This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json) Hash identifier: 7sC86J/olbCaJN9YCc3reWU8B3vHLiB1FotYZFAyeOU= Subject key identifier: CA:5D:B8:9B:5D:86:4F:F9:A7:43:16:ED:26:23:55:96:10:3E:AC:27 Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55 Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455 Certificate serial: 019B59ACE595642C20F466D5FE64169C9BFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft Manifest number: 073D Signing time: Fri 26 Dec 2025 08:01:01 +0000 Manifest this update: Fri 26 Dec 2025 08:01:01 +0000 Manifest next update: Sat 27 Dec 2025 08:01:01 +0000 Files and hashes: 1: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: OD4leRkMCYp02GE4Eo+MkMRNF3EwuIdrLo0ArGCHLqM=) 2: efoDT2af1r3VIxCXKIZiUqYjb70.roa (hash: Satp0B+ZSfcMrrpGb8DTBT0YLETw5Fxx+fyID/mnlcA=) 3: omka6JZ3cxuqRg8okuBPziVBWRs.roa (hash: 5reM5Q1cDG1s+QskdXUc/zeFl29KsaBLiyNK/rBISK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:e5:95:64:2c:20:f4:66:d5:fe:64:16:9c:9b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455 Validity Not Before: Dec 26 08:01:01 2025 GMT Not After : Dec 27 08:01:01 2025 GMT Subject: CN=ca5db89b5d864ff9a74316ed26235596103eac27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:bd:18:93:ba:96:61:21:a0:6c:6c:f1:2f: ca:f0:ac:34:ca:82:84:d1:3d:57:70:7c:f0:41:0f: b9:86:40:5a:00:21:8b:b4:88:c6:52:eb:54:e3:ca: fc:a1:a8:7b:0c:24:b2:04:65:2a:a3:7f:35:d2:c1: 9a:1c:ca:86:ca:f7:38:9f:b0:1c:e8:5c:97:39:de: 46:40:0d:b8:36:e0:8a:ce:6a:94:bc:11:c1:ab:b0: 2d:4b:b0:5c:bc:29:c0:d3:28:7f:7a:03:09:f4:3e: 30:a8:ec:ba:2a:03:c3:8c:83:e0:d3:5d:e9:fd:a5: 6a:70:36:f3:f0:78:b3:96:96:b5:75:ed:81:09:e9: d2:56:51:0b:d8:1d:d1:38:87:ec:53:a9:0f:84:a4: 76:fa:d4:8f:15:4c:98:b6:4b:3d:dc:91:e7:02:3c: 72:5f:fa:bd:c1:d2:ba:a1:52:18:10:33:61:8c:0e: 86:b2:10:fb:8c:ea:60:5a:ad:f8:2f:c1:f0:d8:7b: 51:33:78:b0:54:5d:a8:7c:f2:52:7b:70:65:48:4a: d5:2f:78:dc:10:86:c0:f2:df:31:d7:5c:d4:18:62: 14:8f:00:85:62:eb:fd:ec:28:3f:f7:8d:41:ab:0d: 9a:7c:c3:79:46:07:45:50:33:c3:8c:81:6b:a3:77: c6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5D:B8:9B:5D:86:4F:F9:A7:43:16:ED:26:23:55:96:10:3E:AC:27 X509v3 Authority Key Identifier: keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5e:9c:06:06:dd:4c:74:b0:32:6e:6c:d2:5a:ea:2f:f8:d2: 74:cb:c1:2e:54:83:00:de:c7:06:81:0f:4c:d9:2e:44:4a:c3: