This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft File: KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json) Hash identifier: Z12dQUmfIxIsj+RxT8wLAZPHRilyFGFXluh+1kK8yuk= Subject key identifier: 0A:79:1E:01:98:07:DB:20:66:F2:F1:D3:2B:A0:77:45:EE:ED:18:D6 Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2 Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2 Certificate serial: 019B2DB074E4BF81C0D7E186E60400BD7686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft Manifest number: 05A2 Signing time: Wed 17 Dec 2025 19:01:37 +0000 Manifest this update: Wed 17 Dec 2025 19:01:37 +0000 Manifest next update: Thu 18 Dec 2025 19:01:37 +0000 Files and hashes: 1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: uZl5UIaKug+9V68IW8xTNQW1UIuQL+L6+DDQw6U9050=) 2: lzjPjehPcPKbzhp_BORqJSFXL5w.roa (hash: o7m8VbYXK8WyV5y7PTGt6HIYSCCP18Dfj928jAcIW9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:74:e4:bf:81:c0:d7:e1:86:e6:04:00:bd:76:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2 Validity Not Before: Dec 17 19:01:37 2025 GMT Not After : Dec 18 19:01:37 2025 GMT Subject: CN=0a791e019807db2066f2f1d32ba07745eeed18d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:be:d2:1f:45:cf:f1:00:d2:0b:af:01:06:01: 8f:1d:e8:e9:02:70:d3:f8:22:1b:cb:6b:eb:cb:f8: 6a:18:d8:e7:a7:80:36:eb:1a:c5:16:db:70:d3:13: 18:d0:a7:04:e8:54:82:1f:0f:30:dc:8b:fe:30:4a: 93:ec:94:62:c7:60:13:f9:76:ed:6d:c6:27:0b:b9: 1b:59:3e:2a:f8:12:91:89:b9:50:ca:d9:f4:aa:64: d1:99:8a:a5:f3:f1:72:8c:a8:da:d2:9a:35:de:43: 5c:87:a2:26:21:e0:5a:4b:83:7a:71:e1:3b:d8:0c: 78:27:49:8c:18:8e:20:5e:b8:5f:f9:23:16:f8:d9: c3:3f:11:d7:3f:48:f6:e2:fb:b3:f4:1b:e9:b2:94: 42:b2:59:c8:14:d8:9a:ba:44:fa:a7:03:61:d9:a8: 3b:bc:09:30:6d:2c:fb:84:09:97:35:0e:01:b0:25: 2f:91:26:3b:32:dd:d5:94:26:1c:94:74:a5:3a:56: 75:9d:a4:5a:1a:29:68:8f:e0:52:b8:80:60:39:81: ed:3f:9c:bc:03:43:1a:72:8c:96:ee:58:15:b4:41: e7:89:fc:e7:33:3a:f3:52:d4:00:c5:33:b5:8d:96: f9:ed:e8:31:8f:da:f5:6f:41:c3:27:e5:0c:18:73: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:79:1E:01:98:07:DB:20:66:F2:F1:D3:2B:A0:77:45:EE:ED:18:D6 X509v3 Authority Key Identifier: keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a3:50:74:9a:61:bd:81:70:47:dc:47:51:7e:ae:31:2c:ce: ea:c4:b7:77:60:b2:9a:60:02:38:0a:9b:03:ad:8c:3f:94:92: 4c:74:9a:ab:31:2a:53:8d:42:4b:30:a3:16:b7:ca:7e:6a:1e: 96:a2:51:2e:c4:75:40:06:a8:82:cc:b2:ba:86:60:af:ee:c4: 3a:ca:0c:06:85:6a:f2:fa:08:68:b5:fb:e3:c4:d5:b4:41:3b: 30:dd:2c:c1:6e:f2:c8:66:ca:3b:cc:df:2b:55:1a:09:34:ec: aa:66:b9:bf:05:29:c0:10:55:98:17:88:5f:90:16:41:58:dc: 1c:13:16:f4:3c:24:06:15:57:02:ed:fc:14:9b:65:a3:ed:e5: 82:18:cb:01:39:e5:bc:f2:a7:4a:2c:ff:32:44:64:1b:fd:1f: 66:14:e7:1e:67:cb:0d:0c:23:3e:ec:8c:a3:05:13:57:98:1d: d5:1e:77:8f:dd:85:1f:73:23:cb:79:c3:90:35:99:06:8f:f0: 58:01:e2:a5:2e:e8:93:55:e9:08:18:32:04:57:b5:1d:64:5b: 7a:ad:6f:96:6b:d9:ef:94:55:da:86:a7:7e:90:54:bf:20:05: 17:9c:cd:30:18:16:0e:97:47:5d:8d:a7:c7:8b:e4:3f:99:df: 0b:b7:f4:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsHTkv4HA1+GG5gQAvXaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTk3YmM3MzMwZWE5OTkwMGY0ZmM5MTAzM2EzMzE3ZTU2 Zjc1ZTIwHhcNMjUxMjE3MTkwMTM3WhcNMjUxMjE4MTkwMTM3WjAzMTEwLwYDVQQD EygwYTc5MWUwMTk4MDdkYjIwNjZmMmYxZDMyYmEwNzc0NWVlZWQxOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL7SH0XP8QDSC68BBgGPHejpAnDT +CIby2vry/hqGNjnp4A26xrFFttw0xMY0KcE6FSCHw8w3Iv+MEqT7JRix2AT+Xbt bcYnC7kbWT4q+BKRiblQytn0qmTRmYql8/FyjKja0po13kNch6ImIeBaS4N6ceE7 2Ax4J0mMGI4gXrhf+SMW+NnDPxHXP0j24vuz9BvpspRCslnIFNiaukT6pwNh2ag7 vAkwbSz7hAmXNQ4BsCUvkSY7Mt3VlCYclHSlOlZ1naRaGiloj+BSuIBgOYHtP5y8 A0MacoyW7lgVtEHnifznMzrzUtQAxTO1jZb57egxj9r1b0HDJ+UMGHNrLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAp5HgGYB9sgZvLx0yugd0Xu7RjWMB8GA1UdIwQY MBaAFCkZe8czDqmZAPT8kQM6Mxflb3XiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMDQzYTctYjI3Ni00MGRjLTlmNjct MzUwMDRhZjVjOTM1LzEvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xMDQzYTctYjI3Ni00MGRjLTlmNjctMzUwMDRhZjVjOTM1 LzEvS1JsN3h6TU9xWmtBOVB5UkF6b3pGLVZ2ZGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYaNQdJph vYFwR9xHUX6uMSzO6sS3d2CymmACOAqbA62MP5SSTHSaqzEqU41CSzCjFrfKfmoe lqJRLsR1QAaogsyyuoZgr+7EOsoMBoVq8voIaLX748TVtEE7MN0swW7yyGbKO8zf K1UaCTTsqma5vwUpwBBVmBeIX5AWQVjcHBMW9DwkBhVXAu38FJtlo+3lghjLATnl vPKnSiz/MkRkG/0fZhTnHmfLDQwjPuyMowUTV5gd1R53j92FH3Mjy3nDkDWZBo/w WAHipS7ok1XpCBgyBFe1HWRbeq1vlmvZ75RV2oanfpBUvyAFF5zNMBgWDpdHXY2n x4vkP5nfC7f0Bg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:41:56 2025 by rpki-client