This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json) Hash identifier: /TxJsc37Oxq6pTcTi79LT6mIiRzg4fI18DFtRhi6gBc= Subject key identifier: A5:D1:FC:E8:97:A8:F3:C3:5C:84:24:16:FE:2B:7A:AC:FC:1E:7D:8E Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b Certificate serial: 019B2F9E38AA2E99C8428CBA5DF83F04B27F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft Manifest number: 1620 Signing time: Thu 18 Dec 2025 04:00:56 +0000 Manifest this update: Thu 18 Dec 2025 04:00:56 +0000 Manifest next update: Fri 19 Dec 2025 04:00:56 +0000 Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: 7yDYBfyK7X4E0V5s9x30JiuAPRiUneBsTRFbxhcxCag=) 2: OH2h9N_hyzRLLEO1xxz2pS01OI8.roa (hash: KX0d4zyKelEiSPA5pJcqywoIBRSpP8vuqYcvjW39t40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:38:aa:2e:99:c8:42:8c:ba:5d:f8:3f:04:b2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b Validity Not Before: Dec 18 04:00:56 2025 GMT Not After : Dec 19 04:00:56 2025 GMT Subject: CN=a5d1fce897a8f3c35c842416fe2b7aacfc1e7d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:9f:41:6b:5e:57:dd:41:7f:97:d4:b1:a0: 8f:93:e6:4c:3d:f0:54:8b:1f:56:8b:a5:87:e7:78: 64:87:08:08:09:de:a1:a6:7b:4b:8e:3c:05:b3:28: af:f7:8a:0c:28:e5:04:58:3c:77:17:e1:18:be:f6: 0b:2f:33:b7:2a:71:33:9e:f0:a0:20:57:72:b4:fa: dc:ee:26:7c:85:48:2b:3a:74:23:01:25:61:da:67: 64:62:70:9e:9f:31:5d:f4:d3:e6:99:cb:db:ad:f1: 80:9b:67:64:52:78:8d:aa:46:4b:c9:03:e0:f2:67: 14:8a:cc:61:e8:76:03:bb:ec:23:a0:e0:c7:ef:6d: 0f:7a:47:ea:ad:30:e8:69:53:02:ed:7d:f3:c7:b8: d5:2b:07:f2:4f:bb:a5:62:83:92:f2:85:c3:5c:7e: ea:b0:79:b6:5e:63:ec:35:69:33:89:46:6e:d2:f0: 55:e9:71:24:66:fd:79:06:e4:81:00:73:7e:a0:80: 8f:21:76:ed:1a:55:9f:8d:ca:83:ba:1d:e1:ed:fe: c0:6b:2f:c2:5a:a8:65:4c:ad:ac:99:4a:f9:02:2e: 64:fc:40:39:4e:de:c8:9c:ad:06:26:17:d3:1f:bf: e0:31:dd:bf:a7:01:7c:0b:b4:1c:59:0d:00:dc:c5: 3d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D1:FC:E8:97:A8:F3:C3:5C:84:24:16:FE:2B:7A:AC:FC:1E:7D:8E X509v3 Authority Key Identifier: keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:60:c8:19:b7:b9:b9:aa:ee:b8:0c:bd:e4:bb:be:79:df:ff: 1e:fc:01:e5:8c:2b:3e:c9:2f:a8:83:f3:c1:c1:55:0e:bf:c1: ff:31:d8:5d:90:70:04:0a:2f:ce:d5:72:2f:e2:21:e1:9f:73: bd:c3:0f:cd:f1:28:be:23:66:f7:44:af:99:cb:a8:87:ec:20: 05:52:ba:00:7b:53:b3:a2:25:a1:86:b3:7d:6f:26:de:6c:63: ea:74:c2:2d:ad:f4:73:a6:55:0d:b1:b3:61:1b:67:7c:89:f2: a5:a5:23:fa:59:70:a1:48:c0:cc:ad:d2:5e:a0:55:99:ea:8c: c1:f2:2b:25:a7:e3:5a:c6:f8:47:ef:6e:93:b5:e1:d6:15:df: b5:cc:8a:88:e7:5e:86:78:bb:6c:4f:b8:43:a6:8c:e6:0c:cb: f6:d0:08:db:01:8b:c3:9b:fb:5e:6a:fc:7a:7a:86:37:53:4f: 21:6a:53:8c:2c:05:5c:24:ab:6f:e3:5a:56:d6:bc:c4:92:e9: 34:a9:6c:01:af:35:26:93:ca:8d:42:64:bd:2d:bd:fd:98:04: ac:e3:f0:04:64:8f:ce:c4:c4:d2:43:00:e6:ca:61:4f:47:80: 1e:3d:2d:b0:14:d8:98:87:16:cd:1a:3f:70:9c:1c:f5:73:a7: c5:51:c9:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnjiqLpnIQoy6Xfg/BLJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDJhZTZlOTYxODBmMDNiN2NhNmQ5NzQyNzUxNmU0YzA3 ZjZlMmIwHhcNMjUxMjE4MDQwMDU2WhcNMjUxMjE5MDQwMDU2WjAzMTEwLwYDVQQD EyhhNWQxZmNlODk3YThmM2MzNWM4NDI0MTZmZTJiN2FhY2ZjMWU3ZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXmfQWteV91Bf5fUsaCPk+ZMPfBU ix9Wi6WH53hkhwgICd6hpntLjjwFsyiv94oMKOUEWDx3F+EYvvYLLzO3KnEznvCg IFdytPrc7iZ8hUgrOnQjASVh2mdkYnCenzFd9NPmmcvbrfGAm2dkUniNqkZLyQPg 8mcUisxh6HYDu+wjoODH720PekfqrTDoaVMC7X3zx7jVKwfyT7ulYoOS8oXDXH7q sHm2XmPsNWkziUZu0vBV6XEkZv15BuSBAHN+oICPIXbtGlWfjcqDuh3h7f7Aay/C WqhlTK2smUr5Ai5k/EA5Tt7InK0GJhfTH7/gMd2/pwF8C7QcWQ0A3MU9kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXR/OiXqPPDXIQkFv4reqz8Hn2OMB8GA1UdIwQY MBaAFApCrm6WGA8Dt8ptl0J1FuTAf24rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEt YjQxOTJhYzYzOGM5LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEtYjQxOTJhYzYzOGM5 LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2DIGbe5 uaruuAy95Lu+ed//HvwB5YwrPskvqIPzwcFVDr/B/zHYXZBwBAovztVyL+Ih4Z9z vcMPzfEoviNm90Svmcuoh+wgBVK6AHtTs6IloYazfW8m3mxj6nTCLa30c6ZVDbGz YRtnfInypaUj+llwoUjAzK3SXqBVmeqMwfIrJafjWsb4R+9uk7Xh1hXftcyKiOde hni7bE+4Q6aM5gzL9tAI2wGLw5v7Xmr8enqGN1NPIWpTjCwFXCSrb+NaVta8xJLp NKlsAa81JpPKjUJkvS29/ZgErOPwBGSPzsTE0kMA5sphT0eAHj0tsBTYmIcWzRo/ cJwc9XOnxVHJ1w== -----END CERTIFICATE-----Generated at Thu Dec 18 12:48:09 2025 by rpki-client