This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft File: K1iJW-74e1UDAHkRLUqxfZPJiiA.mft (raw, json) Hash identifier: uQT5iEw+Gg2ErhD0Y51Rtk+W9KT7gKIuqxCWBuZPxo4= Subject key identifier: 73:F9:66:34:82:F5:4C:17:00:A9:0A:51:06:85:FC:2D:C5:27:93:06 Authority key identifier: 2B:58:89:5B:EE:F8:7B:55:03:00:79:11:2D:4A:B1:7D:93:C9:8A:20 Certificate issuer: /CN=2b58895beef87b55030079112d4ab17d93c98a20 Certificate serial: 019B5A1B11D9029AAED206C5191FA8751012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft Manifest number: 62 Signing time: Fri 26 Dec 2025 10:01:21 +0000 Manifest this update: Fri 26 Dec 2025 10:01:21 +0000 Manifest next update: Sat 27 Dec 2025 10:01:21 +0000 Files and hashes: 1: 1-7SKLX7Fe7Ix4a6o34ESRoulfMk.roa (hash: 0HHMTAsB+MNhajvF2102BenVFZxwF6ZCwPg2M41m5SA=) 2: K1iJW-74e1UDAHkRLUqxfZPJiiA.crl (hash: 8LITvlrP2r3tVi9tcob2cJF0/SOT0Wwp4FuPt9cFNbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:11:d9:02:9a:ae:d2:06:c5:19:1f:a8:75:10:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b58895beef87b55030079112d4ab17d93c98a20 Validity Not Before: Dec 26 10:01:21 2025 GMT Not After : Dec 27 10:01:21 2025 GMT Subject: CN=73f9663482f54c1700a90a510685fc2dc5279306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e0:25:57:ab:fa:48:6f:92:1e:b8:62:3a:f9: 6e:28:75:0f:bf:4b:62:ac:91:d7:0d:67:af:aa:fb: b2:98:4d:5e:d7:e7:27:18:d2:02:af:7e:cd:08:47: 2c:0b:38:21:d1:cb:6f:4f:b3:79:45:d2:73:96:a8: 0c:53:6c:1a:5c:5b:84:83:3a:00:5d:be:57:63:ab: 18:b9:bb:71:88:08:8c:73:0b:21:37:1a:ae:92:50: 4e:70:34:45:0c:0d:d9:47:fa:f0:9b:3f:18:91:2f: 7e:07:53:57:e6:9d:ed:6f:b0:a7:eb:e5:92:d8:0c: a8:b0:f1:78:6b:58:d3:a2:3d:f9:34:03:62:63:df: 4b:c3:7a:c2:65:72:f4:a9:4d:03:4a:62:ad:c7:1d: e2:25:7e:37:88:58:09:4b:90:1e:ca:14:b9:b7:6d: 2c:07:f1:8d:37:b3:46:56:be:b4:bd:c8:14:da:f8: fb:f7:48:a4:d1:b1:2c:82:b9:04:29:fa:eb:fc:bd: 75:6d:a4:72:61:a0:97:04:14:26:be:75:4a:09:c5: 99:af:10:31:cb:31:a0:ac:84:81:8a:63:c7:b3:f1: 86:2d:ac:7e:40:cf:1e:41:8c:c8:89:86:33:d0:63: 77:3f:a5:92:57:d8:a6:35:9c:22:d6:ee:97:20:10: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F9:66:34:82:F5:4C:17:00:A9:0A:51:06:85:FC:2D:C5:27:93:06 X509v3 Authority Key Identifier: keyid:2B:58:89:5B:EE:F8:7B:55:03:00:79:11:2D:4A:B1:7D:93:C9:8A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f6:da:25:ae:8c:51:74:c1:9c:cb:d7:ec:e0:28:23:65:05: 