This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft File: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json) Hash identifier: y6V4TBsRlYJu1Yu/w17FH0D0RapfpsjCZdAwbELxIk8= Subject key identifier: 2D:39:51:DD:A5:DE:1E:B5:7F:29:48:BD:EE:62:EE:93:02:FA:B2:18 Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8 Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8 Certificate serial: 019B2175F7A340765C20DADBC027FCCBA43B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft Manifest number: 08B1 Signing time: Mon 15 Dec 2025 10:02:17 +0000 Manifest this update: Mon 15 Dec 2025 10:02:17 +0000 Manifest next update: Tue 16 Dec 2025 10:02:17 +0000 Files and hashes: 1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: Zbs4gf8muEcW4s7MSnCYsNgUhJMENPRWnG2x29EvQf8=) 2: ngDDmkyYAF9itPtooLnD-4aIxnc.roa (hash: xRemSKj2s+7N5AQoS3YswgNjXP01ldeAV619NqxAwU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:f7:a3:40:76:5c:20:da:db:c0:27:fc:cb:a4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8 Validity Not Before: Dec 15 10:02:17 2025 GMT Not After : Dec 16 10:02:17 2025 GMT Subject: CN=2d3951dda5de1eb57f2948bdee62ee9302fab218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:24:f3:8d:08:d1:cc:dc:11:07:a7:dc:9d: 4f:61:90:25:ce:9b:cb:21:84:d5:a6:e6:d1:ae:37: 57:bd:d2:69:3e:5d:32:d6:1a:49:85:90:2e:08:4c: bf:a9:f5:f6:55:9b:0c:1c:4a:45:4b:b4:f2:27:11: 64:e4:7e:44:46:90:db:c1:f6:a9:a1:ec:08:71:f0: cc:f4:7c:21:28:39:49:07:b7:ef:7f:99:3a:1a:22: ee:cb:b1:66:cd:c0:75:cf:c6:4f:c8:ff:5b:c4:49: 65:0e:0e:b1:cb:ee:6f:57:81:4b:52:8f:a9:99:01: 99:18:08:49:8f:b7:11:d5:3b:00:1e:65:37:6c:a2: b6:4e:7e:c5:1b:a2:20:8a:96:39:66:2f:f5:df:1c: 1f:26:1b:1e:6c:ce:9f:d2:d2:e9:72:09:41:ea:66: 1e:dd:f2:d4:fd:e8:6f:05:79:17:25:44:35:a5:cf: 0b:54:57:d9:67:98:93:49:3a:54:1e:83:34:dc:10: 7e:55:b9:08:99:cd:d4:f6:ef:db:fc:a5:97:bb:ea: 8e:3d:14:e1:ee:f6:76:03:5e:98:4c:86:4a:2d:2f: fe:8a:c0:b0:01:82:23:75:89:29:47:6c:3f:e0:2b: 15:f4:91:01:4c:11:35:29:a4:f7:d6:a4:e2:9e:fa: 24:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:39:51:DD:A5:DE:1E:B5:7F:29:48:BD:EE:62:EE:93:02:FA:B2:18 X509v3 Authority Key Identifier: keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a2:2f:2c:a5:af:38:3c:c5:51:7d:26:59:a4:70:c0:8d:6f: 24:a6:25:e7:54:be:cc:7b:00:17:34:b5:4e:a3:2d:24:2c:a0: 29:1a:c6:e6:b3:81:ac:bd:24:84:64:5a:18:55:22:15:db:61: e9:14:50:aa:1a:d7:90:bf:e6:3c:fb:0e:67:0d:51:15:c7:64: 53:a1:83:67:55:69:83:e4:30:af:53:39:c1:03:9a:00:29:1c: 18:5d:30:90:cd:b6:34:5f:36:cd:40:76:35:0c:f0:34:b0:3b: 15:30:7f:a8:e8:00:b7:8a:4a:08:77:0c:9f:60:7f:37:d4:bc: f0:55:09:64:68:5c:63:ef:9e:86:2f:26:8c:79:3f:8a:dc:7a: 73:20:72:56:97:cb:b1:e4:f1:30:7e:0b:38:56:0a:d3:f2:29: 47:70:c6:11:6f:75:24:b6:9a:ef:3d:fb:0e:3a:ee:f0:77:82: 29:34:b0:b7:00:d1:91:af:aa:7b:5d:48:d4:ce:69:e2:ee:44: c4:18:3a:be:43:90:12:1e:e7:ad:b3:79:58:bb:02:f2:1c:07: d9:60:8f:1d:1d:52:c3:bc:75:73:af:b9:eb:a0:0d:29:ff:a4: e0:07:fd:a7:ee:89:e2:33:3f:ca:45:25:a0:b7:e3:46:28:23: 41:51:2b:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdfejQHZcINrbwCf8y6Q7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NGQ0YjkwODYxNThiYzI5NmIyMDBhNjBmYzM3NTBlOTUx ZDIyZjgwHhcNMjUxMjE1MTAwMjE3WhcNMjUxMjE2MTAwMjE3WjAzMTEwLwYDVQQD EygyZDM5NTFkZGE1ZGUxZWI1N2YyOTQ4YmRlZTYyZWU5MzAyZmFiMjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0ck840I0czcEQen3J1PYZAlzpvL IYTVpubRrjdXvdJpPl0y1hpJhZAuCEy/qfX2VZsMHEpFS7TyJxFk5H5ERpDbwfap oewIcfDM9HwhKDlJB7fvf5k6GiLuy7FmzcB1z8ZPyP9bxEllDg6xy+5vV4FLUo+p mQGZGAhJj7cR1TsAHmU3bKK2Tn7FG6IgipY5Zi/13xwfJhsebM6f0tLpcglB6mYe 3fLU/ehvBXkXJUQ1pc8LVFfZZ5iTSTpUHoM03BB+VbkImc3U9u/b/KWXu+qOPRTh 7vZ2A16YTIZKLS/+isCwAYIjdYkpR2w/4CsV9JEBTBE1KaT31qTinvokfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC05Ud2l3h61fylIve5i7pMC+rIYMB8GA1UdIwQY MBaAFNZNS5CGFYvClrIApg/DdQ6VHSL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWsxTGtJWVZpOEtXc2dDbUQ4TjFEcFVkSXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lOTE4MTYtNzdkOC00MDY5LWFlYjct YTViZmM1NDQwMDVjLzEvMWsxTGtJWVZpOEtXc2dDbUQ4TjFEcFVkSXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lOTE4MTYtNzdkOC00MDY5LWFlYjctYTViZmM1NDQwMDVj LzEvMWsxTGtJWVZpOEtXc2dDbUQ4TjFEcFVkSXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqIvLKWv ODzFUX0mWaRwwI1vJKYl51S+zHsAFzS1TqMtJCygKRrG5rOBrL0khGRaGFUiFdth 6RRQqhrXkL/mPPsOZw1RFcdkU6GDZ1Vpg+Qwr1M5wQOaACkcGF0wkM22NF82zUB2 NQzwNLA7FTB/qOgAt4pKCHcMn2B/N9S88FUJZGhcY++ehi8mjHk/itx6cyByVpfL seTxMH4LOFYK0/IpR3DGEW91JLaa7z37Djru8HeCKTSwtwDRka+qe11I1M5p4u5E xBg6vkOQEh7nrbN5WLsC8hwH2WCPHR1Sw7x1c6+566ANKf+k4Af9p+6J4jM/ykUl oLfjRigjQVEr7A== -----END CERTIFICATE-----Generated at Mon Dec 15 20:02:14 2025 by rpki-client