This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json) Hash identifier: FXSjxkZ32j8ZTXieX6jIrhUDsEXanMS0TBPMcKzBHZU= Subject key identifier: CC:08:C0:4B:7C:00:BD:28:4F:AD:EB:22:5E:A2:91:E8:91:3A:69:0F Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Certificate serial: 019B3DFE3F41EBC0E08D25B9EACC9FAB5E8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft Manifest number: 046D Signing time: Sat 20 Dec 2025 23:00:31 +0000 Manifest this update: Sat 20 Dec 2025 23:00:31 +0000 Manifest next update: Sun 21 Dec 2025 23:00:31 +0000 Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: UrWAx0LwaYz2lqwkqYMk1fMA4rFZKhHFUfsdKLf0c6E=) 2: LoNlBcNLDsjTpM52ykl2lebJEjI.roa (hash: lOQ33XAT96wBpF3zqP8+czX8fkzmJEjqnIn0kWh3SsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:3f:41:eb:c0:e0:8d:25:b9:ea:cc:9f:ab:5e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Validity Not Before: Dec 20 23:00:31 2025 GMT Not After : Dec 21 23:00:31 2025 GMT Subject: CN=cc08c04b7c00bd284fadeb225ea291e8913a690f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c5:33:82:41:a0:90:08:24:c5:d9:ce:9e:19: e5:a2:6a:a2:83:fc:9d:f0:d4:f7:70:8d:dd:1e:e4: 21:a2:c7:37:1f:05:ae:b0:ba:07:53:c6:25:09:44: 4a:73:b3:06:9a:8b:7b:3a:55:45:76:06:f4:b5:9b: 71:ff:b7:99:bb:0f:b0:98:67:d5:5b:0e:4e:a5:ba: 35:7c:71:8e:3f:a1:f4:5e:7d:d3:6f:ab:f2:31:15: e2:fd:f4:e9:c1:f4:f1:34:c8:fb:4b:18:31:6c:53: 91:b7:92:b6:40:d7:c9:b4:b0:b8:b0:fe:1a:46:b8: c4:96:bb:35:c5:60:5f:4c:d2:ff:e1:d9:ac:47:3f: d3:ac:51:c8:13:e7:e0:2b:74:ee:d6:53:11:b1:b1: 7f:4c:2b:78:aa:40:f3:9b:cf:73:ca:f9:0b:25:7a: c7:4f:8e:cc:39:81:59:e6:48:64:e5:de:b6:00:50: dd:b6:19:fb:9f:e1:fa:66:18:0a:b2:af:47:a3:07: b0:6e:bd:9e:51:72:33:fd:33:a9:93:6c:c5:62:a2: 25:22:3b:bd:f8:ef:41:f4:a4:19:e1:fd:f3:ca:6c: 30:7f:9e:10:a8:58:c6:eb:10:66:e9:19:80:4b:dc: 02:be:88:da:73:c1:dd:1a:ca:99:61:32:9b:db:8a: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:08:C0:4B:7C:00:BD:28:4F:AD:EB:22:5E:A2:91:E8:91:3A:69:0F X509v3 Authority Key Identifier: keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:69:35:2d:ef:be:34:de:d2:55:dd:ce:9b:d4:29:d6:b5:b5: 43:91:9a:12:7d:39:23:30:ee:fc:02:ef:1b:55:6a:66:23:64: 09:61:c0:c2:04:e3:fb:d4:12:2c:fe:7b:29:62:32:29:a8:36: 24:76:8b:4c:ef:fb:80:a1:7b:4d:fc:46:b9:5f:42:0d:fc:4d: fd:59:80:04:f4:b6:95:1b:09:01:12:5e:e0:7c:d3:df:fa:15: 3b:69:c1:36:51:53:84:ff:59:92:bc:b1:f0:f0:1f:75:0e:d9: 57:d7:92:5d:44:cd:aa:3b:56:e3:56:fb:9a:77:75:0a:3a:4a: 54:c5:78:2a:65:52:8b:7f:12:2f:b8:e8:26:be:8b:f7:37:88: 41:e3:44:f4:6d:2d:d5:36:72:fb:b1:2e:42:1c:cb:a3:32:91: 8e:e4:73:55:b3:35:18:b8:5b:e0:66:2c:0e:1e:0d:1d:c4:ab: 6b:48:44:d7:53:0d:00:c4:b4:06:e5:d6:f1:fb:59:56:96:bf: e4:9c:a7:52:5b:ed:bf:42:28:89:cb:0a:41:88:de:66:45:93: 44:78:9f:88:66:b5:47:d6:25:69:e8:ac:61:f8:9c:51:f5:f3: 3d:b8:ba:81:83:0c:50:c8:c8:2d:15:b0:26:78:0a:ce:c3:2e: b5:96:5e:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/j9B68DgjSW56syfq16LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh NjUxZjQwHhcNMjUxMjIwMjMwMDMxWhcNMjUxMjIxMjMwMDMxWjAzMTEwLwYDVQQD EyhjYzA4YzA0YjdjMDBiZDI4NGZhZGViMjI1ZWEyOTFlODkxM2E2OTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsUzgkGgkAgkxdnOnhnlomqig/yd 8NT3cI3dHuQhosc3HwWusLoHU8YlCURKc7MGmot7OlVFdgb0tZtx/7eZuw+wmGfV Ww5Opbo1fHGOP6H0Xn3Tb6vyMRXi/fTpwfTxNMj7SxgxbFORt5K2QNfJtLC4sP4a RrjElrs1xWBfTNL/4dmsRz/TrFHIE+fgK3Tu1lMRsbF/TCt4qkDzm89zyvkLJXrH T47MOYFZ5khk5d62AFDdthn7n+H6ZhgKsq9Howewbr2eUXIz/TOpk2zFYqIlIju9 +O9B9KQZ4f3zymwwf54QqFjG6xBm6RmAS9wCvojac8HdGsqZYTKb24ot7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwIwEt8AL0oT63rIl6ikeiROmkPMB8GA1UdIwQY MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGk1Le++ NN7SVd3Om9Qp1rW1Q5GaEn05IzDu/ALvG1VqZiNkCWHAwgTj+9QSLP57KWIyKag2 JHaLTO/7gKF7TfxGuV9CDfxN/VmABPS2lRsJARJe4HzT3/oVO2nBNlFThP9Zkryx 8PAfdQ7ZV9eSXUTNqjtW41b7mnd1CjpKVMV4KmVSi38SL7joJr6L9zeIQeNE9G0t 1TZy+7EuQhzLozKRjuRzVbM1GLhb4GYsDh4NHcSra0hE11MNAMS0BuXW8ftZVpa/ 5JynUlvtv0IoicsKQYjeZkWTRHifiGa1R9YlaeisYficUfXzPbi6gYMMUMjILRWw JngKzsMutZZe9w== -----END CERTIFICATE-----Generated at Sun Dec 21 01:50:20 2025 by rpki-client