This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json) Hash identifier: 59GIxtNW2UBFNpbTycge82Y2HOu4VDZeGE4VvNWJXdg= Subject key identifier: 36:CD:8B:19:6F:C2:2F:B9:F6:0F:78:E8:59:75:01:AC:44:F9:D5:75 Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10 Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410 Certificate serial: 019AF49C30AE1BD22E122E27142658B906F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft Manifest number: 0E49 Signing time: Sat 06 Dec 2025 17:01:08 +0000 Manifest this update: Sat 06 Dec 2025 17:01:08 +0000 Manifest next update: Sun 07 Dec 2025 17:01:08 +0000 Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: 6Dd22U8Yr3csgZr0v3RGtmvUfERjFTTHVuhRl9yA+E4=) 2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:30:ae:1b:d2:2e:12:2e:27:14:26:58:b9:06:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410 Validity Not Before: Dec 6 17:01:08 2025 GMT Not After : Dec 7 17:01:08 2025 GMT Subject: CN=36cd8b196fc22fb9f60f78e8597501ac44f9d575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:fc:df:3a:e6:33:79:71:f2:78:bc:c2:62: 2b:3b:98:1b:05:f4:98:b4:9b:a4:6a:7a:ba:1a:c9: 53:9e:c1:2a:ec:00:cb:3e:c4:6c:ef:21:53:f1:ca: df:81:8f:f2:0a:50:f0:ff:3d:a5:60:9e:4b:0f:ab: 0c:5f:5a:28:37:34:d4:c6:0d:67:8e:a8:28:ce:40: d1:4e:84:68:10:18:cd:87:f2:61:8b:3f:f8:11:57: d3:60:dc:63:9b:da:0a:b0:64:f4:d7:a4:18:ea:e1: 43:1e:0e:71:11:0d:0e:eb:22:e1:d8:99:0f:63:65: 21:2d:90:33:b8:35:a2:0c:44:7a:0d:df:a8:2a:e8: e0:ab:03:2a:1c:6f:f7:bf:d4:31:45:b0:6a:13:8c: ac:b8:ac:3c:44:33:37:d6:51:bb:bc:11:a0:4d:b7: 08:52:3c:ce:46:40:ad:71:8e:90:c9:98:b8:17:a0: ac:94:46:3a:6b:56:bd:ad:93:4a:b0:30:b9:f5:42: e7:3b:9a:0d:cf:fa:1d:43:4f:3a:fd:56:55:35:21: ec:66:2b:a5:6e:e3:fc:af:e5:9b:c2:84:81:24:ad: e3:f5:f4:86:b6:ef:e5:ec:6d:52:77:c7:1c:5a:d0: 70:cf:b6:f5:46:bf:82:51:6a:7f:95:18:be:87:b9: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CD:8B:19:6F:C2:2F:B9:F6:0F:78:E8:59:75:01:AC:44:F9:D5:75 X509v3 Authority Key Identifier: keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:55:71:b2:f6:33:6a:61:b2:32:78:b5:05:36:bc:ec:17:3f: bc:c2:f3:61:27:7b:12:3a:af:0f:c8:46:71:77:fb:e0:f5:97: b3:64:f2:f3:14:81:26:e2:8f:8e:aa:34:5d:4c:e2:ba:60:cb: 77:c1:a6:1f:5f:70:d5:03:a5:11:3d:66:42:be:61:e7:2f:59: f9:d9:3c:d6:f8:1c:05:e5:a1:31:e4:68:29:07:a1:2f:14:e2: 46:38:eb:b5:69:77:13:94:00:15:e8:84:6b:50:ec:79:0b:6b: 32:fc:c6:c3:39:ca:7a:8e:20:9d:f3:5e:ef:00:d7:fc:57:66: ac:59:8b:fd:46:6a:c0:45:37:b0:4a:f6:5d:31:2d:46:1c:07: af:50:aa:fa:79:77:13:e0:fd:d8:74:a3:d6:bc:ec:f2:4e:6e: fa:45:d1:91:2a:b0:8a:34:53:2e:24:fa:21:45:c4:b7:27:83: b1:0d:76:0a:d8:a7:f2:e0:44:64:99:b4:f2:82:17:f2:97:87: c2:5d:70:7a:3f:74:09:13:42:4a:5e:ce:81:f4:47:3c:9f:58: 68:4f:4a:fb:8d:b3:bf:35:c6:0c:6b:49:77:5b:1c:47:7a:1c: 83:e7:97:3d:fa:44:f6:e2:3d:04:02:51:be:41:c5:13:40:70: 71:10:e1:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nDCuG9IuEi4nFCZYuQb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZWQ2MjkzNWZiNDhhZjZlNDRjYmExOTQyNmVmYWI1MWYx YzU0MTAwHhcNMjUxMjA2MTcwMTA4WhcNMjUxMjA3MTcwMTA4WjAzMTEwLwYDVQQD EygzNmNkOGIxOTZmYzIyZmI5ZjYwZjc4ZTg1OTc1MDFhYzQ0ZjlkNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiz83zrmM3lx8ni8wmIrO5gbBfSY tJukanq6GslTnsEq7ADLPsRs7yFT8crfgY/yClDw/z2lYJ5LD6sMX1ooNzTUxg1n jqgozkDRToRoEBjNh/Jhiz/4EVfTYNxjm9oKsGT016QY6uFDHg5xEQ0O6yLh2JkP Y2UhLZAzuDWiDER6Dd+oKujgqwMqHG/3v9QxRbBqE4ysuKw8RDM31lG7vBGgTbcI UjzORkCtcY6QyZi4F6CslEY6a1a9rZNKsDC59ULnO5oNz/odQ086/VZVNSHsZiul buP8r+WbwoSBJK3j9fSGtu/l7G1Sd8ccWtBwz7b1Rr+CUWp/lRi+h7lL9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbNixlvwi+59g946Fl1AaxE+dV1MB8GA1UdIwQY MBaAFCvtYpNftIr25Ey6GUJu+rUfHFQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWIt NDg0MDE0YTRkOTRlLzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWItNDg0MDE0YTRkOTRl LzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlVxsvYz amGyMni1BTa87Bc/vMLzYSd7EjqvD8hGcXf74PWXs2Ty8xSBJuKPjqo0XUziumDL d8GmH19w1QOlET1mQr5h5y9Z+dk81vgcBeWhMeRoKQehLxTiRjjrtWl3E5QAFeiE a1DseQtrMvzGwznKeo4gnfNe7wDX/FdmrFmL/UZqwEU3sEr2XTEtRhwHr1Cq+nl3 E+D92HSj1rzs8k5u+kXRkSqwijRTLiT6IUXEtyeDsQ12Ctin8uBEZJm08oIX8peH wl1wej90CRNCSl7OgfRHPJ9YaE9K+42zvzXGDGtJd1scR3ocg+eXPfpE9uI9BAJR vkHFE0BwcRDh9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:38:46 2025 by rpki-client