This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json) Hash identifier: J6kbCpR5Ztk+i5Gtt9vIZ+immh3CDqgkgEghdGNAgbg= Subject key identifier: DC:9E:4C:06:3B:3A:AE:C4:7C:39:1A:94:61:57:FF:68:F9:D9:A1:E1 Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Certificate serial: 019B3C7F2AA84A27E0D1BEB71E1CBCA12A10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft Manifest number: 02AA Signing time: Sat 20 Dec 2025 16:02:05 +0000 Manifest this update: Sat 20 Dec 2025 16:02:05 +0000 Manifest next update: Sun 21 Dec 2025 16:02:05 +0000 Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: Sqo5F10vfNognAgceVKTxmBMtbSODpZcX9ClKpN/GXE=) 2: 4zm2PsKp7CDX_05EMQ3wVCKsJac.roa (hash: xoTjplgsEXDzNn5OQacn8odHDYwMOSV8PxajUULY6Jg=) 3: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=) 4: Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa (hash: P/qvYKsl5b2W4hd0B25iig5CdZGpWYsMZEWjWtHjTyU=) 5: s0P13iYTmJLEifte-p5bD4QRnYo.roa (hash: xM9pCSClXcnJFx941v3/89TWptwUOZDuBMRrSV74iBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:2a:a8:4a:27:e0:d1:be:b7:1e:1c:bc:a1:2a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Validity Not Before: Dec 20 16:02:05 2025 GMT Not After : Dec 21 16:02:05 2025 GMT Subject: CN=dc9e4c063b3aaec47c391a946157ff68f9d9a1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6f:0b:0a:1f:33:04:f1:8c:09:3d:0a:01:cb: 52:34:bd:1e:7d:f4:50:f8:4e:a2:ef:8a:e8:50:dc: 86:42:7e:8a:76:f0:c7:89:eb:2e:c2:b5:04:bb:1e: 64:7e:8f:3d:03:d7:54:85:4e:27:64:84:70:74:fa: 48:f3:a8:33:a8:67:fc:58:f0:39:d4:bc:0f:b9:66: 26:1b:72:b0:df:e3:42:b1:48:0d:f8:c8:66:60:27: ea:ae:dc:22:65:d1:dc:79:3d:05:ea:24:66:f1:94: 3a:a6:71:11:86:a5:8a:22:22:01:1f:92:ec:5d:6a: ed:1b:52:2d:8e:2d:d1:e3:04:a2:40:d8:84:bf:2f: e3:a0:6f:51:8b:a8:00:5d:8b:69:fa:a7:ff:18:ab: e0:63:17:f7:35:5a:02:76:a9:cb:3d:85:4d:6d:10: 40:1a:0f:d8:61:51:84:e9:06:9e:25:60:a5:8a:f7: 05:8c:ea:47:48:bf:9f:bc:bd:64:29:1c:de:cb:6a: b9:60:86:d0:26:fb:cf:36:77:a8:af:f8:22:e6:0a: 0e:1b:a3:83:e4:97:2b:79:d6:bb:50:43:03:51:a2: a6:f5:d0:6f:9c:9a:88:c9:05:11:1d:86:53:7a:11: 56:c8:a4:6d:4a:eb:90:a5:69:7a:43:7a:49:e1:eb: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9E:4C:06:3B:3A:AE:C4:7C:39:1A:94:61:57:FF:68:F9:D9:A1:E1 X509v3 Authority Key Identifier: keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f9:59:5f:de:49:46:4d:78:ea:35:c3:2b:44:b7:5a:2a:d8: b0:23:2f:2f:e0:a5:e3:27:cb:79:f3:64:48:22:55:10:28:35: f7:53:f1:5e:84:b5:cc:ed:21:a7:13:9d:a3:41:b9:b5:6d:55: 4a:67:be:12:b1:8a:d6:a0:5d:d4:88:09:ed:dd:45:dd:8a:af: 53:82:b4:94:25:e5:58:bf:4e:94:dc:97:cb:62:3b:0e:b5:d0: fd:da:41:67:f7:7b:d4:8b:ed:81:3c:06:15:3b:4b:46:80:e7: ee:36:e7:88:25:88:aa:14:92:cf:56:50:bb:25:64:c2:f3:9a: a5:c6:9f:4c:e0:81:44:be:76:d3:61:0a:d3:e7:38:d1:e6:4a: c5:bc:f9:b4:3e:cb:dd:11:6d:ba:17:42:e9:11:5a:a8:08:70: a8:c0:b5:a6:06:20:4b:df:9f:7d:81:4d:b7:10:a7:ca:7e:24: fd:60:7b:43:57:fc:5c:6c:08:b0:84:c0:46:22:ff:08:d3:7a: 42:53:f6:f9:a7:27:a1:53:03:ad:24:68:ca:ac:8a:71:88:e3: ee:71:ca:bd:bb:de:41:b9:8c:3a:e7:e2:45:fc:30:fd:04:da: 87:cf:ff:c6:24:52:27:ff:e4:b5:1e:d3:c4:74:39:be:b2:29: 07:4e:b1:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fyqoSifg0b63Hhy8oSoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh MThjZWUwHhcNMjUxMjIwMTYwMjA1WhcNMjUxMjIxMTYwMjA1WjAzMTEwLwYDVQQD EyhkYzllNGMwNjNiM2FhZWM0N2MzOTFhOTQ2MTU3ZmY2OGY5ZDlhMWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm8LCh8zBPGMCT0KActSNL0effRQ +E6i74roUNyGQn6KdvDHiesuwrUEux5kfo89A9dUhU4nZIRwdPpI86gzqGf8WPA5 1LwPuWYmG3Kw3+NCsUgN+MhmYCfqrtwiZdHceT0F6iRm8ZQ6pnERhqWKIiIBH5Ls XWrtG1Itji3R4wSiQNiEvy/joG9Ri6gAXYtp+qf/GKvgYxf3NVoCdqnLPYVNbRBA Gg/YYVGE6QaeJWClivcFjOpHSL+fvL1kKRzey2q5YIbQJvvPNneor/gi5goOG6OD 5Jcreda7UEMDUaKm9dBvnJqIyQURHYZTehFWyKRtSuuQpWl6Q3pJ4eun4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyeTAY7Oq7EfDkalGFX/2j52aHhMB8GA1UdIwQY MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt YzU5ODI1YmJjYjMyLzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvlZX95J Rk146jXDK0S3WirYsCMvL+Cl4yfLefNkSCJVECg191PxXoS1zO0hpxOdo0G5tW1V Sme+ErGK1qBd1IgJ7d1F3YqvU4K0lCXlWL9OlNyXy2I7DrXQ/dpBZ/d71IvtgTwG FTtLRoDn7jbniCWIqhSSz1ZQuyVkwvOapcafTOCBRL5202EK0+c40eZKxbz5tD7L 3RFtuhdC6RFaqAhwqMC1pgYgS9+ffYFNtxCnyn4k/WB7Q1f8XGwIsITARiL/CNN6 QlP2+acnoVMDrSRoyqyKcYjj7nHKvbveQbmMOufiRfww/QTah8//xiRSJ//ktR7T xHQ5vrIpB06xTw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:41:05 2025 by rpki-client