This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft File: 1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json) Hash identifier: K5ht4Kv8uiXVkBSFqoW2R2FoWkInnphBeyx/JJwh8kY= Subject key identifier: FD:17:FE:30:7F:56:41:E0:A2:95:22:F1:D1:2E:BE:9E:04:BC:CB:9B Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E Certificate issuer: /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e Certificate serial: 019B330CF48F928D92BB43616E669FEE1BF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft Manifest number: 05C7 Signing time: Thu 18 Dec 2025 20:00:45 +0000 Manifest this update: Thu 18 Dec 2025 20:00:45 +0000 Manifest next update: Fri 19 Dec 2025 20:00:45 +0000 Files and hashes: 1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: 6hityKx9Dk6BUp9avtVom6iHJAUS+G4W0CWLh0p/eYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:f4:8f:92:8d:92:bb:43:61:6e:66:9f:ee:1b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e Validity Not Before: Dec 18 20:00:45 2025 GMT Not After : Dec 19 20:00:45 2025 GMT Subject: CN=fd17fe307f5641e0a29522f1d12ebe9e04bccb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:56:a1:c0:25:a2:92:83:69:63:de:66:cd: 7a:58:8b:eb:92:fe:1e:7c:5c:eb:47:37:aa:f6:0f: 68:0e:bd:92:3f:da:75:54:d9:56:2d:d2:fb:ff:3b: a2:29:25:8c:fb:9b:db:45:45:a8:27:f0:f5:c5:d6: 11:46:b7:d7:32:39:bb:c9:ce:47:c2:fc:11:a2:b5: f3:6a:3b:f1:0a:be:cb:1d:b5:66:21:7d:38:95:d0: 61:93:10:40:87:b3:02:58:76:10:8d:29:e3:fb:a5: 83:a3:a1:85:9e:ac:3a:d6:c7:e1:f1:1a:40:c5:e2: 06:84:83:40:32:4a:a9:6c:3a:5b:00:6e:94:ee:88: 0c:99:88:22:13:9f:82:b5:11:3f:39:ad:0f:e6:e0: da:d4:bb:75:4c:4a:2e:8f:ab:fd:38:93:a4:cb:46: 24:c2:df:81:fb:ef:2a:e8:bc:27:99:79:b9:3d:79: 7b:10:bc:26:74:d1:0d:85:12:c8:b3:c4:9f:e0:1c: 25:a6:87:65:7d:9b:22:f7:56:db:f8:96:33:3a:ec: 1d:ed:19:71:5c:86:42:92:73:d0:fd:16:46:e0:19: 3f:51:fd:6a:77:50:23:2d:95:24:5e:e2:2b:4b:01: bc:85:02:cd:ce:2e:51:bb:ec:bf:17:8c:91:ec:66: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:17:FE:30:7F:56:41:E0:A2:95:22:F1:D1:2E:BE:9E:04:BC:CB:9B X509v3 Authority Key Identifier: keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:97:de:ba:b3:9d:4a:97:a4:02:f7:16:5e:09:a2:1a:b7:60: b4:e5:6f:96:36:5e:41:0a:42:50:56:fb:d2:51:c7:b9:57:c7: 71:7f:c9:df:27:14:d6:1b:ac:67:d1:d3:e1:dd:99:4e:ba:46: 24:02:f2:8a:d5:b3:5c:11:e5:3c:03:fc:3c:37:46:f3:4f:d7: 57:9a:c8:ea:fe:d0:a4:4d:df:2d:e7:49:ff:5e:71:7d:c5:36: 9d:b2:03:d2:fb:f6:a9:0a:32:27:cf:1d:2a:8b:47:50:31:a9: da:65:b1:4c:38:8b:0e:bd:c9:90:4c:e5:8f:b0:e1:da:4a:59: 4f:00:7d:76:fa:81:3d:c2:3f:15:41:eb:94:04:c8:24:2a:11: bd:33:06:4c:db:1a:0f:f7:73:96:be:0b:f6:4e:b3:26:af:9a: 5b:51:d2:67:a1:e2:a4:82:d4:ea:36:72:70:35:9a:71:9c:86: c3:33:23:b8:85:70:6f:49:0f:b8:b2:eb:a1:75:65:96:67:0b: 81:35:53:99:f7:17:fd:38:c3:40:7b:4f:b8:7e:45:31:15:33: 2c:0d:cc:e1:f3:d9:33:8c:04:0e:ff:94:6f:eb:20:33:b3:6c: 54:8c:af:4a:f7:28:58:c5:b3:7f:71:8e:8f:57:d4:45:1e:93: 69:e3:5c:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDPSPko2Su0Nhbmaf7hv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YTAwN2VkMmZlMDhkNDMzZTBmMGEwMmY0M2NhN2FjYjI2 ZjVhMGUwHhcNMjUxMjE4MjAwMDQ1WhcNMjUxMjE5MjAwMDQ1WjAzMTEwLwYDVQQD EyhmZDE3ZmUzMDdmNTY0MWUwYTI5NTIyZjFkMTJlYmU5ZTA0YmNjYjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbtWocAlopKDaWPeZs16WIvrkv4e fFzrRzeq9g9oDr2SP9p1VNlWLdL7/zuiKSWM+5vbRUWoJ/D1xdYRRrfXMjm7yc5H wvwRorXzajvxCr7LHbVmIX04ldBhkxBAh7MCWHYQjSnj+6WDo6GFnqw61sfh8RpA xeIGhINAMkqpbDpbAG6U7ogMmYgiE5+CtRE/Oa0P5uDa1Lt1TEouj6v9OJOky0Yk wt+B++8q6LwnmXm5PXl7ELwmdNENhRLIs8Sf4BwlpodlfZsi91bb+JYzOuwd7Rlx XIZCknPQ/RZG4Bk/Uf1qd1AjLZUkXuIrSwG8hQLNzi5Ru+y/F4yR7GaCuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0X/jB/VkHgopUi8dEuvp4EvMubMB8GA1UdIwQY MBaAFNSgB+0v4I1DPg8KAvQ8p6yyb1oOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtBSDdTX2dqVU0tRHdvQzlEeW5yTEp2V2c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84NmNlYjgtNDE4OC00YjZjLThiZDgt YzJiODFjZTk4YzZkLzEvMUtBSDdTX2dqVU0tRHdvQzlEeW5yTEp2V2c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84NmNlYjgtNDE4OC00YjZjLThiZDgtYzJiODFjZTk4YzZk LzEvMUtBSDdTX2dqVU0tRHdvQzlEeW5yTEp2V2c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZfeurOd SpekAvcWXgmiGrdgtOVvljZeQQpCUFb70lHHuVfHcX/J3ycU1husZ9HT4d2ZTrpG JALyitWzXBHlPAP8PDdG80/XV5rI6v7QpE3fLedJ/15xfcU2nbID0vv2qQoyJ88d KotHUDGp2mWxTDiLDr3JkEzlj7Dh2kpZTwB9dvqBPcI/FUHrlATIJCoRvTMGTNsa D/dzlr4L9k6zJq+aW1HSZ6HipILU6jZycDWacZyGwzMjuIVwb0kPuLLroXVllmcL gTVTmfcX/TjDQHtPuH5FMRUzLA3M4fPZM4wEDv+Ub+sgM7NsVIyvSvcoWMWzf3GO j1fURR6TaeNcQg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:21:05 2025 by rpki-client