This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft File: ckaDTR5JovonRtw_ZtcMItUPRvk.mft (raw, json) Hash identifier: 9JwFzmwjjVfC+ljEdD2ncXGWiJkERNb8kExTnqj8+co= Subject key identifier: E9:94:92:B4:EE:96:28:3C:DE:9E:7D:7E:A9:BE:93:7C:F8:1D:D5:18 Authority key identifier: 72:46:83:4D:1E:49:A2:FA:27:46:DC:3F:66:D7:0C:22:D5:0F:46:F9 Certificate issuer: /CN=7246834d1e49a2fa2746dc3f66d70c22d50f46f9 Certificate serial: 019B367BDE8137D4CABD8D496EFD422FEBBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft Manifest number: 75 Signing time: Fri 19 Dec 2025 12:00:46 +0000 Manifest this update: Fri 19 Dec 2025 12:00:46 +0000 Manifest next update: Sat 20 Dec 2025 12:00:46 +0000 Files and hashes: 1: AUaN_d3P8p-a3G9MXBdbFbttw0I.roa (hash: SEOUmcZd0WH3BJHYd8E0islvyo0HeJdNxtoBcNVaYuQ=) 2: ckaDTR5JovonRtw_ZtcMItUPRvk.crl (hash: bT2HOr4y2mDXhWCGlvUYgAtkWtwsrlUdXJL/nmg/Dd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:7b:de:81:37:d4:ca:bd:8d:49:6e:fd:42:2f:eb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7246834d1e49a2fa2746dc3f66d70c22d50f46f9 Validity Not Before: Dec 19 12:00:46 2025 GMT Not After : Dec 20 12:00:46 2025 GMT Subject: CN=e99492b4ee96283cde9e7d7ea9be937cf81dd518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a9:22:33:53:87:fa:0a:d0:b9:e2:3a:4e:b1: 87:0c:95:8e:01:5c:d1:54:d3:b5:29:a0:eb:5e:62: cb:5c:82:8a:1b:7f:78:f3:43:8f:3a:2c:b1:da:fa: df:38:05:79:49:7f:1c:cb:5e:76:93:23:2f:7b:4c: a9:d0:e0:20:0c:77:b2:ae:82:18:70:6d:94:d1:ae: cc:b6:79:a3:6f:5c:f7:70:b7:a5:dd:2a:63:62:88: 06:b6:bf:e3:5d:7e:fe:ec:57:65:0f:62:5c:9e:d4: 2d:51:ad:7a:50:dd:6e:49:7e:ee:f9:50:20:2b:3a: 7c:2a:bd:5e:f7:32:62:84:fd:06:91:13:5c:ce:56: 79:3f:28:36:8e:bc:c2:65:ca:22:c6:a9:ac:db:1b: 76:c0:5b:5b:f4:59:6a:59:8e:4e:c8:8f:e3:ef:1c: ec:25:39:8b:ad:e4:c9:6e:35:83:2e:15:15:bc:17: a4:ff:97:81:f5:3b:75:32:6a:e0:37:e1:0c:b4:c0: 80:d2:d0:45:89:fe:ea:6e:97:fb:2d:bc:5c:1d:25: 2b:aa:c7:cf:31:eb:5e:46:9c:72:83:c9:6a:aa:61: 26:13:1d:bb:b1:2b:01:cb:65:a8:b9:c5:8a:cd:bd: d4:99:32:b8:fa:36:7d:32:cf:40:61:5f:97:35:e6: e9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:94:92:B4:EE:96:28:3C:DE:9E:7D:7E:A9:BE:93:7C:F8:1D:D5:18 X509v3 Authority Key Identifier: keyid:72:46:83:4D:1E:49:A2:FA:27:46:DC:3F:66:D7:0C:22:D5:0F:46:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c0:5b:08:e6:cf:dd:8a:0e:bb:47:04:67:b1:51:68:29:07: