This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File: KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier: TKBV0gYXMgpLc6W7hChzhiC/tL0qVbuqQq9TlWsrkQ0=
Subject key identifier: AD:E5:7A:59:85:A7:AC:33:FD:83:6C:AB:FA:05:82:07:24:63:AD:E9
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 019AF19B4A613E64DD899E3A6E72BD88EED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number: 1765
Signing time: Sat 06 Dec 2025 03:01:17 +0000
Manifest this update: Sat 06 Dec 2025 03:01:17 +0000
Manifest next update: Sun 07 Dec 2025 03:01:17 +0000
Files and hashes: 1: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: fCfOb6kLlBTM4+IJff9kXVQ3eQxBJKHl99ZKpnendj8=)
2: iinwbjaCpK6V8_stsXvEKtBkl8w.roa (hash: M1V1vtHFjPXfduw3ijubEwFy3tYmjuQ7qndUwyTCfGk=)
3: uJWKugGWqtQl6VVyKAzx1i_N0aA.roa (hash: BJfTtZgXbkNAvLFFTKLvaiDNDprXBJ4/kR9lJ8wjqSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:4a:61:3e:64:dd:89:9e:3a:6e:72:bd:88:ee:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Dec 6 03:01:17 2025 GMT
Not After : Dec 7 03:01:17 2025 GMT
Subject: CN=ade57a5985a7ac33fd836cabfa0582072463ade9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:e9:b1:b9:55:9c:a6:f2:1e:4a:84:f3:24:
de:a5:b6:79:e8:a4:a2:9e:21:4a:04:3a:69:9a:ef:
0f:38:19:09:2e:75:ce:77:1f:62:7a:95:df:99:61:
07:12:10:43:27:62:43:b8:9c:23:2b:7d:81:61:1f:
17:5f:25:75:88:f4:70:e3:09:33:13:2c:9c:0a:82:
02:e0:61:ee:3d:d1:c8:44:cf:bd:9b:56:81:8a:81:
0b:f5:08:2b:e2:ed:77:c8:a2:54:57:04:0d:6c:b5:
36:ab:6d:7d:9c:dd:d9:34:1c:5a:85:fc:9e:99:5b:
78:13:1c:77:6e:8d:d3:21:74:1a:9c:ed:f7:b3:7e:
25:0d:76:db:d2:11:7d:66:f8:bc:fb:af:cc:f0:81:
d5:d0:8e:1a:ad:a1:33:ac:fc:66:c1:20:e3:88:25:
15:ed:02:f5:41:92:5d:2a:2d:6a:4f:b1:25:79:94:
8c:e9:f2:25:fc:bb:52:83:2d:b3:25:3c:42:4d:d0:
df:ac:a5:1b:19:83:a4:db:16:e5:fd:c5:93:fe:9b:
f8:55:4f:9e:96:00:33:33:16:52:dd:07:3e:13:c9:
d8:6c:17:ac:4d:9c:59:b5:36:0f:fc:df:29:f0:f3:
36:25:86:69:6f:44:73:a9:e2:79:5f:55:ef:1a:9f:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E5:7A:59:85:A7:AC:33:FD:83:6C:AB:FA:05:82:07:24:63:AD:E9
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3a:a7:b0:cc:4d:e2:a4:6d:f2:e8:fe:78:4d:81:fb:23:a7:
65:c9:0a:ef:83:bf:09:53:69:a9:ed:fa:bd:a1:1a:e9:0f:6e:
ff:8b:11:2f:8c:0f:20:a7:47:0f:0b:1f:d7:8d:45:69:71:37:
01:ce:ae:28:44:68:24:92:20:a4:b7:65:ba:87:3d:f2:e5:3c:
23:4c:69:a5:cf:bd:9d:a0:9d:ed:88:ca:b2:e2:f0:f8:3e:91:
30:58:15:80:d9:7a:26:9c:bb:f0:9f:2e:39:0f:1b:ad:fb:a0:
b0:ec:c0:5a:f4:69:99:a7:b0:aa:e6:77:58:d2:01:d5:b8:3f:
0b:9c:88:63:3c:18:aa:90:0c:57:3b:82:e4:10:5b:f6:a1:23:
27:d4:0a:38:a4:f8:83:57:1e:89:c7:7f:b0:eb:9c:13:06:01:
b0:95:ee:78:44:13:86:36:80:5f:12:33:98:b5:54:4e:97:98:
8c:2e:40:0e:58:03:55:a3:b7:94:a7:06:fa:d9:34:96:32:d5:
5c:81:09:12:35:b7:6d:bb:89:2e:05:9a:0e:e1:31:d4:b0:50:
63:61:1b:f6:4f:2b:03:34:4e:a5:e7:59:58:a5:af:77:21:2e:
58:7a:2f:ae:2e:4b:06:0e:75:c2:6b:8e:a9:d7:ec:bd:8e:13:
8e:ff:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:57:32 2025 by rpki-client