This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft File: k1x7dikZzzbcFCY_XllV6P-jXTs.mft (raw, json) Hash identifier: 84tbmvKqN2N54nlcdRfLLNBjwjcg3r8EIRl3S8Uzjnk= Subject key identifier: D4:15:3A:1E:B2:73:43:40:EE:29:04:30:17:48:B5:66:95:6F:34:50 Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b Certificate serial: 019B273F7E9F110B5D4C14B9914060399DBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft Manifest number: 177A Signing time: Tue 16 Dec 2025 13:00:31 +0000 Manifest this update: Tue 16 Dec 2025 13:00:31 +0000 Manifest next update: Wed 17 Dec 2025 13:00:31 +0000 Files and hashes: 1: k1x7dikZzzbcFCY_XllV6P-jXTs.crl (hash: MZCIU8zibGXS7y9pvXoIN3MMoLlGeLATgqCCDJ6tT5I=) 2: mPtwMPDBjS-jkWgS9uuTF9_ZOaw.roa (hash: 2rJnzrY1kifgjd6LuERI+YOBEpbALMoWfYZ9TooQij0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:7e:9f:11:0b:5d:4c:14:b9:91:40:60:39:9d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b Validity Not Before: Dec 16 13:00:31 2025 GMT Not After : Dec 17 13:00:31 2025 GMT Subject: CN=d4153a1eb2734340ee2904301748b566956f3450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:7c:5c:6c:e8:c9:44:8b:3b:7f:0b:78:39: a1:b3:25:8f:c9:bc:ea:a8:f3:7d:f1:ee:aa:86:c0: d1:f6:a0:31:e0:85:f0:2e:a2:89:51:8d:e2:44:fd: 4b:9e:55:d6:9e:e7:04:bb:97:5e:11:55:b8:0b:0a: d3:38:9d:fd:0b:f3:9d:6a:d5:35:27:fb:4b:ae:e0: 41:21:75:d9:ab:90:d5:39:97:71:55:f4:06:33:52: 8c:f7:95:bc:30:c5:63:b3:14:78:65:ca:8a:e9:bf: 7f:99:93:d8:28:a9:a8:ac:76:69:06:45:a2:15:ac: 0e:13:47:75:f6:8b:5f:b5:03:8c:aa:5e:76:b5:c1: 99:8e:5e:19:92:27:c2:a2:ed:af:9a:ef:0e:62:ee: aa:12:37:c1:10:b0:18:35:45:ab:31:d2:d1:1a:ab: cc:30:15:76:9d:3e:62:bb:9d:f9:33:07:f6:2b:7d: 9f:bc:e7:04:e9:23:ae:ee:9a:5c:65:94:57:12:dc: d3:85:7b:92:07:5e:75:e8:e1:81:f9:ef:a1:7a:10: e7:60:7b:97:5d:c5:85:a5:83:66:54:6e:4f:1e:99: 1e:80:02:7d:0b:b5:13:a0:69:9b:58:d3:1f:9c:20: df:da:ed:31:59:0e:4a:68:e7:43:43:84:17:50:ca: 02:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:15:3A:1E:B2:73:43:40:EE:29:04:30:17:48:B5:66:95:6F:34:50 X509v3 Authority Key Identifier: keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a2:0c:b6:b8:d7:f4:89:ab:e0:19:c4:7b:0c:e5:03:7e:90: 82:a8:38:ed:c5:25:30:cc:fd:f7:37:1d:fe:1a:88:10:df:9a: ee:14:49:68:f2:9f:83:e9:c7:d2:90:07:82:16:77:36:8c:7a: 41:0e:27:fd:33:5a:73:9a:1a:e4:02:0d:f9:b2:bc:9f:db:f9: 3c:a1:40:fa:a0:ea:2e:e3:22:4c:de:2a:67:5a:20:c1:fd:ed: b1:ce:24:ee:36:16:d7:a6:24:a3:9a:ae:b5:11:f6:c2:63:7c: 0e:83:93:66:9f:86:6d:0c:49:d4:63:18:16:5d:68:45:9e:e1: 13:49:88:d3:30:f6:d2:e1:9c:3e:39:ac:a4:2b:59:9b:f8:72: a0:68:af:dc:9d:b2:7f:60:0f:df:28:55:68:2f:9b:bf:71:45: 6d:62:e2:97:ca:cc:be:65:da:b5:d1:1d:b9:9b:34:dc:d6:35: d7:e3:78:e2:2e:76:f0:48:a0:b2:07:71:f1:22:c3:85:a9:92: 0d:62:06:4b:86:b3:e8:b7:dc:d8:f8:80:39:08:84:ff:09:aa: 8a:be:86:67:5f:24:b5:de:a7:23:10:4d:a5:0a:91:a5:1e:98: 58:9f:e5:00:72:64:75:9e:bd:d6:f4:63:21:42:07:f7:34:d8: 7b:87:cd:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP36fEQtdTBS5kUBgOZ27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNWM3Yjc2MjkxOWNmMzZkYzE0MjYzZjVlNTk1NWU4ZmZh MzVkM2IwHhcNMjUxMjE2MTMwMDMxWhcNMjUxMjE3MTMwMDMxWjAzMTEwLwYDVQQD EyhkNDE1M2ExZWIyNzM0MzQwZWUyOTA0MzAxNzQ4YjU2Njk1NmYzNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqB8XGzoyUSLO38LeDmhsyWPybzq qPN98e6qhsDR9qAx4IXwLqKJUY3iRP1LnlXWnucEu5deEVW4CwrTOJ39C/OdatU1 J/tLruBBIXXZq5DVOZdxVfQGM1KM95W8MMVjsxR4ZcqK6b9/mZPYKKmorHZpBkWi FawOE0d19otftQOMql52tcGZjl4ZkifCou2vmu8OYu6qEjfBELAYNUWrMdLRGqvM MBV2nT5iu535Mwf2K32fvOcE6SOu7ppcZZRXEtzThXuSB1516OGB+e+hehDnYHuX XcWFpYNmVG5PHpkegAJ9C7UToGmbWNMfnCDf2u0xWQ5KaOdDQ4QXUMoC8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQVOh6yc0NA7ikEMBdItWaVbzRQMB8GA1UdIwQY MBaAFJNce3YpGc823BQmP15ZVej/o107MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjct YWVkMTY0ODMyYThiLzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjctYWVkMTY0ODMyYThi LzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqIMtrjX 9Imr4BnEewzlA36Qgqg47cUlMMz99zcd/hqIEN+a7hRJaPKfg+nH0pAHghZ3Nox6 QQ4n/TNac5oa5AIN+bK8n9v5PKFA+qDqLuMiTN4qZ1ogwf3tsc4k7jYW16Yko5qu tRH2wmN8DoOTZp+GbQxJ1GMYFl1oRZ7hE0mI0zD20uGcPjmspCtZm/hyoGiv3J2y f2AP3yhVaC+bv3FFbWLil8rMvmXatdEduZs03NY11+N44i528Eigsgdx8SLDhamS DWIGS4az6Lfc2PiAOQiE/wmqir6GZ18ktd6nIxBNpQqRpR6YWJ/lAHJkdZ691vRj IUIH9zTYe4fN7A== -----END CERTIFICATE-----Generated at Tue Dec 16 23:20:22 2025 by rpki-client