This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft File: rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json) Hash identifier: OOyFuCKLXJ3KySKTIrHyoN0d438OqtGX0ZFgdbOQeSE= Subject key identifier: 60:91:7E:0F:97:CD:9C:7C:06:E2:CB:CA:1E:18:C0:2F:00:AC:FB:63 Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85 Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85 Certificate serial: 019B1C1724DB1D10DD11D9A1A780E32185E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft Manifest number: 1095 Signing time: Sun 14 Dec 2025 09:00:37 +0000 Manifest this update: Sun 14 Dec 2025 09:00:37 +0000 Manifest next update: Mon 15 Dec 2025 09:00:37 +0000 Files and hashes: 1: 1-T8CKegBPOvx5rZQQVTHJ11NZfg.roa (hash: oTgrbLpJLd4bRqFVMFFivKpiZVrk/3YZuKNsOWKM6jM=) 2: 17xOhQoyIYZB59OnKrsT-dwllSw.roa (hash: KCMu12vyicYfkSRRUkeo8o3fEfjAYF/JgjW23i3oXrg=) 3: FsSFEoZYb3Nl-hkkgjVPUd2IvDA.roa (hash: Fqkp/m22ufWmmjenywmk6qhO70aCJ2/zGhbzol+bOEg=) 4: Umj2rbjqE8HIV-ruGeVeqZYwg9s.roa (hash: /89yG0WnFcE05IMFp3mM3/qP9TrscwAHv2Gfhcc6Cj0=) 5: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: JAGnOqtcysVGQztI4RzFKiCrXwIrKt+qyiY61iG89Cw=) 6: sZB9qJRdylpTdvF1XtaqqpNl-OY.roa (hash: lRBjFzzRtx2AcctUxGDd+P1zYD8sp2IpXYC35kAzyFQ=) 7: vxhTN1By4lMiNMyOzxGwyr7QhR4.roa (hash: Ifos+E1fPLCwRcBMt2WCu8lSioPDUu6uUrn5J7VTK/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:24:db:1d:10:dd:11:d9:a1:a7:80:e3:21:85:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85 Validity Not Before: Dec 14 09:00:37 2025 GMT Not After : Dec 15 09:00:37 2025 GMT Subject: CN=60917e0f97cd9c7c06e2cbca1e18c02f00acfb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f0:c6:6d:31:6e:be:ac:3a:86:64:c0:92:d8: 5d:cc:59:aa:14:a4:bc:15:54:be:7f:b4:ee:88:05: 3d:15:b5:65:24:44:de:81:ec:5d:51:7f:bf:f0:96: 42:67:9b:9b:d1:df:fd:e6:20:0c:4f:88:40:6d:16: f0:31:e9:73:5c:a6:82:c5:b2:3e:0e:71:0b:3a:8b: e6:24:da:52:6e:0f:73:73:80:b4:a6:91:c4:d8:3e: 88:94:1f:cf:f7:47:96:52:41:4b:d5:3c:a6:9b:7d: be:68:0d:dd:da:23:8b:80:a5:43:74:ed:47:4c:f2: 0f:ff:ab:e8:54:90:f5:a4:41:56:ca:16:e6:76:f2: e4:ee:7d:63:35:6d:c4:3b:2a:53:f2:24:e2:b7:71: af:3c:66:77:67:b8:cc:9f:b5:a2:74:ac:03:f3:95: 4b:4f:ea:cb:ab:87:31:c0:c7:2b:c2:a0:cf:53:f5: e3:2c:e5:00:bf:67:ea:dd:8b:7f:ec:db:16:88:09: a6:1f:a8:f9:9f:72:3e:c2:4d:11:41:9f:14:72:0f: 49:fb:a2:29:c5:13:7c:e6:23:76:54:2a:5d:00:b3: 3c:88:7c:3b:d7:33:f0:de:85:16:7a:6f:a4:7e:20: d4:72:c4:50:f2:b9:b7:59:77:6d:cc:25:4f:d2:bd: