This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json) Hash identifier: GmrYdO/rtsDt40G14XrgTK2B1NMa0AipPxAvs0dNeos= Subject key identifier: 53:53:D3:39:48:68:9D:BC:27:A2:65:9C:64:49:9B:98:11:A8:72:6D Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4 Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4 Certificate serial: 019B4E16A345956CF42F14DAF7AB5262E0E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft Manifest number: 174B Signing time: Wed 24 Dec 2025 02:01:04 +0000 Manifest this update: Wed 24 Dec 2025 02:01:04 +0000 Manifest next update: Thu 25 Dec 2025 02:01:04 +0000 Files and hashes: 1: BZsgeYjNsI-TrRFg5BP7kG-awrA.asa (hash: ufP7A3glS5C1ttJSNJgnaiCLyGOMe/t4RYLh1fKQTdc=) 2: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: 7RKRYgsDOQXkhKITb6UrdcXJYUqw8L8uURNH+P9dR9o=) 3: Wy1LhCK9kxP-C2UiE5R2K8JtffM.roa (hash: DYS7fnBaD9Os9bSnRtbqX/rsXfSVI5HQGNbOlzCHNGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:a3:45:95:6c:f4:2f:14:da:f7:ab:52:62:e0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4 Validity Not Before: Dec 24 02:01:04 2025 GMT Not After : Dec 25 02:01:04 2025 GMT Subject: CN=5353d33948689dbc27a2659c64499b9811a8726d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:81:31:4d:1b:a1:51:67:c3:24:86:0b:cf: 30:94:31:d1:c4:9c:58:7e:a4:c0:96:7c:60:3e:84: 74:ae:a9:ef:eb:30:f8:27:a7:7c:d5:19:ef:8b:4a: e9:53:a0:b9:22:ae:79:50:36:68:54:70:21:e7:df: 13:aa:47:a7:89:cd:07:dc:d2:90:48:11:cf:8d:fc: 78:92:7a:17:d6:f8:50:9b:2d:88:0c:e3:02:f9:48: 99:9a:56:cb:1d:6f:14:57:84:da:0f:c8:66:01:a1: 93:42:36:17:25:af:d3:28:e5:d9:65:a7:0e:7e:0e: 07:f2:32:c6:b5:01:9a:02:52:72:1b:00:03:11:65: 3b:91:4b:b9:96:21:8a:19:74:48:5e:8f:f7:51:d9: c7:ca:3d:8b:4e:8b:26:1b:4e:84:a6:0e:15:f0:54: 8a:96:5b:3b:81:19:c9:08:51:95:26:b6:58:17:63: d9:91:52:7b:7b:80:ea:ff:93:3b:77:b4:d4:0e:a9: 7e:2f:f3:b7:d3:ee:97:83:35:e9:3d:29:65:7d:0e: 08:f9:b2:97:90:b3:8c:5c:f1:0d:9b:bb:67:83:87: 3e:e4:b1:5a:c3:22:31:43:0f:fc:f0:35:a7:bc:a3: 56:74:d7:e8:cb:6c:c5:62:a9:c7:92:30:00:21:c2: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:53:D3:39:48:68:9D:BC:27:A2:65:9C:64:49:9B:98:11:A8:72:6D X509v3 Authority Key Identifier: keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f8:1b:e8:b6:b2:c0:18:76:ce:96:96:db:51:47:6b:9b:ce: 2e:4a:3c:62:34:ce:56:78:bc:52:22:26:ff:f2:af:61:13:b3: e7:2c:ec:55:06:c4:00:8b:f1:fd:f3:a3:77:44:1a:fb:7f:83: 93:a0:1a:c0:d9:2c:d9:b3:6f:ac:6b:e0:4c:c9:13:3b:c6:02: fd:8b:a1:45:e0:94:3b:7c:24:e6:34:0b:bd:47:ae:55:39:f9: d9:ea:af:cc:f6:b8:55:ce:67:99:0f:d1:37:c0:0c:03:7a:d2: 3f:80:1f:3e:64:65:ec:00:04:92:76:16:25:a5:57:a9:9f:b6: c8:fc:61:e3:03:1c:e3:a0:42:eb:b2:8f:d9:89:0d:5d:0f:12: e9:26:51:9d:be:6b:e2:7c:26:eb:f0:d2:6b:e4:f8:22:c1:02: ab:fd:71:c2:f4:c6:1c:96:a4:93:ff:8a:f5:b6:4e:d6:ec:f9: 66:e0:a9:ef:77:fa:d9:99:10:9e:02:3d:e3:1f:08:f7:70:2f: 65:79:5e:1c:e3:76:c1:97:6f:48:71:bb:51:fe:70:4b:66:b4: 13:43:3f:67:48:55:5c:b0:52:e1:67:98:a9:8b:04:08:86:c0: 42:4e:4c:f4:82:f6:c5:46:01:b8:02:a1:2d:e1:ab:93:94:e5: 4f:5e:f4:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFqNFlWz0LxTa96tSYuDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNGE3MDJmNjc3ZjMzNmQ5YjNlMzZjMzg0ZWJjOGM5ZmQ4 ODU5ZjQwHhcNMjUxMjI0MDIwMTA0WhcNMjUxMjI1MDIwMTA0WjAzMTEwLwYDVQQD Eyg1MzUzZDMzOTQ4Njg5ZGJjMjdhMjY1OWM2NDQ5OWI5ODExYTg3MjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0KBMU0boVFnwySGC88wlDHRxJxY fqTAlnxgPoR0rqnv6zD4J6d81Rnvi0rpU6C5Iq55UDZoVHAh598Tqkenic0H3NKQ SBHPjfx4knoX1vhQmy2IDOMC+UiZmlbLHW8UV4TaD8hmAaGTQjYXJa/TKOXZZacO fg4H8jLGtQGaAlJyGwADEWU7kUu5liGKGXRIXo/3UdnHyj2LTosmG06Epg4V8FSK lls7gRnJCFGVJrZYF2PZkVJ7e4Dq/5M7d7TUDql+L/O30+6XgzXpPSllfQ4I+bKX kLOMXPENm7tng4c+5LFawyIxQw/88DWnvKNWdNfoy2zFYqnHkjAAIcIwLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNT0zlIaJ28J6JlnGRJm5gRqHJtMB8GA1UdIwQY MBaAFApKcC9nfzNtmz42w4TryMn9iFn0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kYTViMzItMjBhNy00ZTBhLWI4MzQt ZWYzMTcxNTYxMWFhLzEvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kYTViMzItMjBhNy00ZTBhLWI4MzQtZWYzMTcxNTYxMWFh LzEvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvgb6Lay wBh2zpaW21FHa5vOLko8YjTOVni8UiIm//KvYROz5yzsVQbEAIvx/fOjd0Qa+3+D k6AawNks2bNvrGvgTMkTO8YC/YuhReCUO3wk5jQLvUeuVTn52eqvzPa4Vc5nmQ/R N8AMA3rSP4AfPmRl7AAEknYWJaVXqZ+2yPxh4wMc46BC67KP2YkNXQ8S6SZRnb5r 4nwm6/DSa+T4IsECq/1xwvTGHJakk/+K9bZO1uz5ZuCp73f62ZkQngI94x8I93Av ZXleHON2wZdvSHG7Uf5wS2a0E0M/Z0hVXLBS4WeYqYsECIbAQk5M9IL2xUYBuAKh LeGrk5TlT170VQ== -----END CERTIFICATE-----Generated at Wed Dec 24 08:45:21 2025 by rpki-client