fc:44:b5:82:42:41:fe:df:70:e9:1c:52:f2:c8:4f:35:28:0b: 3b:ee:61:c8:77:74:1e:21:52:2b:f3:cf:1f:07:d9:53:0a:8f: 94:d9:ca:a7:f6:5e:95:5d:d7:81:25:49:21:7a:42:58:b5:cd: 2d:f2:49:36:bb:9e:aa:66:ca:97:bf:cf:a1:ab:d1:6e:23:17: 68:0f:e3:c5:30:b6:86:2f:0f:75:09:8b:53:cd:6d:92:b0:5e: 10:3a:3d:fd:d1:d1:35:cd:1e:83:a2:0c:5a:d9:32:cf:d0:6c: c8:96:67:da:20:59:bb:55:9f:5f:16:cd:ea:40:85:27:b7:ed: 8a:90:b0:70:52:c2:3a:e2:56:11:4c:00:57:90:8d:41:da:07: de:5d:eb:c1:99:45:5b:f2:3c:3c:2a:81:94:49:e7:a4:91:11: 54:9b:a4:89:61:c7:1a:56:e2:a6:7f:ee:34:ff:ef:10:68:ae: 55:97:12:a7:ae:51:82:04:ae:37:d0:5d:d0:e3:08:f1:72:e7: 7a:b6:ef:47:95:60:f0:d0:e6:d3:a2:09:bd:ac:01:fb:c5:99: 23:bb:2b:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrOWVZCwg9GbV/mQWnJv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDk5NGJiN2E2YTNmNDMzM2Q2NjhjNDk4ZmI5NjViMTcy YzM0NTUwHhcNMjUxMjI2MDgwMTAxWhcNMjUxMjI3MDgwMTAxWjAzMTEwLwYDVQQD EyhjYTVkYjg5YjVkODY0ZmY5YTc0MzE2ZWQyNjIzNTU5NjEwM2VhYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBO9GJO6lmEhoGxs8S/K8Kw0yoKE 0T1XcHzwQQ+5hkBaACGLtIjGUutU48r8oah7DCSyBGUqo3810sGaHMqGyvc4n7Ac 6FyXOd5GQA24NuCKzmqUvBHBq7AtS7BcvCnA0yh/egMJ9D4wqOy6KgPDjIPg013p /aVqcDbz8Hizlpa1de2BCenSVlEL2B3ROIfsU6kPhKR2+tSPFUyYtks93JHnAjxy X/q9wdK6oVIYEDNhjA6GshD7jOpgWq34L8Hw2HtRM3iwVF2ofPJSe3BlSErVL3jc EIbA8t8x11zUGGIUjwCFYuv97Cg/941Bqw2afMN5RgdFUDPDjIFro3fGHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpduJtdhk/5p0MW7SYjVZYQPqwnMB8GA1UdIwQY MBaAFHJJlLt6aj9DM9ZoxJj7llsXLDRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2ttVXUzcHFQME16MW1qRW1QdVdXeGNzTkZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83ZmM4MGItOGQxNC00NTdiLWFkNWUt ODNmYzQ4MDQ0OTIzLzEvY2ttVXUzcHFQME16MW1qRW1QdVdXeGNzTkZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC83ZmM4MGItOGQxNC00NTdiLWFkNWUtODNmYzQ4MDQ0OTIz LzEvY2ttVXUzcHFQME16MW1qRW1QdVdXeGNzTkZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACV6cBgbd THSwMm5s0lrqL/jSdMvBLlSDAN7HBoEPTNkuRErD/ES1gkJB/t9w6RxS8shPNSgL O+5hyHd0HiFSK/PPHwfZUwqPlNnKp/ZelV3XgSVJIXpCWLXNLfJJNrueqmbKl7/P oavRbiMXaA/jxTC2hi8PdQmLU81tkrBeEDo9/dHRNc0eg6IMWtkyz9BsyJZn2iBZ u1WfXxbN6kCFJ7ftipCwcFLCOuJWEUwAV5CNQdoH3l3rwZlFW/I8PCqBlEnnpJER VJukiWHHGlbipn/uNP/vEGiuVZcSp65RggSuN9Bd0OMI8XLnerbvR5Vg8NDm06IJ vawB+8WZI7srpA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:04 2025 by rpki-client