This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft File: KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft (raw, json) Hash identifier: R17QqDuAV4zY7V0IQQAQqPA6WFTNmehZ+YgAfD2Xfzo= Subject key identifier: 7B:B3:71:F5:C5:76:F2:56:5F:E8:06:6A:E6:FB:84:EE:2B:36:3E:41 Authority key identifier: 29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3 Certificate issuer: /CN=29184647248b55523999cbb7fe5b20a99fe73be3 Certificate serial: 019AF1640E39C3B89E7AF7F976789E96BCA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl (hash: Y8PcJhhVaxgGh1c9M17wmwM/7jmhzUOT+8sMkxBQjPs=) 2: be3Xk9pNKz5fO0j2jzivTfhyiiM.roa (hash: bsSd5F64tTbetVVoY+neNE5lEskWYAlXiyMGJS0XuJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0e:39:c3:b8:9e:7a:f7:f9:76:78:9e:96:bc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29184647248b55523999cbb7fe5b20a99fe73be3 Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=7bb371f5c576f2565fe8066ae6fb84ee2b363e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:ea:f2:ec:06:c6:3e:c1:59:68:fd:02:65: a4:6a:86:09:e2:b1:c0:61:6b:2f:36:48:dc:9b:3d: 8b:d5:fa:32:dd:b2:df:fb:ce:93:f7:47:6d:78:8b: d5:2f:8e:23:c8:c1:f4:3b:44:dc:2d:66:2f:08:92: 01:ad:02:21:79:e5:7a:3b:ce:7f:6b:80:f1:e1:dd: fc:7b:b6:e9:d5:b5:c6:65:1a:5b:e9:0f:c3:f7:d4: 5a:d6:cd:ee:82:7e:3a:91:81:97:cb:ae:d8:db:02: 3a:12:bc:79:3d:4a:c9:53:0c:46:2b:a5:59:f2:c0: 31:ac:1c:49:3b:37:ee:df:d6:7d:4e:03:12:28:e1: da:30:ca:01:06:bb:e7:88:d1:2d:11:60:fb:f3:08: 2b:5d:58:57:59:74:df:4a:40:57:6e:61:b4:42:43: 19:d4:fd:ef:bc:66:d3:24:4b:22:d6:32:b1:dc:d3: 3b:33:66:27:cb:f0:fe:ee:c7:cd:4c:64:74:0a:8f: ad:76:aa:b7:4d:6c:88:b7:b4:90:8e:5a:cb:48:fd: 87:ad:39:ee:b6:40:11:e2:cd:51:7e:15:25:a5:b3: b5:d3:9e:b9:d4:69:b7:36:aa:cf:44:26:eb:cb:a3: 33:51:89:8c:30:2d:5f:a4:49:59:5e:3b:7a:29:7a: 10:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B3:71:F5:C5:76:F2:56:5F:E8:06:6A:E6:FB:84:EE:2B:36:3E:41 X509v3 Authority Key Identifier: keyid:29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b2:bf:56:46:87:9f:88:c4:29:08:9e:0d:25:2b:57:e6:90: eb:35:a0:84:9a:44:a1:d0:05:30:ee:12:81:32:fe:9b:92:15: 73:a4:47:a6:d2:64:a6:97:c3:51:0b:1f:77:e5:c0:08:c9:cf: ac:82:d9:2c:ad:c4:e1:ff:cb:a9:1b:e7:8f:34:e5:40:63:f9: 70:bc:fc:0f:cc:11:48:7b:ca:f8:3b:09:c5:37:43:14:3f:51: 1e:93:23:28:46:fd:c4:2e:1a:85:84:f6:2c:26:3a:7e:f0:08: 73:85:60:4a:0f:40:6f:1d:39:ee:fb:ba:64:65:cd:82:f4:18: d7:81:fa:02:42:c8:0e:60:9e:5d:ed:19:24:b0:4e:98:2f:06: ea:78:b2:0e:10:22:23:6a:b8:91:85:78:67:73:c8:c6:dc:09: 90:39:82:95:fd:08:d0:aa:6a:68:9f:13:46:09:6e:aa:f5:5a: b2:68:d3:ec:49:34:cc:73:72:92:d5:52:28:c8:a2:4d:14:42: ce:df:a8:5f:02:21:dd:96:75:72:41:1b:99:a1:bd:8b:aa:9f: e3:4d:53:df:64:b3:f8:9d:c0:37:e3:87:86:43:2c:02:fb:ca: 04:53:9f:40:45:38:0c:a7:73:18:ad:82:80:ed:b9:2b:db:4e: e7:f5:82:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZA45w7ieevf5dnielryoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTg0NjQ3MjQ4YjU1NTIzOTk5Y2JiN2ZlNWIyMGE5OWZl NzNiZTMwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD Eyg3YmIzNzFmNWM1NzZmMjU2NWZlODA2NmFlNmZiODRlZTJiMzYzZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWTq8uwGxj7BWWj9AmWkaoYJ4rHA YWsvNkjcmz2L1foy3bLf+86T90dteIvVL44jyMH0O0TcLWYvCJIBrQIheeV6O85/ a4Dx4d38e7bp1bXGZRpb6Q/D99Ra1s3ugn46kYGXy67Y2wI6Erx5PUrJUwxGK6VZ 8sAxrBxJOzfu39Z9TgMSKOHaMMoBBrvniNEtEWD78wgrXVhXWXTfSkBXbmG0QkMZ 1P3vvGbTJEsi1jKx3NM7M2Yny/D+7sfNTGR0Co+tdqq3TWyIt7SQjlrLSP2HrTnu tkAR4s1RfhUlpbO105651Gm3NqrPRCbry6MzUYmMMC1fpElZXjt6KXoQUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuzcfXFdvJWX+gGaub7hO4rNj5BMB8GA1UdIwQY MBaAFCkYRkcki1VSOZnLt/5bIKmf5zvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81NjAzNmItMjNkOC00YjM3LWI1NDYt OGZjMjM3M2ZjMjZlLzEvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS81NjAzNmItMjNkOC00YjM3LWI1NDYtOGZjMjM3M2ZjMjZl LzEvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLK/VkaH n4jEKQieDSUrV+aQ6zWghJpEodAFMO4SgTL+m5IVc6RHptJkppfDUQsfd+XACMnP rILZLK3E4f/LqRvnjzTlQGP5cLz8D8wRSHvK+DsJxTdDFD9RHpMjKEb9xC4ahYT2 LCY6fvAIc4VgSg9Abx057vu6ZGXNgvQY14H6AkLIDmCeXe0ZJLBOmC8G6niyDhAi I2q4kYV4Z3PIxtwJkDmClf0I0KpqaJ8TRgluqvVasmjT7Ek0zHNyktVSKMiiTRRC zt+oXwIh3ZZ1ckEbmaG9i6qf401T32Sz+J3AN+OHhkMsAvvKBFOfQEU4DKdzGK2C gO25K9tO5/WCqg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:28 2025 by rpki-client