This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json) Hash identifier: CsKDI6SszCMHtPQdLpq95KlxFKAce83NFhOh2FlwK60= Subject key identifier: 85:A2:03:F8:B5:FE:95:17:A0:72:0A:01:24:D0:3B:70:C2:E9:63:16 Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0 Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0 Certificate serial: 019AF19B4B52922AD14BAA6EF6CEE0D0AE90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft Manifest number: 146F Signing time: Sat 06 Dec 2025 03:01:17 +0000 Manifest this update: Sat 06 Dec 2025 03:01:17 +0000 Manifest next update: Sun 07 Dec 2025 03:01:17 +0000 Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: LV1sVDZPzDjWdhdFlhDVOgDc6uzSA1TwpXleQ+spJFc=) 2: UtENKEhEm8aI0Ou7bKpM_GJZgfw.roa (hash: uJUKEvtya4FeDlxGJPwjMFWIfPRKUsKW7PNJHjdDHAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4b:52:92:2a:d1:4b:aa:6e:f6:ce:e0:d0:ae:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0 Validity Not Before: Dec 6 03:01:17 2025 GMT Not After : Dec 7 03:01:17 2025 GMT Subject: CN=85a203f8b5fe9517a0720a0124d03b70c2e96316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7c:9b:2b:cd:31:fc:57:ac:4b:97:b9:c0:a9: b0:b2:cb:03:9f:da:4b:66:54:18:19:e6:4a:41:34: 8d:fc:cf:df:2a:9e:92:1e:ac:4e:61:2f:22:80:26: 1f:45:e5:9a:52:f2:d1:28:d3:ca:b9:12:ca:73:dd: 05:ce:db:01:a5:8a:08:9b:c5:4a:25:56:23:8a:36: 50:a0:e2:3e:dd:86:e3:27:aa:dc:0e:23:66:c3:e8: 6e:b9:78:b9:c7:2d:8f:47:3c:ee:fc:c4:75:8b:33: a2:52:d3:f7:fb:62:fd:e9:ae:8b:c9:f0:53:66:f2: ee:c5:06:21:2b:4a:b3:bc:43:c8:95:12:e4:43:96: 27:8d:17:db:ae:fa:ac:9d:b1:b7:de:7e:c6:ea:84: 36:02:82:87:93:92:68:6e:67:1e:1b:bb:51:a4:6c: 82:4f:ee:af:84:ac:10:14:9e:f8:f6:37:39:f6:c0: 4c:bb:f1:e2:96:6d:bd:bc:c7:9d:79:da:b6:cd:b4: 4f:fd:0d:dd:ff:5a:06:12:58:13:2e:bc:f5:bc:a1: 3c:c1:f2:3a:ba:79:60:09:8d:41:c1:2f:d6:6b:a1: a9:82:34:b3:6e:69:96:8d:de:9b:d4:f4:1c:6e:6f: e8:9c:6f:0c:65:93:a4:dd:05:79:ad:74:44:34:dc: d9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A2:03:F8:B5:FE:95:17:A0:72:0A:01:24:D0:3B:70:C2:E9:63:16 X509v3 Authority Key Identifier: keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5c:99:8c:74:5e:3e:41:9b:f6:da:a1:e5:86:cd:cb:94:41: c1:9a:64:cf:b8:21:d6:19:63:00:1b:13:c4:5f:e9:db:03:00: d3:38:12:a7:36:2c:56:82:83:0f:c5:63:64:82:92:62:23:e7: b8:3f:d3:32:44:33:87:6a:96:e1:0f:dc:8d:f8:bb:15:58:27: 95:fb:09:24:0f:b4:ae:9b:98:f2:ac:f6:e9:b6:73:74:3d:26: 94:b0:ab:2a:66:92:da:2a:b0:4a:30:8e:e2:a7:b3:02:48:c3: 80:36:53:b6:91:4b:e5:24:c9:04:34:ec:4a:d8:20:6c:20:15: 01:cb:43:69:bf:29:e0:21:fc:ea:4b:3d:b5:e3:c3:94:6a:dc: 4e:93:3f:5e:c7:89:5d:e1:07:24:6f:a9:34:74:6f:f5:3f:33: d8:8c:a5:99:aa:e8:c1:d3:04:cc:94:ad:13:c6:0a:ce:2a:e0: c7:a0:25:bf:c1:97:57:25:09:ad:c2:51:ce:d7:20:40:0c:21: 66:99:73:a7:f2:3c:3c:ac:7c:19:d9:5c:89:2e:d0:f1:ec:9d: e5:23:96:6d:9a:70:c0:c9:11:98:a3:d1:09:9e:3e:48:35:a4: 69:03:13:ed:c3:42:77:f4:8b:1d:f4:75:1e:d3:5b:a5:85:2b: 35:7b:05:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0tSkirRS6pu9s7g0K6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MWQ4M2MzZjRiODc3Y2Y3ZDA4NGNiNTMwYzRhOWUzNmZj ZjdhZDAwHhcNMjUxMjA2MDMwMTE3WhcNMjUxMjA3MDMwMTE3WjAzMTEwLwYDVQQD Eyg4NWEyMDNmOGI1ZmU5NTE3YTA3MjBhMDEyNGQwM2I3MGMyZTk2MzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHybK80x/FesS5e5wKmwsssDn9pL ZlQYGeZKQTSN/M/fKp6SHqxOYS8igCYfReWaUvLRKNPKuRLKc90FztsBpYoIm8VK JVYjijZQoOI+3YbjJ6rcDiNmw+huuXi5xy2PRzzu/MR1izOiUtP3+2L96a6LyfBT ZvLuxQYhK0qzvEPIlRLkQ5YnjRfbrvqsnbG33n7G6oQ2AoKHk5JobmceG7tRpGyC T+6vhKwQFJ749jc59sBMu/Hilm29vMededq2zbRP/Q3d/1oGElgTLrz1vKE8wfI6 unlgCY1BwS/Wa6GpgjSzbmmWjd6b1PQcbm/onG8MZZOk3QV5rXRENNzZ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWiA/i1/pUXoHIKASTQO3DC6WMWMB8GA1UdIwQY MBaAFCkdg8P0uHfPfQhMtTDEqeNvz3rQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYt ZmZjZDQ3NzM0OWZjLzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYtZmZjZDQ3NzM0OWZj LzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1yZjHRe PkGb9tqh5YbNy5RBwZpkz7gh1hljABsTxF/p2wMA0zgSpzYsVoKDD8VjZIKSYiPn uD/TMkQzh2qW4Q/cjfi7FVgnlfsJJA+0rpuY8qz26bZzdD0mlLCrKmaS2iqwSjCO 4qezAkjDgDZTtpFL5STJBDTsStggbCAVActDab8p4CH86ks9tePDlGrcTpM/XseJ XeEHJG+pNHRv9T8z2IylmarowdMEzJStE8YKzirgx6Alv8GXVyUJrcJRztcgQAwh Zplzp/I8PKx8GdlciS7Q8eyd5SOWbZpwwMkRmKPRCZ4+SDWkaQMT7cNCd/SLHfR1 HtNbpYUrNXsF2w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:08 2025 by rpki-client