This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json) Hash identifier: gJZCMsyrc4WlyccufoTpXTEep5yDZNokkRlqcotCMUs= Subject key identifier: 1C:F4:FA:88:31:02:56:E4:34:1A:DE:7A:D1:F5:59:72:56:2B:59:EE Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66 Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266 Certificate serial: 019AF208E8FF998B55A4BB5AADD14ED9E94E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft Manifest number: 1022 Signing time: Sat 06 Dec 2025 05:01:01 +0000 Manifest this update: Sat 06 Dec 2025 05:01:01 +0000 Manifest next update: Sun 07 Dec 2025 05:01:01 +0000 Files and hashes: 1: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: qDmH2pajw+KwJiMg0CJsAu7oL1V/V1SXYY18eESmVxQ=) 2: rqMllQ155A2S7SS_4PQfBNAn4gw.roa (hash: fS87JWrPgH68/hK1SJfJVRTn1bsQGrCVPuQ1+n82lao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e8:ff:99:8b:55:a4:bb:5a:ad:d1:4e:d9:e9:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266 Validity Not Before: Dec 6 05:01:01 2025 GMT Not After : Dec 7 05:01:01 2025 GMT Subject: CN=1cf4fa88310256e4341ade7ad1f55972562b59ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:44:54:a1:26:8a:cf:56:ef:8b:f5:20:d1:b1: 96:d4:fb:10:f1:61:28:38:d4:87:a2:c9:3f:cf:67: bf:03:73:e2:66:29:ab:3c:91:1f:98:ca:0f:1a:61: 09:a5:f9:ef:c0:16:06:f9:a0:e0:6d:d0:dd:b4:3e: 0f:19:2a:f6:48:29:8d:37:fe:c1:e6:08:9c:e8:6b: a7:a5:fa:37:a0:5b:0b:41:3a:5b:93:c5:0a:7b:6a: 12:a4:5a:5b:3d:86:d3:2c:60:01:e4:79:73:c3:ae: 63:76:39:6d:5b:3c:d5:44:bc:30:5e:17:88:18:dd: 0e:bb:f0:0a:b9:4f:77:97:8e:bb:e7:2d:b7:6d:08: 30:25:58:0e:6c:bb:76:a0:5c:76:40:5e:4b:7c:d9: 73:1d:4a:b8:1c:45:34:23:94:6b:ec:93:c3:57:c9: e7:9d:ef:37:14:01:3f:7a:b6:1b:e6:e4:60:4c:62: aa:97:c9:eb:c5:22:cc:aa:0f:09:ac:07:74:89:46: a1:ea:90:a0:1c:a3:fa:8b:e0:8e:5c:5c:53:62:e0: 5a:ef:c7:3d:a9:33:80:e2:93:1e:5a:d0:d2:38:18: 54:55:c4:9d:19:35:74:48:e7:a1:ae:9f:d3:5c:6d: 59:10:3a:a3:ec:fe:85:7f:de:b7:34:6c:70:dd:14: de:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F4:FA:88:31:02:56:E4:34:1A:DE:7A:D1:F5:59:72:56:2B:59:EE X509v3 Authority Key Identifier: keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ff:b9:b4:c6:ac:8c:5c:9d:12:2c:f5:ce:bf:6e:0d:f5:85: db:a5:d2:35:9a:7a:0b:89:97:15:7f:e8:55:6f:43:52:5e:0e: bc:e5:c5:fe:d3:ac:fc:7c:7f:5f:c8:12:29:36:89:7e:42:eb: 1e:ad:ed:0b:66:dc:0d:89:93:21:87:b5:e0:1f:5e:84:db:26: 48:e9:6c:61:41:52:27:ff:e7:4b:ad:5a:0f:76:cf:0f:1c:a0: 86:0d:03:1c:76:12:cf:05:00:31:8a:c8:d1:74:1d:15:e0:65: 98:ed:d4:38:04:88:08:23:f7:7b:c2:a5:43:66:05:4e:99:89: ca:f6:63:d3:93:c7:b6:c2:4a:ab:19:d0:53:ca:8e:f1:75:c1: ac:2e:59:2a:bb:8c:b3:a2:f5:4f:30:e9:94:39:a7:cb:a4:5c: 68:55:f3:25:6d:d6:7c:f3:a7:19:c2:e3:db:4c:be:3f:1c:b5: 49:2c:dd:1e:50:e0:f3:8c:16:bc:07:ef:ab:26:94:4c:ff:46: de:19:64:6a:9a:b0:ee:4d:7e:65:b5:75:cc:e1:42:48:63:c1: 80:89:57:a7:29:2c:65:ff:ca:4c:ec:73:40:44:53:fa:9b:41: 88:e4:6d:1f:7e:41:52:be:e7:ed:1d:b6:37:e1:66:0a:b2:57: 99:4b:09:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOj/mYtVpLtardFO2elOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNTE1ZjI1OTg2ZTRiNTcyYTc4YjEwOWQ5OTVjOWRkZjVk YTEyNjYwHhcNMjUxMjA2MDUwMTAxWhcNMjUxMjA3MDUwMTAxWjAzMTEwLwYDVQQD EygxY2Y0ZmE4ODMxMDI1NmU0MzQxYWRlN2FkMWY1NTk3MjU2MmI1OWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkERUoSaKz1bvi/Ug0bGW1PsQ8WEo ONSHosk/z2e/A3PiZimrPJEfmMoPGmEJpfnvwBYG+aDgbdDdtD4PGSr2SCmNN/7B 5gic6Gunpfo3oFsLQTpbk8UKe2oSpFpbPYbTLGAB5Hlzw65jdjltWzzVRLwwXheI GN0Ou/AKuU93l4675y23bQgwJVgObLt2oFx2QF5LfNlzHUq4HEU0I5Rr7JPDV8nn ne83FAE/erYb5uRgTGKql8nrxSLMqg8JrAd0iUah6pCgHKP6i+COXFxTYuBa78c9 qTOA4pMeWtDSOBhUVcSdGTV0SOehrp/TXG1ZEDqj7P6Ff963NGxw3RTedwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBz0+ogxAlbkNBreetH1WXJWK1nuMB8GA1UdIwQY MBaAFJNRXyWYbktXKnixCdmVyd312hJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2Yt MTNkNTEzMjhhOWY3LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2YtMTNkNTEzMjhhOWY3 LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP+5tMas jFydEiz1zr9uDfWF26XSNZp6C4mXFX/oVW9DUl4OvOXF/tOs/Hx/X8gSKTaJfkLr Hq3tC2bcDYmTIYe14B9ehNsmSOlsYUFSJ//nS61aD3bPDxyghg0DHHYSzwUAMYrI 0XQdFeBlmO3UOASICCP3e8KlQ2YFTpmJyvZj05PHtsJKqxnQU8qO8XXBrC5ZKruM s6L1TzDplDmny6RcaFXzJW3WfPOnGcLj20y+Pxy1SSzdHlDg84wWvAfvqyaUTP9G 3hlkapqw7k1+ZbV1zOFCSGPBgIlXpyksZf/KTOxzQERT+ptBiORtH35BUr7n7R22 N+FmCrJXmUsJ6w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:10 2025 by rpki-client