This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json) Hash identifier: K1hU5BPxU4xaoHswqhzy76Nt9NfDjJiDqNENq9jinxA= Subject key identifier: 00:28:90:85:39:20:BF:C7:5E:B1:35:96:2D:CF:CE:8C:4A:8D:22:16 Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34 Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34 Certificate serial: 019B2C669B17E7ED3BA13A97F534C0EC6117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft Manifest number: 13D8 Signing time: Wed 17 Dec 2025 13:01:20 +0000 Manifest this update: Wed 17 Dec 2025 13:01:20 +0000 Manifest next update: Thu 18 Dec 2025 13:01:20 +0000 Files and hashes: 1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: W/Jscer95o4DEblXTxpzlEYzW6boNITjwglp5pECWAI=) 2: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (hash: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:9b:17:e7:ed:3b:a1:3a:97:f5:34:c0:ec:61:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34 Validity Not Before: Dec 17 13:01:20 2025 GMT Not After : Dec 18 13:01:20 2025 GMT Subject: CN=002890853920bfc75eb135962dcfce8c4a8d2216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:38:ad:37:72:a9:cb:be:61:db:5c:36:9f: 68:0e:5d:6e:97:16:a7:f7:4f:ab:f8:d3:d6:0d:c0: 9d:66:ba:31:ae:a7:af:9a:3a:1b:ad:d6:cf:9c:da: 1f:f0:3d:1c:67:bf:83:4f:e8:d0:cc:f7:df:8c:24: 8c:91:e9:9b:2e:69:46:98:fd:f6:9e:c2:ad:6d:a3: fa:87:81:a0:0d:2f:3d:6d:b4:46:fe:d7:f1:95:7a: a6:7e:37:1d:b0:8b:b9:a5:c5:7a:7a:38:41:05:af: 50:a6:c8:93:0a:3a:a2:e3:3f:66:06:02:67:1a:a3: fb:8c:e6:45:f2:37:e9:f5:f7:f4:b0:69:1a:4c:db: 35:8b:60:e4:30:50:0a:cb:4d:fe:cc:4f:cd:6c:2d: 21:3a:3d:f1:48:08:0d:f6:c6:e6:c4:b3:4a:4c:46: 85:a0:d3:32:13:c6:60:a0:e9:4d:68:70:86:37:06: 32:1d:f0:68:26:f7:27:7a:84:c7:ee:1c:62:59:3f: c2:e6:a7:d1:c4:90:04:69:95:30:86:7b:5f:fa:9f: a1:2a:f1:ca:1b:91:09:5a:1c:41:b2:a0:b4:07:19: 25:50:0f:17:45:dc:8e:f7:d7:c8:41:ad:c9:2b:8b: a6:db:00:01:79:e5:d8:87:d8:36:96:c9:d5:17:95: c9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:28:90:85:39:20:BF:C7:5E:B1:35:96:2D:CF:CE:8C:4A:8D:22:16 X509v3 Authority Key Identifier: keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:6d:4b:8a:03:51:07:4d:52:ed:a6:89:ce:68:79:f3:5e:49: 07:98:c9:ba:57:37:fd:f2:c4:f6:c6:84:c4:ed:97:6b:a5:9b: 96:d9:51:34:38:45:1b:89:d8:6c:8d:11:fe:e6:3f:76:6c:7d: d2:c4:fb:3d:4e:0c:08:5b:b6:f0:c9:18:98:89:30:06:4e:ce: fa:3e:23:7c:41:a0:f0:58:d6:36:77:9e:37:dc:92:1a:5d:71: de:16:0b:a2:e5:7f:b7:d6:8d:69:ca:b5:ef:aa:c4:88:7a:9b: 90:01:7f:9b:bb:7c:ba:46:a0:06:4f:70:bf:0a:16:3d:71:9b: 8c:e3:57:ce:76:98:dd:ce:8f:c4:06:f0:16:f4:a9:64:cd:3f: 9f:97:0f:7a:40:dc:d7:e7:a5:83:80:80:9f:88:34:e5:95:2e: cd:36:04:05:c9:95:ae:f6:17:62:ac:8e:c8:02:48:dc:af:41: 55:4c:2e:96:bf:46:bd:e5:85:d3:04:c1:44:d6:e3:72:cb:9e: 1e:0c:47:c7:1a:08:b7:78:2f:cf:3d:77:dc:12:ce:0e:91:2d: 4d:f8:6e:58:07:cc:e8:fd:7c:82:03:c8:98:37:af:12:3f:37: 23:36:ba:bb:77:07:e1:4f:f0:a9:76:eb:1c:d9:a0:9c:f6:f0: 0f:55:3e:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZpsX5+07oTqX9TTA7GEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDkzZDYwYjUwNDI3ZGQ0MzE2ZWQ5NTA1YWQwOTllYjVh YzJlMzQwHhcNMjUxMjE3MTMwMTIwWhcNMjUxMjE4MTMwMTIwWjAzMTEwLwYDVQQD EygwMDI4OTA4NTM5MjBiZmM3NWViMTM1OTYyZGNmY2U4YzRhOGQyMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeM4rTdyqcu+YdtcNp9oDl1ulxan 90+r+NPWDcCdZroxrqevmjobrdbPnNof8D0cZ7+DT+jQzPffjCSMkembLmlGmP32 nsKtbaP6h4GgDS89bbRG/tfxlXqmfjcdsIu5pcV6ejhBBa9QpsiTCjqi4z9mBgJn GqP7jOZF8jfp9ff0sGkaTNs1i2DkMFAKy03+zE/NbC0hOj3xSAgN9sbmxLNKTEaF oNMyE8ZgoOlNaHCGNwYyHfBoJvcneoTH7hxiWT/C5qfRxJAEaZUwhntf+p+hKvHK G5EJWhxBsqC0BxklUA8XRdyO99fIQa3JK4um2wABeeXYh9g2lsnVF5XJkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAokIU5IL/HXrE1li3PzoxKjSIWMB8GA1UdIwQY MBaAFHJJPWC1BCfdQxbtlQWtCZ61rC40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83MWEzNDktYmFmNC00N2IzLWE5ZWQt YzY3MzBjOGU0NmFhLzEvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83MWEzNDktYmFmNC00N2IzLWE5ZWQtYzY3MzBjOGU0NmFh LzEvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFG1LigNR B01S7aaJzmh5815JB5jJulc3/fLE9saExO2Xa6WbltlRNDhFG4nYbI0R/uY/dmx9 0sT7PU4MCFu28MkYmIkwBk7O+j4jfEGg8FjWNneeN9ySGl1x3hYLouV/t9aNacq1 76rEiHqbkAF/m7t8ukagBk9wvwoWPXGbjONXznaY3c6PxAbwFvSpZM0/n5cPekDc 1+elg4CAn4g05ZUuzTYEBcmVrvYXYqyOyAJI3K9BVUwulr9GveWF0wTBRNbjcsue HgxHxxoIt3gvzz133BLODpEtTfhuWAfM6P18ggPImDevEj83Iza6u3cH4U/wqXbr HNmgnPbwD1U+KA== -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:05 2025 by rpki-client