This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft File: k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft (raw, json) Hash identifier: WMjePGhhxRdp4U60kjuSFkW1+VDxYdxpUv4OHBcViQI= Subject key identifier: 1F:F7:E8:9E:92:B4:8C:11:BF:9E:DE:36:8D:88:FA:9F:7E:41:6B:BD Authority key identifier: 93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB Certificate issuer: /CN=934449923648062d79433dc86d32efe42cacb3db Certificate serial: 019AF31BC8BAA8302F8D96E322C7C7C64713 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:01:15 +0000 Manifest this update: Sat 06 Dec 2025 10:01:15 +0000 Manifest next update: Sun 07 Dec 2025 10:01:15 +0000 Files and hashes: 1: k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl (hash: CXeXLq9v6LFiOczdroz7AhNkA/pZcOJW6tJeIhbbAUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c8:ba:a8:30:2f:8d:96:e3:22:c7:c7:c6:47:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934449923648062d79433dc86d32efe42cacb3db Validity Not Before: Dec 6 10:01:15 2025 GMT Not After : Dec 7 10:01:15 2025 GMT Subject: CN=1ff7e89e92b48c11bf9ede368d88fa9f7e416bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:63:bb:5c:98:64:d2:2e:90:c0:06:5a:4c: 89:6f:88:70:95:4a:33:7f:b5:cd:50:66:c0:c9:e8: 3e:76:ba:6a:5e:7a:6a:8e:4e:b4:ca:a3:31:0b:a6: 37:bb:3c:f1:67:5d:6d:bb:ec:da:dd:46:be:f2:ef: 8c:67:d4:5d:39:ec:b5:07:29:d3:cb:b2:a1:1c:8b: aa:93:49:74:3d:e0:0f:c5:49:dd:33:31:2f:90:1f: 5f:82:43:c5:c2:fc:1c:73:41:c0:c7:46:84:23:df: f5:61:e9:0b:a6:5c:99:a5:7a:d3:c3:78:a1:9c:8f: e0:97:72:7f:b1:d0:5c:40:e9:80:a9:6b:f0:68:ca: 1e:5f:23:a7:75:3a:7f:6c:6a:5d:04:60:42:53:8a: e5:04:49:6e:85:8e:08:c6:1d:cd:ce:e1:92:bf:63: 24:ec:e8:43:f6:3c:1a:89:3d:19:12:1a:94:73:a5: c7:62:3c:dc:0d:cc:61:ee:80:e7:57:29:6f:7c:a2: 8a:a0:6f:14:0a:e8:9a:71:0e:02:11:7a:3b:6c:d8: de:e2:e6:29:b2:bb:b1:b9:59:b0:3c:fd:30:d0:18: 1c:7d:60:e9:e2:16:bf:91:b4:65:7f:08:e2:34:e5: 21:12:56:c1:0f:0a:85:c6:ba:25:4b:ea:c5:ff:af: 24:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F7:E8:9E:92:B4:8C:11:BF:9E:DE:36:8D:88:FA:9F:7E:41:6B:BD X509v3 Authority Key Identifier: keyid:93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6f:8b:98:4d:4e:18:f7:98:92:56:86:cb:3a:c7:a1:7e:63: 80:cc:ac:36:d7:72:1a:a7:0c:ce:eb:42:ad:15:dd:ae:5e:e5: c7:32:a2:36:7a:b9:8e:b7:3c:df:5f:df:46:ad:f7:1f:da:96: 07:1d:27:98:fa:82:5a:7a:1e:31:0f:b7:ec:0c:0c:1d:c9:3e: 73:65:53:1f:8a:bb:78:41:fa:eb:bf:25:21:ec:fd:18:44:f0: bd:45:f2:44:3e:6c:20:9b:69:d4:9d:9a:19:79:48:dc:c8:54: 0b:97:63:9d:18:d4:db:5e:38:dc:d7:a3:9d:1c:cf:03:9f:47: 42:94:bd:ae:96:c9:e8:61:f0:cc:2d:8c:e4:8c:db:62:fe:5a: d1:1b:76:21:0b:6b:42:c3:25:ae:ef:1d:d4:3a:65:37:a6:9d: 96:5d:66:42:42:c4:ea:82:6e:d9:29:6a:2f:dd:56:50:75:7f: 3d:5d:c4:1c:6a:fd:ca:5a:3e:ec:54:33:a1:93:f3:8d:01:5d: 82:b5:7d:54:62:3e:76:ed:3c:37:90:ff:ba:5f:a5:cc:01:86: 72:3e:02:06:d2:db:15:25:39:a6:03:c6:e5:9e:e8:5f:35:49: c4:ea:70:2e:a3:35:28:90:4c:00:35:a1:95:77:cd:66:a7:0f: d0:98:0f:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8i6qDAvjZbjIsfHxkcTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNDQ0OTkyMzY0ODA2MmQ3OTQzM2RjODZkMzJlZmU0MmNh Y2IzZGIwHhcNMjUxMjA2MTAwMTE1WhcNMjUxMjA3MTAwMTE1WjAzMTEwLwYDVQQD EygxZmY3ZTg5ZTkyYjQ4YzExYmY5ZWRlMzY4ZDg4ZmE5ZjdlNDE2YmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr79ju1yYZNIukMAGWkyJb4hwlUoz f7XNUGbAyeg+drpqXnpqjk60yqMxC6Y3uzzxZ11tu+za3Ua+8u+MZ9RdOey1BynT y7KhHIuqk0l0PeAPxUndMzEvkB9fgkPFwvwcc0HAx0aEI9/1YekLplyZpXrTw3ih nI/gl3J/sdBcQOmAqWvwaMoeXyOndTp/bGpdBGBCU4rlBEluhY4Ixh3NzuGSv2Mk 7OhD9jwaiT0ZEhqUc6XHYjzcDcxh7oDnVylvfKKKoG8UCuiacQ4CEXo7bNje4uYp sruxuVmwPP0w0BgcfWDp4ha/kbRlfwjiNOUhElbBDwqFxrolS+rF/68k0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/36J6StIwRv57eNo2I+p9+QWu9MB8GA1UdIwQY MBaAFJNESZI2SAYteUM9yG0y7+QsrLPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazBSSmtqWklCaTE1UXozSWJUTHY1Q3lzczlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xODJiMTgtNjVhZi00MzI1LTk1YjMt MWQ5NWY2ZDU1NGNhLzEvazBSSmtqWklCaTE1UXozSWJUTHY1Q3lzczlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xODJiMTgtNjVhZi00MzI1LTk1YjMtMWQ5NWY2ZDU1NGNh LzEvazBSSmtqWklCaTE1UXozSWJUTHY1Q3lzczlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2+LmE1O GPeYklaGyzrHoX5jgMysNtdyGqcMzutCrRXdrl7lxzKiNnq5jrc831/fRq33H9qW Bx0nmPqCWnoeMQ+37AwMHck+c2VTH4q7eEH6678lIez9GETwvUXyRD5sIJtp1J2a GXlI3MhUC5djnRjU21443NejnRzPA59HQpS9rpbJ6GHwzC2M5IzbYv5a0Rt2IQtr QsMlru8d1DplN6adll1mQkLE6oJu2SlqL91WUHV/PV3EHGr9ylo+7FQzoZPzjQFd grV9VGI+du08N5D/ul+lzAGGcj4CBtLbFSU5pgPG5Z7oXzVJxOpwLqM1KJBMADWh lXfNZqcP0JgPww== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:25 2025 by rpki-client