This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft File: ckWEKSHz0CDU2AReUrsQ_PV-r28.mft (raw, json) Hash identifier: 5UVGd3p0GvoRc9A+TJH0ssqQe2rz7VM0+NxHp8xeAWM= Subject key identifier: A0:91:64:93:D3:F2:07:13:F6:00:7F:8B:90:87:5B:2C:70:E9:66:63 Authority key identifier: 72:45:84:29:21:F3:D0:20:D4:D8:04:5E:52:BB:10:FC:F5:7E:AF:6F Certificate issuer: /CN=7245842921f3d020d4d8045e52bb10fcf57eaf6f Certificate serial: 019AF19AEB9741BA192FBC1103DE30B4808B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft Manifest number: 10DD Signing time: Sat 06 Dec 2025 03:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:00:52 +0000 Manifest next update: Sun 07 Dec 2025 03:00:52 +0000 Files and hashes: 1: ckWEKSHz0CDU2AReUrsQ_PV-r28.crl (hash: x+fVpsEoGA0rYoJzG7Eyq9DZKk1vKVBzKYGpbSzwsdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.crl rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:eb:97:41:ba:19:2f:bc:11:03:de:30:b4:80:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7245842921f3d020d4d8045e52bb10fcf57eaf6f Validity Not Before: Dec 6 03:00:52 2025 GMT Not After : Dec 7 03:00:52 2025 GMT Subject: CN=a0916493d3f20713f6007f8b90875b2c70e96663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d0:7d:11:8b:44:41:f8:e2:73:33:6e:22:de: 5c:ca:9d:f8:bb:6b:92:24:e8:eb:d6:18:5a:4e:83: 20:49:1b:d0:ae:dd:bb:54:d7:b3:dd:68:30:c5:5e: b8:50:c0:55:35:26:0e:47:fa:6e:b1:3b:94:2b:08: 3d:a7:5e:b5:21:4d:2a:e9:48:b3:9e:bc:73:03:96: d1:90:44:9b:e6:83:82:8a:7f:ac:f7:d2:68:0c:72: 46:c1:82:d5:54:fd:d8:fa:c6:60:87:fb:e1:5d:f7: 8f:00:6b:8f:82:b6:8b:6e:4c:9a:4f:7f:a9:31:ad: ec:2f:96:8e:b7:82:ee:45:85:7c:23:4d:1f:35:3d: 1b:e4:a7:cc:44:dd:2c:30:5a:57:6a:96:41:f9:62: ef:dd:d5:e0:aa:64:a6:65:5e:36:02:79:0b:21:31: 93:37:b2:fb:4d:8b:18:f4:57:f8:c6:be:da:b8:7d: 7a:69:ab:ed:8a:8b:67:ce:6b:23:3e:39:bf:f2:57: 7d:42:3f:2b:d8:81:23:12:62:35:14:fd:56:1c:2a: 3d:1e:ae:4f:39:0a:c4:0d:b0:24:c3:62:36:a2:b5: c8:c5:05:9a:83:0d:ba:82:ad:e7:31:8b:ee:88:ac: 31:8e:8c:15:8b:20:06:68:1f:ca:c1:5c:c7:78:3d: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:91:64:93:D3:F2:07:13:F6:00:7F:8B:90:87:5B:2C:70:E9:66:63 X509v3 Authority Key Identifier: keyid:72:45:84:29:21:F3:D0:20:D4:D8:04:5E:52:BB:10:FC:F5:7E:AF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:74:6f:95:6e:82:6a:e2:a0:fe:c4:dc:21:20:27:96:34:ff: 58:c7:3e:01:6f:bc:85:25:2e:2c:6e:ba:7a:8f:d0:c5:2f:c2: 