This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json) Hash identifier: YBFzA94rchSWiMWbIBMUmze7XmeHZ6NhR+AbY1fqz/8= Subject key identifier: 04:60:FE:E6:05:A2:09:A8:D8:F6:6C:D1:94:02:39:5A:E1:3A:39:1B Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10 Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410 Certificate serial: 019B5CE47E6536AC49F5B967116B6D358CBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft Manifest number: 0E7F Signing time: Fri 26 Dec 2025 23:00:36 +0000 Manifest this update: Fri 26 Dec 2025 23:00:36 +0000 Manifest next update: Sat 27 Dec 2025 23:00:36 +0000 Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: JpOwLF+oB0niX4FylIF7J9mHW0MFk4oh4l/VV9tGsF8=) 2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:7e:65:36:ac:49:f5:b9:67:11:6b:6d:35:8c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410 Validity Not Before: Dec 26 23:00:36 2025 GMT Not After : Dec 27 23:00:36 2025 GMT Subject: CN=0460fee605a209a8d8f66cd19402395ae13a391b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:a3:70:1d:45:8f:9d:77:77:e9:79:16:18: 09:a7:47:41:fd:47:f6:7b:8a:26:a0:04:65:13:e6: 5a:41:dc:6a:a2:e7:72:b2:00:18:a4:44:f2:24:6e: 57:93:dd:08:8c:ce:62:9b:20:ba:46:87:ad:a6:fb: b1:13:2e:ad:6e:43:51:a9:f9:62:d0:e6:7a:2f:bc: d4:a1:0a:3d:3c:56:96:73:27:9e:66:8c:65:c1:9d: b5:a3:fb:e2:92:16:b3:fe:32:81:00:00:53:46:c1: 9e:89:a1:42:46:7c:21:8c:07:21:02:a4:3a:ac:c3: ba:78:3d:dc:57:a8:69:63:01:98:e8:fd:91:47:fe: 92:1d:1c:87:3b:06:aa:e4:75:fd:0c:e3:09:c9:fb: b3:31:a1:f4:ff:93:a6:38:2b:8b:f0:e4:5a:0a:f3: 3b:c1:ad:d4:19:c9:8d:73:75:79:2b:a5:87:7e:7b: 2a:2d:3d:89:47:37:cc:02:58:a0:10:17:36:2b:d2: b7:6f:3f:d9:4f:01:17:03:a8:dc:a1:87:5c:8e:a0: 54:c5:2e:81:e2:29:25:2e:54:8c:a0:88:2b:f7:86: 59:b5:fa:c1:cf:be:df:55:6b:89:1e:bb:0e:dc:7a: e5:8b:c2:11:d6:3f:91:37:39:77:25:25:cb:2c:83: 0d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:60:FE:E6:05:A2:09:A8:D8:F6:6C:D1:94:02:39:5A:E1:3A:39:1B X509v3 Authority Key Identifier: keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:eb:22:0c:a4:4d:0a:f5:a6:e8:8d:8a:b8:03:5a:46:69:64: 0e:7c:fc:28:2c:39:a1:8c:e8:36:1d:32:7f:c7:e7:46:03:16: af:6d:49:69:3b:d3:35:ac:b4:00:74:2f:25:cd:5b:12:2a:6b: 32:91:fe:1f:07:66:95:9d:28:fb:b3:96:55:66:f3:97:d0:fa: be:36:7c:52:e1:9b:83:51:cb:e2:68:ae:66:ca:98:87:bc:38: e4:13:82:62:cc:2b:05:ba:65:50:fd:51:cd:8c:59:da:c7:d4: a3:17:b9:4a:ba:70:5e:ed:32:f4:5a:5e:df:ae:1a:37:68:83: 32:9b:f8:fa:32:94:fc:10:5d:07:bd:87:0a:a6:6d:22:3d:d7: 7b:ce:29:a7:2e:76:a1:d2:84:79:37:cf:bc:a6:ae:f5:54:9f: 76:d7:93:f4:e8:a7:34:13:a4:c2:9a:d4:34:60:3d:c0:3e:0c: b5:85:01:ac:9e:2a:6e:aa:a8:80:be:af:d2:a5:a4:99:7a:6d: 55:96:70:86:58:a3:ac:c2:67:c5:6d:5e:d7:ed:20:97:56:ba: 92:8e:8f:9e:24:f8:ad:98:4d:4f:f4:23:1c:ec:f5:ea:ab:73: 9a:a3:7e:c2:b1:f6:1a:4f:e6:6e:c5:03:70:f1:a5:80:85:2d: 6c:f5:ff:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5H5lNqxJ9blnEWttNYy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZWQ2MjkzNWZiNDhhZjZlNDRjYmExOTQyNmVmYWI1MWYx YzU0MTAwHhcNMjUxMjI2MjMwMDM2WhcNMjUxMjI3MjMwMDM2WjAzMTEwLwYDVQQD EygwNDYwZmVlNjA1YTIwOWE4ZDhmNjZjZDE5NDAyMzk1YWUxM2EzOTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1qjcB1Fj513d+l5FhgJp0dB/Uf2 e4omoARlE+ZaQdxqoudysgAYpETyJG5Xk90IjM5imyC6RoetpvuxEy6tbkNRqfli 0OZ6L7zUoQo9PFaWcyeeZoxlwZ21o/vikhaz/jKBAABTRsGeiaFCRnwhjAchAqQ6 rMO6eD3cV6hpYwGY6P2RR/6SHRyHOwaq5HX9DOMJyfuzMaH0/5OmOCuL8ORaCvM7 wa3UGcmNc3V5K6WHfnsqLT2JRzfMAligEBc2K9K3bz/ZTwEXA6jcoYdcjqBUxS6B 4iklLlSMoIgr94ZZtfrBz77fVWuJHrsO3Hrli8IR1j+RNzl3JSXLLIMN0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARg/uYFogmo2PZs0ZQCOVrhOjkbMB8GA1UdIwQY MBaAFCvtYpNftIr25Ey6GUJu+rUfHFQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWIt NDg0MDE0YTRkOTRlLzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWItNDg0MDE0YTRkOTRl LzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATesiDKRN CvWm6I2KuANaRmlkDnz8KCw5oYzoNh0yf8fnRgMWr21JaTvTNay0AHQvJc1bEipr MpH+HwdmlZ0o+7OWVWbzl9D6vjZ8UuGbg1HL4miuZsqYh7w45BOCYswrBbplUP1R zYxZ2sfUoxe5SrpwXu0y9Fpe364aN2iDMpv4+jKU/BBdB72HCqZtIj3Xe84ppy52 odKEeTfPvKau9VSfdteT9OinNBOkwprUNGA9wD4MtYUBrJ4qbqqogL6v0qWkmXpt VZZwhlijrMJnxW1e1+0gl1a6ko6PniT4rZhNT/QjHOz16qtzmqN+wrH2Gk/mbsUD cPGlgIUtbPX/pw== -----END CERTIFICATE-----Generated at Sat Dec 27 02:48:30 2025 by rpki-client