This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft File: CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json) Hash identifier: ssGrG/95eSgtHk5ni/y8kl9iXBRRbr6Vo7nWkp3g8SQ= Subject key identifier: FA:97:E1:D7:D9:5F:8A:D4:9D:70:90:8B:C8:08:99:21:C7:1B:C7:21 Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0 Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0 Certificate serial: 019B38A12A84BA112450AEF5F38786C75A41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 22:00:44 +0000 Manifest this update: Fri 19 Dec 2025 22:00:44 +0000 Manifest next update: Sat 20 Dec 2025 22:00:44 +0000 Files and hashes: 1: 5MRhSgchnAtf4S3HQR8A2P9G7a4.roa (hash: zhfGWwF8FWGDVI625aodd4CNBRsAZhPphxbbSuJ9Gk4=) 2: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: l5OGbb6zj+PRS+a48qtxMCz/0QJ2InsSfi/vfRWMjXE=) 3: KBS5ODGVPgLIrn_lzCZVpLCuM_o.roa (hash: tuJiuTZZDp+7DpYOFgzygNPFPeRHjujTGVj2/4ZqQWE=) 4: lf4o5O9cdWZQhb3j1ES-63-ld0k.roa (hash: MkYv77LnNtclc+nDDwEnxwywSZw8C8g7xWpLHjYSnn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:2a:84:ba:11:24:50:ae:f5:f3:87:86:c7:5a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0 Validity Not Before: Dec 19 22:00:44 2025 GMT Not After : Dec 20 22:00:44 2025 GMT Subject: CN=fa97e1d7d95f8ad49d70908bc8089921c71bc721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:56:6c:40:5b:a9:23:1e:9e:79:ae:fa:70: 3e:b8:3c:b2:9d:09:84:4a:f7:fb:ae:3b:75:b8:b3: 0b:2f:6f:40:07:f0:1f:d3:a4:80:c6:e0:24:b3:53: 2b:99:db:c6:4f:a6:2a:2e:66:02:af:11:05:f1:82: 21:96:63:21:ed:3f:23:b9:05:92:d8:ed:1c:75:f8: 6a:36:20:d5:32:d5:b6:db:83:13:8f:b0:8b:36:01: 92:ef:4b:96:8c:98:d6:de:69:be:e7:fb:4b:0e:15: 10:57:e5:ae:7f:14:b6:73:d7:8c:f7:de:b1:98:83: 6c:41:7f:90:22:c8:70:bf:6b:b5:7a:b2:57:14:44: 2c:ca:cd:3e:44:84:6c:25:44:86:92:eb:55:06:27: 8b:7b:0f:bf:62:fd:b5:f8:a8:bb:96:89:97:03:cf: 9f:66:8a:10:41:c1:29:fb:77:6b:aa:31:c0:a4:83: 98:e2:98:9b:ea:98:49:c0:49:e9:b3:f3:d0:52:b8: 07:94:78:17:9b:8d:a5:b1:6a:5f:71:f2:ae:06:5e: b4:b8:7f:b6:b4:d2:20:b2:75:4c:95:f8:4e:ca:2a: 85:45:b2:04:18:f2:f6:e0:3a:1c:9a:96:7b:0e:4d: c7:14:2c:1a:1c:cd:20:39:9d:29:d9:37:e7:44:2b: 1a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:97:E1:D7:D9:5F:8A:D4:9D:70:90:8B:C8:08:99:21:C7:1B:C7:21 X509v3 Authority Key Identifier: keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:85:f5:cc:7c:1c:ae:60:e5:e8:75:6c:3a:7f:ed:9a:ec:7e: 93:fe:64:b3:0b:cb:83:56:64:85:89:d4:bd:9a:76:10:44:37: 6c:f1:a5:3f:fb:a6:64:5f:b4:16:7b:e0:12:4a:63:4d:8e:02: 29:ba:db:05:71:94:f4:5e:c0:e3:c2:77:5f:ea:c7:5d:7c:db: e1:65:50:66:18:65:e3:df:e1:4f:bd:28:71:39:ef:5e:2f:6d: e3:89:35:4d:63:86:88:6a:be:fc:64:ba:65:96:8c:95:ec:0b: c8:32:44:d6:84:1d:1e:c3:df:42:03:a1:cf:ca:6a:2a:48:fc: 4d:59:73:c9:ca:fa:4b:43:43:8c:41:3f:46:a4:11:03:4f:99: b3:44:6e:f0:25:03:ea:6f:03:2f:45:b0:7c:73:4e:c0:3b:a2: e4:b9:bb:cd:a8:09:ea:f5:20:43:7a:15:ab:f1:07:f5:01:ea: 1c:db:55:f3:c5:f2:4a:e3:a5:e9:9a:3a:cd:5c:88:ef:33:b3: 72:62:25:94:ee:22:2a:61:d4:71:01:e4:d0:5c:f1:b5:d3:4e: 18:b2:7e:c6:24:10:4e:7b:ca:bb:86:93:11:21:19:b9:a3:8d: d7:cd:20:9e:61:ff:7c:00:5a:18:58:98:6f:25:70:e5:ab:d8: a0:20:9b:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oSqEuhEkUK7184eGx1pBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YTI5N2Y4Y2ZhMWNlNmQzZmUyYzUyNjkxMWM0NjhhOWE2 MzE4ZDAwHhcNMjUxMjE5MjIwMDQ0WhcNMjUxMjIwMjIwMDQ0WjAzMTEwLwYDVQQD EyhmYTk3ZTFkN2Q5NWY4YWQ0OWQ3MDkwOGJjODA4OTkyMWM3MWJjNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ1WbEBbqSMennmu+nA+uDyynQmE Svf7rjt1uLMLL29AB/Af06SAxuAks1MrmdvGT6YqLmYCrxEF8YIhlmMh7T8juQWS 2O0cdfhqNiDVMtW224MTj7CLNgGS70uWjJjW3mm+5/tLDhUQV+WufxS2c9eM996x mINsQX+QIshwv2u1erJXFEQsys0+RIRsJUSGkutVBieLew+/Yv21+Ki7lomXA8+f ZooQQcEp+3drqjHApIOY4pib6phJwEnps/PQUrgHlHgXm42lsWpfcfKuBl60uH+2 tNIgsnVMlfhOyiqFRbIEGPL24DocmpZ7Dk3HFCwaHM0gOZ0p2TfnRCsabQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqX4dfZX4rUnXCQi8gImSHHG8chMB8GA1UdIwQY MBaAFAiil/jPoc5tP+LFJpEcRoqaYxjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjct OTcxMTM5NTE0YmIxLzEvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjctOTcxMTM5NTE0YmIx LzEvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIX1zHwc rmDl6HVsOn/tmux+k/5kswvLg1ZkhYnUvZp2EEQ3bPGlP/umZF+0FnvgEkpjTY4C KbrbBXGU9F7A48J3X+rHXXzb4WVQZhhl49/hT70ocTnvXi9t44k1TWOGiGq+/GS6 ZZaMlewLyDJE1oQdHsPfQgOhz8pqKkj8TVlzycr6S0NDjEE/RqQRA0+Zs0Ru8CUD 6m8DL0WwfHNOwDui5Lm7zagJ6vUgQ3oVq/EH9QHqHNtV88XySuOl6Zo6zVyI7zOz cmIllO4iKmHUcQHk0FzxtdNOGLJ+xiQQTnvKu4aTESEZuaON180gnmH/fABaGFiY byVw5avYoCCbQw== -----END CERTIFICATE-----Generated at Sat Dec 20 03:31:35 2025 by rpki-client