This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft File: K1iJW-74e1UDAHkRLUqxfZPJiiA.mft (raw, json) Hash identifier: abEeudz8ohF/xsZa06jKRe46tZ9fn75xgO05vy69GHM= Subject key identifier: 80:93:02:C3:F3:57:41:F6:04:16:C6:24:55:D6:F9:7F:D6:F0:05:79 Authority key identifier: 2B:58:89:5B:EE:F8:7B:55:03:00:79:11:2D:4A:B1:7D:93:C9:8A:20 Certificate issuer: /CN=2b58895beef87b55030079112d4ab17d93c98a20 Certificate serial: 019AF1D19E7B97440D2D569641FEE9C829A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft Manifest number: 2C Signing time: Sat 06 Dec 2025 04:00:37 +0000 Manifest this update: Sat 06 Dec 2025 04:00:37 +0000 Manifest next update: Sun 07 Dec 2025 04:00:37 +0000 Files and hashes: 1: 1-7SKLX7Fe7Ix4a6o34ESRoulfMk.roa (hash: 0HHMTAsB+MNhajvF2102BenVFZxwF6ZCwPg2M41m5SA=) 2: K1iJW-74e1UDAHkRLUqxfZPJiiA.crl (hash: nOxPn0+FxCsJYDtcOcvx2POMZzkPILhzqnd2ofO5gm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9e:7b:97:44:0d:2d:56:96:41:fe:e9:c8:29:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b58895beef87b55030079112d4ab17d93c98a20 Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Dec 7 04:00:37 2025 GMT Subject: CN=809302c3f35741f60416c62455d6f97fd6f00579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:bb:84:02:d8:b3:59:c8:08:de:63:df:35: 4f:53:f5:a7:cb:4f:81:dc:8e:2b:3f:27:21:89:dc: 99:e9:10:20:68:16:b8:2e:e8:22:da:3f:ff:c6:84: 2f:75:ed:66:fe:56:60:db:99:e7:e5:89:f3:85:f6: 49:4c:cb:83:35:67:02:a5:4a:16:a1:2f:4f:96:7e: a8:fe:18:6f:85:41:34:11:a8:a5:a6:1c:fd:8f:b0: 84:8f:3b:da:fb:59:2a:6f:1e:28:d9:dd:af:7a:19: cd:66:c8:a4:d2:6f:47:c5:cc:88:fa:36:3a:46:71: 4c:c7:4d:2c:ad:4c:c4:f9:aa:18:66:11:0d:8a:2e: 3c:a5:e8:a2:72:6a:da:6b:77:6b:3f:7a:96:ff:eb: c1:8d:d1:4c:aa:28:62:a1:70:94:69:3f:6d:82:41: 28:af:9b:3f:3c:dc:9b:94:27:e6:f5:ac:2d:b9:a6: e5:96:57:5c:e7:7a:d7:ac:09:16:b0:4d:08:e5:0f: 0c:c5:0c:78:c4:ad:68:c2:6b:ab:1f:76:1e:4b:32: 64:1f:54:e9:42:a5:82:14:8a:ba:34:ff:70:4b:ee: 09:ce:81:b7:c1:89:a6:84:d0:ec:52:98:13:be:a6: 02:20:74:b4:7f:4f:43:5e:5d:82:4d:95:6c:82:dc: 19:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:93:02:C3:F3:57:41:F6:04:16:C6:24:55:D6:F9:7F:D6:F0:05:79 X509v3 Authority Key Identifier: keyid:2B:58:89:5B:EE:F8:7B:55:03:00:79:11:2D:4A:B1:7D:93:C9:8A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:8f:db:4f:c0:ab:73:20:fb:06:3a:a5:a7:b9:7e:98:be:11: 