This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json) Hash identifier: EgxUAlKpJyadYiaBYzp4LdK0XE1jWdfJHqm3K+AxaXk= Subject key identifier: BC:4B:37:08:14:77:2D:22:1F:A4:C4:B7:F6:E6:95:84:43:89:C4:04 Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Certificate serial: 019B5C0962F279C5E235010DB0ACB2FE9778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 19:01:17 +0000 Manifest this update: Fri 26 Dec 2025 19:01:17 +0000 Manifest next update: Sat 27 Dec 2025 19:01:17 +0000 Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: c9SIKC3BN2FsDbuA/TOadsupbwUXOfSS1ywVm0RmJ9Y=) 2: tICvfkE-wd7ljGY6sghDtS75C50.roa (hash: EofEa7cxTHv8xJhHBChQPwYV0i7JZnqjIowIrpKVJDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:62:f2:79:c5:e2:35:01:0d:b0:ac:b2:fe:97:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Validity Not Before: Dec 26 19:01:17 2025 GMT Not After : Dec 27 19:01:17 2025 GMT Subject: CN=bc4b370814772d221fa4c4b7f6e695844389c404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e9:5a:ef:23:68:ca:ae:7c:cd:6f:30:77:b7: 55:51:4f:18:a8:0c:ad:8e:10:31:e4:c7:c0:f4:43: 9c:e5:80:a4:38:0d:00:a4:71:e9:9c:98:e7:80:a7: c4:89:04:31:97:7e:6d:b9:e1:f0:1e:1b:ea:c2:cd: cf:21:7c:91:0b:db:f4:70:0f:5a:38:04:92:4f:cb: 0a:a0:3b:b0:62:97:27:44:6b:4e:b6:e0:11:a1:27: 90:c2:6f:da:a8:7e:0f:73:c5:a4:c2:c3:5d:ea:29: f7:19:f3:90:f3:94:b9:3a:9c:71:da:f5:d9:2c:f0: ae:07:c0:48:f7:32:92:18:91:7f:10:db:d3:aa:91: ae:e6:ae:7e:16:ca:d2:97:43:02:dc:6e:50:50:7a: d5:13:95:73:f9:49:19:61:04:9c:0a:aa:3d:57:5b: f7:12:dc:31:07:ac:0b:02:75:64:5f:3d:29:68:3f: 7d:16:7d:68:5f:60:ad:dc:d9:6d:93:cd:c6:e2:b4: c0:ae:70:1b:fe:40:8b:a1:f4:54:28:7a:1a:30:c4: c8:8a:93:05:32:98:ef:8c:41:10:cd:6d:b2:67:8a: 38:5a:3d:cb:ba:ce:63:ef:c3:88:9f:96:54:4f:82: 58:5e:c6:5f:97:03:52:2e:0a:5a:c5:b5:7e:8b:26: 15:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4B:37:08:14:77:2D:22:1F:A4:C4:B7:F6:E6:95:84:43:89:C4:04 X509v3 Authority Key Identifier: keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:78:6d:ba:2a:d4:d4:a7:aa:15:ad:a4:41:85:b7:1e:23:32: 65:62:f3:61:20:a6:b2:ef:f5:94:a6:04:82:94:4a:c0:51:75: ca:2e:4a:61:f1:85:d1:ad:94:87:2a:9d:cd:86:1a:bf:38:96: 0d:d1:6f:cd:8b:7d:f2:50:db:13:87:47:26:f8:52:d1:16:d1: 03:0f:f9:bf:cb:96:75:ba:ad:bb:bd:eb:83:55:2e:c4:0e:bb: 29:cb:65:60:58:af:b0:4f:47:96:50:75:6f:87:32:c2:b3:1a: 68:3e:ab:58:17:4d:60:ef:14:91:ad:56:2d:57:0d:17:5f:34: 6c:39:6c:cf:ac:d0:2e:98:43:31:c1:d5:0a:98:07:6c:b3:6f: 4d:c6:33:5b:33:b8:80:0c:86:d6:7e:b2:6b:e3:3d:50:06:62: 84:9b:26:91:57:4c:70:aa:5c:af:05:12:94:62:c7:93:2b:cd: 3c:b6:2c:2b:32:29:2c:64:a5:da:b2:9f:94:bb:d8:09:e8:8c: 21:00:91:c9:36:50:7f:fa:31:4e:e7:6b:4e:17:20:66:d7:95: a0:dd:07:87:7c:ba:03:93:cf:c5:ce:8c:4a:5b:30:a0:18:85: 29:65:c2:d3:28:84:3d:83:99:94:b7:cb:d7:e7:d2:1f:30:ce: 40:02:94:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCWLyecXiNQENsKyy/pd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNGJkMWQzMGY3MjM1Y2Q3MTczOWMwNDIzMTBkYzI2MDgw NzM4ZjYwHhcNMjUxMjI2MTkwMTE3WhcNMjUxMjI3MTkwMTE3WjAzMTEwLwYDVQQD EyhiYzRiMzcwODE0NzcyZDIyMWZhNGM0YjdmNmU2OTU4NDQzODljNDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoela7yNoyq58zW8wd7dVUU8YqAyt jhAx5MfA9EOc5YCkOA0ApHHpnJjngKfEiQQxl35tueHwHhvqws3PIXyRC9v0cA9a OASST8sKoDuwYpcnRGtOtuARoSeQwm/aqH4Pc8WkwsNd6in3GfOQ85S5Opxx2vXZ LPCuB8BI9zKSGJF/ENvTqpGu5q5+FsrSl0MC3G5QUHrVE5Vz+UkZYQScCqo9V1v3 EtwxB6wLAnVkXz0paD99Fn1oX2Ct3Nltk83G4rTArnAb/kCLofRUKHoaMMTIipMF MpjvjEEQzW2yZ4o4Wj3Lus5j78OIn5ZUT4JYXsZflwNSLgpaxbV+iyYV9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxLNwgUdy0iH6TEt/bmlYRDicQEMB8GA1UdIwQY MBaAFApL0dMPcjXNcXOcBCMQ3CYIBzj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEt Mzg4NDQzZDVmMDBmLzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEtMzg4NDQzZDVmMDBm LzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3htuirU 1KeqFa2kQYW3HiMyZWLzYSCmsu/1lKYEgpRKwFF1yi5KYfGF0a2UhyqdzYYavziW DdFvzYt98lDbE4dHJvhS0RbRAw/5v8uWdbqtu73rg1UuxA67KctlYFivsE9HllB1 b4cywrMaaD6rWBdNYO8Uka1WLVcNF180bDlsz6zQLphDMcHVCpgHbLNvTcYzWzO4 gAyG1n6ya+M9UAZihJsmkVdMcKpcrwUSlGLHkyvNPLYsKzIpLGSl2rKflLvYCeiM IQCRyTZQf/oxTudrThcgZteVoN0Hh3y6A5PPxc6MSlswoBiFKWXC0yiEPYOZlLfL 1+fSHzDOQAKUEg== -----END CERTIFICATE-----Generated at Sat Dec 27 02:50:20 2025 by rpki-client