This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json) Hash identifier: cyvZ68UjtuIrZOhrwSmaNsvt8QChB/d+CNgAC7qALEc= Subject key identifier: 3A:45:19:DC:C1:AB:52:FA:90:25:FA:CB:B6:43:EF:87:80:52:EF:DF Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5 Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5 Certificate serial: 019B3D9117DEDD0A03E0277D066A1FB6A426 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft Manifest number: 16CC Signing time: Sat 20 Dec 2025 21:01:17 +0000 Manifest this update: Sat 20 Dec 2025 21:01:17 +0000 Manifest next update: Sun 21 Dec 2025 21:01:17 +0000 Files and hashes: 1: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: SBk6gvDAk+qsFNhwKhsmLLJog8t5LKsC1L/e31Dn8OE=) 2: hML-Tag6b9qlpG18VlhLUkClkKg.roa (hash: LEX7BjdOFqa/vQo+qGyu7UsdS3xFcEis6fY7DeQDRek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:17:de:dd:0a:03:e0:27:7d:06:6a:1f:b6:a4:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5 Validity Not Before: Dec 20 21:01:17 2025 GMT Not After : Dec 21 21:01:17 2025 GMT Subject: CN=3a4519dcc1ab52fa9025facbb643ef878052efdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:38:db:92:a6:5d:80:58:c5:ef:33:4c:85: d3:92:d7:42:6f:da:71:38:ab:5f:0f:2c:af:b1:2e: 12:79:47:71:f1:1e:f2:8e:b6:e1:35:40:24:fd:01: 35:9c:71:ef:65:f6:a7:43:67:d0:ba:25:03:6c:45: d9:d5:24:91:84:f7:93:b0:42:6a:ec:0f:87:ee:fb: e5:56:5e:c9:53:da:3a:e7:b3:4d:9f:c1:c8:92:0a: 55:6b:46:d4:9f:65:ee:29:f0:30:49:ce:84:bd:22: 01:3f:e5:60:2b:9b:bf:c0:56:4e:6e:54:67:74:47: d1:82:ca:86:79:69:d3:f7:61:de:bb:af:10:75:12: 35:d0:45:58:9d:fd:88:f1:ce:06:05:a6:fb:d9:44: 35:37:88:d0:0f:63:60:b5:f0:da:0f:e7:79:2d:3d: 44:6c:a5:d8:21:7c:0b:12:4c:05:d3:49:e2:18:77: 50:1a:fc:3b:81:8d:de:3a:0b:14:a1:26:02:2e:df: ec:d7:6b:08:16:7c:ee:d7:8f:0d:1f:e7:60:de:e5: d4:11:f1:eb:77:79:d7:f9:41:86:15:fb:1c:43:0c: 5e:73:ab:4e:27:6e:60:46:89:73:60:82:9c:d0:26: 62:38:6e:48:55:f9:62:0a:14:3e:d2:d6:02:f2:85: 41:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:45:19:DC:C1:AB:52:FA:90:25:FA:CB:B6:43:EF:87:80:52:EF:DF X509v3 Authority Key Identifier: keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:52:da:6c:ba:cd:46:04:25:59:a9:16:bf:44:d7:0c:ce:d0: 6a:97:22:6a:0e:35:af:e0:1d:b3:60:08:07:a0:c1:16:d0:44: 22:ef:30:f9:0b:f2:78:bd:cd:c3:5f:02:bc:74:84:79:36:bb: c9:ba:d6:ed:2d:00:49:8d:03:d7:98:e7:91:3c:be:35:d2:89: f9:33:6c:9b:31:91:c8:35:e5:00:d4:6d:a7:84:6c:62:86:03: 8f:ea:c7:9a:b1:18:14:b3:65:66:ae:5d:f0:86:e0:da:9f:a0: 4d:92:d2:8e:b0:52:a2:d9:fb:0d:9a:b7:72:a7:09:e8:db:5b: 25:db:ff:9d:3b:ed:a4:7d:19:bb:11:20:7c:c0:35:73:49:85: be:e3:72:8c:30:16:31:55:c4:b1:bd:12:22:07:ae:55:a4:28: 52:a6:32:53:2b:98:79:f3:2c:04:75:19:6f:e6:3f:00:34:4c: 67:48:3b:2a:3a:43:7c:f1:37:95:4c:c0:5e:80:d6:b1:8c:82: 79:f8:d3:7c:53:c3:f5:bd:f4:db:da:3f:77:ed:7e:b7:6e:d8: fc:19:88:63:d8:20:a6:3f:99:a2:8b:7b:b3:33:94:96:7e:f9: c3:57:7e:e7:b5:d3:16:31:10:8a:1e:db:a0:a0:6c:cf:b2:f1: 07:0f:49:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRfe3QoD4Cd9BmoftqQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDgxZGQ5MGQxMDBiZDViYzIzYzA0YjEwYzBhODQzMWNj OWE1YjUwHhcNMjUxMjIwMjEwMTE3WhcNMjUxMjIxMjEwMTE3WjAzMTEwLwYDVQQD EygzYTQ1MTlkY2MxYWI1MmZhOTAyNWZhY2JiNjQzZWY4NzgwNTJlZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXI425KmXYBYxe8zTIXTktdCb9px OKtfDyyvsS4SeUdx8R7yjrbhNUAk/QE1nHHvZfanQ2fQuiUDbEXZ1SSRhPeTsEJq 7A+H7vvlVl7JU9o657NNn8HIkgpVa0bUn2XuKfAwSc6EvSIBP+VgK5u/wFZOblRn dEfRgsqGeWnT92Heu68QdRI10EVYnf2I8c4GBab72UQ1N4jQD2NgtfDaD+d5LT1E bKXYIXwLEkwF00niGHdQGvw7gY3eOgsUoSYCLt/s12sIFnzu148NH+dg3uXUEfHr d3nX+UGGFfscQwxec6tOJ25gRolzYIKc0CZiOG5IVfliChQ+0tYC8oVBWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpFGdzBq1L6kCX6y7ZD74eAUu/fMB8GA1UdIwQY MBaAFHJIHdkNEAvVvCPASxDAqEMcyaW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2Qt ZjE5OTBiMGM3MDVhLzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2QtZjE5OTBiMGM3MDVh LzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1LabLrN RgQlWakWv0TXDM7Qapciag41r+Ads2AIB6DBFtBEIu8w+QvyeL3Nw18CvHSEeTa7 ybrW7S0ASY0D15jnkTy+NdKJ+TNsmzGRyDXlANRtp4RsYoYDj+rHmrEYFLNlZq5d 8Ibg2p+gTZLSjrBSotn7DZq3cqcJ6NtbJdv/nTvtpH0ZuxEgfMA1c0mFvuNyjDAW MVXEsb0SIgeuVaQoUqYyUyuYefMsBHUZb+Y/ADRMZ0g7KjpDfPE3lUzAXoDWsYyC efjTfFPD9b3029o/d+1+t27Y/BmIY9ggpj+Zoot7szOUln75w1d+57XTFjEQih7b oKBsz7LxBw9JlQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:45:16 2025 by rpki-client