This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json) Hash identifier: pAlJvPJ3eF6bMWqpdJQqbBuMUN2iH5tEyoUZZalTM70= Subject key identifier: 34:5A:4A:47:EA:6F:C3:F2:3D:1D:41:B4:EF:74:A8:C2:27:7C:7F:5A Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34 Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34 Certificate serial: 019B5ABFAFB8875E098D263FBA6D8FF9C2E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft Manifest number: 13F0 Signing time: Fri 26 Dec 2025 13:01:10 +0000 Manifest this update: Fri 26 Dec 2025 13:01:10 +0000 Manifest next update: Sat 27 Dec 2025 13:01:10 +0000 Files and hashes: 1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: KfOwjJR/vW+UtlDnILj2jOuViBfeuo+iN1yfLgw1rQk=) 2: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (hash: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:af:b8:87:5e:09:8d:26:3f:ba:6d:8f:f9:c2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34 Validity Not Before: Dec 26 13:01:10 2025 GMT Not After : Dec 27 13:01:10 2025 GMT Subject: CN=345a4a47ea6fc3f23d1d41b4ef74a8c2277c7f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:69:33:21:b5:4b:43:21:05:27:ad:9d:b7: 3d:08:37:f4:a9:28:f5:ed:00:10:d2:ae:17:ba:f4: 42:4a:d3:1e:87:61:68:3f:b1:2d:98:46:d2:6c:3c: 14:a7:fb:2f:bb:55:78:7b:02:70:0e:2a:bd:ea:d7: 1c:db:5c:9a:23:05:cd:61:9e:cd:49:ae:5f:2d:a6: 55:9f:74:55:d1:21:e6:c3:35:e9:69:46:88:ce:78: f7:60:46:1a:96:8a:b5:01:6c:d5:04:df:e3:a6:7b: 0e:24:b3:ff:a1:9f:c2:2c:ca:35:e8:54:5d:d4:df: 7e:c8:76:2b:8c:d5:1e:bb:b4:2a:df:07:1a:0d:47: b4:39:4a:2e:f5:d8:41:ec:a3:91:81:14:d9:77:48: bf:5a:9a:eb:3e:57:2d:b2:17:bc:25:aa:ef:e1:84: 03:c9:5d:9f:cb:5c:66:6d:31:5f:a2:64:c7:95:33: 7e:3f:47:92:dd:e4:ee:f5:b1:86:16:34:b0:a9:d1: 25:44:ef:8e:ce:12:02:1a:5b:19:57:fe:af:8e:33: 85:d6:c3:ad:67:99:e7:42:53:b1:b6:6d:7c:0b:ad: 18:82:e2:a2:c0:7b:df:f4:10:10:62:33:8d:c4:c6: df:c3:65:eb:12:09:24:c0:33:d0:c0:78:09:76:12: 1b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5A:4A:47:EA:6F:C3:F2:3D:1D:41:B4:EF:74:A8:C2:27:7C:7F:5A X509v3 Authority Key Identifier: keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ed:e0:38:78:af:49:74:0b:70:07:85:a2:fd:10:ba:50:a0: d0:1e:71:b6:ae:22:87:27:99:3e:25:a0:2f:5b:cc:54:28:6c: b3:fe:d7:80:8a:09:a7:db:23:f8:90:7a:d0:f3:43:e6:4c:e9: d2:07:1a:39:c3:6e:3c:56:c6:1f:69:85:48:dd:ee:d0:79:30: 91:5a:9e:c9:de:8f:7f:d3:29:c3:66:bc:27:87:de:d4:fb:a9: 8e:f0:bc:ae:23:82:73:f2:99:cb:af:2e:fb:68:65:49:35:aa: d6:a0:67:97:b3:27:c0:8e:d8:bb:42:21:48:1d:26:4b:25:21: f0:87:bb:cb:a2:6c:82:8b:c6:79:ce:fa:2a:d4:03:d6:5b:c6: 7d:40:f9:92:00:8b:64:2c:d7:f1:1f:df:53:25:e5:f7:eb:37: b9:0b:dc:30:00:ae:ec:6b:e6:81:a2:7c:8f:0c:5a:ab:ef:c0: d6:13:0f:63:c4:11:6f:b9:47:22:af:99:a7:2b:64:38:77:ac: 60:b9:8a:5b:ac:2b:d8:d3:b5:30:40:77:1f:05:e0:04:da:f2: e8:6f:3c:51:ec:72:0c:e4:1a:8e:24:a8:ac:de:73:10:f6:93: c8:dd:ed:e5:fe:2a:8f:da:3d:e2:69:aa:fe:cb:7b:ce:64:4f: c7:be:c4:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav6+4h14JjSY/um2P+cLpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDkzZDYwYjUwNDI3ZGQ0MzE2ZWQ5NTA1YWQwOTllYjVh YzJlMzQwHhcNMjUxMjI2MTMwMTEwWhcNMjUxMjI3MTMwMTEwWjAzMTEwLwYDVQQD EygzNDVhNGE0N2VhNmZjM2YyM2QxZDQxYjRlZjc0YThjMjI3N2M3ZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKBpMyG1S0MhBSetnbc9CDf0qSj1 7QAQ0q4XuvRCStMeh2FoP7EtmEbSbDwUp/svu1V4ewJwDiq96tcc21yaIwXNYZ7N Sa5fLaZVn3RV0SHmwzXpaUaIznj3YEYaloq1AWzVBN/jpnsOJLP/oZ/CLMo16FRd 1N9+yHYrjNUeu7Qq3wcaDUe0OUou9dhB7KORgRTZd0i/WprrPlctshe8Jarv4YQD yV2fy1xmbTFfomTHlTN+P0eS3eTu9bGGFjSwqdElRO+OzhICGlsZV/6vjjOF1sOt Z5nnQlOxtm18C60YguKiwHvf9BAQYjONxMbfw2XrEgkkwDPQwHgJdhIbBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRaSkfqb8PyPR1BtO90qMInfH9aMB8GA1UdIwQY MBaAFHJJPWC1BCfdQxbtlQWtCZ61rC40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83MWEzNDktYmFmNC00N2IzLWE5ZWQt YzY3MzBjOGU0NmFhLzEvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83MWEzNDktYmFmNC00N2IzLWE5ZWQtYzY3MzBjOGU0NmFh LzEvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO3gOHiv SXQLcAeFov0QulCg0B5xtq4ihyeZPiWgL1vMVChss/7XgIoJp9sj+JB60PND5kzp 0gcaOcNuPFbGH2mFSN3u0HkwkVqeyd6Pf9Mpw2a8J4fe1PupjvC8riOCc/KZy68u +2hlSTWq1qBnl7MnwI7Yu0IhSB0mSyUh8Ie7y6JsgovGec76KtQD1lvGfUD5kgCL ZCzX8R/fUyXl9+s3uQvcMACu7GvmgaJ8jwxaq+/A1hMPY8QRb7lHIq+ZpytkOHes YLmKW6wr2NO1MEB3HwXgBNry6G88UexyDOQajiSorN5zEPaTyN3t5f4qj9o94mmq /st7zmRPx77Ezw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:54 2025 by rpki-client