This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json) Hash identifier: H29/nPdxrAd11CQJCxA5Vcsu0c0x9JLAZQKCq94KObI= Subject key identifier: EE:CE:66:C7:A8:10:57:9E:4C:1C:78:36:FA:B4:54:7D:DB:F3:4E:20 Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Certificate serial: 019AF4656319CC673295F5EBAED4BA1E2930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft Manifest number: 0284 Signing time: Sat 06 Dec 2025 16:01:16 +0000 Manifest this update: Sat 06 Dec 2025 16:01:16 +0000 Manifest next update: Sun 07 Dec 2025 16:01:16 +0000 Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: rwWpmxGpXNXGeFJpasnlrnVKRgwkZLz/cVaYqwWJ5+g=) 2: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=) 3: Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa (hash: P/qvYKsl5b2W4hd0B25iig5CdZGpWYsMZEWjWtHjTyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:63:19:cc:67:32:95:f5:eb:ae:d4:ba:1e:29:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Validity Not Before: Dec 6 16:01:16 2025 GMT Not After : Dec 7 16:01:16 2025 GMT Subject: CN=eece66c7a810579e4c1c7836fab4547ddbf34e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:42:37:53:fe:11:aa:75:27:b3:e7:32:bd: 9e:bb:2d:5c:7b:56:18:ec:f6:6c:de:47:f3:3c:cc: e1:2b:42:b7:73:ba:cc:e9:c2:08:72:0b:05:68:b2: 5c:f9:f1:b2:3d:65:80:19:74:2c:36:24:7c:4c:4d: c4:fe:68:2e:7a:64:05:cf:53:67:f4:3b:92:9b:ff: 1c:d6:72:aa:4a:66:de:1d:be:14:fc:8d:67:9e:a3: 10:64:76:f5:0f:10:44:82:69:39:7a:30:19:fe:82: 74:b8:c8:fc:c5:c6:fa:1a:f0:ef:b5:69:92:a0:e1: 7f:f1:a1:89:08:60:3a:f9:70:3e:8d:4d:c0:ef:ba: 43:2f:98:c0:c0:54:8e:19:92:64:1f:ce:45:54:5b: 17:50:79:e6:c7:95:17:77:f2:8a:f6:64:79:52:2e: 1b:ae:fd:b4:d1:43:08:7b:25:4e:f1:78:51:db:4a: ae:aa:f7:09:a6:b8:70:fb:1e:00:d1:95:33:89:d1: 94:d2:e9:e8:71:78:31:f9:6f:bf:78:1b:e7:04:b0: 3a:df:eb:ae:cd:b9:15:2b:f5:98:e1:c0:5e:ad:77: cd:d0:8d:c1:c2:2f:b3:33:4a:0d:3d:04:98:7b:4c: 43:6d:e5:96:17:a7:60:55:7c:99:3c:60:78:a6:34: 40:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CE:66:C7:A8:10:57:9E:4C:1C:78:36:FA:B4:54:7D:DB:F3:4E:20 X509v3 Authority Key Identifier: keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:50:f0:f2:11:06:28:85:63:82:3a:37:00:cf:31:34:49:f6: bc:f4:50:fd:d9:c4:9d:f5:0a:a7:04:b1:5e:49:23:24:38:4f: 02:3a:ed:59:6d:80:da:75:ad:d2:e8:1a:8b:43:42:6a:bd:1b: 4a:a2:a7:72:db:75:77:a5:c5:2b:f6:85:fd:23:c6:7e:3d:aa: 27:b0:d9:42:37:41:5d:81:cb:f9:75:76:3a:c5:95:52:4f:42: dd:b3:7d:ea:48:8d:58:c7:82:73:9d:c5:e6:97:0a:18:98:e0: ec:9e:23:ed:ac:04:81:58:cb:d0:d9:a0:ef:16:b2:51:c1:31: 41:67:73:02:a7:ca:70:dd:32:b6:1b:75:28:4b:03:a4:d2:1b: 5c:1f:04:15:15:60:8c:5a:70:eb:ef:e2:a3:6b:f5:be:e2:cd: de:da:0b:da:5c:54:66:00:27:ad:12:3c:9e:55:9a:9f:39:23: b9:d2:65:07:a0:98:30:91:a4:6d:8a:22:97:1c:63:3e:16:da: fc:22:49:a5:6a:3a:88:16:40:19:a3:f6:c0:fa:4d:5f:5a:b5: ea:b1:44:81:64:85:e2:5d:55:95:70:1a:70:61:fa:4a:c7:88: f2:41:30:9d:9b:89:0b:10:12:1a:fa:b1:56:11:d7:82:8e:c0: ec:57:8f:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZWMZzGcylfXrrtS6HikwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh MThjZWUwHhcNMjUxMjA2MTYwMTE2WhcNMjUxMjA3MTYwMTE2WjAzMTEwLwYDVQQD EyhlZWNlNjZjN2E4MTA1NzllNGMxYzc4MzZmYWI0NTQ3ZGRiZjM0ZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05FCN1P+Eap1J7PnMr2euy1ce1YY 7PZs3kfzPMzhK0K3c7rM6cIIcgsFaLJc+fGyPWWAGXQsNiR8TE3E/mguemQFz1Nn 9DuSm/8c1nKqSmbeHb4U/I1nnqMQZHb1DxBEgmk5ejAZ/oJ0uMj8xcb6GvDvtWmS oOF/8aGJCGA6+XA+jU3A77pDL5jAwFSOGZJkH85FVFsXUHnmx5UXd/KK9mR5Ui4b rv200UMIeyVO8XhR20quqvcJprhw+x4A0ZUzidGU0unocXgx+W+/eBvnBLA63+uu zbkVK/WY4cBerXfN0I3Bwi+zM0oNPQSYe0xDbeWWF6dgVXyZPGB4pjRAkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7OZseoEFeeTBx4Nvq0VH3b804gMB8GA1UdIwQY MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt YzU5ODI1YmJjYjMyLzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFDw8hEG KIVjgjo3AM8xNEn2vPRQ/dnEnfUKpwSxXkkjJDhPAjrtWW2A2nWt0ugai0NCar0b SqKnctt1d6XFK/aF/SPGfj2qJ7DZQjdBXYHL+XV2OsWVUk9C3bN96kiNWMeCc53F 5pcKGJjg7J4j7awEgVjL0Nmg7xayUcExQWdzAqfKcN0ytht1KEsDpNIbXB8EFRVg jFpw6+/io2v1vuLN3toL2lxUZgAnrRI8nlWanzkjudJlB6CYMJGkbYoilxxjPhba /CJJpWo6iBZAGaP2wPpNX1q16rFEgWSF4l1VlXAacGH6SseI8kEwnZuJCxASGvqx VhHXgo7A7FePJg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:19 2025 by rpki-client