This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json) Hash identifier: kKmfLCLg8m5SaT8QCHiz338n3gA2ue/YgewMY8o81SY= Subject key identifier: C6:22:C5:B8:C5:2C:2E:34:85:0B:8B:98:D1:C9:8B:8F:58:9B:C0:E6 Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09 Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809 Certificate serial: 019AF2098493BDF8C87DE0CDBF81C7DE4811 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft Manifest number: 16A2 Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=) 2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: vhq/zb37cqu68uPI55vgq0x8ZFfTHj+M8I+cnWLvC+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:84:93:bd:f8:c8:7d:e0:cd:bf:81:c7:de:48:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809 Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=c622c5b8c52c2e34850b8b98d1c98b8f589bc0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ae:e7:f7:ce:8b:5c:1b:49:10:5a:ee:ca:81: a8:25:5b:64:59:d0:bc:14:f9:84:63:0e:6f:c4:e8: 69:49:14:b0:28:7a:c2:b5:c0:41:93:c8:ed:6d:f3: d2:d8:74:dc:bc:11:d9:d9:e7:c0:2d:2d:c2:0c:de: 3d:c6:2c:a8:70:4b:92:96:a7:0e:d4:78:2c:10:c0: f3:d0:b1:32:31:64:bd:d0:b4:9d:49:54:93:49:3f: 9f:23:1b:88:b4:e3:e3:0f:2c:33:b0:6d:46:13:37: aa:46:97:88:ad:1b:89:e8:b4:26:0e:8c:64:96:9a: 63:cd:8c:3a:de:72:b1:dc:b6:fa:65:02:24:0e:f4: 4c:84:20:03:b4:73:f1:91:cf:5e:56:8a:e3:7a:3e: ae:32:55:c1:85:33:04:36:3e:32:a3:95:28:bc:9c: 48:3d:36:e1:e6:08:ae:fd:ed:d9:31:f3:72:d6:1f: b1:99:33:1e:44:bc:fb:e6:d8:b6:50:8b:eb:b2:b5: 2e:19:2b:49:cd:6e:d5:5c:01:c1:14:86:06:16:7c: e4:b8:2c:2d:7b:01:c2:29:50:b3:f4:85:4f:99:6b: 60:ef:df:9d:fb:39:f7:3c:5a:62:7d:fb:03:72:0a: f0:2d:70:0d:8d:af:7f:8d:b0:40:ef:fd:7c:e9:0d: 51:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:22:C5:B8:C5:2C:2E:34:85:0B:8B:98:D1:C9:8B:8F:58:9B:C0:E6 X509v3 Authority Key Identifier: keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f7:6a:0a:7c:ea:d4:66:be:c4:d4:1d:0b:aa:a9:51:ce:d0: 3e:74:52:54:8e:cb:72:5e:de:6f:55:fe:d6:4a:ff:ef:f0:64: 2d:ca:10:e0:3c:90:f8:c1:5f:70:18:7e:b5:59:97:d1:32:17: d9:87:8f:ea:5f:a0:ae:80:b4:f0:bb:ab:8b:d6:77:6e:aa:50: 2c:91:8f:21:d6:d7:05:13:4b:19:e4:92:73:2d:e1:b1:31:c6: 0a:b4:5c:a4:f8:78:9d:1e:60:28:a8:62:f0:f0:3f:a8:ff:12: b1:35:d9:2f:6f:33:63:54:e6:c0:fe:9a:50:23:26:57:bf:6b: 2a:f6:e7:ba:00:d6:f0:1a:05:8a:4f:15:4a:aa:39:a9:da:32: 78:17:a2:32:0c:62:cf:57:d6:01:15:69:dd:be:b2:f6:fd:5c: 89:2f:9e:0c:e6:44:f6:08:2b:91:33:e0:eb:be:11:27:a2:4b: 84:b6:ff:29:70:75:dc:f4:54:9d:57:f4:a6:49:1e:7c:8c:76: 8a:bd:08:4d:95:3a:9f:0b:4f:ff:2b:e6:61:36:86:19:ac:f9: 5a:cf:cb:3a:3e:6e:6d:24:a2:19:9c:a8:c0:4e:26:2a:4c:f3: 84:1f:22:a6:f9:f0:03:d0:db:a9:52:68:8c:1f:f1:57:c6:f6: 95:e1:62:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYSTvfjIfeDNv4HH3kgRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDI2YzNkMTFjOWYyNGFjYzBhMWQ4NDU0Y2JjOTYwNDg2 NWE4MDkwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD EyhjNjIyYzViOGM1MmMyZTM0ODUwYjhiOThkMWM5OGI4ZjU4OWJjMGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj67n986LXBtJEFruyoGoJVtkWdC8 FPmEYw5vxOhpSRSwKHrCtcBBk8jtbfPS2HTcvBHZ2efALS3CDN49xiyocEuSlqcO 1HgsEMDz0LEyMWS90LSdSVSTST+fIxuItOPjDywzsG1GEzeqRpeIrRuJ6LQmDoxk lppjzYw63nKx3Lb6ZQIkDvRMhCADtHPxkc9eVorjej6uMlXBhTMENj4yo5UovJxI PTbh5giu/e3ZMfNy1h+xmTMeRLz75ti2UIvrsrUuGStJzW7VXAHBFIYGFnzkuCwt ewHCKVCz9IVPmWtg79+d+zn3PFpiffsDcgrwLXANja9/jbBA7/186Q1R8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYixbjFLC40hQuLmNHJi49Ym8DmMB8GA1UdIwQY MBaAFHJCbD0RyfJKzAodhFTLyWBIZagJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYt YmU5MGIwZmQxZjc4LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYtYmU5MGIwZmQxZjc4 LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfdqCnzq 1Ga+xNQdC6qpUc7QPnRSVI7Lcl7eb1X+1kr/7/BkLcoQ4DyQ+MFfcBh+tVmX0TIX 2YeP6l+groC08Luri9Z3bqpQLJGPIdbXBRNLGeSScy3hsTHGCrRcpPh4nR5gKKhi 8PA/qP8SsTXZL28zY1TmwP6aUCMmV79rKvbnugDW8BoFik8VSqo5qdoyeBeiMgxi z1fWARVp3b6y9v1ciS+eDOZE9ggrkTPg674RJ6JLhLb/KXB13PRUnVf0pkkefIx2 ir0ITZU6nwtP/yvmYTaGGaz5Ws/LOj5ubSSiGZyowE4mKkzzhB8ipvnwA9DbqVJo jB/xV8b2leFiYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:42 2025 by rpki-client