This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json) Hash identifier: zv4F/XZ/IPiWGJx1NGEl7OvBQ96ZdRtXNNQdpOgLVm8= Subject key identifier: D3:22:91:04:27:9A:EA:BB:1D:98:A5:09:67:57:89:0C:C0:64:53:E1 Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34 Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34 Certificate serial: 019B341FBABDD350DD79FD969CE7A6B25335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft Manifest number: 13DC Signing time: Fri 19 Dec 2025 01:00:53 +0000 Manifest this update: Fri 19 Dec 2025 01:00:53 +0000 Manifest next update: Sat 20 Dec 2025 01:00:53 +0000 Files and hashes: 1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: oO73krn9DjOzboYSdewaqee28LHiGPxU0me2e+G/ZZU=) 2: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (hash: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:ba:bd:d3:50:dd:79:fd:96:9c:e7:a6:b2:53:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34 Validity Not Before: Dec 19 01:00:53 2025 GMT Not After : Dec 20 01:00:53 2025 GMT Subject: CN=d3229104279aeabb1d98a5096757890cc06453e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f1:8c:f3:a7:77:61:84:84:a9:f9:d3:70:4b: 99:59:2a:dd:60:dc:27:19:fd:81:55:b9:df:17:37: 3d:99:6c:86:6d:37:1c:f3:1d:a5:66:f6:d3:df:d7: e5:a7:11:ab:af:cb:63:ee:95:0e:d6:ae:eb:81:14: 45:4b:4e:81:c8:ea:22:3e:1d:d3:18:4e:16:40:8d: 67:36:2b:5f:d3:8c:58:2f:7f:6a:b5:26:ae:fb:bd: 08:96:61:38:f8:96:fb:c9:e9:1b:e6:bb:0b:72:d0: 3f:c7:ec:8c:2a:b6:38:4c:89:42:17:0c:df:f4:55: 13:38:83:43:dc:90:69:26:69:3c:2b:e3:8a:24:2b: fc:c0:bd:17:8e:7e:dc:58:07:ad:90:66:df:e3:50: 0c:8c:43:bf:5b:df:eb:6a:1a:3e:e0:ad:56:ad:05: 63:d0:9a:0d:fc:37:ba:45:f5:6a:fb:68:10:e5:08: d6:61:37:8d:93:1a:14:05:9d:cf:f7:da:49:db:57: e5:0d:4b:e2:2d:2c:78:20:cc:3e:93:f7:50:5b:f9: 9c:49:23:14:50:85:7a:92:ef:fa:4b:2a:3d:21:f9: 5a:db:8a:87:e4:d9:b6:37:14:40:ca:38:78:0d:02: a4:e0:2a:7e:42:f1:d9:4e:99:42:62:1e:29:91:62: bb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:22:91:04:27:9A:EA:BB:1D:98:A5:09:67:57:89:0C:C0:64:53:E1 X509v3 Authority Key Identifier: keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:52:04:4f:48:65:68:a2:a3:1f:fc:7a:a7:7e:b3:6e:02:7a: 78:42:1d:65:0a:f5:b6:52:1d:1f:4d:cf:6c:94:0d:5e:33:c0: ee:32:f0:27:cf:45:0b:3d:6a:e5:5a:7c:cd:d2:13:c2:e4:c5: 7d:ac:bd:5a:b6:40:8c:10:3b:35:90:81:1b:23:52:85:d1:fd: a7:17:c3:80:e6:3c:2b:e4:6d:d5:94:84:56:0c:94:b8:d8:c2: b8:95:6f:be:d6:88:a0:ac:e8:e9:00:09:44:6d:0b:0e:4c:cc: 14:db:5d:9b:2c:1e:e3:ad:a2:15:ec:de:50:4e:c8:55:86:34: 36:7d:0e:df:e0:4c:37:cb:64:8b:b1:63:4a:9a:88:3c:ce:77: 2d:d8:e6:25:57:7c:98:8e:77:b3:58:f5:14:a0:8a:29:ab:a2: 57:75:66:5c:cb:52:44:43:b4:4e:fc:f2:7f:9f:38:e6:c9:33: ae:9f:f8:be:39:39:06:d6:f5:55:a1:6f:40:2f:9d:4d:72:73: 45:a7:af:ac:18:39:a7:b0:15:09:3a:e0:b8:11:00:c7:8b:4d: f9:e6:db:e6:20:31:15:73:85:28:fd:53:98:11:f8:e1:1e:64: e6:d2:9a:be:f9:9a:ef:77:68:4a:8a:05:08:b3:f8:e7:5f:97: 0d:db:c2:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H7q901Ddef2WnOemslM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDkzZDYwYjUwNDI3ZGQ0MzE2ZWQ5NTA1YWQwOTllYjVh YzJlMzQwHhcNMjUxMjE5MDEwMDUzWhcNMjUxMjIwMDEwMDUzWjAzMTEwLwYDVQQD EyhkMzIyOTEwNDI3OWFlYWJiMWQ5OGE1MDk2NzU3ODkwY2MwNjQ1M2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvGM86d3YYSEqfnTcEuZWSrdYNwn Gf2BVbnfFzc9mWyGbTcc8x2lZvbT39flpxGrr8tj7pUO1q7rgRRFS06ByOoiPh3T GE4WQI1nNitf04xYL39qtSau+70IlmE4+Jb7yekb5rsLctA/x+yMKrY4TIlCFwzf 9FUTOIND3JBpJmk8K+OKJCv8wL0Xjn7cWAetkGbf41AMjEO/W9/raho+4K1WrQVj 0JoN/De6RfVq+2gQ5QjWYTeNkxoUBZ3P99pJ21flDUviLSx4IMw+k/dQW/mcSSMU UIV6ku/6Syo9Ifla24qH5Nm2NxRAyjh4DQKk4Cp+QvHZTplCYh4pkWK7NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMikQQnmuq7HZilCWdXiQzAZFPhMB8GA1UdIwQY MBaAFHJJPWC1BCfdQxbtlQWtCZ61rC40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83MWEzNDktYmFmNC00N2IzLWE5ZWQt YzY3MzBjOGU0NmFhLzEvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83MWEzNDktYmFmNC00N2IzLWE5ZWQtYzY3MzBjOGU0NmFh LzEvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1IET0hl aKKjH/x6p36zbgJ6eEIdZQr1tlIdH03PbJQNXjPA7jLwJ89FCz1q5Vp8zdITwuTF fay9WrZAjBA7NZCBGyNShdH9pxfDgOY8K+Rt1ZSEVgyUuNjCuJVvvtaIoKzo6QAJ RG0LDkzMFNtdmywe462iFezeUE7IVYY0Nn0O3+BMN8tki7FjSpqIPM53LdjmJVd8 mI53s1j1FKCKKauiV3VmXMtSREO0Tvzyf5845skzrp/4vjk5Btb1VaFvQC+dTXJz RaevrBg5p7AVCTrguBEAx4tN+ebb5iAxFXOFKP1TmBH44R5k5tKavvma73doSooF CLP451+XDdvCJw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:29:04 2025 by rpki-client