This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json) Hash identifier: VaoCB+CRR862qY/Ru+h2KUNad79si1aoj4MaL1vmHbA= Subject key identifier: 71:E7:38:4D:87:B9:17:97:C3:B7:7C:F3:1D:BF:C7:F1:D8:B5:97:52 Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Certificate serial: 019B12A6B5781D06DC8B7679A12986A6F304 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 13:01:13 +0000 Manifest this update: Fri 12 Dec 2025 13:01:13 +0000 Manifest next update: Sat 13 Dec 2025 13:01:13 +0000 Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: 9TW/rhvwzVo61/zbrtzytyjX3XK9/MckeXASx3A5eFk=) 2: tICvfkE-wd7ljGY6sghDtS75C50.roa (hash: EofEa7cxTHv8xJhHBChQPwYV0i7JZnqjIowIrpKVJDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:a6:b5:78:1d:06:dc:8b:76:79:a1:29:86:a6:f3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Validity Not Before: Dec 12 13:01:13 2025 GMT Not After : Dec 13 13:01:13 2025 GMT Subject: CN=71e7384d87b91797c3b77cf31dbfc7f1d8b59752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9a:de:9e:5c:ca:0c:7d:98:9c:71:44:13:14: d3:80:3e:6e:d7:54:ae:68:1e:0a:5f:17:01:8c:96: 82:7e:73:33:78:07:27:39:70:14:62:e7:86:42:5c: f8:32:62:00:db:32:ad:f0:d6:a9:bc:52:c4:2e:c4: 73:a0:b4:74:e9:7c:4a:f6:36:9c:73:ae:0a:23:24: 17:d7:79:ad:95:6c:c5:d1:40:85:47:29:b7:fd:82: 63:a2:e3:78:b4:b9:63:69:29:bf:42:81:88:7b:41: 12:ea:b2:3d:28:d2:5f:61:d9:29:26:86:a4:73:bc: 65:75:bb:41:be:b1:83:6b:c6:3c:46:b7:f0:07:c0: cf:44:ff:92:78:79:32:63:d9:60:7e:aa:09:23:9c: c7:6f:c4:9d:66:a6:22:cd:7a:16:40:59:82:be:64: b5:ec:b3:18:25:64:16:0c:d2:f4:9d:a4:85:91:e9: 59:be:26:6a:d3:7e:53:84:43:15:77:11:60:db:36: 7f:ed:75:d7:39:df:1b:64:08:16:e8:0a:84:69:82: f2:70:4f:a9:16:38:ff:17:70:ea:52:43:d5:92:6a: 14:55:5f:28:03:2b:2a:32:5d:f2:1a:17:5c:a1:37: 2b:f5:fa:3e:46:b3:fb:2f:f7:16:94:fe:51:a1:74: 81:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E7:38:4D:87:B9:17:97:C3:B7:7C:F3:1D:BF:C7:F1:D8:B5:97:52 X509v3 Authority Key Identifier: keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:20:a4:2d:ad:2f:5f:c1:d1:ec:02:01:8d:79:83:44:5d:90: 33:e4:03:e4:8e:02:b0:cd:31:d7:12:42:94:e3:43:98:66:60: 3b:cc:c6:9a:a2:94:53:f3:04:05:ca:3b:37:fb:c4:d2:ce:bd: a6:da:fc:4c:fe:3c:c2:da:a7:f6:e6:f6:3a:80:fc:5a:70:1c: 12:2f:de:f0:60:55:54:32:5f:5c:63:54:38:4f:86:66:8e:15: 8d:a7:df:30:9a:18:32:97:e4:01:9d:16:d6:de:2a:89:83:e4: ad:96:55:27:85:bc:0c:7d:cc:01:ac:a4:2b:c4:61:88:eb:dd: 09:bc:0d:c0:2c:e2:ad:87:15:11:a9:58:30:3b:c9:1d:bb:4d: 0e:a8:b5:a7:f5:4d:28:a1:65:72:cb:79:c3:7e:80:b7:c9:6b: 9a:ad:4a:2c:5c:1e:2c:4e:fc:57:e7:96:85:4d:4f:ea:47:51: 07:4a:be:f2:f2:2d:b8:3d:76:35:da:ad:8c:7e:09:9a:b9:14: c4:af:82:43:50:a8:65:6e:a4:42:51:04:12:d5:90:5f:51:8b: 6e:10:79:88:63:c5:8d:61:75:b9:62:27:97:18:1b:ec:9d:8f: f2:7d:ad:61:e0:db:3b:e3:2a:31:a9:88:8b:70:67:d0:50:58: 02:15:12:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSprV4HQbci3Z5oSmGpvMEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNGJkMWQzMGY3MjM1Y2Q3MTczOWMwNDIzMTBkYzI2MDgw NzM4ZjYwHhcNMjUxMjEyMTMwMTEzWhcNMjUxMjEzMTMwMTEzWjAzMTEwLwYDVQQD Eyg3MWU3Mzg0ZDg3YjkxNzk3YzNiNzdjZjMxZGJmYzdmMWQ4YjU5NzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JrenlzKDH2YnHFEExTTgD5u11Su aB4KXxcBjJaCfnMzeAcnOXAUYueGQlz4MmIA2zKt8NapvFLELsRzoLR06XxK9jac c64KIyQX13mtlWzF0UCFRym3/YJjouN4tLljaSm/QoGIe0ES6rI9KNJfYdkpJoak c7xldbtBvrGDa8Y8RrfwB8DPRP+SeHkyY9lgfqoJI5zHb8SdZqYizXoWQFmCvmS1 7LMYJWQWDNL0naSFkelZviZq035ThEMVdxFg2zZ/7XXXOd8bZAgW6AqEaYLycE+p Fjj/F3DqUkPVkmoUVV8oAysqMl3yGhdcoTcr9fo+RrP7L/cWlP5RoXSBiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHnOE2HuReXw7d88x2/x/HYtZdSMB8GA1UdIwQY MBaAFApL0dMPcjXNcXOcBCMQ3CYIBzj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEt Mzg4NDQzZDVmMDBmLzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEtMzg4NDQzZDVmMDBm LzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSCkLa0v X8HR7AIBjXmDRF2QM+QD5I4CsM0x1xJClONDmGZgO8zGmqKUU/MEBco7N/vE0s69 ptr8TP48wtqn9ub2OoD8WnAcEi/e8GBVVDJfXGNUOE+GZo4VjaffMJoYMpfkAZ0W 1t4qiYPkrZZVJ4W8DH3MAaykK8RhiOvdCbwNwCzirYcVEalYMDvJHbtNDqi1p/VN KKFlcst5w36At8lrmq1KLFweLE78V+eWhU1P6kdRB0q+8vItuD12NdqtjH4JmrkU xK+CQ1CoZW6kQlEEEtWQX1GLbhB5iGPFjWF1uWInlxgb7J2P8n2tYeDbO+MqMamI i3Bn0FBYAhUSmw== -----END CERTIFICATE-----Generated at Fri Dec 12 19:32:03 2025 by rpki-client