This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json) Hash identifier: 1QMdNsaWUznNMNZaa1QcAKKpqAAz5WNVb0EUn5GXb1A= Subject key identifier: 47:F6:14:35:FA:38:33:98:64:A8:CF:A4:0C:12:DF:6D:28:6B:2C:94 Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5 Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5 Certificate serial: 019AF2ADCC04208A92437A3E486C03815F6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft Manifest number: 0629 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: S0LeX8x8bVmMrD+ZcteMyaB/6FI86Sl/AJ6bfg8eKz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cc:04:20:8a:92:43:7a:3e:48:6c:03:81:5f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=47f61435fa38339864a8cfa40c12df6d286b2c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dd:b0:58:d7:ff:23:f4:f4:1f:6f:5a:15:59: c3:2b:13:12:21:bf:3d:ea:2b:77:47:a5:0a:b7:77: 5e:e7:3e:89:96:27:ef:b0:9b:9e:84:0a:ed:65:8a: 16:de:c9:88:ad:68:99:da:8a:de:a8:77:e4:e5:20: c4:72:a2:2f:63:52:b3:e3:7c:8e:8a:99:50:fb:ae: f9:5b:78:ff:91:81:21:1c:d9:bc:c3:b7:60:02:b9: c1:46:9b:84:f7:81:42:c0:91:b5:96:69:8c:e1:1e: d9:7e:9c:2b:95:8e:69:2c:a2:42:fa:b8:e7:48:39: 60:fb:fb:4d:37:1a:d6:8a:98:74:0c:57:2e:33:9e: 07:94:a7:eb:e3:a4:50:8c:4e:d8:75:0a:7f:3a:14: dc:19:4a:73:f2:26:d1:e4:22:df:89:b6:11:63:b0: 21:5b:f1:e2:a8:d5:64:73:47:6b:3a:fd:23:7e:de: 3c:08:b8:45:89:a2:cc:23:3a:01:87:c5:84:9e:fd: 8b:ca:1d:6f:4d:e3:7e:da:43:a0:2f:f4:71:6f:e0: 68:73:6a:57:04:8d:0e:6c:b9:aa:5a:12:34:94:ff: 7a:e6:a9:28:ec:46:57:1b:46:be:a1:ed:80:f2:87: 99:1f:6b:c4:73:d8:b7:94:fe:13:fc:74:55:66:26: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F6:14:35:FA:38:33:98:64:A8:CF:A4:0C:12:DF:6D:28:6B:2C:94 X509v3 Authority Key Identifier: keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:9e:ed:55:44:3e:f0:e8:5c:ad:8c:48:a7:77:50:d4:7a:09: b2:ff:00:14:64:28:d3:85:06:9b:45:09:5c:7d:17:f5:c1:64: 3e:b9:4c:a5:16:ab:39:e2:16:ff:f3:3a:43:53:99:59:af:d6: f5:d0:a1:d2:f6:6d:22:92:b6:9c:da:83:f6:d9:00:c8:38:8f: 0c:d5:f4:5f:d4:cb:38:4f:7a:b7:97:b6:87:e8:fe:2b:ef:58: 60:87:2d:ce:0d:55:34:4a:72:15:16:50:9c:8a:e7:68:79:7d: da:6a:95:d2:a3:5d:fe:a8:48:4c:5c:e3:b4:d2:8e:2b:31:76: d3:07:66:ec:dd:21:65:98:53:18:b2:58:6e:8b:ce:bc:67:54: 95:d0:82:b8:b4:c4:3b:95:26:6a:d1:ca:21:98:f6:8b:8c:a0: a7:d7:06:b6:52:2b:b1:2a:0f:e2:15:35:fb:f2:f6:cb:3b:4c: e6:23:d5:80:d4:9e:b3:a0:0f:5a:3a:db:5c:6b:15:73:04:8a: 27:6a:79:ff:8d:53:9e:7a:7c:d2:5c:2d:34:bc:2c:d2:6d:3f: 45:45:32:0b:10:db:78:12:71:86:6f:8a:d8:a7:0a:63:97:4c: 1c:2e:b8:2f:73:4f:8c:1e:29:ae:35:cc:5e:0d:89:83:de:93: 76:7a:df:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcwEIIqSQ3o+SGwDgV9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGQ3ZmY0NTZmNWZkYzdkZTYxZmE0MjBlZTA4NmE3N2Ex ZTYxZTUwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD Eyg0N2Y2MTQzNWZhMzgzMzk4NjRhOGNmYTQwYzEyZGY2ZDI4NmIyYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN2wWNf/I/T0H29aFVnDKxMSIb89 6it3R6UKt3de5z6JlifvsJuehArtZYoW3smIrWiZ2oreqHfk5SDEcqIvY1Kz43yO iplQ+675W3j/kYEhHNm8w7dgArnBRpuE94FCwJG1lmmM4R7ZfpwrlY5pLKJC+rjn SDlg+/tNNxrWiph0DFcuM54HlKfr46RQjE7YdQp/OhTcGUpz8ibR5CLfibYRY7Ah W/HiqNVkc0drOv0jft48CLhFiaLMIzoBh8WEnv2Lyh1vTeN+2kOgL/Rxb+Boc2pX BI0ObLmqWhI0lP965qko7EZXG0a+oe2A8oeZH2vEc9i3lP4T/HRVZiY+/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEf2FDX6ODOYZKjPpAwS320oayyUMB8GA1UdIwQY MBaAFK5Nf/RW9f3H3mH6Qg7ghqd6HmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yYWNlMWUtNzBkYi00YTBhLTkzYzQt MDdiMThlNTE4NTYxLzEvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8yYWNlMWUtNzBkYi00YTBhLTkzYzQtMDdiMThlNTE4NTYx LzEvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJ7tVUQ+ 8OhcrYxIp3dQ1HoJsv8AFGQo04UGm0UJXH0X9cFkPrlMpRarOeIW//M6Q1OZWa/W 9dCh0vZtIpK2nNqD9tkAyDiPDNX0X9TLOE96t5e2h+j+K+9YYIctzg1VNEpyFRZQ nIrnaHl92mqV0qNd/qhITFzjtNKOKzF20wdm7N0hZZhTGLJYbovOvGdUldCCuLTE O5UmatHKIZj2i4ygp9cGtlIrsSoP4hU1+/L2yztM5iPVgNSes6APWjrbXGsVcwSK J2p5/41Tnnp80lwtNLws0m0/RUUyCxDbeBJxhm+K2KcKY5dMHC64L3NPjB4prjXM Xg2Jg96Tdnrf9w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:02 2025 by rpki-client