3b:ae:3a:ab:9c:7d:d5:b6:39:f8:9f:4b:93:47:29:8a:ff:e2: dc:0b:d0:40:cd:70:0b:0f:7b:e7:e8:89:f6:b3:4f:05:7d:c1: 62:93:0d:04:43:5b:c0:cd:23:fb:db:79:93:f8:4f:54:17:69: d8:62:1e:8b:b0:8d:b5:12:76:7c:32:97:f8:1e:e7:df:0f:f3: 93:47:5a:1d:0f:95:bc:03:b8:94:f0:13:97:80:8e:6f:10:f8: de:36:28:33:90:b8:80:7c:40:aa:23:de:ee:a5:21:9e:bd:89: 87:28:28:26:ac:ed:93:54:a8:7a:02:c3:4e:25:94:ac:11:96: 73:f9:af:08:cf:1c:8d:fe:1c:f0:4c:4d:7a:72:f7:96:11:f1: cc:cb:19:57:f1:c7:c4:9c:f5:60:97:4f:c3:06:ca:f8:0e:a3: ac:64:99:c2:58:a9:62:f7:36:99:eb:fd:6d:4f:20:1a:cc:b8: c9:6d:f6:9d:e4:82:63:4b:1b:73:1a:51:f8:2b:b3:77:ec:ea: a7:d4:0d:98:cc:85:d8:db:21:b3:6d:96:72:f0:13:82:10:96: fa:ce:72:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuuXQboZL7wRA94wtICLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDU4NDI5MjFmM2QwMjBkNGQ4MDQ1ZTUyYmIxMGZjZjU3 ZWFmNmYwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD EyhhMDkxNjQ5M2QzZjIwNzEzZjYwMDdmOGI5MDg3NWIyYzcwZTk2NjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dB9EYtEQfjiczNuIt5cyp34u2uS JOjr1hhaToMgSRvQrt27VNez3WgwxV64UMBVNSYOR/pusTuUKwg9p161IU0q6Uiz nrxzA5bRkESb5oOCin+s99JoDHJGwYLVVP3Y+sZgh/vhXfePAGuPgraLbkyaT3+p Ma3sL5aOt4LuRYV8I00fNT0b5KfMRN0sMFpXapZB+WLv3dXgqmSmZV42AnkLITGT N7L7TYsY9Ff4xr7auH16aavtiotnzmsjPjm/8ld9Qj8r2IEjEmI1FP1WHCo9Hq5P OQrEDbAkw2I2orXIxQWagw26gq3nMYvuiKwxjowViyAGaB/KwVzHeD3PWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCRZJPT8gcT9gB/i5CHWyxw6WZjMB8GA1UdIwQY MBaAFHJFhCkh89Ag1NgEXlK7EPz1fq9vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tXRUtTSHowQ0RVMkFSZVVyc1FfUFYtcjI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83MWY0MjItZTA5Mi00MTg5LThkM2Mt OGUyNThlZmVkZmZhLzEvY2tXRUtTSHowQ0RVMkFSZVVyc1FfUFYtcjI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83MWY0MjItZTA5Mi00MTg5LThkM2MtOGUyNThlZmVkZmZh LzEvY2tXRUtTSHowQ0RVMkFSZVVyc1FfUFYtcjI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHRvlW6C auKg/sTcISAnljT/WMc+AW+8hSUuLG66eo/QxS/CO646q5x91bY5+J9Lk0cpiv/i 3AvQQM1wCw975+iJ9rNPBX3BYpMNBENbwM0j+9t5k/hPVBdp2GIei7CNtRJ2fDKX +B7n3w/zk0daHQ+VvAO4lPATl4CObxD43jYoM5C4gHxAqiPe7qUhnr2JhygoJqzt k1SoegLDTiWUrBGWc/mvCM8cjf4c8ExNenL3lhHxzMsZV/HHxJz1YJdPwwbK+A6j rGSZwlipYvc2mev9bU8gGsy4yW32neSCY0sbcxpR+Cuzd+zqp9QNmMyF2Nshs22W cvATghCW+s5yNg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:37 2025 by rpki-client