This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json) Hash identifier: uD6u+JSVKNDonCLp2LvyoWC1L0S2MTeZzICie+KO9r0= Subject key identifier: E0:E6:E2:40:D7:19:80:8D:FE:53:97:3D:7A:14:68:DA:A0:BF:15:7D Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5 Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5 Certificate serial: 019B1B3BC875CF99EE1C9C95C291CF0F4D2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft Manifest number: 063E Signing time: Sun 14 Dec 2025 05:01:01 +0000 Manifest this update: Sun 14 Dec 2025 05:01:01 +0000 Manifest next update: Mon 15 Dec 2025 05:01:01 +0000 Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: KbdzWPSWBcNZUyCKO9ceJi7gnWhebavEHS/uG872bKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:c8:75:cf:99:ee:1c:9c:95:c2:91:cf:0f:4d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5 Validity Not Before: Dec 14 05:01:01 2025 GMT Not After : Dec 15 05:01:01 2025 GMT Subject: CN=e0e6e240d719808dfe53973d7a1468daa0bf157d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:0c:74:d2:67:70:37:6a:76:74:0b:56:9b: 14:21:79:09:4d:8d:0c:f7:f8:c6:f3:a4:45:0c:bf: 37:ab:66:0d:85:72:5d:69:64:76:49:aa:3e:ba:52: 17:bc:cc:e4:2b:be:38:ec:1c:9e:53:13:fd:4b:98: e9:97:0b:71:90:17:c6:86:cb:28:f3:39:c2:92:43: 31:3c:e7:1c:c3:d2:ed:e3:50:9a:07:fb:f2:0e:2b: 49:e4:49:c5:47:0b:ef:b8:cc:f9:05:56:d0:d6:2f: bc:4d:9e:74:7d:ae:b3:6e:15:4b:fd:fd:84:a6:cf: c7:11:88:c6:f8:e5:16:5a:21:f0:89:a0:2d:3e:e0: 45:f2:cb:79:c5:3f:bc:1e:26:c1:90:f2:cd:5a:2a: ee:56:c7:8c:81:d2:16:a8:39:c4:e1:c1:55:c9:cb: 42:8a:ff:68:1e:48:fb:a8:5f:e6:62:d3:53:ab:49: f2:43:9b:43:3a:be:2b:6a:6e:54:91:d9:ee:8d:d5: ba:2d:bb:f3:9f:fc:74:bb:35:20:a5:df:21:fa:2c: 43:a4:38:c8:c7:53:f2:8c:dc:22:0d:fd:92:4a:03: af:b4:82:e9:68:ca:5d:6e:13:8b:ca:e2:0b:53:37: ca:0e:28:58:5d:9f:10:7b:db:ba:8c:15:52:e2:c6: 9c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E6:E2:40:D7:19:80:8D:FE:53:97:3D:7A:14:68:DA:A0:BF:15:7D X509v3 Authority Key Identifier: keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:aa:da:0b:06:9d:9f:24:16:d3:36:ec:8e:ff:ec:43:a8:5c: db:4d:ea:c0:90:c3:27:ad:14:f6:6f:51:b1:17:b2:67:48:69: e2:26:ea:79:cf:a9:c5:cd:25:fb:07:40:a1:04:8f:15:7b:67: f3:5d:05:d2:b0:ad:d7:d8:32:d2:d0:33:9b:67:42:2f:cb:b4: a4:78:dd:6c:e7:65:60:4a:59:30:c0:1d:80:1a:8b:79:3e:73: 73:b4:2c:6e:86:99:76:5c:3f:d6:09:c9:11:89:8b:31:ba:27: e6:41:fe:e6:93:55:b2:10:24:b1:09:8d:2d:fd:bf:b1:aa:b1: 20:de:e2:51:20:63:8d:d1:6b:80:ca:1e:12:99:27:83:33:a2: 7b:eb:f8:bc:1b:12:04:df:57:d7:39:a9:52:a8:f0:e9:33:fa: 94:09:d7:f6:05:0d:44:d5:b1:db:4b:b5:d7:2d:b2:39:7c:3b: 50:a8:c3:07:c3:aa:84:14:9b:3e:10:22:d7:9a:c9:18:4a:98: 97:73:79:ee:49:37:16:7a:06:90:4f:88:6e:5a:2b:6b:8d:e9: 17:23:61:5b:7e:cc:2c:61:c4:c6:9e:b0:b9:9c:e2:db:06:81: 30:16:14:cb:92:73:9d:c8:53:be:0b:72:a6:93:a9:21:dd:65: ad:e5:40:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO8h1z5nuHJyVwpHPD00qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGQ3ZmY0NTZmNWZkYzdkZTYxZmE0MjBlZTA4NmE3N2Ex ZTYxZTUwHhcNMjUxMjE0MDUwMTAxWhcNMjUxMjE1MDUwMTAxWjAzMTEwLwYDVQQD EyhlMGU2ZTI0MGQ3MTk4MDhkZmU1Mzk3M2Q3YTE0NjhkYWEwYmYxNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9MMdNJncDdqdnQLVpsUIXkJTY0M 9/jG86RFDL83q2YNhXJdaWR2Sao+ulIXvMzkK7447ByeUxP9S5jplwtxkBfGhsso 8znCkkMxPOccw9Lt41CaB/vyDitJ5EnFRwvvuMz5BVbQ1i+8TZ50fa6zbhVL/f2E ps/HEYjG+OUWWiHwiaAtPuBF8st5xT+8HibBkPLNWiruVseMgdIWqDnE4cFVyctC iv9oHkj7qF/mYtNTq0nyQ5tDOr4ram5UkdnujdW6Lbvzn/x0uzUgpd8h+ixDpDjI x1PyjNwiDf2SSgOvtILpaMpdbhOLyuILUzfKDihYXZ8Qe9u6jBVS4sacyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODm4kDXGYCN/lOXPXoUaNqgvxV9MB8GA1UdIwQY MBaAFK5Nf/RW9f3H3mH6Qg7ghqd6HmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yYWNlMWUtNzBkYi00YTBhLTkzYzQt MDdiMThlNTE4NTYxLzEvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8yYWNlMWUtNzBkYi00YTBhLTkzYzQtMDdiMThlNTE4NTYx LzEvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqraCwad nyQW0zbsjv/sQ6hc203qwJDDJ60U9m9RsReyZ0hp4ibqec+pxc0l+wdAoQSPFXtn 810F0rCt19gy0tAzm2dCL8u0pHjdbOdlYEpZMMAdgBqLeT5zc7QsboaZdlw/1gnJ EYmLMbon5kH+5pNVshAksQmNLf2/saqxIN7iUSBjjdFrgMoeEpkngzOie+v4vBsS BN9X1zmpUqjw6TP6lAnX9gUNRNWx20u11y2yOXw7UKjDB8OqhBSbPhAi15rJGEqY l3N57kk3FnoGkE+Iblora43pFyNhW37MLGHExp6wuZzi2waBMBYUy5JznchTvgty ppOpId1lreVAZw== -----END CERTIFICATE-----Generated at Sun Dec 14 13:48:21 2025 by rpki-client