This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json) Hash identifier: jZ9S7N7TA6aoV5qn+jq6J3MOVsTZKXKy8wLlHS9mWcQ= Subject key identifier: 11:1B:5B:8F:EB:78:93:88:0E:EE:DB:68:54:76:17:F3:FE:C5:B4:1F Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b Certificate serial: 019B6AD8C27C79B29E66DCBCADEC0DD49C06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft Manifest number: 17A3 Signing time: Mon 29 Dec 2025 16:02:29 +0000 Manifest this update: Mon 29 Dec 2025 16:02:29 +0000 Manifest next update: Tue 30 Dec 2025 16:02:29 +0000 Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=) 2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: XySj/S5chPu+Ea3OCREhSX8MD/Rsn1w+2JVW/Sm3czg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:c2:7c:79:b2:9e:66:dc:bc:ad:ec:0d:d4:9c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b Validity Not Before: Dec 29 16:02:29 2025 GMT Not After : Dec 30 16:02:29 2025 GMT Subject: CN=111b5b8feb7893880eeedb68547617f3fec5b41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:f7:92:ba:7b:88:c2:28:a1:4c:4d:c5:63: e5:92:17:a3:b2:c8:40:db:60:0d:65:f1:11:2d:60: bf:f5:bb:95:f0:6d:6a:50:4a:56:43:6a:68:cc:9b: ce:e3:4d:b0:7c:88:4b:83:10:3f:27:c2:04:02:30: a6:8d:ae:c3:56:9b:cb:05:ce:6f:a2:ba:e2:04:77: 1f:98:2c:de:cc:57:6a:c6:94:1d:0e:80:c6:c2:4d: b3:72:5e:20:2f:c2:b3:47:6f:9f:05:cd:ba:2d:95: 6a:00:e8:f7:85:ad:43:39:f1:ce:55:c8:ce:2d:c8: da:ed:15:fa:2f:6c:23:6a:04:86:fb:e8:88:8c:20: 20:d1:3e:94:df:cc:04:30:54:c3:2d:23:6d:34:b6: 59:2f:0f:76:13:d6:58:03:82:fe:5e:ab:b3:39:98: 69:21:34:ae:b9:e0:a7:6a:43:c3:14:68:a5:93:d7: aa:2b:d5:62:3f:40:4e:5e:20:9b:70:6d:76:6e:48: 5c:8c:85:a2:ff:6b:37:a2:bd:18:a4:bc:a8:e0:7e: ca:d9:8f:b0:e0:95:b3:c1:de:b3:66:63:ed:f9:50: 08:8a:5b:29:b6:0c:24:e8:3a:fb:89:9d:d9:2f:1f: 8c:71:c8:6a:4b:68:d2:aa:b4:5b:e3:52:4c:ea:bd: 7b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1B:5B:8F:EB:78:93:88:0E:EE:DB:68:54:76:17:F3:FE:C5:B4:1F X509v3 Authority Key Identifier: keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:a2:47:ff:9f:00:84:f5:01:43:0c:bd:24:71:47:6f:39:91: 13:cd:11:9e:76:68:67:31:e2:d8:b4:4e:da:66:38:2a:81:68: 0c:f6:97:29:5b:ab:a9:e4:a2:0a:3a:c7:93:c4:90:ae:b6:c9: ac:30:d4:d1:c3:9a:ff:3b:7c:c0:a2:82:52:9f:1b:19:3c:cf: f3:ab:47:14:43:cd:a3:78:4c:b2:41:24:9f:e7:5b:13:b2:26: 6c:ea:82:c0:6e:9e:52:04:f6:58:2a:27:a2:6b:2b:80:ad:39: dd:d3:73:f2:f3:3e:7c:74:8d:f7:84:ad:a0:db:8c:e9:8e:37: 45:67:e8:fb:de:e3:23:84:ac:1e:32:30:c9:dd:78:5a:72:db: 11:6e:66:27:8a:5d:2b:ad:de:e3:f1:60:49:da:3b:a5:d5:a6: 87:89:8e:71:7e:85:20:72:8b:56:92:73:f9:eb:cd:47:5a:96: 53:65:75:be:60:4f:7a:41:e5:e0:74:42:e4:4b:2b:3f:ef:1d: 8c:3b:40:dc:ca:12:40:39:3d:bb:f4:5a:39:93:04:36:f4:17: 74:6d:4a:39:18:51:32:f9:28:78:5f:96:74:11:5b:5a:72:5f: 76:4e:a9:38:4d:e8:f0:3d:a8:2f:b2:c8:cc:66:e9:d0:8f:ae: 00:ee:e6:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2MJ8ebKeZty8rewN1JwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDUxOGE1NzA2OWNhZmQ4M2UyMWI1YzYwZmIyNjJkOGVk ZjM0MmIwHhcNMjUxMjI5MTYwMjI5WhcNMjUxMjMwMTYwMjI5WjAzMTEwLwYDVQQD EygxMTFiNWI4ZmViNzg5Mzg4MGVlZWRiNjg1NDc2MTdmM2ZlYzViNDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2L3krp7iMIooUxNxWPlkhejsshA 22ANZfERLWC/9buV8G1qUEpWQ2pozJvO402wfIhLgxA/J8IEAjCmja7DVpvLBc5v orriBHcfmCzezFdqxpQdDoDGwk2zcl4gL8KzR2+fBc26LZVqAOj3ha1DOfHOVcjO Lcja7RX6L2wjagSG++iIjCAg0T6U38wEMFTDLSNtNLZZLw92E9ZYA4L+XquzOZhp ITSuueCnakPDFGilk9eqK9ViP0BOXiCbcG12bkhcjIWi/2s3or0YpLyo4H7K2Y+w 4JWzwd6zZmPt+VAIilsptgwk6Dr7iZ3ZLx+McchqS2jSqrRb41JM6r17cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEbW4/reJOIDu7baFR2F/P+xbQfMB8GA1UdIwQY MBaAFHJFGKVwacr9g+IbXGD7Ji2O3zQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMt N2Y0YmQ5YjU0ZTYyLzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMtN2Y0YmQ5YjU0ZTYy LzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6JH/58A hPUBQwy9JHFHbzmRE80RnnZoZzHi2LRO2mY4KoFoDPaXKVurqeSiCjrHk8SQrrbJ rDDU0cOa/zt8wKKCUp8bGTzP86tHFEPNo3hMskEkn+dbE7ImbOqCwG6eUgT2WCon omsrgK053dNz8vM+fHSN94StoNuM6Y43RWfo+97jI4SsHjIwyd14WnLbEW5mJ4pd K63e4/FgSdo7pdWmh4mOcX6FIHKLVpJz+evNR1qWU2V1vmBPekHl4HRC5EsrP+8d jDtA3MoSQDk9u/RaOZMENvQXdG1KORhRMvkoeF+WdBFbWnJfdk6pOE3o8D2oL7LI zGbp0I+uAO7mGQ== -----END CERTIFICATE-----Generated at Mon Dec 29 17:59:41 2025 by rpki-client