73:94:63:52:cd:a0:79:84:b7:af:c4:76:59:1f:e1:0a:6f:bd: 9c:89:20:54:cf:a4:c0:bb:e2:25:67:85:aa:76:36:96:23:46: 14:65:6d:d4:3f:31:aa:6d:5a:37:b5:6e:c3:43:77:b6:85:34: b5:41:0e:7d:90:60:f3:ef:68:c0:5d:99:80:71:c8:09:07:2b: 95:d4:e8:c5:62:46:48:3a:d7:1f:ee:37:4e:07:71:be:9b:e4: 77:ad:ec:93:bc:7e:5d:a4:c0:27:b8:2a:ec:8f:f5:f4:66:70: ce:60:c1:ce:a2:47:05:c4:ec:eb:3f:00:d8:07:36:de:1c:dc: 80:0c:3e:6e:2e:1e:43:4d:02:40:9a:b2:0b:07:46:39:52:d8: 07:c1:30:14:a7:a3:9a:4c:05:99:79:1f:94:d9:64:77:21:83: 4f:20:a8:26:73:ed:e5:5f:45:0b:f4:d8:ac:5e:f8:18:5e:c9: 05:a9:1b:f6:94:4a:6e:80:a8:59:8d:34:53:2f:58:8c:b4:ac: c4:af:27:dc:8a:6b:cf:c7:52:ee:04:3d:b3:b5:75:fd:ae:a8: e8:45:3a:0c:70:b8:b1:f3:46:bb:1e:08:73:d0:2c:33:10:a1: a5:68:f2:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGxHZApqu0gbFGR+odRASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNTg4OTViZWVmODdiNTUwMzAwNzkxMTJkNGFiMTdkOTNj OThhMjAwHhcNMjUxMjI2MTAwMTIxWhcNMjUxMjI3MTAwMTIxWjAzMTEwLwYDVQQD Eyg3M2Y5NjYzNDgyZjU0YzE3MDBhOTBhNTEwNjg1ZmMyZGM1Mjc5MzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOAlV6v6SG+SHrhiOvluKHUPv0ti rJHXDWevqvuymE1e1+cnGNICr37NCEcsCzgh0ctvT7N5RdJzlqgMU2waXFuEgzoA Xb5XY6sYubtxiAiMcwshNxquklBOcDRFDA3ZR/rwmz8YkS9+B1NX5p3tb7Cn6+WS 2AyosPF4a1jToj35NANiY99Lw3rCZXL0qU0DSmKtxx3iJX43iFgJS5AeyhS5t20s B/GNN7NGVr60vcgU2vj790ik0bEsgrkEKfrr/L11baRyYaCXBBQmvnVKCcWZrxAx yzGgrISBimPHs/GGLax+QM8eQYzIiYYz0GN3P6WSV9imNZwi1u6XIBDt9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHP5ZjSC9UwXAKkKUQaF/C3FJ5MGMB8GA1UdIwQY MBaAFCtYiVvu+HtVAwB5ES1KsX2TyYogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzFpSlctNzRlMVVEQUhrUkxVcXhmWlBKaWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNjJhOTUtYjQzZC00ZjFmLThlZjQt OWEzMjFmZmMyZWVmLzEvSzFpSlctNzRlMVVEQUhrUkxVcXhmWlBKaWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iNjJhOTUtYjQzZC00ZjFmLThlZjQtOWEzMjFmZmMyZWVm LzEvSzFpSlctNzRlMVVEQUhrUkxVcXhmWlBKaWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/baJa6M UXTBnMvX7OAoI2UFc5RjUs2geYS3r8R2WR/hCm+9nIkgVM+kwLviJWeFqnY2liNG FGVt1D8xqm1aN7Vuw0N3toU0tUEOfZBg8+9owF2ZgHHICQcrldToxWJGSDrXH+43 Tgdxvpvkd63sk7x+XaTAJ7gq7I/19GZwzmDBzqJHBcTs6z8A2Ac23hzcgAw+bi4e Q00CQJqyCwdGOVLYB8EwFKejmkwFmXkflNlkdyGDTyCoJnPt5V9FC/TYrF74GF7J Bakb9pRKboCoWY00Uy9YjLSsxK8n3Iprz8dS7gQ9s7V1/a6o6EU6DHC4sfNGux4I c9AsMxChpWjyZw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:27 2025 by rpki-client