65:6b:f4:ce:bd:4f:10:7a:50:09:f2:b2:07:95:8e:21:17:d7: 72:d2:d4:b2:cb:ac:5c:00:20:1a:27:8c:4f:94:3b:a3:13:a5: a4:56:77:aa:93:ca:36:50:95:87:53:ab:1c:aa:81:45:7e:9a: 21:74:34:0f:24:aa:a8:c5:09:30:66:72:13:e9:5d:b8:2d:cb: 2f:73:c0:02:5c:34:05:57:fc:3c:49:7f:4c:c4:eb:80:b9:1e: 04:34:26:8b:44:a5:38:a2:88:9a:69:de:48:3d:45:8d:8c:8d: 14:b7:a0:01:fa:95:d9:fe:8c:67:a0:e9:e9:5a:68:98:25:c3: 1b:82:9a:86:dd:f4:d8:49:d7:74:d3:3a:ee:b6:0f:bc:58:f2: f2:a1:df:e9:da:14:48:d9:9e:04:8a:03:16:d2:57:38:fa:6a: f7:35:96:7f:0f:33:2f:73:51:c6:84:ad:0e:c8:43:b7:da:20: 08:9d:0b:cd:f2:c9:71:01:7a:88:d4:b2:e3:2f:71:3f:6b:e2: be:19:86:4a:80:4e:1a:87:da:d4:14:73:82:8d:e4:5d:f9:aa: 71:87:fd:6c:f6:a2:a5:87:80:6d:dd:f3:c2:33:74:9a:a3:d2: 7a:da:bf:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Z57l0QNLVaWQf7pyCmhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNTg4OTViZWVmODdiNTUwMzAwNzkxMTJkNGFiMTdkOTNj OThhMjAwHhcNMjUxMjA2MDQwMDM3WhcNMjUxMjA3MDQwMDM3WjAzMTEwLwYDVQQD Eyg4MDkzMDJjM2YzNTc0MWY2MDQxNmM2MjQ1NWQ2Zjk3ZmQ2ZjAwNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq767hALYs1nICN5j3zVPU/Wny0+B 3I4rPychidyZ6RAgaBa4Lugi2j//xoQvde1m/lZg25nn5YnzhfZJTMuDNWcCpUoW oS9Pln6o/hhvhUE0Eailphz9j7CEjzva+1kqbx4o2d2vehnNZsik0m9HxcyI+jY6 RnFMx00srUzE+aoYZhENii48peiicmraa3drP3qW/+vBjdFMqihioXCUaT9tgkEo r5s/PNyblCfm9awtuabllldc53rXrAkWsE0I5Q8MxQx4xK1owmurH3YeSzJkH1Tp QqWCFIq6NP9wS+4JzoG3wYmmhNDsUpgTvqYCIHS0f09DXl2CTZVsgtwZ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICTAsPzV0H2BBbGJFXW+X/W8AV5MB8GA1UdIwQY MBaAFCtYiVvu+HtVAwB5ES1KsX2TyYogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzFpSlctNzRlMVVEQUhrUkxVcXhmWlBKaWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNjJhOTUtYjQzZC00ZjFmLThlZjQt OWEzMjFmZmMyZWVmLzEvSzFpSlctNzRlMVVEQUhrUkxVcXhmWlBKaWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iNjJhOTUtYjQzZC00ZjFmLThlZjQtOWEzMjFmZmMyZWVm LzEvSzFpSlctNzRlMVVEQUhrUkxVcXhmWlBKaWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAko/bT8Cr cyD7Bjqlp7l+mL4RZWv0zr1PEHpQCfKyB5WOIRfXctLUssusXAAgGieMT5Q7oxOl pFZ3qpPKNlCVh1OrHKqBRX6aIXQ0DySqqMUJMGZyE+lduC3LL3PAAlw0BVf8PEl/ TMTrgLkeBDQmi0SlOKKImmneSD1FjYyNFLegAfqV2f6MZ6Dp6VpomCXDG4Kaht30 2EnXdNM67rYPvFjy8qHf6doUSNmeBIoDFtJXOPpq9zWWfw8zL3NRxoStDshDt9og CJ0LzfLJcQF6iNSy4y9xP2vivhmGSoBOGofa1BRzgo3kXfmqcYf9bPaipYeAbd3z wjN0mqPSetq/3g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:47 2025 by rpki-client