This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json) Hash identifier: 93ddpFI6+w9ZnrXAbatTfMp5zdoI2O4w/QbrCpGoD1c= Subject key identifier: 36:14:99:97:DA:FB:94:65:7F:60:BC:4E:A3:D8:09:C9:9C:FD:DB:F9 Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5 Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5 Certificate serial: 019B44A5AF1B41A9C89BE28C100765DCE1A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft Manifest number: 1394 Signing time: Mon 22 Dec 2025 06:01:07 +0000 Manifest this update: Mon 22 Dec 2025 06:01:07 +0000 Manifest next update: Tue 23 Dec 2025 06:01:07 +0000 Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: ftIalN+FJBpJVsQo+M8tVZWm7xY/fZoS8w0RSG4BTi4=) 2: torroLihTDOA3iF3dz35198q-Ig.roa (hash: vvwQ1xlARrMA7/miZ5paV8AjRUiaiipi3ehp/RAKIwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:af:1b:41:a9:c8:9b:e2:8c:10:07:65:dc:e1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5 Validity Not Before: Dec 22 06:01:07 2025 GMT Not After : Dec 23 06:01:07 2025 GMT Subject: CN=36149997dafb94657f60bc4ea3d809c99cfddbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:c7:47:2a:1f:5b:63:2c:35:23:d2:61:1d: 98:7a:0b:f3:ac:d3:52:57:be:6f:bc:55:ca:f0:29: 28:98:e2:07:14:07:bf:fc:84:2d:55:ff:d7:7a:22: ab:ff:7e:24:b8:d4:ff:7d:9c:5c:f4:1c:37:62:e7: 10:11:f3:56:71:1d:f7:06:a7:3c:85:c1:9e:ec:d2: 7c:76:42:7f:63:e2:e5:2c:5c:a6:00:52:03:42:cf: c2:bb:c0:83:5d:e2:55:81:b6:c8:6c:9b:6b:e4:e3: 29:72:7f:e1:a9:c6:7b:60:bc:29:d6:a4:c9:12:90: 44:fd:57:b0:78:b9:25:2c:be:0b:12:98:46:67:6d: 85:5f:a7:41:75:52:54:f6:94:90:e7:cf:c7:f4:80: 40:ee:05:51:d1:55:5e:cd:93:26:bb:b2:05:0b:e0: 80:fb:2a:49:fb:59:57:80:5e:68:32:f8:5d:f3:9a: cd:1d:25:4a:3c:75:0e:44:85:62:47:56:d9:74:17: dc:aa:10:6d:6d:09:9f:a2:60:50:9f:c2:0d:8c:91: 96:c1:6f:ab:56:74:61:0b:fd:72:fa:a3:94:45:48: 19:1c:7f:1e:f1:63:3b:a3:7b:8a:3a:0d:ea:4d:03: 21:f8:c5:bd:9e:54:c4:82:1c:14:ba:20:a8:54:f5: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:14:99:97:DA:FB:94:65:7F:60:BC:4E:A3:D8:09:C9:9C:FD:DB:F9 X509v3 Authority Key Identifier: keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:be:ee:7c:ee:42:2c:47:fc:4b:b4:5c:66:94:90:b7:0e:ea: a8:5c:b6:c6:d5:db:fa:c9:a1:51:66:4d:30:cb:ff:52:b6:bd: d2:e1:59:e7:99:b2:70:d7:56:8f:84:57:ac:b2:6c:c2:42:87: 74:b9:cd:b8:c9:c7:51:56:15:fa:89:84:bb:47:05:24:99:db: 17:e6:71:87:ce:0d:80:2a:6b:da:b1:1a:ae:67:56:22:08:87: 27:2f:01:04:b0:9a:02:6b:73:c8:64:97:c6:c8:b5:53:1d:bd: 25:7a:9a:b3:60:f0:ad:db:94:0e:b4:6b:e2:e6:ed:f7:eb:f2: d0:84:3b:ea:4f:56:62:90:0c:c1:0a:5d:d2:c2:37:fb:83:b5: b9:fe:08:dc:05:9d:72:22:d2:9d:21:d4:b9:b6:74:3a:84:87: 0e:73:ad:82:b1:cc:97:60:fe:0e:da:69:57:db:26:38:41:13: 1e:9f:46:2b:ec:1b:49:8f:56:70:6a:b0:9c:46:d2:22:09:80: a8:40:ce:72:6e:06:7c:d2:9b:75:2d:d9:9c:04:08:16:d3:46: 90:81:43:cd:c7:3e:5d:06:61:4c:53:1f:1b:c6:2e:1d:23:35: 41:59:fa:60:e3:7b:f8:1f:6b:e0:0c:d1:25:d0:5b:d5:44:4d: ba:f8:06:5a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtEpa8bQanIm+KMEAdl3OGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjkyZmRhMDE5Njg3ZDU4ZDcxYmYzMmMwOTA4ZDEyZTQ2 YjRjYTUwHhcNMjUxMjIyMDYwMTA3WhcNMjUxMjIzMDYwMTA3WjAzMTEwLwYDVQQD EygzNjE0OTk5N2RhZmI5NDY1N2Y2MGJjNGVhM2Q4MDljOTljZmRkYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl/HRyofW2MsNSPSYR2YegvzrNNS V75vvFXK8CkomOIHFAe//IQtVf/XeiKr/34kuNT/fZxc9Bw3YucQEfNWcR33Bqc8 hcGe7NJ8dkJ/Y+LlLFymAFIDQs/Cu8CDXeJVgbbIbJtr5OMpcn/hqcZ7YLwp1qTJ EpBE/VeweLklLL4LEphGZ22FX6dBdVJU9pSQ58/H9IBA7gVR0VVezZMmu7IFC+CA +ypJ+1lXgF5oMvhd85rNHSVKPHUORIViR1bZdBfcqhBtbQmfomBQn8INjJGWwW+r VnRhC/1y+qOURUgZHH8e8WM7o3uKOg3qTQMh+MW9nlTEghwUuiCoVPWceQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDYUmZfa+5Rlf2C8TqPYCcmc/dv5MB8GA1UdIwQY MBaAFPppL9oBlofVjXG/MsCQjRLka0ylMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ta3YyZ0dXaDlXTmNiOHl3SkNORXVSclRLVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvOGJmZWM0LWJkNmYtNDY1MC1hNGQ4 LWFkMWMzMGMxMWU1YS8xLzEtbWt2MmdHV2g5V05jYjh5d0pDTkV1UnJUS1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzExLzhiZmVjNC1iZDZmLTQ2NTAtYTRkOC1hZDFjMzBjMTFl NWEvMS8xLW1rdjJnR1doOVdOY2I4eXdKQ05FdVJyVEtVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJL7u fO5CLEf8S7RcZpSQtw7qqFy2xtXb+smhUWZNMMv/Ura90uFZ55mycNdWj4RXrLJs wkKHdLnNuMnHUVYV+omEu0cFJJnbF+Zxh84NgCpr2rEarmdWIgiHJy8BBLCaAmtz yGSXxsi1Ux29JXqas2DwrduUDrRr4ubt9+vy0IQ76k9WYpAMwQpd0sI3+4O1uf4I 3AWdciLSnSHUubZ0OoSHDnOtgrHMl2D+DtppV9smOEETHp9GK+wbSY9WcGqwnEbS IgmAqEDOcm4GfNKbdS3ZnAQIFtNGkIFDzcc+XQZhTFMfG8YuHSM1QVn6YON7+B9r 4AzRJdBb1URNuvgGWg== -----END CERTIFICATE-----Generated at Mon Dec 22 09:41:21 2025 by rpki-client