18gk6SkAn5oah9CWDddlIWzAz9+G6IihaYuFcLlrL8DF5Tb9 VtVgKL3YSYoIQzCU7EIWTlwaevw7FRhIA4UApIZSEuq+3J/zY2RXeJDr2BXndSae lYqlBJFJiTX3cwFq5CUJUHDWWNhxoGu2l5E7TVpRUisV9yoozgK1z6HINBRnHSFQ Sjv8s+HDaLmmS4xPL4NZ8vySiK8FE5GqpmJnggNqsz8q5693T4elz68fEDiGD9sZ M/1EhT45jX0GEla4UuoquKo2f7mWaDU/6jHCHviG+kX7K3NNcZWDQrZLMipB7DDG JLNSPuS5OBp6CA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:20 2025 by rpki-client