This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json) Hash identifier: kwhFYib1/aofNVjdsArYejZUAPTziLGxuhUo6/g20VI= Subject key identifier: 52:9C:3E:3A:41:03:11:32:AA:CB:90:95:8D:AB:DC:B5:BA:BD:1D:01 Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63 Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663 Certificate serial: 019B62AFD368C43BCE125DC9F8F9AFCA7ADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft Manifest number: 1196 Signing time: Sun 28 Dec 2025 02:00:48 +0000 Manifest this update: Sun 28 Dec 2025 02:00:48 +0000 Manifest next update: Mon 29 Dec 2025 02:00:48 +0000 Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: QjVFQ0kRdQ0aJ74GGQjMPVDSTMRa8x2g+WH2dWEGako=) 2: p9dm9G2iCzsw8k2RDOLA-aoAnro.roa (hash: RaSFGXIJc/dpz2m+EsrfJ2ccZ5vMg1R8ZkPmnS2txJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:af:d3:68:c4:3b:ce:12:5d:c9:f8:f9:af:ca:7a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663 Validity Not Before: Dec 28 02:00:48 2025 GMT Not After : Dec 29 02:00:48 2025 GMT Subject: CN=529c3e3a41031132aacb90958dabdcb5babd1d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f3:98:ca:8a:99:37:34:2b:c7:ef:c8:ad:88: 11:b0:05:15:4e:ff:04:f2:45:44:c9:eb:11:bc:b9: 2f:a3:84:8f:5e:15:72:3f:b1:c3:82:bd:b6:7f:2c: 65:aa:f5:56:22:a7:f5:60:b0:15:75:af:11:9a:b7: 7f:3f:d6:fa:ed:d6:d0:16:dc:67:9f:b3:f8:56:11: 88:68:bb:6a:9e:d9:7e:21:0c:8b:51:1b:69:26:f5: 50:99:eb:25:a1:55:75:43:23:a7:59:b8:dd:ff:c8: ad:a1:58:14:df:47:65:0f:48:72:ee:51:8c:c0:e2: e4:44:7b:1a:a6:5c:76:36:15:d4:d9:c0:47:09:31: 49:2d:9e:42:30:0b:e2:66:a9:99:1d:76:c1:cb:90: ea:07:d6:eb:4f:8c:00:51:4c:3e:7b:39:ef:b8:03: 82:eb:6a:02:b5:3b:39:95:b5:c5:c9:96:6c:89:15: e2:c0:1a:85:c8:89:39:6a:5c:21:61:00:94:7a:0a: 2c:0a:49:50:22:12:9e:20:06:06:37:12:5b:96:1b: 08:1b:be:fb:f5:0f:8f:67:9a:d1:73:30:f5:47:a6: 2a:79:02:eb:48:c0:06:10:c6:07:5a:1f:41:1e:0d: 82:c7:c2:41:d0:95:c7:60:0e:84:77:f3:a3:cf:69: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9C:3E:3A:41:03:11:32:AA:CB:90:95:8D:AB:DC:B5:BA:BD:1D:01 X509v3 Authority Key Identifier: keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e5:fe:ee:41:d2:fe:1d:1b:34:d4:66:dd:0d:b5:19:7f:af: 75:35:97:53:88:58:a7:93:b4:4b:82:ba:6d:9a:bb:1f:53:bf: 22:9e:74:b3:bd:b6:48:cb:75:a3:74:e2:2a:82:38:db:e8:4d: e8:a1:a5:98:de:31:ea:93:fc:6b:61:1a:86:21:e9:8f:67:44: cf:14:a3:e1:a7:08:28:39:10:53:a1:55:93:e9:98:dc:23:2c: 53:ea:b9:ad:c6:18:16:2e:af:68:5e:63:65:1f:cd:f2:0d:52: e0:bc:36:02:dd:89:57:3f:bb:c8:4f:42:64:b1:83:59:28:b4: c9:5b:3d:70:3b:5b:d4:34:8d:45:5e:bd:5d:94:dd:d0:86:26: 58:90:ab:8e:2f:74:99:f2:f3:72:d1:9d:72:3a:52:08:33:81: da:cb:cd:1f:e9:32:94:97:8e:8e:b9:4a:96:de:f9:e2:db:83: 22:0d:e2:19:02:dd:de:02:d8:a9:8c:76:8e:89:a6:91:e7:8a: b7:65:ba:4a:c2:46:83:ef:13:bd:5e:8e:5e:50:7e:57:f0:fd: 6f:24:42:18:7d:96:76:37:a7:41:43:37:99:8f:57:7b:04:e5: 73:dd:55:c2:19:a2:2a:89:13:ee:5c:c0:77:42:9f:a2:6a:9e: 39:fb:6f:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtir9NoxDvOEl3J+PmvynreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzI4MmZlM2YzZDdkNDZiZDFiMWNiNzdiMmZlYzM3ZGVl MDA2NjMwHhcNMjUxMjI4MDIwMDQ4WhcNMjUxMjI5MDIwMDQ4WjAzMTEwLwYDVQQD Eyg1MjljM2UzYTQxMDMxMTMyYWFjYjkwOTU4ZGFiZGNiNWJhYmQxZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4POYyoqZNzQrx+/IrYgRsAUVTv8E 8kVEyesRvLkvo4SPXhVyP7HDgr22fyxlqvVWIqf1YLAVda8Rmrd/P9b67dbQFtxn n7P4VhGIaLtqntl+IQyLURtpJvVQmesloVV1QyOnWbjd/8itoVgU30dlD0hy7lGM wOLkRHsaplx2NhXU2cBHCTFJLZ5CMAviZqmZHXbBy5DqB9brT4wAUUw+eznvuAOC 62oCtTs5lbXFyZZsiRXiwBqFyIk5alwhYQCUegosCklQIhKeIAYGNxJblhsIG777 9Q+PZ5rRczD1R6YqeQLrSMAGEMYHWh9BHg2Cx8JB0JXHYA6Ed/Ojz2mYgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKcPjpBAxEyqsuQlY2r3LW6vR0BMB8GA1UdIwQY MBaAFAkygv4/PX1GvRsct3sv7Dfe4AZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mYTcxOTUtYTBmZS00Zjg0LTgxM2Mt MmE3NzZmNzg3YTFjLzEvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mYTcxOTUtYTBmZS00Zjg0LTgxM2MtMmE3NzZmNzg3YTFj LzEvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOX+7kHS /h0bNNRm3Q21GX+vdTWXU4hYp5O0S4K6bZq7H1O/Ip50s722SMt1o3TiKoI42+hN 6KGlmN4x6pP8a2EahiHpj2dEzxSj4acIKDkQU6FVk+mY3CMsU+q5rcYYFi6vaF5j ZR/N8g1S4Lw2At2JVz+7yE9CZLGDWSi0yVs9cDtb1DSNRV69XZTd0IYmWJCrji90 mfLzctGdcjpSCDOB2svNH+kylJeOjrlKlt754tuDIg3iGQLd3gLYqYx2jommkeeK t2W6SsJGg+8TvV6OXlB+V/D9byRCGH2WdjenQUM3mY9XewTlc91VwhmiKokT7lzA d0KfomqeOftv6Q== -----END CERTIFICATE-----Generated at Sun Dec 28 08:09:08 2025 by rpki-client