This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft File: 0krezYS7F0i9NbmezqRncuAeyTU.mft (raw, json) Hash identifier: wKlOflnulpEIj6itYB5c3H+hO3uhg45FtlomR1b93zQ= Subject key identifier: 05:1C:73:9A:47:EF:FF:A2:F6:DE:A3:57:83:04:EB:E7:FC:C9:93:4E Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35 Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935 Certificate serial: 019AF5AE6458E9D7EF244A32A9D23B9EDD43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 22:00:37 +0000 Manifest this update: Sat 06 Dec 2025 22:00:37 +0000 Manifest next update: Sun 07 Dec 2025 22:00:37 +0000 Files and hashes: 1: 0krezYS7F0i9NbmezqRncuAeyTU.crl (hash: voH9xUcLS/mzmtG8wbt5mt7jQC88Bd2Mtjx6optlGRQ=) 2: UON5AT9SXUWq39L68I_y2_ZUikk.roa (hash: JwjZjFuzIaj/y6AQtmJH9bJqGEr4cg/qlCiSjx+pXxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:64:58:e9:d7:ef:24:4a:32:a9:d2:3b:9e:dd:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935 Validity Not Before: Dec 6 22:00:37 2025 GMT Not After : Dec 7 22:00:37 2025 GMT Subject: CN=051c739a47efffa2f6dea3578304ebe7fcc9934e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:58:4f:70:6f:d1:41:78:fa:db:0d:35:0d: 55:32:e6:26:39:fd:10:5e:be:0f:2c:31:ec:9d:0e: ea:66:28:ce:f4:d7:6a:1c:12:d6:f0:d5:41:5e:d1: 3a:29:60:2d:6a:68:b4:e5:0c:67:dc:15:16:82:73: 79:3f:90:ec:03:3d:a9:3d:72:0c:3f:aa:24:14:51: a7:3f:58:1a:7d:07:69:bc:ed:09:8b:b1:ec:6c:b3: 7f:e0:5a:84:01:df:f2:8c:be:09:3b:b6:1f:35:d5: ce:a3:ee:e7:ef:3c:6e:e6:21:8a:00:88:78:b4:f4: 4c:bb:1b:4a:39:28:5e:fc:23:d6:44:95:62:f9:61: da:8b:f9:1a:97:d7:47:5a:56:b2:d2:94:f8:19:92: 3a:5a:10:51:3a:be:25:12:3c:31:42:89:d6:9e:35: ca:52:98:09:8e:1c:36:9a:fa:f5:85:96:46:d2:9f: e4:8e:8e:1e:1b:5d:89:c6:7b:25:16:78:97:ea:a8: 4e:8b:67:27:ec:96:b2:94:66:d1:45:e7:0f:3e:4a: cd:79:7b:2b:1f:c0:46:51:b9:b9:18:37:4b:c3:89: fa:f3:92:c7:08:d2:6c:b1:42:c8:2e:1c:8c:70:28: 93:ae:6d:cb:e3:db:ab:ea:11:22:ee:9d:36:0f:16: b9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1C:73:9A:47:EF:FF:A2:F6:DE:A3:57:83:04:EB:E7:FC:C9:93:4E X509v3 Authority Key Identifier: keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:48:b3:9a:4c:3b:0a:46:56:44:fe:30:ab:d8:db:0a:17:d8: 79:f3:5a:ed:9b:2d:49:37:e7:74:94:94:21:51:7b:5a:de:00: 39:d4:1a:a8:c4:2c:b4:e6:5f:40:36:75:37:b9:7c:c4:86:71: 98:17:1d:d8:22:4d:c7:37:f3:56:38:ca:9e:ec:12:18:1c:70: 5e:36:56:e9:1e:e4:e7:e1:cf:f9:7e:50:ee:e3:08:65:66:83: 04:58:07:30:93:fd:a0:f6:d9:4f:97:9e:fa:68:18:f7:4f:52: a9:26:bc:b5:6e:8b:1b:6f:fe:ea:41:c2:bd:d1:64:1d:2d:98: a0:15:d5:2e:14:68:a3:c3:b0:27:a1:d7:b0:b0:49:86:25:d1: bd:13:ff:e5:82:46:33:e6:28:36:c5:b7:6e:b7:af:b8:78:68: 3d:4d:6a:ec:f2:5e:6d:33:80:d3:78:c0:20:83:e6:5c:9f:53: ba:f3:45:0f:08:9e:98:fd:f3:0d:d1:97:ad:9f:07:e8:55:4c: ba:33:ff:bf:e5:55:4a:98:3e:2a:4a:be:3a:63:56:fc:cb:66: 4f:ef:34:9b:55:e8:00:b7:3e:d6:48:9c:1c:bb:f5:8e:cf:ea: 9e:7f:49:34:96:9b:29:1b:fd:f4:5d:cf:93:ef:c7:ae:5c:38: db:bf:12:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rmRY6dfvJEoyqdI7nt1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNGFkZWNkODRiYjE3NDhiZDM1Yjk5ZWNlYTQ2NzcyZTAx ZWM5MzUwHhcNMjUxMjA2MjIwMDM3WhcNMjUxMjA3MjIwMDM3WjAzMTEwLwYDVQQD EygwNTFjNzM5YTQ3ZWZmZmEyZjZkZWEzNTc4MzA0ZWJlN2ZjYzk5MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKBYT3Bv0UF4+tsNNQ1VMuYmOf0Q Xr4PLDHsnQ7qZijO9NdqHBLW8NVBXtE6KWAtami05Qxn3BUWgnN5P5DsAz2pPXIM P6okFFGnP1gafQdpvO0Ji7HsbLN/4FqEAd/yjL4JO7YfNdXOo+7n7zxu5iGKAIh4 tPRMuxtKOShe/CPWRJVi+WHai/kal9dHWlay0pT4GZI6WhBROr4lEjwxQonWnjXK UpgJjhw2mvr1hZZG0p/kjo4eG12JxnslFniX6qhOi2cn7JaylGbRRecPPkrNeXsr H8BGUbm5GDdLw4n685LHCNJssULILhyMcCiTrm3L49ur6hEi7p02Dxa5UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUcc5pH7/+i9t6jV4ME6+f8yZNOMB8GA1UdIwQY MBaAFNJK3s2EuxdIvTW5ns6kZ3LgHsk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS82M2E4NDUtOGMwOS00ZDY5LWE3NzEt NDhhNjA3YmJlMjVlLzEvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS82M2E4NDUtOGMwOS00ZDY5LWE3NzEtNDhhNjA3YmJlMjVl LzEvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkizmkw7 CkZWRP4wq9jbChfYefNa7ZstSTfndJSUIVF7Wt4AOdQaqMQstOZfQDZ1N7l8xIZx mBcd2CJNxzfzVjjKnuwSGBxwXjZW6R7k5+HP+X5Q7uMIZWaDBFgHMJP9oPbZT5ee +mgY909SqSa8tW6LG2/+6kHCvdFkHS2YoBXVLhRoo8OwJ6HXsLBJhiXRvRP/5YJG M+YoNsW3brevuHhoPU1q7PJebTOA03jAIIPmXJ9TuvNFDwiemP3zDdGXrZ8H6FVM ujP/v+VVSpg+Kkq+OmNW/MtmT+80m1XoALc+1kicHLv1js/qnn9JNJabKRv99F3P k+/Hrlw4278S3w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:53 2025 by rpki-client