This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft File: RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json) Hash identifier: V4rWfumkAeuLNCz4wctRY/5+qRyX9oAYDD8KStGSmZE= Subject key identifier: AE:97:92:66:51:B7:79:1B:88:F5:12:C9:68:2C:3C:A3:98:63:DA:B1 Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90 Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290 Certificate serial: 019AF2091ECEBA24D4090FF203F428F85415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft Manifest number: 0B51 Signing time: Sat 06 Dec 2025 05:01:15 +0000 Manifest this update: Sat 06 Dec 2025 05:01:15 +0000 Manifest next update: Sun 07 Dec 2025 05:01:15 +0000 Files and hashes: 1: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: Zmij8IV7VPsfhqjBB3ZsqCuGuDeGilBVpLf9WXk+QPw=) 2: lbF_l02xwlPuqyIyhvc-CUJUU3g.roa (hash: 7hIs2Gkxh47foaseC5DC1sFgdBVuaxJrQVf2xLhJkbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1e:ce:ba:24:d4:09:0f:f2:03:f4:28:f8:54:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290 Validity Not Before: Dec 6 05:01:15 2025 GMT Not After : Dec 7 05:01:15 2025 GMT Subject: CN=ae97926651b7791b88f512c9682c3ca39863dab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:15:26:57:76:ee:ff:37:71:9a:d4:47:38: 88:90:89:97:dd:b7:f9:89:c4:19:b4:d6:ef:04:7c: 01:42:39:75:62:75:09:8d:35:7c:56:29:05:d5:88: d0:5a:d7:ce:a1:d3:ad:16:f7:4c:75:90:bd:99:bf: 3c:87:82:ea:5d:86:82:71:b3:d9:65:7b:f1:1b:a9: ca:a7:00:1d:b5:6c:35:45:17:e0:55:d2:1e:b7:44: 19:eb:94:12:12:7c:6a:07:15:b7:04:65:7e:e0:81: d0:de:8a:9c:a4:ca:23:d3:8c:7b:8c:39:91:90:ca: 54:12:3b:aa:31:64:66:d8:7d:1b:2a:3f:53:b1:fc: b9:bf:99:af:cc:5e:b6:70:7c:d3:c2:1f:f2:96:b6: e5:0d:47:8e:eb:31:e9:38:93:6f:fb:61:5d:4f:08: a2:40:78:33:8d:75:05:99:96:ef:43:0a:22:e2:db: 4f:89:37:16:b1:0f:e3:81:33:34:76:33:a6:28:0e: 10:f1:0a:0a:ee:fc:2a:51:03:4e:36:5e:15:de:d7: 98:1f:b7:75:38:e2:07:76:c3:34:70:51:f1:ba:68: d4:09:92:b9:03:c6:98:84:6d:de:b4:09:e7:36:34: 06:1b:e0:98:42:7e:1b:a7:4e:d4:cf:3c:97:f2:0c: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:97:92:66:51:B7:79:1B:88:F5:12:C9:68:2C:3C:A3:98:63:DA:B1 X509v3 Authority Key Identifier: keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:67:e5:b0:87:4a:f3:d7:70:d6:ea:4e:b6:c8:e7:ae:12:f5: 55:cb:4c:c0:5b:d4:ca:6c:16:7c:59:f5:a9:10:26:84:32:c9: 11:bc:25:56:98:d7:91:94:97:dc:c4:b5:c6:3d:2c:ab:fa:47: 89:84:47:e6:8d:13:97:9b:2d:17:ff:e4:3e:51:c0:d9:2f:ae: f4:71:00:06:0d:0c:3a:ff:80:e8:d4:1d:b6:e9:d4:37:8a:c3: 4c:91:41:34:63:2b:d6:b6:62:29:1f:b5:e8:33:ab:7c:c4:f8: 3e:9b:b9:6e:85:b6:bd:f0:fa:d5:7a:2b:27:0f:46:2a:8e:3f: e0:05:af:67:8d:11:52:db:15:a6:d1:f7:a0:1e:fc:ca:65:9c: 1c:54:d9:ee:32:5e:a5:06:a1:6d:29:2f:aa:6f:cc:11:34:c1: b9:e6:99:d8:2d:dc:55:6d:89:fd:e4:53:35:6c:3c:eb:e4:c7: 99:7d:06:fc:dd:6c:2d:4a:36:d0:85:c1:ba:d8:87:3f:ab:d1: 7d:da:ae:76:ad:36:7d:58:3f:f6:36:04:77:f5:a3:c9:39:88: e9:ac:56:4f:ce:48:e5:3f:19:8a:14:86:23:2a:6b:b5:d4:bb: 18:46:ea:d6:6e:9c:2e:ed:03:fb:ae:a6:17:f6:f1:77:cc:62: 00:ca:a3:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCR7OuiTUCQ/yA/Qo+FQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWQ1NmVlNjAxZGFjM2RmYTYxZGZlNTJjYmY1YjAwYjdi N2EyOTAwHhcNMjUxMjA2MDUwMTE1WhcNMjUxMjA3MDUwMTE1WjAzMTEwLwYDVQQD EyhhZTk3OTI2NjUxYjc3OTFiODhmNTEyYzk2ODJjM2NhMzk4NjNkYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/YVJld27v83cZrURziIkImX3bf5 icQZtNbvBHwBQjl1YnUJjTV8VikF1YjQWtfOodOtFvdMdZC9mb88h4LqXYaCcbPZ ZXvxG6nKpwAdtWw1RRfgVdIet0QZ65QSEnxqBxW3BGV+4IHQ3oqcpMoj04x7jDmR kMpUEjuqMWRm2H0bKj9Tsfy5v5mvzF62cHzTwh/ylrblDUeO6zHpOJNv+2FdTwii QHgzjXUFmZbvQwoi4ttPiTcWsQ/jgTM0djOmKA4Q8QoK7vwqUQNONl4V3teYH7d1 OOIHdsM0cFHxumjUCZK5A8aYhG3etAnnNjQGG+CYQn4bp07UzzyX8gwQVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6XkmZRt3kbiPUSyWgsPKOYY9qxMB8GA1UdIwQY MBaAFEStVu5gHaw9+mHf5Sy/WwC3t6KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jZmE1YjAtNzk4OC00ZmU5LTlkZDUt ZWVkMjA0ZWQ5NzgwLzEvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9jZmE1YjAtNzk4OC00ZmU5LTlkZDUtZWVkMjA0ZWQ5Nzgw LzEvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2flsIdK 89dw1upOtsjnrhL1VctMwFvUymwWfFn1qRAmhDLJEbwlVpjXkZSX3MS1xj0sq/pH iYRH5o0Tl5stF//kPlHA2S+u9HEABg0MOv+A6NQdtunUN4rDTJFBNGMr1rZiKR+1 6DOrfMT4Ppu5boW2vfD61XorJw9GKo4/4AWvZ40RUtsVptH3oB78ymWcHFTZ7jJe pQahbSkvqm/METTBueaZ2C3cVW2J/eRTNWw86+THmX0G/N1sLUo20IXButiHP6vR fdqudq02fVg/9jYEd/WjyTmI6axWT85I5T8ZihSGIyprtdS7GEbq1m6cLu0D+66m F/bxd8xiAMqjZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:22 2025 by rpki-client