This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json) Hash identifier: +3zWZoaT28mxWFMWyzjeGJgdwp1xvkpoxejnEJy7Ws0= Subject key identifier: 06:1D:E2:97:49:69:79:28:46:77:AD:EB:55:76:1C:55:A1:27:AB:0A Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Certificate serial: 019B115CF867E7DB49BA62A7D9BB788FD336 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft Manifest number: 0293 Signing time: Fri 12 Dec 2025 07:01:04 +0000 Manifest this update: Fri 12 Dec 2025 07:01:04 +0000 Manifest next update: Sat 13 Dec 2025 07:01:04 +0000 Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: fKTVvOwakgBLRCeCMmQfJol98Gt/bLkXD2q4SDfCPJ4=) 2: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=) 3: Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa (hash: P/qvYKsl5b2W4hd0B25iig5CdZGpWYsMZEWjWtHjTyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:f8:67:e7:db:49:ba:62:a7:d9:bb:78:8f:d3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Validity Not Before: Dec 12 07:01:04 2025 GMT Not After : Dec 13 07:01:04 2025 GMT Subject: CN=061de297496979284677adeb55761c55a127ab0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:42:79:72:02:0d:04:bd:e9:a8:16:1f:cf: be:d7:da:2f:fd:d0:0d:11:0c:30:df:e2:3b:f6:9e: 43:ca:d3:23:68:4f:24:65:7a:2d:ab:37:76:3d:96: 3c:39:f2:65:96:ff:57:07:02:1e:45:18:71:a0:8e: 0a:be:32:cb:df:4b:92:18:64:0f:ba:6f:e2:5d:1b: 5c:20:c9:8e:27:b5:91:a1:53:ec:68:1f:19:b9:b9: 9c:98:7f:3b:44:0e:55:b3:70:44:6d:ea:f1:82:50: 38:d8:cc:6f:23:35:9c:1e:81:a0:c2:68:2e:41:57: b7:36:7a:ff:4c:a1:b8:f4:d8:f2:51:84:98:66:c0: f8:8f:ee:29:52:91:c4:74:63:45:ec:80:51:b8:15: 43:5c:e5:16:e3:fa:14:1d:c7:7e:ac:87:fc:57:47: e1:79:2e:2e:e8:e1:62:e0:a3:5d:b9:64:89:ec:df: 15:6f:f7:f1:01:ed:ae:b1:72:24:cb:f1:7c:9b:a3: 6f:ed:77:ce:98:90:af:b3:b7:0b:5d:34:15:da:5b: ca:8d:b4:82:00:10:3c:01:6c:f3:81:e6:04:dd:80: 08:e9:28:ef:2b:b5:42:67:44:3d:7f:22:bd:b5:4d: 74:5b:15:72:97:67:60:4b:dc:f4:ce:ec:00:e2:d9: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1D:E2:97:49:69:79:28:46:77:AD:EB:55:76:1C:55:A1:27:AB:0A X509v3 Authority Key Identifier: keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:31:a8:ca:0b:0b:e1:1b:88:a3:0c:65:d0:d0:53:48:83:b5: 1f:a2:90:dd:54:28:86:bb:c9:dd:c5:03:0f:ac:ee:9f:aa:00: a4:a3:cb:be:2f:59:6e:58:44:4f:6b:1a:f8:ac:8e:0e:4a:92: b0:6d:c4:0b:81:97:10:e3:4d:67:ee:f9:62:e2:e6:4f:53:8a: 03:da:c8:b5:31:fc:0a:5f:6d:ad:c6:89:df:73:ac:86:81:bd: b5:b8:91:f1:d3:6c:ad:03:fe:53:29:d4:de:d3:0c:54:c5:c1: 6f:c2:a7:06:10:55:ca:5d:ba:82:7e:8c:bc:74:a8:63:44:a0: ae:8b:f6:6e:29:f5:37:ac:27:47:57:30:1a:1d:ca:2b:bc:fe: 75:8a:45:7d:f8:01:bb:b6:9c:a6:68:08:7a:b2:4a:a0:25:13: 25:ce:45:9d:f7:4d:4d:b5:3a:b1:79:44:66:e5:16:66:39:3d: a5:92:80:23:b8:37:be:fe:53:ec:12:7e:d6:de:1d:24:35:7b: 44:b8:f0:04:68:49:29:eb:be:b5:04:41:96:c1:b2:97:1e:b8: 44:3c:3e:09:61:cd:93:da:cd:74:be:77:be:e1:43:9b:9a:d3: 3e:41:4f:1c:eb:1e:84:e9:53:ed:9d:b3:7e:16:59:91:d2:f6: 3b:66:08:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXPhn59tJumKn2bt4j9M2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh MThjZWUwHhcNMjUxMjEyMDcwMTA0WhcNMjUxMjEzMDcwMTA0WjAzMTEwLwYDVQQD EygwNjFkZTI5NzQ5Njk3OTI4NDY3N2FkZWI1NTc2MWM1NWExMjdhYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1NCeXICDQS96agWH8++19ov/dAN EQww3+I79p5DytMjaE8kZXotqzd2PZY8OfJllv9XBwIeRRhxoI4KvjLL30uSGGQP um/iXRtcIMmOJ7WRoVPsaB8ZubmcmH87RA5Vs3BEberxglA42MxvIzWcHoGgwmgu QVe3Nnr/TKG49NjyUYSYZsD4j+4pUpHEdGNF7IBRuBVDXOUW4/oUHcd+rIf8V0fh eS4u6OFi4KNduWSJ7N8Vb/fxAe2usXIky/F8m6Nv7XfOmJCvs7cLXTQV2lvKjbSC ABA8AWzzgeYE3YAI6SjvK7VCZ0Q9fyK9tU10WxVyl2dgS9z0zuwA4tn5pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYd4pdJaXkoRnet61V2HFWhJ6sKMB8GA1UdIwQY MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt YzU5ODI1YmJjYjMyLzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezGoygsL 4RuIowxl0NBTSIO1H6KQ3VQohrvJ3cUDD6zun6oApKPLvi9ZblhET2sa+KyODkqS sG3EC4GXEONNZ+75YuLmT1OKA9rItTH8Cl9trcaJ33OshoG9tbiR8dNsrQP+UynU 3tMMVMXBb8KnBhBVyl26gn6MvHSoY0Sgrov2bin1N6wnR1cwGh3KK7z+dYpFffgB u7acpmgIerJKoCUTJc5FnfdNTbU6sXlEZuUWZjk9pZKAI7g3vv5T7BJ+1t4dJDV7 RLjwBGhJKeu+tQRBlsGylx64RDw+CWHNk9rNdL53vuFDm5rTPkFPHOsehOlT7Z2z fhZZkdL2O2YIHw== -----END CERTIFICATE-----Generated at Fri Dec 12 14:20:57 2025 by rpki-client