This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft File: k1x7dikZzzbcFCY_XllV6P-jXTs.mft (raw, json) Hash identifier: YWU+2S5ehskjGys/BQbXZyVbil/XN3+l/0nsGhHatuI= Subject key identifier: F7:53:1B:9F:5E:2E:BE:D6:A8:35:62:84:3A:F2:2C:EB:45:D8:51:90 Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b Certificate serial: 019B255119ABF55C80625017481D7CD2E416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft Manifest number: 1779 Signing time: Tue 16 Dec 2025 04:00:30 +0000 Manifest this update: Tue 16 Dec 2025 04:00:30 +0000 Manifest next update: Wed 17 Dec 2025 04:00:30 +0000 Files and hashes: 1: k1x7dikZzzbcFCY_XllV6P-jXTs.crl (hash: zCkHrQ/8P9aU08v9YV4UChbiZAGZmKTb2+R+/m2FByg=) 2: mPtwMPDBjS-jkWgS9uuTF9_ZOaw.roa (hash: 2rJnzrY1kifgjd6LuERI+YOBEpbALMoWfYZ9TooQij0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:19:ab:f5:5c:80:62:50:17:48:1d:7c:d2:e4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b Validity Not Before: Dec 16 04:00:30 2025 GMT Not After : Dec 17 04:00:30 2025 GMT Subject: CN=f7531b9f5e2ebed6a83562843af22ceb45d85190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:e7:64:9b:0c:ab:e3:03:a5:c4:be:d7:7f: 2d:13:3e:80:c4:43:25:71:e8:ef:81:de:7c:23:1f: b0:83:11:6f:07:02:a9:b8:23:20:2b:86:2d:93:a3: e8:ed:d2:c1:5f:ea:5b:f7:90:60:a5:47:2e:fc:75: 49:45:f8:ac:44:a2:d4:bf:f6:ea:23:b7:f1:c3:0a: 0c:63:cf:15:5b:44:58:fe:1f:85:b9:84:74:9a:1f: b7:00:62:a6:73:13:1e:01:0a:95:79:99:e4:f7:77: 87:7b:d1:51:7c:09:0d:3f:51:ba:eb:20:f4:31:c9: 92:4d:14:51:0c:f7:53:55:28:69:07:fd:e9:4f:7f: 92:48:0c:d6:4e:ed:71:fa:30:73:da:5e:f5:0c:f6: 8b:b6:c3:92:66:df:f3:9b:cb:b4:6a:56:c3:a3:39: bd:96:50:d6:b5:c2:ed:77:34:ac:1a:2a:29:4f:7f: ff:9a:b5:0e:db:35:d3:64:5a:ce:ae:93:52:05:75: 23:78:61:42:24:22:36:e3:98:9c:88:40:6f:9c:aa: 8e:96:6e:c5:22:f8:85:9d:0d:69:5c:6c:2d:77:5e: 02:9a:0d:da:29:fc:20:fc:a3:f4:69:1f:19:91:10: 4a:91:d8:a9:0d:00:f3:f1:2e:eb:62:10:5c:5d:8a: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:53:1B:9F:5E:2E:BE:D6:A8:35:62:84:3A:F2:2C:EB:45:D8:51:90 X509v3 Authority Key Identifier: keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9c:c0:d6:a0:6e:ab:41:ab:7c:da:d2:64:ba:97:2d:c2:03: be:1a:72:90:f3:90:11:eb:bb:2f:f8:4f:1f:a1:7e:13:01:d6: f8:94:63:cb:6c:a1:6c:6f:01:98:a9:dc:af:f6:a7:2d:bb:f1: 13:dd:b8:ae:b5:63:09:8d:a8:bc:53:23:f7:48:8f:88:54:d1: 0a:48:03:e7:2c:06:41:a2:55:a4:3b:15:66:5f:45:5e:bf:b9: cd:19:f4:a5:79:35:72:da:69:33:d6:9e:58:c8:d7:03:e8:59: 76:41:f0:81:ad:f3:e5:1b:69:e7:ef:3f:20:29:11:4a:47:13: 22:85:6d:87:3e:f8:f3:7e:80:25:45:af:b3:ea:b2:7b:ad:5f: a2:1a:1d:3e:02:fd:f1:d2:8c:43:5a:5d:00:15:5c:81:fb:97: 10:1d:1a:46:77:71:8c:e2:63:69:c1:c3:c0:19:d0:85:fa:c6: d7:dc:03:20:09:9e:3e:a2:bb:2b:db:c3:09:06:00:68:14:e1: df:54:7a:79:8a:26:07:c0:2b:04:26:af:91:51:74:d2:2e:57: cc:98:a7:c9:7b:c4:b6:65:d6:e1:e9:8d:cc:14:73:0e:a2:c6: e2:79:e6:47:ec:7f:ca:7a:6f:27:07:14:4b:7a:d3:0c:04:d5: 3d:91:bb:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslURmr9VyAYlAXSB180uQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNWM3Yjc2MjkxOWNmMzZkYzE0MjYzZjVlNTk1NWU4ZmZh MzVkM2IwHhcNMjUxMjE2MDQwMDMwWhcNMjUxMjE3MDQwMDMwWjAzMTEwLwYDVQQD EyhmNzUzMWI5ZjVlMmViZWQ2YTgzNTYyODQzYWYyMmNlYjQ1ZDg1MTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18nnZJsMq+MDpcS+138tEz6AxEMl cejvgd58Ix+wgxFvBwKpuCMgK4Ytk6Po7dLBX+pb95BgpUcu/HVJRfisRKLUv/bq I7fxwwoMY88VW0RY/h+FuYR0mh+3AGKmcxMeAQqVeZnk93eHe9FRfAkNP1G66yD0 McmSTRRRDPdTVShpB/3pT3+SSAzWTu1x+jBz2l71DPaLtsOSZt/zm8u0albDozm9 llDWtcLtdzSsGiopT3//mrUO2zXTZFrOrpNSBXUjeGFCJCI245iciEBvnKqOlm7F IviFnQ1pXGwtd14Cmg3aKfwg/KP0aR8ZkRBKkdipDQDz8S7rYhBcXYpDBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdTG59eLr7WqDVihDryLOtF2FGQMB8GA1UdIwQY MBaAFJNce3YpGc823BQmP15ZVej/o107MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjct YWVkMTY0ODMyYThiLzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjctYWVkMTY0ODMyYThi LzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepzA1qBu q0GrfNrSZLqXLcIDvhpykPOQEeu7L/hPH6F+EwHW+JRjy2yhbG8BmKncr/anLbvx E924rrVjCY2ovFMj90iPiFTRCkgD5ywGQaJVpDsVZl9FXr+5zRn0pXk1ctppM9ae WMjXA+hZdkHwga3z5Rtp5+8/ICkRSkcTIoVthz74836AJUWvs+qye61fohodPgL9 8dKMQ1pdABVcgfuXEB0aRndxjOJjacHDwBnQhfrG19wDIAmePqK7K9vDCQYAaBTh 31R6eYomB8ArBCavkVF00i5XzJinyXvEtmXW4emNzBRzDqLG4nnmR+x/ynpvJwcU S3rTDATVPZG7AQ== -----END CERTIFICATE-----Generated at Tue Dec 16 07:01:11 2025 by rpki-client