This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json) Hash identifier: RIwBSGQf1FnsActVRMJqnhPCa8RjMv2oaTnUR5GUTP0= Subject key identifier: 56:71:A8:84:1B:90:07:BB:E4:B0:6F:7D:DB:EE:4C:E5:73:95:54:C8 Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5 Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5 Certificate serial: 019AF54086E8A0ED0AD2D96DF3924D1BA3D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 20:00:37 +0000 Manifest this update: Sat 06 Dec 2025 20:00:37 +0000 Manifest next update: Sun 07 Dec 2025 20:00:37 +0000 Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: /mz9tav9FKqhgttNJ5VcFPtlk3UpEdRA3kqCFb6MLnI=) 2: YzWazfZkDmpS6lnGJouGiR4vMgw.roa (hash: g+4T1wjwDSXCQUkHT41UwModEGJm2ijdNXqnxLEPkqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:86:e8:a0:ed:0a:d2:d9:6d:f3:92:4d:1b:a3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5 Validity Not Before: Dec 6 20:00:37 2025 GMT Not After : Dec 7 20:00:37 2025 GMT Subject: CN=5671a8841b9007bbe4b06f7ddbee4ce5739554c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:76:8f:43:6f:03:95:f3:67:0c:b6:08:a2:41: 78:82:c9:b6:30:63:9c:d3:58:30:22:03:67:a9:25: c3:77:6b:b6:d8:97:ee:c7:55:35:0b:2c:d7:66:eb: f2:eb:bf:b7:d1:35:0f:13:11:fb:17:fa:a7:0d:39: 1c:2b:f4:cc:52:c9:80:87:ed:be:5d:54:1f:48:1d: 00:f2:f3:77:1e:77:77:e7:5b:da:82:57:49:fc:e4: ed:00:84:4d:33:5b:01:4c:99:2e:40:1a:a9:7d:97: 15:1c:a1:56:3c:8f:f8:29:98:90:a9:a1:fc:5d:66: a2:23:51:2a:fa:c3:42:cf:db:ca:ca:ec:ab:c1:fd: 7e:68:9c:e0:7e:69:1c:8a:9b:97:6b:ca:75:34:2c: 81:93:b7:17:06:79:73:d0:4d:0a:1c:cb:24:93:7b: 48:35:10:87:39:6e:71:72:ca:cb:a0:c3:ac:78:8c: fc:cd:b0:ec:bc:3c:2d:ef:47:42:d7:30:25:cb:1a: b9:31:4a:b7:70:13:e6:44:fd:c6:3a:7e:27:22:40: 05:d6:06:89:de:a2:7d:8c:c4:41:9f:f5:d7:1a:1f: 05:84:62:16:de:e2:61:95:5b:e8:e1:18:61:9b:1b: 8d:b4:68:c6:0c:21:dd:1c:4b:a7:b7:11:59:16:c2: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:71:A8:84:1B:90:07:BB:E4:B0:6F:7D:DB:EE:4C:E5:73:95:54:C8 X509v3 Authority Key Identifier: keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ca:78:db:48:8d:53:c7:99:8e:9d:8c:70:3a:00:9d:e9:29: 86:56:d6:0f:e9:55:f9:37:95:61:bb:f1:62:24:17:59:40:4a: ad:b6:2a:bf:1b:2e:6c:b1:6d:e3:81:0d:3c:00:06:75:c7:61: d9:cf:57:05:a8:73:3e:62:8a:a4:9a:1e:f9:2a:df:d9:98:cf: 94:53:45:1d:6f:45:33:0d:c0:83:49:61:1c:f9:7f:e0:12:f5: 31:df:cb:95:e5:56:e0:a3:d3:87:38:9c:c4:77:4c:25:04:83: a7:14:08:69:eb:61:dc:11:a1:5f:ec:cb:44:06:40:4b:6d:b5: 69:f1:9e:b0:99:7b:f3:75:0d:2b:3d:55:55:2b:b9:10:0e:25: 3d:c1:e3:7d:1d:a5:b8:c6:fe:7e:43:55:81:cd:93:df:37:e6: e2:12:98:08:53:76:2a:ff:bb:73:cc:a1:d0:d5:19:04:6d:e4: 23:f3:82:37:6b:c7:e4:cb:34:86:ab:5e:25:9b:17:ff:64:64: e7:bd:8f:92:23:66:62:f9:ff:f5:85:09:d9:37:7e:e4:83:dc: de:a3:1c:b9:c3:3c:ce:7c:65:f6:2d:67:2e:6e:eb:08:ba:02: ba:7f:2d:32:20:6e:3b:03:e4:56:a9:c2:8d:7f:e2:a5:d1:9b: 40:26:a6:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QIbooO0K0tlt85JNG6PTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNDJhYjE1NmQ1YWUxNTNhZDE2NTI4ZTg3ZDljODQ3OWRj MGE0YTUwHhcNMjUxMjA2MjAwMDM3WhcNMjUxMjA3MjAwMDM3WjAzMTEwLwYDVQQD Eyg1NjcxYTg4NDFiOTAwN2JiZTRiMDZmN2RkYmVlNGNlNTczOTU1NGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5naPQ28DlfNnDLYIokF4gsm2MGOc 01gwIgNnqSXDd2u22Jfux1U1CyzXZuvy67+30TUPExH7F/qnDTkcK/TMUsmAh+2+ XVQfSB0A8vN3Hnd351vagldJ/OTtAIRNM1sBTJkuQBqpfZcVHKFWPI/4KZiQqaH8 XWaiI1Eq+sNCz9vKyuyrwf1+aJzgfmkcipuXa8p1NCyBk7cXBnlz0E0KHMskk3tI NRCHOW5xcsrLoMOseIz8zbDsvDwt70dC1zAlyxq5MUq3cBPmRP3GOn4nIkAF1gaJ 3qJ9jMRBn/XXGh8FhGIW3uJhlVvo4RhhmxuNtGjGDCHdHEuntxFZFsI+pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZxqIQbkAe75LBvfdvuTOVzlVTIMB8GA1UdIwQY MBaAFNNCqxVtWuFTrRZSjofZyEedwKSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUt MDgxYTYzN2Y3MDNlLzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUtMDgxYTYzN2Y3MDNl LzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcp420iN U8eZjp2McDoAnekphlbWD+lV+TeVYbvxYiQXWUBKrbYqvxsubLFt44ENPAAGdcdh 2c9XBahzPmKKpJoe+Srf2ZjPlFNFHW9FMw3Ag0lhHPl/4BL1Md/LleVW4KPThzic xHdMJQSDpxQIaeth3BGhX+zLRAZAS221afGesJl783UNKz1VVSu5EA4lPcHjfR2l uMb+fkNVgc2T3zfm4hKYCFN2Kv+7c8yh0NUZBG3kI/OCN2vH5Ms0hqteJZsX/2Rk 572PkiNmYvn/9YUJ2Td+5IPc3qMcucM8znxl9i1nLm7rCLoCun8tMiBuOwPkVqnC jX/ipdGbQCamPw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:41 2025 by rpki-client