This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json) Hash identifier: bcrNHU3wmiQpJcR2JxdM5RB5WLJ1ogJVO0qM1z6PKbY= Subject key identifier: F6:3F:A0:6E:5B:29:B9:CE:33:EB:5E:7E:EF:37:CA:5A:5C:4C:63:41 Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09 Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809 Certificate serial: 019B4ADEDA45C4264F3C4AD6BD63E0A2293B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft Manifest number: 16D0 Signing time: Tue 23 Dec 2025 11:01:17 +0000 Manifest this update: Tue 23 Dec 2025 11:01:17 +0000 Manifest next update: Wed 24 Dec 2025 11:01:17 +0000 Files and hashes: 1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=) 2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: sMqwzL3AiidjLCywSbPEgxgIAWp/Aj8OjFPOjqYGnTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:da:45:c4:26:4f:3c:4a:d6:bd:63:e0:a2:29:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809 Validity Not Before: Dec 23 11:01:17 2025 GMT Not After : Dec 24 11:01:17 2025 GMT Subject: CN=f63fa06e5b29b9ce33eb5e7eef37ca5a5c4c6341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:09:19:a2:d6:cf:46:79:33:42:9f:00:b3: 58:37:3f:0b:52:ea:97:e5:82:93:c2:8e:cc:6e:dc: 73:9d:7c:14:83:89:04:5f:b8:17:98:17:ae:85:c6: ad:a5:23:93:4a:98:7a:f4:ae:3d:8e:c6:b1:06:1c: 1a:6b:3e:85:52:6a:da:d1:07:04:a5:70:2d:89:a0: 17:14:d5:87:6f:79:b7:81:ae:88:66:98:ee:88:40: b2:5d:9d:7e:e4:16:b4:a8:e5:ba:43:85:f9:0e:27: 85:7f:03:ba:3d:8d:ff:18:ce:1d:4e:52:9a:5f:05: 96:04:93:f9:b5:bb:56:76:c1:24:22:52:72:50:02: af:b5:87:a0:e2:7d:d1:a5:79:f7:82:42:81:d5:db: fe:f3:0d:90:73:d5:70:fc:16:d1:ff:b5:5f:19:94: 12:0c:7a:1b:95:10:c7:fc:65:7d:da:0b:bc:9a:b1: ee:53:ed:b5:ad:46:88:c5:b3:27:d1:93:9a:a4:e7: d3:ac:e5:97:83:b0:28:c9:c1:86:51:92:f8:28:23: de:a2:14:3a:c2:e1:9d:50:08:de:05:19:65:64:b4: e0:04:d2:4e:9a:f3:60:ee:8d:8e:0f:2f:40:1f:46: 42:29:6c:6f:a9:c0:1b:fa:d9:8c:b8:1b:89:8a:b7: 57:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3F:A0:6E:5B:29:B9:CE:33:EB:5E:7E:EF:37:CA:5A:5C:4C:63:41 X509v3 Authority Key Identifier: keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:50:6c:33:c2:85:eb:9b:4b:28:80:a0:74:41:de:88:57:cd: 04:57:b2:8a:46:51:8b:5f:5d:7d:79:18:37:c5:41:a1:26:39: 78:e9:ab:b5:33:c1:5e:76:29:dc:d3:f9:21:76:d9:bc:c7:d0: 9b:18:2b:c0:ac:0e:28:cd:5c:4d:d5:17:e1:7a:87:8b:37:fb: 72:37:9d:0d:26:7f:dc:4a:71:75:5c:9a:f0:39:e5:f4:65:e3: 70:5e:ff:1c:51:50:04:a0:ac:cb:b0:35:ea:b4:7b:7f:cc:7a: 25:0e:66:24:4d:0b:23:f9:f9:d6:52:81:f7:a5:28:0a:bc:17: 2e:b9:ed:31:39:46:e9:0a:f4:e7:c3:ca:9b:c1:45:50:56:ca: dc:31:e6:12:2c:03:23:ff:b5:5b:35:c6:b6:f8:33:9d:3d:54: 81:cd:76:f1:87:73:f4:c2:89:2d:5e:4a:90:70:3a:95:55:93: df:d1:53:18:73:96:31:61:88:4a:9c:a3:49:f4:c2:4b:f1:d2: a7:ba:a9:46:7e:0c:ee:e6:ea:78:a5:22:aa:af:4a:db:83:4e: fc:d0:00:59:41:0c:64:ca:86:b6:a8:4c:d5:0f:25:6f:a3:b4: 52:96:34:46:2b:f9:15:62:74:e4:8e:2d:fa:47:31:17:32:08: da:eb:f8:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3tpFxCZPPErWvWPgoik7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDI2YzNkMTFjOWYyNGFjYzBhMWQ4NDU0Y2JjOTYwNDg2 NWE4MDkwHhcNMjUxMjIzMTEwMTE3WhcNMjUxMjI0MTEwMTE3WjAzMTEwLwYDVQQD EyhmNjNmYTA2ZTViMjliOWNlMzNlYjVlN2VlZjM3Y2E1YTVjNGM2MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qkJGaLWz0Z5M0KfALNYNz8LUuqX 5YKTwo7MbtxznXwUg4kEX7gXmBeuhcatpSOTSph69K49jsaxBhwaaz6FUmra0QcE pXAtiaAXFNWHb3m3ga6IZpjuiECyXZ1+5Ba0qOW6Q4X5DieFfwO6PY3/GM4dTlKa XwWWBJP5tbtWdsEkIlJyUAKvtYeg4n3RpXn3gkKB1dv+8w2Qc9Vw/BbR/7VfGZQS DHoblRDH/GV92gu8mrHuU+21rUaIxbMn0ZOapOfTrOWXg7AoycGGUZL4KCPeohQ6 wuGdUAjeBRllZLTgBNJOmvNg7o2ODy9AH0ZCKWxvqcAb+tmMuBuJirdXVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPY/oG5bKbnOM+tefu83ylpcTGNBMB8GA1UdIwQY MBaAFHJCbD0RyfJKzAodhFTLyWBIZagJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYt YmU5MGIwZmQxZjc4LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYtYmU5MGIwZmQxZjc4 LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFBsM8KF 65tLKICgdEHeiFfNBFeyikZRi19dfXkYN8VBoSY5eOmrtTPBXnYp3NP5IXbZvMfQ mxgrwKwOKM1cTdUX4XqHizf7cjedDSZ/3EpxdVya8Dnl9GXjcF7/HFFQBKCsy7A1 6rR7f8x6JQ5mJE0LI/n51lKB96UoCrwXLrntMTlG6Qr058PKm8FFUFbK3DHmEiwD I/+1WzXGtvgznT1Ugc128Ydz9MKJLV5KkHA6lVWT39FTGHOWMWGISpyjSfTCS/HS p7qpRn4M7ubqeKUiqq9K24NO/NAAWUEMZMqGtqhM1Q8lb6O0UpY0Riv5FWJ05I4t +kcxFzII2uv4GQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:31:13 2025 by rpki-client