This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft File: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json) Hash identifier: lyNBYBbIPD6lnoXVNae4rdF0KEDnydJM8jHYnL2zfj8= Subject key identifier: CD:A6:52:51:0B:34:50:9D:EE:85:C3:42:3E:54:D5:30:F7:C4:C3:E3 Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8 Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8 Certificate serial: 019AF12E1C3F2CA762FB7EE5C9CCFA752E02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft Manifest number: 0898 Signing time: Sat 06 Dec 2025 01:02:02 +0000 Manifest this update: Sat 06 Dec 2025 01:02:02 +0000 Manifest next update: Sun 07 Dec 2025 01:02:02 +0000 Files and hashes: 1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: cL2cNgrUefwGlZWPcJWeuEKcI24oilUKD7xJl6VQgyo=) 2: ngDDmkyYAF9itPtooLnD-4aIxnc.roa (hash: xRemSKj2s+7N5AQoS3YswgNjXP01ldeAV619NqxAwU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1c:3f:2c:a7:62:fb:7e:e5:c9:cc:fa:75:2e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8 Validity Not Before: Dec 6 01:02:02 2025 GMT Not After : Dec 7 01:02:02 2025 GMT Subject: CN=cda652510b34509dee85c3423e54d530f7c4c3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:50:73:29:b4:60:a2:07:ff:76:b3:8e:db: f2:2f:38:43:85:e4:f9:e5:75:65:62:d2:62:d3:5c: 76:d4:67:67:80:35:24:93:67:2c:17:8f:15:c4:a6: b5:8e:db:7c:ad:ec:e7:0f:2f:f1:96:ed:28:b4:bc: 34:b5:51:5b:0d:41:48:84:f7:dd:d5:ca:ba:04:0c: 45:b2:68:98:d6:8d:10:7a:c6:5c:dc:50:be:69:d2: 3c:e6:c3:4a:26:6a:cc:a4:5c:63:b8:c9:35:cf:a5: 98:91:01:80:30:5f:80:7b:ba:49:2b:28:e7:0e:77: d1:49:69:89:ba:4c:cb:3f:20:91:13:40:6d:e9:c3: f0:d2:24:74:5a:4a:5d:1a:64:86:44:32:cb:9d:8e: ad:a8:5a:3e:88:c2:19:3f:ff:ab:26:78:b7:94:2e: d9:b8:fd:9c:53:73:7f:05:1e:83:21:29:98:c3:89: 87:b9:3f:65:67:91:86:fd:be:c5:0d:e5:84:7d:33: b0:da:40:19:86:29:87:93:97:93:1e:cb:6c:2a:91: 3d:96:51:d1:28:9e:8a:f0:1e:c7:e6:05:33:83:a5: e3:c1:fd:36:9c:c6:e4:4f:2b:2f:42:f5:6b:91:60: 12:af:eb:d3:01:4b:09:85:d7:c8:e7:51:94:d2:8f: 58:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A6:52:51:0B:34:50:9D:EE:85:C3:42:3E:54:D5:30:F7:C4:C3:E3 X509v3 Authority Key Identifier: keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f5:e1:dd:30:91:dd:02:0a:e2:f5:d1:cd:66:a6:da:4d:c3: 85:58:4c:77:1e:13:66:c6:18:95:0b:bf:f7:1a:8c:f0:d9:d4: 46:30:51:86:b6:21:79:b3:4e:9c:26:85:9e:bf:fd:86:36:54: 01:00:a7:3d:e0:fb:a3:c1:91:ab:24:eb:f5:07:40:95:43:5a: 83:30:7c:87:a3:07:7d:fd:96:58:4d:42:72:fa:61:0b:36:72: b4:0a:d7:d2:d5:1d:a8:a9:3d:26:c7:53:37:ec:2f:aa:98:36: 25:f9:c6:5c:4b:fa:50:15:9d:61:2e:fd:84:c6:d8:10:a4:ad: 80:af:de:9d:e8:5a:e8:73:ba:11:b6:b7:6a:80:d9:76:5d:c7: be:da:dc:02:a8:b7:78:b7:f7:8c:0d:12:12:a9:27:c2:24:f6: 6b:b0:bd:66:40:62:2d:69:65:8c:bd:62:59:e6:27:17:0f:4a: c2:fe:92:83:59:f3:9e:0a:7f:46:9c:de:5a:a0:07:fe:4c:8b: d9:c6:c3:f5:e6:0f:9b:69:dd:96:18:cc:0d:1d:2c:04:36:8a: f6:eb:b1:79:b3:b4:ad:5d:00:9d:8a:3c:89:02:33:ae:bd:fc: 08:53:65:0b:18:4e:0a:68:c2:a0:77:0f:1e:aa:11:7d:28:df: a7:9b:7a:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhw/LKdi+37lycz6dS4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NGQ0YjkwODYxNThiYzI5NmIyMDBhNjBmYzM3NTBlOTUx ZDIyZjgwHhcNMjUxMjA2MDEwMjAyWhcNMjUxMjA3MDEwMjAyWjAzMTEwLwYDVQQD EyhjZGE2NTI1MTBiMzQ1MDlkZWU4NWMzNDIzZTU0ZDUzMGY3YzRjM2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzolQcym0YKIH/3azjtvyLzhDheT5 5XVlYtJi01x21GdngDUkk2csF48VxKa1jtt8reznDy/xlu0otLw0tVFbDUFIhPfd 1cq6BAxFsmiY1o0QesZc3FC+adI85sNKJmrMpFxjuMk1z6WYkQGAMF+Ae7pJKyjn DnfRSWmJukzLPyCRE0Bt6cPw0iR0WkpdGmSGRDLLnY6tqFo+iMIZP/+rJni3lC7Z uP2cU3N/BR6DISmYw4mHuT9lZ5GG/b7FDeWEfTOw2kAZhimHk5eTHstsKpE9llHR KJ6K8B7H5gUzg6Xjwf02nMbkTysvQvVrkWASr+vTAUsJhdfI51GU0o9YOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2mUlELNFCd7oXDQj5U1TD3xMPjMB8GA1UdIwQY MBaAFNZNS5CGFYvClrIApg/DdQ6VHSL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWsxTGtJWVZpOEtXc2dDbUQ4TjFEcFVkSXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lOTE4MTYtNzdkOC00MDY5LWFlYjct YTViZmM1NDQwMDVjLzEvMWsxTGtJWVZpOEtXc2dDbUQ4TjFEcFVkSXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lOTE4MTYtNzdkOC00MDY5LWFlYjctYTViZmM1NDQwMDVj LzEvMWsxTGtJWVZpOEtXc2dDbUQ4TjFEcFVkSXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfXh3TCR 3QIK4vXRzWam2k3DhVhMdx4TZsYYlQu/9xqM8NnURjBRhrYhebNOnCaFnr/9hjZU AQCnPeD7o8GRqyTr9QdAlUNagzB8h6MHff2WWE1CcvphCzZytArX0tUdqKk9JsdT N+wvqpg2JfnGXEv6UBWdYS79hMbYEKStgK/eneha6HO6Eba3aoDZdl3HvtrcAqi3 eLf3jA0SEqknwiT2a7C9ZkBiLWlljL1iWeYnFw9Kwv6Sg1nzngp/RpzeWqAH/kyL 2cbD9eYPm2ndlhjMDR0sBDaK9uuxebO0rV0AnYo8iQIzrr38CFNlCxhOCmjCoHcP HqoRfSjfp5t6PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:07 2025 by rpki-client