This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json) Hash identifier: lI1MhI3wPcJAvjunRTZoCcMjUZ+B2R5QIY9jUPC71E4= Subject key identifier: 46:F7:3F:24:A3:51:46:82:38:D2:6C:BA:CD:A4:53:F2:1B:62:FC:1F Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4 Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4 Certificate serial: 019AF19B247CD31F13CDF30B76D7AC6A35D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft Manifest number: 171B Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: Igz1i/NPfuPWOciJEjqo2B02IF6QQn8zlcDQmmsK1lQ=) 2: Wy1LhCK9kxP-C2UiE5R2K8JtffM.roa (hash: DYS7fnBaD9Os9bSnRtbqX/rsXfSVI5HQGNbOlzCHNGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:24:7c:d3:1f:13:cd:f3:0b:76:d7:ac:6a:35:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=46f73f24a351468238d26cbacda453f21b62fc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c6:b0:b3:5a:c5:1e:12:28:69:e5:1d:da:f4: f8:d0:28:ed:c5:0f:29:59:c8:49:71:33:c3:d2:49: c8:90:e9:dc:4f:28:16:33:d2:b1:5a:fc:f9:c9:9e: aa:7d:13:76:cf:af:bf:ad:13:49:64:14:0b:44:3d: 7e:18:db:f9:4b:af:e1:f6:ce:6c:39:19:76:a4:ff: d2:ff:90:d9:96:38:92:fa:7b:5b:ab:be:86:0d:ab: 34:2c:e3:04:fb:93:cb:18:42:1e:9d:21:28:b4:06: 96:03:b3:88:3f:72:39:42:96:9a:a3:b1:ec:99:fe: 52:f5:35:40:57:ed:73:90:21:83:4a:71:cf:25:f6: ee:ff:12:bb:a1:2a:24:ef:96:8a:23:ec:42:f8:09: ec:f1:92:fe:94:d7:3a:7c:f0:39:e0:c0:ea:9e:cc: 16:c2:14:c4:02:bd:bd:3e:5c:f6:21:3c:c6:7f:67: cc:d2:e4:31:eb:96:86:17:cb:6f:b5:33:dd:79:b2: d2:52:01:29:6f:f1:30:8c:0b:ef:43:a6:c3:f1:fc: 44:73:11:45:89:c7:16:fd:80:e6:5d:e5:94:7a:8a: b7:38:eb:c4:37:41:99:d7:36:50:d2:6c:cf:39:cd: 93:d9:c6:a7:ee:25:e3:5d:5e:3a:b6:dd:01:e4:be: d4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F7:3F:24:A3:51:46:82:38:D2:6C:BA:CD:A4:53:F2:1B:62:FC:1F X509v3 Authority Key Identifier: keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:55:c8:63:3c:2b:ea:e1:a0:f4:31:8c:51:4e:b9:57:7b:8f: c7:d9:a7:21:7c:c6:04:ce:d7:cb:02:d0:19:67:99:e0:9c:4f: 42:da:3d:a7:60:44:98:aa:3a:79:11:f9:be:90:c1:ec:d7:69: 27:39:a9:99:5a:42:87:cf:e4:6d:c0:6d:f1:8b:02:fa:69:04: 7d:8f:d3:b4:a2:43:84:0d:69:4b:6b:86:e0:19:99:42:80:0f: c3:06:93:b8:87:7a:9b:00:42:b3:6b:fc:0e:ed:d3:67:b7:a1: 27:b3:27:33:13:9a:c2:22:83:f7:5d:cf:22:75:2b:25:90:df: f4:fd:c9:65:f9:dc:13:f9:05:88:0d:41:2a:e2:23:5a:c6:80: 4a:2c:b8:35:10:d4:b7:8a:1f:67:39:57:e6:a9:a8:17:ae:7f: d9:da:5d:83:11:6f:78:5d:fc:4f:2f:00:5d:cc:da:e1:3f:f1: 8e:03:49:d4:07:4e:d6:48:04:b1:96:48:11:e6:9f:77:c7:99: a2:2d:d6:47:92:ee:f2:f7:8c:2c:fa:3f:92:45:01:b1:43:26: 93:6d:f8:ee:b6:b4:49:be:d7:7f:9c:9c:4c:ff:18:e2:a5:dc: 83:3e:84:78:d6:12:e1:97:a9:aa:fa:e9:ad:d1:f3:55:69:84: fe:d6:3d:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyR80x8TzfMLdtesajXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNGE3MDJmNjc3ZjMzNmQ5YjNlMzZjMzg0ZWJjOGM5ZmQ4 ODU5ZjQwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD Eyg0NmY3M2YyNGEzNTE0NjgyMzhkMjZjYmFjZGE0NTNmMjFiNjJmYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8aws1rFHhIoaeUd2vT40CjtxQ8p WchJcTPD0knIkOncTygWM9KxWvz5yZ6qfRN2z6+/rRNJZBQLRD1+GNv5S6/h9s5s ORl2pP/S/5DZljiS+ntbq76GDas0LOME+5PLGEIenSEotAaWA7OIP3I5Qpaao7Hs mf5S9TVAV+1zkCGDSnHPJfbu/xK7oSok75aKI+xC+Ans8ZL+lNc6fPA54MDqnswW whTEAr29Plz2ITzGf2fM0uQx65aGF8tvtTPdebLSUgEpb/EwjAvvQ6bD8fxEcxFF iccW/YDmXeWUeoq3OOvEN0GZ1zZQ0mzPOc2T2can7iXjXV46tt0B5L7UrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb3PySjUUaCONJsus2kU/IbYvwfMB8GA1UdIwQY MBaAFApKcC9nfzNtmz42w4TryMn9iFn0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kYTViMzItMjBhNy00ZTBhLWI4MzQt ZWYzMTcxNTYxMWFhLzEvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kYTViMzItMjBhNy00ZTBhLWI4MzQtZWYzMTcxNTYxMWFh LzEvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1XIYzwr 6uGg9DGMUU65V3uPx9mnIXzGBM7XywLQGWeZ4JxPQto9p2BEmKo6eRH5vpDB7Ndp JzmpmVpCh8/kbcBt8YsC+mkEfY/TtKJDhA1pS2uG4BmZQoAPwwaTuId6mwBCs2v8 Du3TZ7ehJ7MnMxOawiKD913PInUrJZDf9P3JZfncE/kFiA1BKuIjWsaASiy4NRDU t4ofZzlX5qmoF65/2dpdgxFveF38Ty8AXcza4T/xjgNJ1AdO1kgEsZZIEeafd8eZ oi3WR5Lu8veMLPo/kkUBsUMmk2347ra0Sb7Xf5ycTP8Y4qXcgz6EeNYS4Zepqvrp rdHzVWmE/tY9NA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:25 2025 by rpki-client