ed:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:91:7E:0F:97:CD:9C:7C:06:E2:CB:CA:1E:18:C0:2F:00:AC:FB:63 X509v3 Authority Key Identifier: keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0c:9a:4f:c5:f6:f8:5a:6f:42:32:61:4a:f2:7c:bb:98:2c: b9:59:cc:a0:4f:d8:c8:7a:de:28:d3:7f:65:ef:e4:a2:f4:ce: 0e:31:e4:51:36:45:9e:6c:ff:76:14:b3:ec:67:dd:9f:36:48: e6:a9:c8:ea:d6:81:c8:d8:7b:c9:8d:c3:f4:75:2b:98:83:8a: a2:75:be:94:4c:23:67:39:5a:38:70:d7:1b:2c:96:59:19:68: 2e:c4:a3:5f:96:fb:bd:3f:8a:69:5c:4f:df:a9:ef:d4:21:e6: 70:f1:8a:60:50:8d:0d:6a:41:9a:9a:0c:f7:bf:82:ad:29:db: f7:c3:69:c7:62:0b:1c:2e:e2:f4:92:4f:d6:b9:a7:13:6a:46: cb:8d:0d:2e:2d:df:ef:78:05:93:65:69:4e:1b:5e:d5:7d:97: ca:ef:59:4c:d8:a2:e2:a6:9e:88:7d:f4:b3:07:03:d3:01:b0: 95:bd:41:5d:be:6a:f6:ff:72:cc:78:2d:00:9c:9e:d9:8c:df: 97:1b:7d:a4:6a:13:46:f3:98:32:6a:56:1a:65:fc:9b:89:a1: 22:48:fd:a6:51:e1:c7:1e:7e:fd:9b:6a:4f:dc:e8:ee:a2:cf: 92:5f:1a:ba:e4:22:ab:18:eb:02:d8:27:f9:65:9d:17:15:a6: 4a:0e:22:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscFyTbHRDdEdmhp4DjIYXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlY2Q2NGM5NzgzN2Q3YmZhYzA2NjM3ZGQ5NTJiZGVkZTBj MjVkODUwHhcNMjUxMjE0MDkwMDM3WhcNMjUxMjE1MDkwMDM3WjAzMTEwLwYDVQQD Eyg2MDkxN2UwZjk3Y2Q5YzdjMDZlMmNiY2ExZTE4YzAyZjAwYWNmYjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPDGbTFuvqw6hmTAkthdzFmqFKS8 FVS+f7TuiAU9FbVlJETegexdUX+/8JZCZ5ub0d/95iAMT4hAbRbwMelzXKaCxbI+ DnELOovmJNpSbg9zc4C0ppHE2D6IlB/P90eWUkFL1Tymm32+aA3d2iOLgKVDdO1H TPIP/6voVJD1pEFWyhbmdvLk7n1jNW3EOypT8iTit3GvPGZ3Z7jMn7WidKwD85VL T+rLq4cxwMcrwqDPU/XjLOUAv2fq3Yt/7NsWiAmmH6j5n3I+wk0RQZ8Ucg9J+6Ip xRN85iN2VCpdALM8iHw71zPw3oUWem+kfiDUcsRQ8rm3WXdtzCVP0r3tvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCRfg+XzZx8BuLLyh4YwC8ArPtjMB8GA1UdIwQY MBaAFK7NZMl4N9e/rAZjfdlSve3gwl2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzIt MWVjZGUxNzkxNTExLzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzItMWVjZGUxNzkxNTEx LzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegyaT8X2 +FpvQjJhSvJ8u5gsuVnMoE/YyHreKNN/Ze/kovTODjHkUTZFnmz/dhSz7GfdnzZI 5qnI6taByNh7yY3D9HUrmIOKonW+lEwjZzlaOHDXGyyWWRloLsSjX5b7vT+KaVxP 36nv1CHmcPGKYFCNDWpBmpoM97+CrSnb98Npx2ILHC7i9JJP1rmnE2pGy40NLi3f 73gFk2VpThte1X2Xyu9ZTNii4qaeiH30swcD0wGwlb1BXb5q9v9yzHgtAJye2Yzf lxt9pGoTRvOYMmpWGmX8m4mhIkj9plHhxx5+/ZtqT9zo7qLPkl8auuQiqxjrAtgn +WWdFxWmSg4iSA== -----END CERTIFICATE-----Generated at Sun Dec 14 13:36:56 2025 by rpki-client