c1:c8:8c:8b:e2:4d:57:b8:a5:8a:16:d0:9f:d5:b6:e2:b8:5d: b9:27:85:cf:89:ef:28:42:a1:4c:c6:f1:91:a4:3f:17:27:e3: 8e:bf:04:72:c8:09:07:c1:91:76:01:ea:be:85:b3:02:0c:9f: 60:de:1a:f4:cc:87:5b:ae:51:13:8b:1c:02:4c:e0:05:19:d9: ac:76:f3:22:93:7f:cb:80:29:00:3f:08:08:cc:53:e5:e0:66: 2c:2f:49:d1:97:f5:2a:30:7c:aa:a8:45:40:ef:8a:c7:18:9c: da:4a:34:66:60:e0:e0:0f:23:e0:49:f0:0e:44:a5:c5:15:70: 8f:a3:55:b9:45:75:72:15:77:a7:af:94:75:1c:64:fe:ad:89: 8a:4c:63:72:91:e0:4b:6b:aa:ca:8b:31:97:50:ab:7b:e2:44: 77:26:29:11:59:23:d2:0c:52:da:1b:72:65:53:4e:e1:25:ca: d5:bd:d2:d9:02:e3:8d:87:66:a2:a7:f9:c2:f3:16:4c:c6:55: b1:c1:01:8e:54:60:47:ce:a3:c9:e9:e2:50:a5:3e:5d:e9:3c: 42:bb:13:8e:2a:a9:58:bb:33:00:cf:be:bd:57:9b:5b:99:fb: 42:ab:81:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2e96BN9TKvY1Jbv1CL+u7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDY4MzRkMWU0OWEyZmEyNzQ2ZGMzZjY2ZDcwYzIyZDUw ZjQ2ZjkwHhcNMjUxMjE5MTIwMDQ2WhcNMjUxMjIwMTIwMDQ2WjAzMTEwLwYDVQQD EyhlOTk0OTJiNGVlOTYyODNjZGU5ZTdkN2VhOWJlOTM3Y2Y4MWRkNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKkiM1OH+grQueI6TrGHDJWOAVzR VNO1KaDrXmLLXIKKG39480OPOiyx2vrfOAV5SX8cy152kyMve0yp0OAgDHeyroIY cG2U0a7Mtnmjb1z3cLel3SpjYogGtr/jXX7+7FdlD2JcntQtUa16UN1uSX7u+VAg Kzp8Kr1e9zJihP0GkRNczlZ5Pyg2jrzCZcoixqms2xt2wFtb9FlqWY5OyI/j7xzs JTmLreTJbjWDLhUVvBek/5eB9Tt1MmrgN+EMtMCA0tBFif7qbpf7LbxcHSUrqsfP MeteRpxyg8lqqmEmEx27sSsBy2WoucWKzb3UmTK4+jZ9Ms9AYV+XNebpjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmUkrTulig83p59fqm+k3z4HdUYMB8GA1UdIwQY MBaAFHJGg00eSaL6J0bcP2bXDCLVD0b5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2thRFRSNUpvdm9uUnR3X1p0Y01JdFVQUnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xNzZlOTQtMmVlNS00ZjJmLWE3NDAt ODMyNDYxYjg0ZGYzLzEvY2thRFRSNUpvdm9uUnR3X1p0Y01JdFVQUnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xNzZlOTQtMmVlNS00ZjJmLWE3NDAtODMyNDYxYjg0ZGYz LzEvY2thRFRSNUpvdm9uUnR3X1p0Y01JdFVQUnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8BbCObP 3YoOu0cEZ7FRaCkHwciMi+JNV7ilihbQn9W24rhduSeFz4nvKEKhTMbxkaQ/Fyfj jr8EcsgJB8GRdgHqvoWzAgyfYN4a9MyHW65RE4scAkzgBRnZrHbzIpN/y4ApAD8I CMxT5eBmLC9J0Zf1KjB8qqhFQO+Kxxic2ko0ZmDg4A8j4EnwDkSlxRVwj6NVuUV1 chV3p6+UdRxk/q2JikxjcpHgS2uqyosxl1Cre+JEdyYpEVkj0gxS2htyZVNO4SXK 1b3S2QLjjYdmoqf5wvMWTMZVscEBjlRgR86jyeniUKU+Xek8QrsTjiqpWLszAM++ vVebW5n7QquBcw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:18:00 2025 by rpki-client