This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json) Hash identifier: Fjpco1oysZf0VST+UIdObQD9lHIgfXJq3NHlhuD2Q7A= Subject key identifier: 94:5C:38:66:44:C8:DF:34:F2:0D:E9:28:B5:FD:13:C1:1E:F3:76:C7 Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32 Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032 Certificate serial: 019AF208E692553DF3BC0692985CDAA0148F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft Manifest number: 0893 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: C1uCMzSgQIXguuzALTKzzAVx5B3qiX7hiTrkC48HJ4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e6:92:55:3d:f3:bc:06:92:98:5c:da:a0:14:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032 Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=945c386644c8df34f20de928b5fd13c11ef376c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:be:b8:25:f6:b7:7a:f8:a9:c5:23:8d:d9: 46:31:78:b0:f8:f0:ff:97:29:75:11:00:28:33:6b: 48:2e:6d:d3:23:62:27:21:8e:c5:72:5b:8e:1c:67: c2:a2:66:3c:83:3a:81:e6:d7:16:28:53:35:63:a0: 9b:88:3b:f5:2f:e9:52:0e:d7:70:44:39:a9:c7:2a: 55:eb:68:5a:ab:84:ec:7b:b5:a1:93:01:24:13:26: ef:90:f3:bb:ff:c6:3a:7c:68:9f:f8:5c:8e:59:5e: d8:6a:bf:14:26:51:c8:d3:45:29:08:a9:eb:7a:48: 09:bf:d8:bf:d6:5a:a0:ea:bf:5b:92:0f:88:9b:1a: 9c:87:eb:d9:c4:fb:de:25:0b:cd:83:07:c1:15:aa: af:7d:a8:8a:26:23:9d:a1:3f:f4:41:00:2e:ca:97: 4e:80:40:8a:51:50:46:34:c8:b1:60:d7:52:21:9b: c6:f3:31:0a:24:69:6c:d7:ad:ea:dc:ab:8b:c1:68: ed:a7:9d:47:bd:74:5f:1e:4c:30:06:eb:2c:fc:37: 5a:5a:78:0c:41:ac:61:40:9c:65:b6:35:c1:9d:6f: 8e:91:fe:04:1d:83:56:86:19:0b:aa:2e:95:f7:ef: cd:bc:4a:e3:fa:54:5b:01:d2:e7:e5:e8:b1:f7:be: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5C:38:66:44:C8:DF:34:F2:0D:E9:28:B5:FD:13:C1:1E:F3:76:C7 X509v3 Authority Key Identifier: keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:94:19:1f:96:a5:f1:07:a8:6f:05:91:13:9e:f5:01:91:27: 73:9c:02:dd:88:a8:ad:51:a8:0b:ab:2c:99:a3:bb:4b:a7:15: 72:91:ec:d4:1b:4f:62:44:e8:7a:55:f9:6a:be:a9:d8:af:58: cf:c1:ac:1b:ec:15:53:20:01:cc:63:c4:f7:16:ce:26:53:3e: 71:d6:19:ce:e4:de:f4:e7:8e:50:4c:9b:8e:75:b6:f7:bb:93: cb:7c:1c:1f:4f:a5:b5:d6:c3:e5:3e:40:10:fb:1b:3e:20:6b: d1:f5:45:52:9c:20:79:e1:d7:a9:c0:b5:fb:b2:53:43:4c:d4: c9:55:9e:76:48:5e:78:f5:2a:36:a1:79:6e:f7:ec:b6:6a:f4: a7:7d:d8:01:27:14:20:e2:07:5b:58:bb:65:71:ad:e5:b5:a3: e1:cc:74:f4:62:d5:13:97:68:a9:1f:6d:c3:04:22:16:ff:b2: d4:de:66:26:7c:a1:b6:fb:15:89:e1:d2:f6:e3:ac:a4:a3:3e: 05:58:94:3d:c0:6f:4b:c5:85:e6:1d:a3:c7:8b:d8:b8:d2:b5: 8b:6e:52:97:11:3b:ad:c6:99:64:ae:1d:b3:25:59:5a:9d:3b: 9c:5a:d9:28:44:8e:e2:74:c7:a8:26:a4:4a:03:d5:5b:76:1e: c2:f2:64:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOaSVT3zvAaSmFzaoBSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNDIyMzRiYWM2MTcxMjcwM2UzOThhNmQ1YmYwNDhjNWM5 ZjQwMzIwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD Eyg5NDVjMzg2NjQ0YzhkZjM0ZjIwZGU5MjhiNWZkMTNjMTFlZjM3NmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYO+uCX2t3r4qcUjjdlGMXiw+PD/ lyl1EQAoM2tILm3TI2InIY7FcluOHGfComY8gzqB5tcWKFM1Y6CbiDv1L+lSDtdw RDmpxypV62haq4Tse7WhkwEkEybvkPO7/8Y6fGif+FyOWV7Yar8UJlHI00UpCKnr ekgJv9i/1lqg6r9bkg+Imxqch+vZxPveJQvNgwfBFaqvfaiKJiOdoT/0QQAuypdO gECKUVBGNMixYNdSIZvG8zEKJGls163q3KuLwWjtp51HvXRfHkwwBuss/DdaWngM QaxhQJxltjXBnW+Okf4EHYNWhhkLqi6V9+/NvErj+lRbAdLn5eix976IxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRcOGZEyN808g3pKLX9E8Ee83bHMB8GA1UdIwQY MBaAFK5CI0usYXEnA+OYptW/BIxcn0AyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wODkzZDAtZDFhMS00Mjc2LWE1Yjct ZWUyYmNmMTg2ZjI0LzEvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8wODkzZDAtZDFhMS00Mjc2LWE1YjctZWUyYmNmMTg2ZjI0 LzEvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZQZH5al 8QeobwWRE571AZEnc5wC3YiorVGoC6ssmaO7S6cVcpHs1BtPYkToelX5ar6p2K9Y z8GsG+wVUyABzGPE9xbOJlM+cdYZzuTe9OeOUEybjnW297uTy3wcH0+ltdbD5T5A EPsbPiBr0fVFUpwgeeHXqcC1+7JTQ0zUyVWedkheePUqNqF5bvfstmr0p33YAScU IOIHW1i7ZXGt5bWj4cx09GLVE5doqR9twwQiFv+y1N5mJnyhtvsVieHS9uOspKM+ BViUPcBvS8WF5h2jx4vYuNK1i25SlxE7rcaZZK4dsyVZWp07nFrZKESO4nTHqCak SgPVW3YewvJkPA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:27 2025 by rpki-client