This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json) Hash identifier: YyH1hrhtBgEeebdvPIgG+j/uFzOkgataNYn0KCw2UnU= Subject key identifier: 9E:C9:A7:67:C9:57:39:54:4B:0B:A9:95:17:8A:51:C8:B7:5A:64:E5 Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66 Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266 Certificate serial: 019B3D59CAF5691764F61AD4DF3AAD314BE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft Manifest number: 1049 Signing time: Sat 20 Dec 2025 20:00:53 +0000 Manifest this update: Sat 20 Dec 2025 20:00:53 +0000 Manifest next update: Sun 21 Dec 2025 20:00:53 +0000 Files and hashes: 1: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: 3y6ir00p7gWK9tv7ZWIerdkoqixEFNK62DSHqCtNA74=) 2: rqMllQ155A2S7SS_4PQfBNAn4gw.roa (hash: fS87JWrPgH68/hK1SJfJVRTn1bsQGrCVPuQ1+n82lao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ca:f5:69:17:64:f6:1a:d4:df:3a:ad:31:4b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266 Validity Not Before: Dec 20 20:00:53 2025 GMT Not After : Dec 21 20:00:53 2025 GMT Subject: CN=9ec9a767c95739544b0ba995178a51c8b75a64e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:fa:c8:7d:30:d1:47:2f:df:80:a0:97:c7: 1f:92:4f:10:ec:65:be:81:32:9b:5b:ae:85:79:f8: 94:e9:c8:40:97:2d:b3:67:c0:9f:dc:16:80:b0:0a: 21:b6:ca:c3:fa:46:d3:bf:b3:b0:fb:03:b4:1e:bd: 01:32:47:b2:ed:e8:a4:82:38:00:18:48:ec:47:75: a9:98:f4:7c:d3:4f:fc:08:7f:9c:56:07:2e:ed:a4: 2d:6a:cb:6c:ac:dc:e4:28:77:8f:0c:3c:b6:80:d9: e8:d0:57:fb:20:29:d7:6e:8e:26:e3:b6:6f:82:cc: 6e:59:f6:6b:2c:06:f6:ed:2d:59:47:49:0f:17:49: d6:b2:c7:4b:9c:ee:a8:65:c8:e1:eb:3e:50:30:b4: c2:00:40:13:e0:a2:53:a0:b3:5e:78:69:34:5a:a8: 49:93:a7:b1:75:e6:ed:3e:f0:a4:67:cc:b1:48:7b: ca:f6:0b:de:b2:3c:76:af:31:2b:b9:7a:e4:a0:89: c2:9f:d6:71:2a:11:92:ec:8a:c7:1a:d4:5a:ee:74: 7f:db:52:eb:1b:14:0a:d7:c8:7d:df:26:94:a4:3a: be:aa:da:b3:68:a8:65:78:37:78:fe:c6:96:9f:c4: 8d:74:7f:a6:13:d5:8c:f7:9c:16:fe:b1:86:77:23: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C9:A7:67:C9:57:39:54:4B:0B:A9:95:17:8A:51:C8:B7:5A:64:E5 X509v3 Authority Key Identifier: keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:9a:dd:4d:76:1d:6a:28:d6:02:28:03:99:65:e1:31:9c:6f: 0d:0e:ca:62:5f:fc:0e:2f:ac:a2:f2:39:6c:bd:c3:b0:2a:86: 9a:de:44:d3:66:64:d7:d6:5b:6b:5a:35:c4:ce:21:8c:78:a9: 18:22:a3:5e:7e:f8:4f:16:40:35:3d:a1:24:f9:b5:b1:45:9c: 0e:7a:87:7c:bb:d1:a0:d6:16:8a:e0:41:b9:97:24:6e:94:77: 74:cd:0f:de:a4:0c:e0:b0:0a:4e:ad:e6:4a:82:a5:2b:63:bf: 9d:5e:22:cb:83:59:ad:94:f5:5c:a7:35:1f:4f:59:0f:18:aa: ee:62:9a:1e:10:ed:95:cf:45:1b:fd:f0:b0:e3:c7:92:b3:e4: d0:ed:6c:a9:db:19:bb:46:a3:f5:b5:b4:2e:66:2f:40:0e:52: cb:44:c9:ab:5f:4e:64:8b:c9:4b:e5:59:97:1d:7e:15:78:d4: cd:cd:46:31:02:9d:06:c5:c3:6f:82:79:ab:26:eb:02:32:8c: 79:eb:f0:67:92:36:c0:81:a7:96:97:5e:23:95:5c:24:92:b2: dd:5b:8c:3e:a9:15:9f:41:3d:7a:d5:d5:89:11:e8:b6:bd:a5: 17:48:ef:25:9b:fd:76:57:ca:c1:80:4b:61:88:41:7a:8f:18: 91:6c:ef:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wcr1aRdk9hrU3zqtMUvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNTE1ZjI1OTg2ZTRiNTcyYTc4YjEwOWQ5OTVjOWRkZjVk YTEyNjYwHhcNMjUxMjIwMjAwMDUzWhcNMjUxMjIxMjAwMDUzWjAzMTEwLwYDVQQD Eyg5ZWM5YTc2N2M5NTczOTU0NGIwYmE5OTUxNzhhNTFjOGI3NWE2NGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiD6yH0w0Ucv34Cgl8cfkk8Q7GW+ gTKbW66FefiU6chAly2zZ8Cf3BaAsAohtsrD+kbTv7Ow+wO0Hr0BMkey7eikgjgA GEjsR3WpmPR800/8CH+cVgcu7aQtastsrNzkKHePDDy2gNno0Ff7ICnXbo4m47Zv gsxuWfZrLAb27S1ZR0kPF0nWssdLnO6oZcjh6z5QMLTCAEAT4KJToLNeeGk0WqhJ k6exdebtPvCkZ8yxSHvK9gvesjx2rzEruXrkoInCn9ZxKhGS7IrHGtRa7nR/21Lr GxQK18h93yaUpDq+qtqzaKhleDd4/saWn8SNdH+mE9WM95wW/rGGdyN6CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7Jp2fJVzlUSwuplReKUci3WmTlMB8GA1UdIwQY MBaAFJNRXyWYbktXKnixCdmVyd312hJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2Yt MTNkNTEzMjhhOWY3LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2YtMTNkNTEzMjhhOWY3 LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJrdTXYd aijWAigDmWXhMZxvDQ7KYl/8Di+sovI5bL3DsCqGmt5E02Zk19Zba1o1xM4hjHip GCKjXn74TxZANT2hJPm1sUWcDnqHfLvRoNYWiuBBuZckbpR3dM0P3qQM4LAKTq3m SoKlK2O/nV4iy4NZrZT1XKc1H09ZDxiq7mKaHhDtlc9FG/3wsOPHkrPk0O1sqdsZ u0aj9bW0LmYvQA5Sy0TJq19OZIvJS+VZlx1+FXjUzc1GMQKdBsXDb4J5qybrAjKM eevwZ5I2wIGnlpdeI5VcJJKy3VuMPqkVn0E9etXViRHotr2lF0jvJZv9dlfKwYBL YYhBeo8YkWzv4g== -----END CERTIFICATE-----Generated at Sun Dec 21 02:27:36 2025 by rpki-client