This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft File: ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft (raw, json) Hash identifier: Drq6Bk1RvS64YIDr66x62mGHKgMnEuX6zvv2HngrFeA= Subject key identifier: 0A:97:76:D8:99:5E:A3:DD:46:EC:CC:E4:54:92:04:4D:92:73:15:D4 Authority key identifier: 72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2 Certificate issuer: /CN=724f14189ab7105620375daf9baa814d6dd937a2 Certificate serial: 019B5B64E3FB0EE3DFF21DF1B95B3BCB7A51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft Manifest number: 0906 Signing time: Fri 26 Dec 2025 16:01:37 +0000 Manifest this update: Fri 26 Dec 2025 16:01:37 +0000 Manifest next update: Sat 27 Dec 2025 16:01:37 +0000 Files and hashes: 1: ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl (hash: j0OkdparMDUWhr/MmirNe50IX/JV+QE5zIJrEudYVNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:e3:fb:0e:e3:df:f2:1d:f1:b9:5b:3b:cb:7a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=724f14189ab7105620375daf9baa814d6dd937a2 Validity Not Before: Dec 26 16:01:37 2025 GMT Not After : Dec 27 16:01:37 2025 GMT Subject: CN=0a9776d8995ea3dd46eccce45492044d927315d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ee:36:7c:14:41:af:dc:01:be:0b:aa:14:72: da:ee:1a:c4:10:47:73:15:d4:c7:79:b2:10:dc:25: 6a:ad:81:d9:07:47:1e:16:e4:ff:35:61:0e:e5:99: 31:ad:90:6e:37:22:38:96:67:20:ad:0a:48:a9:1e: e4:49:11:12:13:97:06:a8:55:d3:d6:46:b2:c2:4a: 94:03:84:01:7d:4e:3d:37:43:ff:3c:47:55:24:98: 13:54:35:45:b1:84:b9:52:49:ac:1a:01:6c:50:fd: 4c:dd:5d:c4:4c:47:3c:bd:ff:97:72:23:02:c8:82: 83:9f:58:30:e8:92:32:54:6b:81:cb:49:cf:6a:a0: 44:46:38:e8:9f:ce:2a:8c:11:84:2f:61:a2:6b:53: cd:e4:93:11:3a:d9:8b:6f:42:62:01:ac:96:09:a9: 77:9e:05:73:6f:73:c2:1a:66:c4:64:8f:2b:99:12: 51:be:2d:74:3b:d2:c8:11:53:7f:98:6a:89:76:ce: 32:dc:d1:e3:40:c2:ae:96:49:bb:3d:74:7f:92:ee: 6c:24:fc:38:ba:b9:75:91:09:b0:2b:cd:2d:fb:46: de:f8:0a:0e:0c:90:54:ba:d5:dc:d5:01:a1:25:f8: c6:7c:b9:4c:12:85:98:4f:f0:d9:10:83:31:14:a2: a6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:97:76:D8:99:5E:A3:DD:46:EC:CC:E4:54:92:04:4D:92:73:15:D4 X509v3 Authority Key Identifier: keyid:72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a7:38:53:1d:d4:f5:19:83:f9:61:06:b3:f7:8d:38:2c:4a: 16:4e:5b:0f:b7:67:36:ac:cf:98:c6:60:06:79:a2:9b:cb:b1: d0:0c:ea:83:23:e7:0c:bf:6d:e1:91:78:d5:b4:0b:5f:ee:98: a0:82:bd:4d:5c:18:ec:b6:da:cf:cf:98:f6:cd:b0:d1:56:09: 87:26:57:cc:ec:6b:11:ff:e8:f9:84:d1:8f:0c:04:c3:fb:d0: 5c:13:d4:c3:39:61:8a:2e:52:d0:80:63:d7:29:f9:1a:ed:38: 44:bc:8a:03:bd:ff:41:55:1a:96:96:03:50:ea:7b:c6:a4:32: cc:e3:ca:20:96:5e:9a:f9:06:72:3a:43:be:67:e4:50:02:1a: 03:3b:86:62:f9:15:ce:79:f9:fd:1e:70:3a:fe:8a:68:73:98: 68:6c:8c:bb:c5:78:2f:47:b7:94:c0:a3:fc:4f:7c:40:27:89: 0c:74:4b:fd:95:d1:d7:98:af:ae:5c:c6:bb:44:b1:96:db:18: 81:83:7e:14:ad:a1:7f:d5:ad:42:c2:f9:30:84:c4:da:99:ba: ce:7d:af:b0:b9:e2:9b:ea:e4:8a:c5:38:06:6c:22:b8:37:b3: 00:ee:80:3b:72:ec:df:1a:8e:c0:e0:f5:92:1b:d9:df:1f:d5: cd:4b:bb:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZOP7DuPf8h3xuVs7y3pRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNGYxNDE4OWFiNzEwNTYyMDM3NWRhZjliYWE4MTRkNmRk OTM3YTIwHhcNMjUxMjI2MTYwMTM3WhcNMjUxMjI3MTYwMTM3WjAzMTEwLwYDVQQD EygwYTk3NzZkODk5NWVhM2RkNDZlY2NjZTQ1NDkyMDQ0ZDkyNzMxNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e42fBRBr9wBvguqFHLa7hrEEEdz FdTHebIQ3CVqrYHZB0ceFuT/NWEO5ZkxrZBuNyI4lmcgrQpIqR7kSRESE5cGqFXT 1kaywkqUA4QBfU49N0P/PEdVJJgTVDVFsYS5UkmsGgFsUP1M3V3ETEc8vf+XciMC yIKDn1gw6JIyVGuBy0nPaqBERjjon84qjBGEL2Gia1PN5JMROtmLb0JiAayWCal3 ngVzb3PCGmbEZI8rmRJRvi10O9LIEVN/mGqJds4y3NHjQMKulkm7PXR/ku5sJPw4 url1kQmwK80t+0be+AoODJBUutXc1QGhJfjGfLlMEoWYT/DZEIMxFKKm1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqXdtiZXqPdRuzM5FSSBE2ScxXUMB8GA1UdIwQY MBaAFHJPFBiatxBWIDddr5uqgU1t2TeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2s4VUdKcTNFRllnTjEydm02cUJUVzNaTjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jYmQ3MmItZjY0Yi00NTRlLWI1OGMt MjcxNWViNzEwZTgwLzEvY2s4VUdKcTNFRllnTjEydm02cUJUVzNaTjZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9jYmQ3MmItZjY0Yi00NTRlLWI1OGMtMjcxNWViNzEwZTgw LzEvY2s4VUdKcTNFRllnTjEydm02cUJUVzNaTjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMac4Ux3U 9RmD+WEGs/eNOCxKFk5bD7dnNqzPmMZgBnmim8ux0AzqgyPnDL9t4ZF41bQLX+6Y oIK9TVwY7Lbaz8+Y9s2w0VYJhyZXzOxrEf/o+YTRjwwEw/vQXBPUwzlhii5S0IBj 1yn5Gu04RLyKA73/QVUalpYDUOp7xqQyzOPKIJZemvkGcjpDvmfkUAIaAzuGYvkV znn5/R5wOv6KaHOYaGyMu8V4L0e3lMCj/E98QCeJDHRL/ZXR15ivrlzGu0SxltsY gYN+FK2hf9WtQsL5MITE2pm6zn2vsLnim+rkisU4BmwiuDezAO6AO3Ls3xqOwOD1 khvZ3x/VzUu7iA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:49 2025 by rpki-client