This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json) Hash identifier: 7WcC35ZWPd6GyHV5OU7TEKAor9rtmdz5ztw8xPRmjM8= Subject key identifier: 7D:0B:09:8B:34:19:D4:5A:EB:68:A6:E0:22:4C:4B:59:5E:FF:6F:15 Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34 Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34 Certificate serial: 019AF276CB58E03C1D4462CDE28CE56DD37F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft Manifest number: 13BA Signing time: Sat 06 Dec 2025 07:01:02 +0000 Manifest this update: Sat 06 Dec 2025 07:01:02 +0000 Manifest next update: Sun 07 Dec 2025 07:01:02 +0000 Files and hashes: 1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: DeYopPEGxFAcCCXjKFNIOVxXUYBUmlxPoodJNRzf1+I=) 2: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (hash: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:cb:58:e0:3c:1d:44:62:cd:e2:8c:e5:6d:d3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34 Validity Not Before: Dec 6 07:01:02 2025 GMT Not After : Dec 7 07:01:02 2025 GMT Subject: CN=7d0b098b3419d45aeb68a6e0224c4b595eff6f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:71:15:58:31:44:be:8b:5a:e0:8d:a6:77:28: 70:b5:4a:cd:a7:b8:94:c6:ef:77:8e:56:1e:cd:66: 81:9c:33:29:c0:bd:11:61:e8:d2:19:53:27:27:de: 61:84:13:ae:50:49:c8:da:50:30:21:70:92:37:1a: 55:41:43:c3:01:ad:54:2d:8a:82:5a:77:f5:6a:78: 06:c3:4b:65:fe:a9:95:af:2c:14:df:88:9d:86:75: 53:47:8c:be:f2:d9:b3:c1:40:17:c6:13:7d:a8:de: 82:1e:92:9e:47:e0:3f:5b:91:47:db:77:a0:41:a3: 8f:18:bd:65:16:4a:56:45:c6:0b:45:6b:2d:e0:ed: e1:7d:35:84:c2:2f:7a:9a:92:0d:c3:6d:5c:77:f4: 39:f0:bb:e5:b5:22:46:c8:7c:4b:1f:a9:22:ee:22: ff:56:d0:87:a2:a8:67:39:53:09:04:02:09:72:a1: 40:b4:44:13:89:91:8c:ff:8f:e2:4b:31:99:93:d0: 99:47:92:47:00:d1:30:28:a6:76:38:80:15:70:ae: d6:2b:6f:ba:f5:ea:2d:c3:08:c6:de:7d:a0:57:d0: fe:a3:54:cf:d3:36:37:e2:c6:03:27:9f:58:22:8a: d9:62:9d:66:5f:5e:a8:76:2d:d2:d4:05:1f:06:e1: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0B:09:8B:34:19:D4:5A:EB:68:A6:E0:22:4C:4B:59:5E:FF:6F:15 X509v3 Authority Key Identifier: keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d5:53:9f:2b:db:0e:93:79:cd:15:56:8f:2b:e7:20:aa:aa: b0:4c:47:92:40:da:33:a7:34:70:c3:8c:01:32:f0:d1:cb:de: c9:af:7c:c8:9d:a9:e2:67:4c:f0:2b:d8:5e:e4:b5:14:5c:af: 8a:2a:59:54:9a:e7:82:4b:65:44:8c:01:5a:57:c6:9b:d3:55: 28:a9:28:c9:46:20:ae:0d:50:17:f2:a7:1d:6f:56:e6:e4:ec: 02:23:90:6f:22:c6:7a:1c:29:4a:ed:5b:e3:32:40:af:8d:df: 4f:7f:4c:ab:81:c4:c0:4e:3d:31:4a:28:bf:8d:3c:05:72:1c: 44:f6:c0:4e:64:45:bf:95:42:31:4a:91:bb:be:a4:d4:e2:4b: 96:7f:a3:cc:5c:04:0f:48:e4:46:7a:9c:b6:15:2a:7b:3b:0d: 07:c4:4d:0c:6b:f3:b4:6f:25:69:43:a2:97:77:49:a4:7a:d7: 5d:39:87:15:4f:ed:b8:4e:00:1a:52:7a:f1:e1:02:ec:10:eb: 1f:61:7e:8b:1b:9a:63:27:e6:c9:02:b3:c1:f5:3c:71:5b:74: 1a:6c:45:4f:80:95:ce:f1:c3:31:8c:06:35:bb:48:cb:8f:4a: da:9d:51:4d:d3:2b:77:9b:64:82:ea:2b:af:74:1d:89:b1:1b: 6a:a2:a0:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydstY4DwdRGLN4ozlbdN/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDkzZDYwYjUwNDI3ZGQ0MzE2ZWQ5NTA1YWQwOTllYjVh YzJlMzQwHhcNMjUxMjA2MDcwMTAyWhcNMjUxMjA3MDcwMTAyWjAzMTEwLwYDVQQD Eyg3ZDBiMDk4YjM0MTlkNDVhZWI2OGE2ZTAyMjRjNGI1OTVlZmY2ZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XEVWDFEvota4I2mdyhwtUrNp7iU xu93jlYezWaBnDMpwL0RYejSGVMnJ95hhBOuUEnI2lAwIXCSNxpVQUPDAa1ULYqC Wnf1angGw0tl/qmVrywU34idhnVTR4y+8tmzwUAXxhN9qN6CHpKeR+A/W5FH23eg QaOPGL1lFkpWRcYLRWst4O3hfTWEwi96mpINw21cd/Q58LvltSJGyHxLH6ki7iL/ VtCHoqhnOVMJBAIJcqFAtEQTiZGM/4/iSzGZk9CZR5JHANEwKKZ2OIAVcK7WK2+6 9eotwwjG3n2gV9D+o1TP0zY34sYDJ59YIorZYp1mX16odi3S1AUfBuGQUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0LCYs0GdRa62im4CJMS1le/28VMB8GA1UdIwQY MBaAFHJJPWC1BCfdQxbtlQWtCZ61rC40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83MWEzNDktYmFmNC00N2IzLWE5ZWQt YzY3MzBjOGU0NmFhLzEvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83MWEzNDktYmFmNC00N2IzLWE5ZWQtYzY3MzBjOGU0NmFh LzEvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNVTnyvb DpN5zRVWjyvnIKqqsExHkkDaM6c0cMOMATLw0cveya98yJ2p4mdM8CvYXuS1FFyv iipZVJrngktlRIwBWlfGm9NVKKkoyUYgrg1QF/KnHW9W5uTsAiOQbyLGehwpSu1b 4zJAr43fT39Mq4HEwE49MUoov408BXIcRPbATmRFv5VCMUqRu76k1OJLln+jzFwE D0jkRnqcthUqezsNB8RNDGvztG8laUOil3dJpHrXXTmHFU/tuE4AGlJ68eEC7BDr H2F+ixuaYyfmyQKzwfU8cVt0GmxFT4CVzvHDMYwGNbtIy49K2p1RTdMrd5tkguor r3QdibEbaqKgrA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:03 2025 by rpki-client