This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json) Hash identifier: C0PQPnOk7zw8npd5HyoMEHKwXto+0Z0Gl/JxB1Pj2zs= Subject key identifier: 80:FD:0C:C0:D0:8D:FF:92:0F:B9:38:16:F4:97:BC:19:56:B9:57:9A Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Certificate serial: 019B0FA58C1F81AB455C27E3B57D994D6081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft Manifest number: 0455 Signing time: Thu 11 Dec 2025 23:01:06 +0000 Manifest this update: Thu 11 Dec 2025 23:01:06 +0000 Manifest next update: Fri 12 Dec 2025 23:01:06 +0000 Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: KpsgKEO2dy2J8hgt4GX+TQQpyj5NEJgNJZeV0a6jJ7A=) 2: LoNlBcNLDsjTpM52ykl2lebJEjI.roa (hash: lOQ33XAT96wBpF3zqP8+czX8fkzmJEjqnIn0kWh3SsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:8c:1f:81:ab:45:5c:27:e3:b5:7d:99:4d:60:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Validity Not Before: Dec 11 23:01:06 2025 GMT Not After : Dec 12 23:01:06 2025 GMT Subject: CN=80fd0cc0d08dff920fb93816f497bc1956b9579a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:be:45:56:5f:9b:34:66:f1:0b:8e:88:09: 68:11:4f:d8:06:59:ed:47:d7:8d:c8:b2:fa:e4:06: 6f:66:c2:09:1d:59:99:85:09:39:1d:52:d6:9f:ee: 46:68:c0:77:3a:e1:b1:24:4b:0b:e2:be:67:a6:6b: f2:0e:b8:8f:d8:c7:ba:01:c0:57:c2:8b:6c:40:a2: f4:71:52:79:4f:c0:fb:4d:ba:52:b5:d6:c8:b7:39: f7:09:e0:b7:06:4f:f7:9f:de:01:95:6c:ac:51:4d: 74:93:e6:6d:57:7b:f1:6f:12:48:d6:eb:55:5f:51: 03:b4:36:e7:20:bd:bb:79:a2:e6:71:32:6e:cd:74: 49:09:b9:8d:d2:19:c0:0c:03:ad:08:f1:7d:96:aa: 36:39:18:76:e0:32:3d:2a:91:e3:a0:58:36:57:74: cf:29:9a:dc:6e:64:33:4f:cf:76:d4:e8:49:ac:81: e1:88:3e:ea:53:06:38:f3:24:0a:ed:4d:e4:34:7e: c3:02:ea:b6:fd:c3:e3:91:32:27:23:92:72:8c:cb: 9a:a4:dc:20:7a:b6:59:8e:cb:2d:44:ff:d3:01:5a: 77:f9:12:4b:4a:a3:71:1b:f6:7b:5e:27:1d:c4:83: 63:d3:94:5e:63:44:39:b1:79:82:30:a3:d4:7e:22: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FD:0C:C0:D0:8D:FF:92:0F:B9:38:16:F4:97:BC:19:56:B9:57:9A X509v3 Authority Key Identifier: keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c5:0f:5b:c5:28:87:cc:41:a6:0c:65:2b:27:3f:a8:3d:f1: e9:86:e5:45:bd:e4:2f:cf:a6:c5:4c:fc:ff:78:d0:96:10:fe: 99:ce:3e:63:65:5e:09:67:26:5e:55:e9:b5:ca:14:a0:bb:18: fe:5c:b6:a4:93:b8:d6:dc:73:f7:42:b0:c9:1c:21:92:9c:4a: de:b9:81:2a:d3:cc:2c:e6:00:51:6c:6a:1b:3f:38:91:38:d1: 12:0e:57:2c:5c:16:8d:c4:5b:58:f2:d9:56:14:38:fd:1e:39: 7c:0a:3f:b3:21:5d:6b:ee:db:a5:8c:68:40:9a:e4:79:48:6e: 79:48:fe:ca:b7:57:a3:dc:09:0a:95:e2:b9:75:bc:27:cc:1c: 75:55:19:6b:12:6e:fb:b7:e6:c0:35:8a:e3:99:2e:6b:0d:cc: e7:96:8c:db:ee:1c:0c:a9:ae:da:7b:02:1b:27:ef:80:91:2c: a9:36:ab:68:0b:7a:09:b1:1b:12:8d:9e:e9:8a:c7:f4:13:5c: 2e:51:58:5d:de:af:1d:63:46:98:19:2b:92:1b:07:79:c6:7e: 0f:cc:26:cd:4e:7a:be:68:96:63:fd:af:e0:e9:f4:80:b8:33: 8c:05:01:30:0b:6d:4b:cd:12:26:22:77:34:0a:27:bb:60:e6: 40:af:00:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpYwfgatFXCfjtX2ZTWCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh NjUxZjQwHhcNMjUxMjExMjMwMTA2WhcNMjUxMjEyMjMwMTA2WjAzMTEwLwYDVQQD Eyg4MGZkMGNjMGQwOGRmZjkyMGZiOTM4MTZmNDk3YmMxOTU2Yjk1NzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc6+RVZfmzRm8QuOiAloEU/YBlnt R9eNyLL65AZvZsIJHVmZhQk5HVLWn+5GaMB3OuGxJEsL4r5npmvyDriP2Me6AcBX wotsQKL0cVJ5T8D7TbpStdbItzn3CeC3Bk/3n94BlWysUU10k+ZtV3vxbxJI1utV X1EDtDbnIL27eaLmcTJuzXRJCbmN0hnADAOtCPF9lqo2ORh24DI9KpHjoFg2V3TP KZrcbmQzT8921OhJrIHhiD7qUwY48yQK7U3kNH7DAuq2/cPjkTInI5JyjMuapNwg erZZjsstRP/TAVp3+RJLSqNxG/Z7XicdxINj05ReY0Q5sXmCMKPUfiI0YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFID9DMDQjf+SD7k4FvSXvBlWuVeaMB8GA1UdIwQY MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMUPW8Uo h8xBpgxlKyc/qD3x6YblRb3kL8+mxUz8/3jQlhD+mc4+Y2VeCWcmXlXptcoUoLsY /ly2pJO41txz90KwyRwhkpxK3rmBKtPMLOYAUWxqGz84kTjREg5XLFwWjcRbWPLZ VhQ4/R45fAo/syFda+7bpYxoQJrkeUhueUj+yrdXo9wJCpXiuXW8J8wcdVUZaxJu +7fmwDWK45kuaw3M55aM2+4cDKmu2nsCGyfvgJEsqTaraAt6CbEbEo2e6YrH9BNc LlFYXd6vHWNGmBkrkhsHecZ+D8wmzU56vmiWY/2v4On0gLgzjAUBMAttS80SJiJ3 NAonu2DmQK8AHg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:57 2025 by rpki-client