This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json) Hash identifier: D1Y3Z4TCH5ONazUGru9xT4CoodQLF/xwtvI1wPKpzG8= Subject key identifier: D0:66:5D:9B:2A:A4:6C:D9:1E:AB:93:93:FD:00:63:96:E0:B6:22:76 Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10 Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410 Certificate serial: 019B0FA559C0AE04CB08A1A36D86F6514027 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft Manifest number: 0E57 Signing time: Thu 11 Dec 2025 23:00:53 +0000 Manifest this update: Thu 11 Dec 2025 23:00:53 +0000 Manifest next update: Fri 12 Dec 2025 23:00:53 +0000 Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: gxLhAxgyc3aPnV3kmzNH9BBalDdAtXN3BeYa60UqbQA=) 2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:59:c0:ae:04:cb:08:a1:a3:6d:86:f6:51:40:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410 Validity Not Before: Dec 11 23:00:53 2025 GMT Not After : Dec 12 23:00:53 2025 GMT Subject: CN=d0665d9b2aa46cd91eab9393fd006396e0b62276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:10:84:d5:ad:d0:11:bf:9a:78:37:a9:84: be:f7:46:dd:48:0f:bc:56:c2:d9:1f:39:0d:a3:b8: 6d:7d:22:89:ae:29:11:9e:5f:30:c2:9a:6f:e0:83: 65:d0:2c:02:5e:80:6b:1c:ed:0a:01:91:92:ee:53: cb:fb:90:d8:ea:bb:f9:ec:98:01:36:e0:f8:14:1f: bb:94:40:41:6b:1d:53:b4:d7:de:20:d6:fd:ed:fc: 13:a9:dc:c2:23:9a:c0:61:fc:ed:fc:3d:d7:39:3a: 8b:2c:7c:7c:dd:e4:75:a1:5f:b4:b4:ec:95:79:96: a8:d0:9b:63:ca:e9:7a:cf:ee:4d:66:bf:d8:d4:93: 6b:2e:92:f3:31:46:e5:5c:49:d3:5b:73:22:78:93: 05:27:9c:e2:c9:97:0d:b9:3a:47:63:a2:4c:d2:38: 7d:72:6d:24:f9:08:9d:20:bd:51:86:57:dd:8a:69: e2:f3:00:db:cf:61:a0:c9:a0:39:54:b4:91:49:9e: 11:92:ed:a6:2b:9d:4c:1e:ed:7b:13:9c:c6:57:ca: 0c:36:66:91:4d:9a:14:c9:0e:78:60:3f:e3:d9:f0: 1a:f5:d5:8a:42:0a:ad:a3:4c:a9:31:d3:23:e5:7a: bd:f3:58:99:65:e8:3a:94:b8:c0:5d:ae:b9:70:6b: 20:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:66:5D:9B:2A:A4:6C:D9:1E:AB:93:93:FD:00:63:96:E0:B6:22:76 X509v3 Authority Key Identifier: keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:65:de:72:cd:73:93:fc:60:cf:55:e1:e5:05:12:01:be:b2: e6:ce:b7:eb:10:13:b5:b3:01:2b:59:96:64:22:f9:75:5c:04: 72:68:62:b7:2e:ec:52:57:30:c5:e9:12:59:2d:9c:e5:d4:e1: 76:53:0b:d4:66:c0:ea:57:64:ef:eb:aa:a3:cc:4e:41:7a:ff: 5e:e3:bf:af:f6:81:9b:b3:9e:2b:74:16:b3:1c:77:9a:5c:02: a4:f8:8a:20:64:34:9d:3e:4a:7e:33:9b:71:04:f3:9f:ee:50: 94:fd:d7:c9:03:91:64:77:bc:5b:4c:04:e0:49:19:c1:0f:5e: 82:d3:4d:74:4b:9b:3f:3a:79:fb:50:d7:61:60:6b:19:7a:70: 39:d3:3f:4e:c7:82:09:87:e6:2a:33:2a:ec:96:a3:0b:a4:3c: af:6e:2f:1b:09:fc:0e:31:0f:cf:c0:98:00:37:64:a4:d7:b5: 90:69:33:82:8f:63:6d:93:3b:15:30:99:0e:13:ad:53:6c:f0: 79:5f:6e:7e:11:06:6c:02:84:71:09:63:b7:bd:b4:ab:df:c0: aa:ab:98:21:fc:15:34:6a:fb:cf:bc:86:ea:dd:fc:cb:c7:c9: 09:0d:45:86:92:a2:1c:8b:a1:8d:3d:60:82:58:e4:5f:2d:db: 28:7e:b2:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpVnArgTLCKGjbYb2UUAnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZWQ2MjkzNWZiNDhhZjZlNDRjYmExOTQyNmVmYWI1MWYx YzU0MTAwHhcNMjUxMjExMjMwMDUzWhcNMjUxMjEyMjMwMDUzWjAzMTEwLwYDVQQD EyhkMDY2NWQ5YjJhYTQ2Y2Q5MWVhYjkzOTNmZDAwNjM5NmUwYjYyMjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyEQhNWt0BG/mng3qYS+90bdSA+8 VsLZHzkNo7htfSKJrikRnl8wwppv4INl0CwCXoBrHO0KAZGS7lPL+5DY6rv57JgB NuD4FB+7lEBBax1TtNfeINb97fwTqdzCI5rAYfzt/D3XOTqLLHx83eR1oV+0tOyV eZao0Jtjyul6z+5NZr/Y1JNrLpLzMUblXEnTW3MieJMFJ5ziyZcNuTpHY6JM0jh9 cm0k+QidIL1Rhlfdimni8wDbz2GgyaA5VLSRSZ4Rku2mK51MHu17E5zGV8oMNmaR TZoUyQ54YD/j2fAa9dWKQgqto0ypMdMj5Xq981iZZeg6lLjAXa65cGsg8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBmXZsqpGzZHquTk/0AY5bgtiJ2MB8GA1UdIwQY MBaAFCvtYpNftIr25Ey6GUJu+rUfHFQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWIt NDg0MDE0YTRkOTRlLzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWItNDg0MDE0YTRkOTRl LzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGXecs1z k/xgz1Xh5QUSAb6y5s636xATtbMBK1mWZCL5dVwEcmhity7sUlcwxekSWS2c5dTh dlML1GbA6ldk7+uqo8xOQXr/XuO/r/aBm7OeK3QWsxx3mlwCpPiKIGQ0nT5KfjOb cQTzn+5QlP3XyQORZHe8W0wE4EkZwQ9egtNNdEubPzp5+1DXYWBrGXpwOdM/TseC CYfmKjMq7JajC6Q8r24vGwn8DjEPz8CYADdkpNe1kGkzgo9jbZM7FTCZDhOtU2zw eV9ufhEGbAKEcQljt720q9/AqquYIfwVNGr7z7yG6t38y8fJCQ1FhpKiHIuhjT1g gljkXy3bKH6y6A== -----END CERTIFICATE-----Generated at Fri Dec 12 09:23:50 2025 by rpki-client