This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json) Hash identifier: cmJBwLbqKljQtx5h+cHCLYJ/ETSYtoyfn01luyEkaLg= Subject key identifier: 5E:09:45:D4:AC:97:45:98:AB:34:FA:49:2C:6E:36:B6:91:8F:53:86 Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5 Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5 Certificate serial: 019AF240204729D59F4DF65713B03B43AB91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft Manifest number: 16A5 Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: 03fHjI9ySHh3NZQ1+2T+yJsv34LfOkXhwmJFcOcaKHk=) 2: hML-Tag6b9qlpG18VlhLUkClkKg.roa (hash: LEX7BjdOFqa/vQo+qGyu7UsdS3xFcEis6fY7DeQDRek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:20:47:29:d5:9f:4d:f6:57:13:b0:3b:43:ab:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5 Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=5e0945d4ac974598ab34fa492c6e36b6918f5386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:13:f3:94:9f:b5:e3:12:2d:fe:bb:6c:6d: a5:89:ea:9b:8e:b7:5a:e3:91:46:98:c8:2a:d6:09: ca:e0:73:2a:a0:d2:69:d6:b1:fd:f6:1b:76:1b:6a: d9:38:e9:78:92:db:be:f7:8c:fa:be:f4:13:5f:01: d8:03:50:a7:c4:3f:97:86:22:35:01:59:3d:f3:5c: 02:6f:11:2e:8a:bf:33:b8:df:ae:61:95:1b:41:e4: 6d:0b:f9:95:d0:1d:e6:1c:10:d6:9a:22:d8:a0:33: 27:67:cf:c2:10:dc:8d:40:52:07:e6:f6:9c:0e:37: 4d:fd:8d:f1:35:36:22:80:d6:d4:b5:47:c6:28:d7: 49:1a:62:10:59:98:23:23:bb:f1:b9:8d:a0:cd:27: 8e:bb:10:da:13:bd:ee:c8:67:3e:64:b4:24:84:08: 50:72:38:ef:ab:99:d6:18:86:a5:e3:e1:33:bd:78: c6:45:8b:d8:dd:2b:c6:4a:b5:0b:58:e5:b9:c2:33: 64:3b:11:12:3f:7f:65:fb:4f:35:1a:87:f2:63:9d: ce:2b:c0:e3:5d:14:d5:24:46:f7:00:b4:3a:4c:f2: 28:4b:6f:80:71:60:9d:f2:29:0a:f7:96:12:a7:1c: b3:74:f8:74:39:6f:8d:d9:ae:4e:4b:9f:7d:6d:10: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:09:45:D4:AC:97:45:98:AB:34:FA:49:2C:6E:36:B6:91:8F:53:86 X509v3 Authority Key Identifier: keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:82:aa:70:f5:21:84:c4:9f:66:63:b3:86:e1:ee:96:12:06: a9:37:97:8e:1a:ba:2e:4d:41:db:5e:1f:8b:86:2b:4a:9e:d6: 42:4b:c6:90:cd:7a:9f:19:22:8d:8f:d9:05:1c:9c:a4:1e:35: 9f:bb:75:ef:a1:02:4d:99:46:6f:9e:c2:6b:3c:b5:16:9f:62: 55:02:5c:15:4c:83:80:68:49:91:bb:9b:b5:5d:d1:13:dd:f4: 7a:ce:b7:5e:85:1a:d7:75:4a:da:d3:a2:4c:0a:36:54:c5:90: c7:b8:a0:11:2d:70:c4:d6:c0:20:5d:d3:d8:0f:00:64:f8:9a: cb:4e:b1:61:da:b0:54:56:db:63:84:71:f8:66:3a:51:61:f4: 65:dc:c6:d3:c2:63:b0:69:b7:5c:3c:01:7b:3d:24:9e:c0:07: a5:b2:4b:7b:72:e3:ec:2a:0d:81:cc:95:9b:34:8e:12:49:a3: 2a:4c:66:c3:43:c0:2b:d6:2b:92:9a:7a:25:e0:e1:f0:91:67: fd:1a:1a:1f:ff:b8:a5:2f:60:12:e9:a4:c9:7c:8e:da:2f:5f: 5c:92:42:62:90:a7:1a:61:90:f2:c8:7c:71:b4:6c:4e:ff:5f: 16:55:8a:2a:7c:8a:a4:59:da:9e:0a:a9:9b:c7:a3:6a:67:6c: 6d:41:12:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCBHKdWfTfZXE7A7Q6uRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDgxZGQ5MGQxMDBiZDViYzIzYzA0YjEwYzBhODQzMWNj OWE1YjUwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD Eyg1ZTA5NDVkNGFjOTc0NTk4YWIzNGZhNDkyYzZlMzZiNjkxOGY1Mzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OUT85SfteMSLf67bG2lieqbjrda 45FGmMgq1gnK4HMqoNJp1rH99ht2G2rZOOl4ktu+94z6vvQTXwHYA1CnxD+XhiI1 AVk981wCbxEuir8zuN+uYZUbQeRtC/mV0B3mHBDWmiLYoDMnZ8/CENyNQFIH5vac DjdN/Y3xNTYigNbUtUfGKNdJGmIQWZgjI7vxuY2gzSeOuxDaE73uyGc+ZLQkhAhQ cjjvq5nWGIal4+EzvXjGRYvY3SvGSrULWOW5wjNkOxESP39l+081GofyY53OK8Dj XRTVJEb3ALQ6TPIoS2+AcWCd8ikK95YSpxyzdPh0OW+N2a5OS599bRCGXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4JRdSsl0WYqzT6SSxuNraRj1OGMB8GA1UdIwQY MBaAFHJIHdkNEAvVvCPASxDAqEMcyaW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2Qt ZjE5OTBiMGM3MDVhLzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2QtZjE5OTBiMGM3MDVh LzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4KqcPUh hMSfZmOzhuHulhIGqTeXjhq6Lk1B214fi4YrSp7WQkvGkM16nxkijY/ZBRycpB41 n7t176ECTZlGb57Cazy1Fp9iVQJcFUyDgGhJkbubtV3RE930es63XoUa13VK2tOi TAo2VMWQx7igES1wxNbAIF3T2A8AZPiay06xYdqwVFbbY4Rx+GY6UWH0ZdzG08Jj sGm3XDwBez0knsAHpbJLe3Lj7CoNgcyVmzSOEkmjKkxmw0PAK9Yrkpp6JeDh8JFn /RoaH/+4pS9gEumkyXyO2i9fXJJCYpCnGmGQ8sh8cbRsTv9fFlWKKnyKpFnangqp m8ejamdsbUESHw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:20 2025 by rpki-client