This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json) Hash identifier: otuX8kYBctwmUpXvQ3tgzcPcOeENA3Blbo35kcJBLiE= Subject key identifier: 0D:37:65:92:6A:92:36:D9:6C:3A:D7:5D:8B:85:9B:C5:A5:C5:28:E3 Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10 Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410 Certificate serial: 019B194DD6168E1B50BCD3CF116D74F855EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft Manifest number: 0E5C Signing time: Sat 13 Dec 2025 20:01:29 +0000 Manifest this update: Sat 13 Dec 2025 20:01:29 +0000 Manifest next update: Sun 14 Dec 2025 20:01:29 +0000 Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: /cuyvtCdmdLffEW/J8KpTYIKENGJ5z9IrsBzlFfmvxM=) 2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:d6:16:8e:1b:50:bc:d3:cf:11:6d:74:f8:55:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410 Validity Not Before: Dec 13 20:01:29 2025 GMT Not After : Dec 14 20:01:29 2025 GMT Subject: CN=0d3765926a9236d96c3ad75d8b859bc5a5c528e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:4a:72:7e:9f:44:56:e6:d0:52:9d:cc:c4: 2a:91:d8:65:be:ca:ef:91:1e:43:7d:bb:1d:55:fe: b1:58:df:8c:e7:ec:e6:df:1a:c2:33:d0:53:f1:87: 8f:37:70:f4:59:a8:7b:bb:ff:41:9d:bf:6b:61:25: d9:d9:88:24:85:6c:fb:a4:70:b1:9f:51:e7:f6:80: f3:29:fc:5c:3a:5f:1b:e3:f1:5f:57:12:79:c6:36: a9:fb:3e:5e:50:3d:de:a2:c0:1a:54:e3:c2:bb:a0: cb:54:1d:5a:fd:dc:c2:aa:a0:b2:77:dc:ba:5a:d5: d2:48:5d:48:44:6c:77:c1:80:5b:8a:2a:15:b4:26: 66:0c:d6:89:d7:4e:81:0c:54:b3:01:a5:b5:d1:74: dc:50:50:30:2f:bb:c9:77:95:5f:77:fc:65:0f:bb: 6f:57:b5:a9:ad:52:db:a4:56:34:a9:62:ea:49:5d: 73:a0:8e:b4:ae:29:1d:72:47:c6:6f:c3:5d:6f:20: 54:1b:59:fc:8c:74:2d:86:c2:b9:73:a6:87:83:20: fb:89:b2:80:28:3e:55:fb:92:dc:80:ae:35:90:4a: fb:90:1b:6c:46:83:d4:24:4a:2d:30:7c:7a:52:40: ce:d8:dc:6f:f9:d5:5c:b9:28:0b:4d:10:0a:d6:d0: 59:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:37:65:92:6A:92:36:D9:6C:3A:D7:5D:8B:85:9B:C5:A5:C5:28:E3 X509v3 Authority Key Identifier: keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d3:f9:8d:6d:bd:68:11:ef:a2:b1:20:5b:b5:80:0a:da:95: 8f:ae:72:aa:89:ca:e8:38:ff:40:2c:bf:1c:37:f2:a3:5c:06: 68:5e:27:9f:06:a3:28:b9:99:b0:a8:2b:b2:77:07:0c:ba:56: 2c:d9:86:69:e0:e3:dc:d0:08:68:41:78:93:cb:9f:a7:2e:be: 6c:bd:0b:58:e3:65:4a:11:d8:7b:d6:4b:c2:87:fc:de:05:77: 40:76:55:2e:10:6e:ca:d7:6e:d7:9a:2e:05:d8:fc:05:5b:7d: ef:ba:14:1f:01:61:08:a7:6f:be:a1:35:a4:fe:68:65:55:a2: a5:a7:9e:ad:89:91:9a:38:c9:3a:44:b6:54:43:83:4b:e3:fd: 7d:c4:d5:ff:9e:29:18:a6:28:2b:24:ed:8a:ba:03:ea:01:c6: e4:79:88:4f:9f:00:e0:57:77:c8:46:46:c2:63:28:79:c9:a4: 5e:56:a8:fa:43:e8:3c:3d:79:15:7a:b7:39:0d:23:34:67:cd: 10:84:74:e7:a0:21:ed:bb:5a:42:34:1d:75:75:e0:a5:b0:b7: e2:ed:49:dd:4b:57:b4:e3:c1:0e:fc:30:1d:0d:d7:60:51:62: 4a:d4:14:f7:86:a6:17:0f:cd:91:71:90:fd:d0:0c:c7:57:3d: d4:ba:5a:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTdYWjhtQvNPPEW10+FXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZWQ2MjkzNWZiNDhhZjZlNDRjYmExOTQyNmVmYWI1MWYx YzU0MTAwHhcNMjUxMjEzMjAwMTI5WhcNMjUxMjE0MjAwMTI5WjAzMTEwLwYDVQQD EygwZDM3NjU5MjZhOTIzNmQ5NmMzYWQ3NWQ4Yjg1OWJjNWE1YzUyOGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZZKcn6fRFbm0FKdzMQqkdhlvsrv kR5DfbsdVf6xWN+M5+zm3xrCM9BT8YePN3D0Wah7u/9Bnb9rYSXZ2YgkhWz7pHCx n1Hn9oDzKfxcOl8b4/FfVxJ5xjap+z5eUD3eosAaVOPCu6DLVB1a/dzCqqCyd9y6 WtXSSF1IRGx3wYBbiioVtCZmDNaJ106BDFSzAaW10XTcUFAwL7vJd5Vfd/xlD7tv V7WprVLbpFY0qWLqSV1zoI60rikdckfGb8NdbyBUG1n8jHQthsK5c6aHgyD7ibKA KD5V+5LcgK41kEr7kBtsRoPUJEotMHx6UkDO2Nxv+dVcuSgLTRAK1tBZKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA03ZZJqkjbZbDrXXYuFm8WlxSjjMB8GA1UdIwQY MBaAFCvtYpNftIr25Ey6GUJu+rUfHFQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWIt NDg0MDE0YTRkOTRlLzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWItNDg0MDE0YTRkOTRl LzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENP5jW29 aBHvorEgW7WACtqVj65yqonK6Dj/QCy/HDfyo1wGaF4nnwajKLmZsKgrsncHDLpW LNmGaeDj3NAIaEF4k8ufpy6+bL0LWONlShHYe9ZLwof83gV3QHZVLhBuytdu15ou Bdj8BVt977oUHwFhCKdvvqE1pP5oZVWipaeerYmRmjjJOkS2VEODS+P9fcTV/54p GKYoKyTtiroD6gHG5HmIT58A4Fd3yEZGwmMoecmkXlao+kPoPD15FXq3OQ0jNGfN EIR056Ah7btaQjQddXXgpbC34u1J3UtXtOPBDvwwHQ3XYFFiStQU94amFw/NkXGQ /dAMx1c91LpadA== -----END CERTIFICATE-----Generated at Sun Dec 14 03:42:30 2025 by rpki-client