This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json) Hash identifier: 1e+mEBM0W28T5PcJdO2lcqaSpGJaeX0oP/wJnEeSU2E= Subject key identifier: AA:66:9A:54:58:4F:3F:85:B3:4C:0A:F8:B1:FA:DE:67:1E:85:C2:3E Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629 Certificate serial: 019B484B5FDD822A73FD9B3E817848DBB99E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft Manifest number: 1797 Signing time: Mon 22 Dec 2025 23:00:57 +0000 Manifest this update: Mon 22 Dec 2025 23:00:57 +0000 Manifest next update: Tue 23 Dec 2025 23:00:57 +0000 Files and hashes: 1: QQyuygKlW1lheMUCgRfNgpAjWnY.roa (hash: sGKiznK/9zahMlRBx+pheUHNlRkFSMU1Tbssjd9hPaU=) 2: VsYWJvV29iqYwBRne5YKEb7eIlA.roa (hash: bC7uDhhNEikOG1uya0DM29sggq/yJxcTAuRZ0CEZezI=) 3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: EH+w7EPlEAWNaUU6cVJLcjCffNZTEQ2WUm1Ajf1ESUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:5f:dd:82:2a:73:fd:9b:3e:81:78:48:db:b9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629 Validity Not Before: Dec 22 23:00:57 2025 GMT Not After : Dec 23 23:00:57 2025 GMT Subject: CN=aa669a54584f3f85b34c0af8b1fade671e85c23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3a:09:4c:44:2c:aa:7a:f1:2c:fa:b5:77:d6: 94:d8:22:20:c5:2b:50:df:2c:ae:04:a4:b4:f5:c3: 38:b4:51:4f:f7:0a:e6:70:09:79:c0:dd:7e:1b:11: 76:d2:d9:b3:5c:45:c1:72:da:9e:31:61:9f:c4:b9: cb:46:30:77:87:79:d9:8c:77:55:55:ac:a8:30:1d: 1e:9e:bc:db:d7:5b:0a:80:53:bd:d4:f8:49:e5:15: c8:a5:f8:43:2a:6b:ac:33:44:91:7c:4f:86:a4:b8: 07:29:e3:fa:81:ce:45:19:49:3c:8f:19:8a:b3:00: 58:24:7c:bc:2d:7e:30:48:af:a0:56:e4:f2:e6:24: aa:9e:16:18:ad:43:a2:99:4f:38:88:51:56:9d:7a: ab:01:e5:a4:24:57:24:a2:cf:42:8d:b1:e9:11:c2: f8:a2:bd:6c:9a:75:3d:dc:fb:d4:9e:d0:86:df:93: 75:64:de:c2:c7:f3:78:32:9c:7a:a9:09:9e:87:b6: ea:a8:67:d7:f3:be:f1:52:27:16:e8:6f:3c:26:15: db:99:de:96:90:ae:23:79:f1:7f:1b:5b:41:8b:af: af:0d:1f:d3:c3:67:d1:ab:ac:b6:54:4e:b8:f9:05: d7:c7:08:db:38:7b:d0:38:78:12:83:c4:fe:0f:09: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:66:9A:54:58:4F:3F:85:B3:4C:0A:F8:B1:FA:DE:67:1E:85:C2:3E X509v3 Authority Key Identifier: keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2d:a2:d6:2e:10:ba:ae:74:ae:7f:53:2a:55:c1:7d:e5:98: 48:14:e2:68:86:c6:d2:62:71:a8:72:b1:e2:9c:d1:45:fb:d4: 98:59:4f:a6:03:30:c0:30:d5:4e:b7:c3:21:65:09:ec:5e:f8: b2:63:b6:83:14:f2:d8:24:a0:17:17:24:e0:a1:de:4f:c8:ce: cb:16:48:ba:a5:88:66:d6:94:fe:45:56:45:71:01:68:d9:67: d4:ff:6e:1a:06:de:55:a5:56:9d:ed:93:90:20:8c:e4:87:62: c4:3a:56:2c:bb:5e:7d:5e:ae:04:ba:43:c4:03:4b:55:bc:8b: 33:b4:2e:a2:76:48:41:6a:bc:32:33:ae:49:ed:51:46:09:15: ab:42:89:73:ca:fb:44:11:f9:c5:b5:f6:ad:43:59:84:26:18: 10:9e:72:19:2f:91:a7:5f:3a:d4:73:b5:98:5d:35:84:03:07: 23:20:20:91:06:31:35:74:ab:c3:5d:c0:04:79:f8:6a:91:6f: 06:31:53:a8:bc:2a:f9:cd:84:0b:dd:fe:f5:aa:03:fa:4d:4f: c8:70:78:5e:21:cd:d1:a4:d1:a4:c1:9e:29:4b:3f:55:88:1f: f1:f3:f8:3d:01:df:d7:2c:d8:57:be:fc:df:5a:54:2a:d5:47: 31:29:67:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS1/dgipz/Zs+gXhI27meMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNWM0Mjg1N2UzMDJmZWIxNDAxNzMwMWU0M2MzOWZlNDVl N2Y2MjkwHhcNMjUxMjIyMjMwMDU3WhcNMjUxMjIzMjMwMDU3WjAzMTEwLwYDVQQD EyhhYTY2OWE1NDU4NGYzZjg1YjM0YzBhZjhiMWZhZGU2NzFlODVjMjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DoJTEQsqnrxLPq1d9aU2CIgxStQ 3yyuBKS09cM4tFFP9wrmcAl5wN1+GxF20tmzXEXBctqeMWGfxLnLRjB3h3nZjHdV VayoMB0enrzb11sKgFO91PhJ5RXIpfhDKmusM0SRfE+GpLgHKeP6gc5FGUk8jxmK swBYJHy8LX4wSK+gVuTy5iSqnhYYrUOimU84iFFWnXqrAeWkJFckos9CjbHpEcL4 or1smnU93PvUntCG35N1ZN7Cx/N4Mpx6qQmeh7bqqGfX877xUicW6G88JhXbmd6W kK4jefF/G1tBi6+vDR/Tw2fRq6y2VE64+QXXxwjbOHvQOHgSg8T+DwmaVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpmmlRYTz+Fs0wK+LH63mcehcI+MB8GA1UdIwQY MBaAFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQt MWJmZDEwYTg4NDVhLzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQtMWJmZDEwYTg4NDVh LzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdC2i1i4Q uq50rn9TKlXBfeWYSBTiaIbG0mJxqHKx4pzRRfvUmFlPpgMwwDDVTrfDIWUJ7F74 smO2gxTy2CSgFxck4KHeT8jOyxZIuqWIZtaU/kVWRXEBaNln1P9uGgbeVaVWne2T kCCM5IdixDpWLLtefV6uBLpDxANLVbyLM7QuonZIQWq8MjOuSe1RRgkVq0KJc8r7 RBH5xbX2rUNZhCYYEJ5yGS+Rp1861HO1mF01hAMHIyAgkQYxNXSrw13ABHn4apFv BjFTqLwq+c2EC93+9aoD+k1PyHB4XiHN0aTRpMGeKUs/VYgf8fP4PQHf1yzYV778 31pUKtVHMSlnAQ== -----END CERTIFICATE-----Generated at Tue Dec 23 04:29:39 2025 by rpki-client