This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json) Hash identifier: YNvj5Ve6wObC16maT06pdriu1zZNz4uQa/wYzdp0mFs= Subject key identifier: F8:5F:FE:42:99:B4:E5:94:E9:93:E1:7D:DE:0B:01:61:70:5B:DA:72 Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61 Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61 Certificate serial: 019B52CF231D0FB9FB4B16E8AD1CC1B19D8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft Manifest number: 179C Signing time: Thu 25 Dec 2025 00:01:05 +0000 Manifest this update: Thu 25 Dec 2025 00:01:05 +0000 Manifest next update: Fri 26 Dec 2025 00:01:05 +0000 Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: z9x2x5SB/6wP+tDN3U2P46stbORFg8ImsfSDXxP95ac=) 2: OZJAkQeWPGiu0MMG4YGewg2oUhI.roa (hash: kvD4Jh7HATnFEhZqQFNvhTQZ3Ir8ynHCKw0hu3/CQds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:23:1d:0f:b9:fb:4b:16:e8:ad:1c:c1:b1:9d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61 Validity Not Before: Dec 25 00:01:05 2025 GMT Not After : Dec 26 00:01:05 2025 GMT Subject: CN=f85ffe4299b4e594e993e17dde0b0161705bda72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:b0:ba:0e:8f:2f:33:9b:49:0c:3f:37:f9: 7c:5a:2a:d8:70:36:b1:6e:b6:f8:0b:05:51:44:42: 6c:5e:ab:ee:88:a2:3e:02:82:4d:e7:b8:e2:8d:b8: eb:69:5f:30:5a:a7:a1:5f:ed:b4:5c:fd:88:46:32: 3b:60:3f:6e:5d:64:24:69:51:0a:07:eb:43:a8:41: 64:4d:f0:72:e3:97:2a:60:a8:6a:e1:16:f4:0d:48: 86:b9:89:c2:0b:63:55:9e:00:04:78:6d:e9:0d:ba: f0:63:1b:82:09:e9:19:00:9d:3c:c6:18:c8:c6:2e: d8:8b:22:87:d8:9e:65:37:e9:2b:7b:b3:2e:a6:e6: 03:0e:4c:0a:6e:d1:cf:12:ce:9d:0b:33:31:86:d0: e3:ea:ff:a8:d9:fc:85:86:f7:9b:f8:29:ad:00:47: e0:17:92:f1:31:a5:9f:c4:8b:b5:59:16:7c:85:50: 38:91:88:0a:82:c3:36:ff:a6:f3:fa:bb:4d:ce:a5: b1:d8:b7:22:58:47:00:dd:cf:2f:45:05:09:05:a8: 97:51:2a:9e:c1:7a:09:be:9b:99:27:bf:9a:40:00: 30:66:6b:78:bd:7f:da:49:99:82:5a:85:51:8a:0d: be:79:ef:98:02:4c:dc:7e:5c:e1:84:0a:e6:82:9e: 90:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5F:FE:42:99:B4:E5:94:E9:93:E1:7D:DE:0B:01:61:70:5B:DA:72 X509v3 Authority Key Identifier: keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:bc:ff:56:e4:5d:5e:1a:78:c5:bc:07:98:7e:73:b0:4e:4e: 58:18:08:97:57:74:01:ae:e7:91:3f:5c:b9:41:f4:94:23:bc: 0d:91:de:84:94:49:e2:5f:02:f7:58:15:80:40:0d:3f:c4:34: 19:cc:cf:04:ab:a1:08:b8:a9:4f:49:80:9e:03:2d:9a:c9:d7: 15:52:8c:8c:00:63:12:30:90:19:18:87:62:3f:f7:05:f3:71: e6:1d:c5:86:1a:45:9b:0a:04:5a:01:54:68:0b:31:93:58:5e: 8a:74:fd:5d:a3:b1:bf:ee:0a:49:68:f2:7a:bb:ff:cb:0a:7d: 10:8d:f8:bb:02:ce:f6:26:39:ca:89:01:72:05:d3:da:b3:9e: 29:53:f8:8c:92:4a:e4:9d:fc:14:f1:c2:26:db:e0:6e:e3:18: 16:aa:d4:8e:e6:af:18:1f:64:35:af:6e:21:20:21:47:b3:bb: c3:4c:fe:8d:ec:fe:81:b7:ca:96:bd:45:41:38:89:51:1d:b5: 3a:00:28:a4:ad:a9:95:58:3d:db:b3:02:75:d6:f4:01:87:ef: 63:90:c7:e3:b0:68:5c:1e:6e:20:3d:c6:eb:88:05:f8:0e:ff: a3:34:af:f6:5f:e2:ec:bd:34:3f:d2:6d:1d:ec:06:61:aa:e3: 47:e6:31:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzyMdD7n7SxborRzBsZ2MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNGE4NjFkN2MxNGI0Y2E1ZTZkMWM3ZDYwYWFlZWIzMmVh OGVmNjEwHhcNMjUxMjI1MDAwMTA1WhcNMjUxMjI2MDAwMTA1WjAzMTEwLwYDVQQD EyhmODVmZmU0Mjk5YjRlNTk0ZTk5M2UxN2RkZTBiMDE2MTcwNWJkYTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNawug6PLzObSQw/N/l8WirYcDax brb4CwVRREJsXqvuiKI+AoJN57jijbjraV8wWqehX+20XP2IRjI7YD9uXWQkaVEK B+tDqEFkTfBy45cqYKhq4Rb0DUiGuYnCC2NVngAEeG3pDbrwYxuCCekZAJ08xhjI xi7YiyKH2J5lN+kre7MupuYDDkwKbtHPEs6dCzMxhtDj6v+o2fyFhveb+CmtAEfg F5LxMaWfxIu1WRZ8hVA4kYgKgsM2/6bz+rtNzqWx2LciWEcA3c8vRQUJBaiXUSqe wXoJvpuZJ7+aQAAwZmt4vX/aSZmCWoVRig2+ee+YAkzcflzhhArmgp6QqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhf/kKZtOWU6ZPhfd4LAWFwW9pyMB8GA1UdIwQY MBaAFApKhh18FLTKXm0cfWCq7rMuqO9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2It OTRkYmYzZmQwZTJkLzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2ItOTRkYmYzZmQwZTJk LzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrz/VuRd Xhp4xbwHmH5zsE5OWBgIl1d0Aa7nkT9cuUH0lCO8DZHehJRJ4l8C91gVgEANP8Q0 GczPBKuhCLipT0mAngMtmsnXFVKMjABjEjCQGRiHYj/3BfNx5h3FhhpFmwoEWgFU aAsxk1heinT9XaOxv+4KSWjyerv/ywp9EI34uwLO9iY5yokBcgXT2rOeKVP4jJJK 5J38FPHCJtvgbuMYFqrUjuavGB9kNa9uISAhR7O7w0z+jez+gbfKlr1FQTiJUR21 OgAopK2plVg927MCddb0AYfvY5DH47BoXB5uID3G64gF+A7/ozSv9l/i7L00P9Jt HewGYarjR+YxUA== -----END CERTIFICATE-----Generated at Thu Dec 25 09:14:35 2025 by rpki-client