This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json) Hash identifier: TGYJXE/OlY4gehCjoe20CZ/2hX8xnupyv+/s9DXm8ss= Subject key identifier: 87:6F:07:A8:36:6D:80:21:D5:37:82:64:21:0B:64:5B:B7:CD:F5:B8 Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61 Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61 Certificate serial: 019B5A88495995CD5F2E897DA3467870D010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft Manifest number: 17A0 Signing time: Fri 26 Dec 2025 12:00:39 +0000 Manifest this update: Fri 26 Dec 2025 12:00:39 +0000 Manifest next update: Sat 27 Dec 2025 12:00:39 +0000 Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: /GY2SKL+wrcn4CkhDm32B/ZvhP/q3A3PezJAsy4x6Xk=) 2: OZJAkQeWPGiu0MMG4YGewg2oUhI.roa (hash: kvD4Jh7HATnFEhZqQFNvhTQZ3Ir8ynHCKw0hu3/CQds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:49:59:95:cd:5f:2e:89:7d:a3:46:78:70:d0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61 Validity Not Before: Dec 26 12:00:39 2025 GMT Not After : Dec 27 12:00:39 2025 GMT Subject: CN=876f07a8366d8021d5378264210b645bb7cdf5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:c2:c0:98:2e:88:05:97:9b:d8:9c:e5:6e: 03:c1:a4:b6:c7:27:13:a0:aa:01:33:44:71:8c:c1: 21:f3:2d:50:e4:a1:2d:fe:57:dc:6a:41:4b:db:ea: 86:4c:e6:0a:67:01:a6:fb:bc:14:af:dd:ea:4f:16: af:c9:05:fb:a1:b5:67:82:82:5e:b1:82:2b:0f:45: 32:78:db:f6:33:bf:f3:a9:a4:0d:9b:83:03:90:f7: 97:f5:53:f4:9f:0b:ce:d7:fd:87:e7:d7:99:cb:e5: cc:0f:8d:38:aa:0f:32:96:7b:cd:b0:f2:ef:1b:ed: df:de:63:26:e8:24:7a:70:d8:2e:c9:1d:62:a6:25: 98:c3:55:1d:24:da:b5:03:ac:36:48:3b:de:52:cc: d4:f6:34:6b:75:61:ac:4b:da:a3:e0:98:57:83:d0: 88:7d:65:06:24:f1:56:1e:45:16:ae:b3:b1:b9:da: 6c:44:61:69:cd:67:46:15:c6:a6:53:ee:05:6e:54: 44:bf:9e:cd:83:a9:70:b2:85:c4:63:7a:98:af:90: 99:39:8c:18:a9:46:49:a4:84:44:ab:e4:8b:1e:8f: 7b:30:ab:c1:24:32:e4:cc:2e:5b:66:9c:aa:bc:77: 72:7e:fb:c0:1d:ea:d3:84:8c:6d:f5:5c:51:18:53: c0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6F:07:A8:36:6D:80:21:D5:37:82:64:21:0B:64:5B:B7:CD:F5:B8 X509v3 Authority Key Identifier: keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e9:aa:3b:c0:bf:13:1e:60:63:7d:bf:94:b3:03:b0:35:2c: 85:6f:b5:d4:d8:cb:9a:6a:6b:72:38:27:bb:bd:53:5c:17:ab: 6b:ff:b4:1d:00:cf:60:90:0e:c0:82:26:2a:67:10:3d:c1:32: 76:c1:e9:a3:94:87:96:c3:d9:77:60:92:e4:7e:05:b8:60:78: b3:32:e8:47:59:58:cc:c7:83:7a:42:96:06:ed:95:c7:05:4b: 9f:8f:b0:75:2f:9d:f0:d2:30:70:f9:6c:7f:af:1f:07:f0:7a: bf:93:ef:f6:3a:f5:71:ec:0a:41:91:25:6f:26:d9:cd:33:f9: 44:b1:f7:4c:0b:8c:f1:4d:81:6c:ca:0d:59:ca:ae:37:b4:f3: d1:f6:93:fc:45:7a:18:ae:c7:74:6d:bc:d2:60:da:bf:b3:cf: ed:cf:5b:aa:91:49:b1:dd:fc:e0:21:74:ca:4f:fd:4a:86:dd: cd:17:01:e3:87:cc:0c:8f:8e:8e:66:6a:c0:3e:6b:aa:98:d0: 7f:e0:40:2d:c8:9f:c8:f2:90:6c:af:30:74:fb:0e:b5:e7:e5: 06:69:f0:42:13:26:39:70:d0:6e:41:de:66:f4:4d:a9:68:d2: c7:93:fb:0e:3e:02:ef:8b:91:e9:e8:f7:f2:d7:ff:9e:2e:d1: a4:da:15:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiElZlc1fLol9o0Z4cNAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNGE4NjFkN2MxNGI0Y2E1ZTZkMWM3ZDYwYWFlZWIzMmVh OGVmNjEwHhcNMjUxMjI2MTIwMDM5WhcNMjUxMjI3MTIwMDM5WjAzMTEwLwYDVQQD Eyg4NzZmMDdhODM2NmQ4MDIxZDUzNzgyNjQyMTBiNjQ1YmI3Y2RmNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04HCwJguiAWXm9ic5W4DwaS2xycT oKoBM0RxjMEh8y1Q5KEt/lfcakFL2+qGTOYKZwGm+7wUr93qTxavyQX7obVngoJe sYIrD0UyeNv2M7/zqaQNm4MDkPeX9VP0nwvO1/2H59eZy+XMD404qg8ylnvNsPLv G+3f3mMm6CR6cNguyR1ipiWYw1UdJNq1A6w2SDveUszU9jRrdWGsS9qj4JhXg9CI fWUGJPFWHkUWrrOxudpsRGFpzWdGFcamU+4FblREv57Ng6lwsoXEY3qYr5CZOYwY qUZJpIREq+SLHo97MKvBJDLkzC5bZpyqvHdyfvvAHerThIxt9VxRGFPA9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdvB6g2bYAh1TeCZCELZFu3zfW4MB8GA1UdIwQY MBaAFApKhh18FLTKXm0cfWCq7rMuqO9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2It OTRkYmYzZmQwZTJkLzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2ItOTRkYmYzZmQwZTJk LzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOmqO8C/ Ex5gY32/lLMDsDUshW+11NjLmmprcjgnu71TXBera/+0HQDPYJAOwIImKmcQPcEy dsHpo5SHlsPZd2CS5H4FuGB4szLoR1lYzMeDekKWBu2VxwVLn4+wdS+d8NIwcPls f68fB/B6v5Pv9jr1cewKQZElbybZzTP5RLH3TAuM8U2BbMoNWcquN7Tz0faT/EV6 GK7HdG280mDav7PP7c9bqpFJsd384CF0yk/9SobdzRcB44fMDI+OjmZqwD5rqpjQ f+BALcifyPKQbK8wdPsOteflBmnwQhMmOXDQbkHeZvRNqWjSx5P7Dj4C74uR6ej3 8tf/ni7RpNoVBw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:48 2025 by rpki-client