This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json) Hash identifier: RKNDWh6dhvBt/AVKjvwqZuxjaO8ULV2g3HROtocedz0= Subject key identifier: 25:ED:5E:B6:41:6F:EE:76:19:65:72:90:16:7A:DE:7B:EA:3E:A1:81 Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Certificate serial: 019B4E84CF3B9D18D98378957BBC5E0B8074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 04:01:25 +0000 Manifest this update: Wed 24 Dec 2025 04:01:25 +0000 Manifest next update: Thu 25 Dec 2025 04:01:25 +0000 Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: /+94lIZGDIelVoaj80JH4fMpExJf+il5wZkRSGjuOPg=) 2: tICvfkE-wd7ljGY6sghDtS75C50.roa (hash: EofEa7cxTHv8xJhHBChQPwYV0i7JZnqjIowIrpKVJDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:cf:3b:9d:18:d9:83:78:95:7b:bc:5e:0b:80:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Validity Not Before: Dec 24 04:01:25 2025 GMT Not After : Dec 25 04:01:25 2025 GMT Subject: CN=25ed5eb6416fee7619657290167ade7bea3ea181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:a2:5f:2d:f9:fa:c0:4e:b2:46:a6:41:c9: 2e:dd:20:c3:db:7d:f2:81:91:83:64:46:9b:cf:bf: e8:9f:a5:02:f0:d2:fd:1c:1a:37:79:22:43:cd:ee: cc:bc:2c:47:69:eb:98:31:28:ad:2a:38:0f:75:e2: aa:bb:7c:b8:b8:10:14:58:52:ef:3a:3f:b2:ec:0c: 3f:ee:fa:df:ae:49:c3:9d:af:1e:7c:ab:c8:54:80: 02:39:9d:d5:1f:2b:22:00:73:63:86:24:c4:4f:43: 7f:11:10:85:a8:50:0d:6f:d0:e5:1e:e2:a0:8e:ab: e8:2f:89:7e:77:fb:aa:13:9b:a8:a0:fc:c6:33:2e: a8:52:86:9c:52:7c:ec:f1:96:82:47:a5:67:7d:c3: fa:b0:e7:34:26:0c:54:6d:17:a9:0f:47:94:d4:69: d5:13:73:64:00:a7:22:ef:0b:4d:dd:5b:79:ee:48: e0:cb:56:37:90:e4:e3:46:17:5f:06:cd:2b:66:37: 62:15:45:61:70:de:06:df:21:58:2f:12:d0:ef:9e: a6:86:6f:ad:6c:f8:4e:c5:f9:30:1c:b8:21:0a:7d: 79:6f:8b:70:3c:14:33:85:0d:4a:b3:d2:70:a8:65: 71:e6:4b:88:2e:d8:a8:be:66:d9:bd:9d:4c:54:ef: 6a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:ED:5E:B6:41:6F:EE:76:19:65:72:90:16:7A:DE:7B:EA:3E:A1:81 X509v3 Authority Key Identifier: keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:eb:b5:8b:37:6b:09:13:2a:89:d0:bd:24:68:77:7b:97:aa: 2d:fa:a8:fa:8f:a8:a4:42:6c:d2:87:19:65:35:0d:e3:78:62: 66:21:dd:a3:cb:b9:7d:58:4d:a1:25:bd:47:6c:82:1f:a2:62: f0:58:2f:3b:4c:95:ef:14:f4:4e:de:c4:de:c0:3e:19:32:bd: 79:5d:35:18:5f:ad:33:a7:4f:5c:cb:3f:67:20:1c:9b:27:66: 6b:0f:02:59:85:1d:45:24:ac:92:90:33:d1:de:7c:de:1e:5a: 41:41:02:1c:91:61:b8:cc:b2:92:56:e0:88:f4:b2:f2:49:ff: 90:1d:8d:32:62:68:db:a3:e2:28:39:fe:51:4b:47:fe:61:e2: fe:90:11:00:d3:c7:60:51:c2:8f:9a:8c:9c:26:84:c6:8c:ba: 3e:d0:67:a9:a6:8b:30:fd:73:3c:d8:87:5d:82:37:4d:e9:a9: ce:54:ec:ef:79:23:16:d2:da:a1:64:d9:bd:59:1b:bc:74:b5: c1:c9:d8:14:86:f4:5f:db:28:33:70:1d:06:51:4d:0f:48:f6: d6:c5:38:f1:a4:18:ac:93:6c:53:c1:9a:51:5a:ef:e0:7b:f1: 33:c7:61:3f:a8:6c:ba:7e:fa:8a:89:2f:98:18:37:0b:ec:23: 62:d3:2f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhM87nRjZg3iVe7xeC4B0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNGJkMWQzMGY3MjM1Y2Q3MTczOWMwNDIzMTBkYzI2MDgw NzM4ZjYwHhcNMjUxMjI0MDQwMTI1WhcNMjUxMjI1MDQwMTI1WjAzMTEwLwYDVQQD EygyNWVkNWViNjQxNmZlZTc2MTk2NTcyOTAxNjdhZGU3YmVhM2VhMTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6WiXy35+sBOskamQcku3SDD233y gZGDZEabz7/on6UC8NL9HBo3eSJDze7MvCxHaeuYMSitKjgPdeKqu3y4uBAUWFLv Oj+y7Aw/7vrfrknDna8efKvIVIACOZ3VHysiAHNjhiTET0N/ERCFqFANb9DlHuKg jqvoL4l+d/uqE5uooPzGMy6oUoacUnzs8ZaCR6VnfcP6sOc0JgxUbRepD0eU1GnV E3NkAKci7wtN3Vt57kjgy1Y3kOTjRhdfBs0rZjdiFUVhcN4G3yFYLxLQ756mhm+t bPhOxfkwHLghCn15b4twPBQzhQ1Ks9JwqGVx5kuILtiovmbZvZ1MVO9qpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXtXrZBb+52GWVykBZ63nvqPqGBMB8GA1UdIwQY MBaAFApL0dMPcjXNcXOcBCMQ3CYIBzj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEt Mzg4NDQzZDVmMDBmLzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEtMzg4NDQzZDVmMDBm LzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+u1izdr CRMqidC9JGh3e5eqLfqo+o+opEJs0ocZZTUN43hiZiHdo8u5fVhNoSW9R2yCH6Ji 8FgvO0yV7xT0Tt7E3sA+GTK9eV01GF+tM6dPXMs/ZyAcmydmaw8CWYUdRSSskpAz 0d583h5aQUECHJFhuMyyklbgiPSy8kn/kB2NMmJo26PiKDn+UUtH/mHi/pARANPH YFHCj5qMnCaExoy6PtBnqaaLMP1zPNiHXYI3TempzlTs73kjFtLaoWTZvVkbvHS1 wcnYFIb0X9soM3AdBlFND0j21sU48aQYrJNsU8GaUVrv4HvxM8dhP6hsun76iokv mBg3C+wjYtMv/A== -----END CERTIFICATE-----Generated at Wed Dec 24 13:26:25 2025 by rpki-client