This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json) Hash identifier: O/bdSoLmkWn9SEh6JDKbCJxu64oF55/COZHOepZ/Nmo= Subject key identifier: 82:FD:02:89:3D:7E:D3:51:49:04:A9:E8:E9:73:F1:DE:30:CC:CC:2F Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12 Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12 Certificate serial: 019AF50A3CE15266B8512BAEF920BD172F3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft Manifest number: 1689 Signing time: Sat 06 Dec 2025 19:01:20 +0000 Manifest this update: Sat 06 Dec 2025 19:01:20 +0000 Manifest next update: Sun 07 Dec 2025 19:01:20 +0000 Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=) 2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: 0rBXMwTNPu/UD538yVceOq/r0S+SrKDs8OODE4GLj8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:3c:e1:52:66:b8:51:2b:ae:f9:20:bd:17:2f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12 Validity Not Before: Dec 6 19:01:20 2025 GMT Not After : Dec 7 19:01:20 2025 GMT Subject: CN=82fd02893d7ed3514904a9e8e973f1de30cccc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:b4:23:ad:f8:03:e2:bf:fa:3a:ab:8d:ee: 83:a2:e0:01:e2:93:01:bb:39:4b:a7:14:03:31:7a: 16:01:19:86:bb:f5:a8:ab:34:51:7c:97:75:f4:64: 30:7b:24:91:9a:65:cb:96:e0:3b:af:a5:d5:e4:cb: c3:2e:f1:1d:e3:11:df:d3:1b:66:27:0d:58:4b:67: a3:93:81:69:c5:a2:a4:05:53:ec:34:bc:2b:27:f9: 8d:c3:05:20:2d:0e:c2:1a:8a:f0:a5:ef:f4:58:94: bf:5e:d6:6c:da:c8:66:3a:58:e3:97:9b:45:19:48: 29:74:9a:c7:01:5b:75:3c:2c:77:e6:4b:71:53:bf: 5c:2b:ff:e7:83:d1:23:26:a1:03:4e:ad:cc:76:5f: e1:61:c4:07:3b:66:bc:4c:5c:2d:e0:c8:c7:14:71: 86:ef:88:a9:a4:03:29:98:23:0f:17:06:c0:e4:0b: 92:3d:be:d7:48:fd:3c:fe:31:db:ee:82:e3:65:12: c7:4c:7f:c8:b1:f7:54:05:7f:f9:80:54:05:70:c7: 8e:b3:d2:1d:69:d9:98:3e:80:eb:1c:e5:89:26:ef: f9:8d:8f:15:c2:11:c2:a5:f0:c0:b6:8b:3f:34:12: 5a:69:91:f0:41:eb:4a:c5:44:db:bf:c9:82:4f:5e: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FD:02:89:3D:7E:D3:51:49:04:A9:E8:E9:73:F1:DE:30:CC:CC:2F X509v3 Authority Key Identifier: keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0d:fb:ce:63:1b:0b:84:7c:ba:43:de:a5:db:ac:32:b7:b8: f5:1b:68:3c:66:2e:3a:01:9c:4c:57:01:72:39:fb:3f:66:9b: 5d:47:b6:fe:e5:45:02:a6:41:10:65:1c:22:5a:25:4a:96:91: 01:cb:82:c7:8d:da:4c:1b:dd:75:41:af:7d:73:92:dd:38:bf: 5e:e9:01:f6:a0:a1:64:23:ea:a1:16:af:e8:1f:af:c5:26:48: 44:37:87:e9:92:de:ae:59:07:a0:89:cc:fa:58:72:1f:b4:e8: f1:8b:0b:75:cc:2b:41:9e:f8:02:62:66:d1:9b:56:b2:30:0d: 93:aa:a5:2a:49:97:d5:26:a6:98:9a:f5:f5:4a:d9:cf:b8:9c: a1:bb:82:1c:9f:04:78:17:bc:e3:83:eb:82:52:c4:61:f3:c3: 58:67:b3:fe:08:a8:da:c0:6d:3c:ff:66:4b:62:00:78:72:80: 93:b7:81:55:46:b2:98:57:96:84:35:54:50:84:03:1a:7e:eb: 41:f2:0a:26:3c:b2:12:72:8c:75:68:13:4e:57:b9:d5:4a:9e: 31:a8:96:c7:2f:33:8c:5e:24:99:0c:9b:e1:5d:9f:43:4e:cc: c2:1b:f3:bc:7b:d7:4d:3b:33:7a:64:bf:86:7b:2e:5b:c2:37: 84:2b:a2:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjzhUma4USuu+SC9Fy88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYjVhYzg4ZjJjZGIxNDkzNDgzMGMxYWMwOTZhNWVmNzMw OThmMTIwHhcNMjUxMjA2MTkwMTIwWhcNMjUxMjA3MTkwMTIwWjAzMTEwLwYDVQQD Eyg4MmZkMDI4OTNkN2VkMzUxNDkwNGE5ZThlOTczZjFkZTMwY2NjYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7O0I634A+K/+jqrje6DouAB4pMB uzlLpxQDMXoWARmGu/WoqzRRfJd19GQweySRmmXLluA7r6XV5MvDLvEd4xHf0xtm Jw1YS2ejk4FpxaKkBVPsNLwrJ/mNwwUgLQ7CGorwpe/0WJS/XtZs2shmOljjl5tF GUgpdJrHAVt1PCx35ktxU79cK//ng9EjJqEDTq3Mdl/hYcQHO2a8TFwt4MjHFHGG 74ippAMpmCMPFwbA5AuSPb7XSP08/jHb7oLjZRLHTH/IsfdUBX/5gFQFcMeOs9Id admYPoDrHOWJJu/5jY8VwhHCpfDAtos/NBJaaZHwQetKxUTbv8mCT15zPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIL9Aok9ftNRSQSp6Olz8d4wzMwvMB8GA1UdIwQY MBaAFJK1rIjyzbFJNIMMGsCWpe9zCY8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjct MzZjNDZmOTBkOWE1LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjctMzZjNDZmOTBkOWE1 LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXA37zmMb C4R8ukPepdusMre49RtoPGYuOgGcTFcBcjn7P2abXUe2/uVFAqZBEGUcIlolSpaR AcuCx43aTBvddUGvfXOS3Ti/XukB9qChZCPqoRav6B+vxSZIRDeH6ZLerlkHoInM +lhyH7To8YsLdcwrQZ74AmJm0ZtWsjANk6qlKkmX1SammJr19UrZz7icobuCHJ8E eBe844PrglLEYfPDWGez/gio2sBtPP9mS2IAeHKAk7eBVUaymFeWhDVUUIQDGn7r QfIKJjyyEnKMdWgTTle51UqeMaiWxy8zjF4kmQyb4V2fQ07MwhvzvHvXTTszemS/ hnsuW8I3hCuiTQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:34 2025 by rpki-client