This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json) Hash identifier: c0C7LGb7Tsqz+ULAB1uuOn0l/9C4DHd8BZwhdU2bVLo= Subject key identifier: 79:49:6B:A2:B9:3C:1F:95:CD:1F:87:55:CB:54:98:89:C8:65:C8:D2 Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac Certificate serial: 019AF276CC0A2CAC5CE134C4F7EE68D266A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 07:01:02 +0000 Manifest this update: Sat 06 Dec 2025 07:01:02 +0000 Manifest next update: Sun 07 Dec 2025 07:01:02 +0000 Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: 0TYbaOgZlnOMWFM3x1JQzAoNs2pgqjpRmkTJgBOCKzM=) 2: yW1cS9Mx29vTOamtTRsFT6bLIXw.roa (hash: PZBuxnii3Pq+stD6k3qQUstIcPbrvHDexZJKpw32ONQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:cc:0a:2c:ac:5c:e1:34:c4:f7:ee:68:d2:66:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac Validity Not Before: Dec 6 07:01:02 2025 GMT Not After : Dec 7 07:01:02 2025 GMT Subject: CN=79496ba2b93c1f95cd1f8755cb549889c865c8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b0:b4:20:f6:e1:62:1e:d4:c2:d3:95:57:25: 68:9a:42:11:e5:35:5b:2f:1c:49:da:c9:e5:52:81: c4:84:37:51:80:d3:30:d4:91:4d:dd:99:ed:d9:7a: 3a:cc:bf:75:53:f0:6b:e4:a0:9f:80:05:aa:55:e2: 7b:c4:ff:98:0f:fa:0d:02:cb:29:e5:6a:2a:5b:4a: b8:34:ce:af:e0:73:aa:f4:af:37:d0:2c:32:fd:78: 44:8b:9e:c4:8e:ae:86:36:8b:bc:5a:a2:8b:15:22: 6a:8d:11:db:9d:75:63:51:16:c6:64:ec:ec:3e:4c: 94:f3:27:ee:25:3e:1d:24:97:de:ad:19:c7:db:fe: 75:88:69:77:50:c7:35:e2:33:d2:7a:0e:6a:71:1e: 2d:01:b0:26:12:e8:d7:05:43:39:66:88:19:f4:28: ea:77:f1:12:1f:85:55:ca:69:e3:42:03:c5:27:0a: 34:03:39:14:6e:a3:a1:9e:14:f9:5d:68:27:37:f9: fa:8a:73:31:9a:32:17:53:bb:17:d3:09:4a:9a:f5: e1:17:aa:4f:cf:9e:b7:db:8e:32:cb:1b:81:2f:56: 1b:dc:15:29:13:ce:a0:82:db:12:3a:d9:e2:a7:f8: 47:5e:13:91:8c:88:bb:fd:45:56:ad:9d:6f:2a:b1: 83:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:49:6B:A2:B9:3C:1F:95:CD:1F:87:55:CB:54:98:89:C8:65:C8:D2 X509v3 Authority Key Identifier: keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:09:2b:89:2a:fc:24:c8:bb:5e:89:a4:d5:9a:e2:21:92:64: 95:9b:76:75:92:f7:e6:a9:ee:ee:d2:80:f6:41:5d:9f:2c:7a: 5d:b5:bc:c3:4e:f3:f2:8e:56:fb:44:51:83:30:cf:7b:f1:5a: ab:e1:13:41:33:4f:11:b0:5c:2c:0b:bb:f9:63:fc:a4:c8:93: f8:96:b2:02:06:fa:c2:5c:f8:ff:8c:b8:7b:a0:76:2d:ed:68: 7d:67:da:1d:b0:46:0a:85:2d:d2:c5:91:02:7b:96:36:82:6b: ae:15:0a:d3:6d:e3:9a:fa:f2:2b:76:e2:0e:83:28:f0:f8:9a: c3:a6:2b:45:05:67:1d:ca:ea:38:09:d1:d4:02:2a:b1:40:80: 1f:58:4a:90:d3:8a:56:ba:a1:06:c1:8e:29:61:0e:c3:21:8f: f5:11:7d:6f:55:0c:8e:61:51:c9:08:52:d7:b7:89:6a:bb:0b: f5:c9:98:82:0e:31:89:15:2b:df:61:01:b5:41:46:3a:7a:66: aa:6f:29:8a:dc:c4:cd:f3:f0:79:14:33:51:59:5f:1e:0f:b7: 03:a1:95:8e:f4:22:d9:19:fd:d3:21:3f:bc:5e:42:39:30:11: ae:59:a9:f0:72:87:10:22:4d:05:f0:6f:e5:7f:6d:0b:2f:fa: 66:b4:a1:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydswKLKxc4TTE9+5o0manMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YTVjM2FiYTQyMWI3OGE3ZDVkMDliNzViNGNlM2JlNTI3 M2NhYWMwHhcNMjUxMjA2MDcwMTAyWhcNMjUxMjA3MDcwMTAyWjAzMTEwLwYDVQQD Eyg3OTQ5NmJhMmI5M2MxZjk1Y2QxZjg3NTVjYjU0OTg4OWM4NjVjOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rC0IPbhYh7UwtOVVyVomkIR5TVb LxxJ2snlUoHEhDdRgNMw1JFN3Znt2Xo6zL91U/Br5KCfgAWqVeJ7xP+YD/oNAssp 5WoqW0q4NM6v4HOq9K830Cwy/XhEi57Ejq6GNou8WqKLFSJqjRHbnXVjURbGZOzs PkyU8yfuJT4dJJferRnH2/51iGl3UMc14jPSeg5qcR4tAbAmEujXBUM5ZogZ9Cjq d/ESH4VVymnjQgPFJwo0AzkUbqOhnhT5XWgnN/n6inMxmjIXU7sX0wlKmvXhF6pP z563244yyxuBL1Yb3BUpE86ggtsSOtnip/hHXhORjIi7/UVWrZ1vKrGD9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlJa6K5PB+VzR+HVctUmInIZcjSMB8GA1UdIwQY MBaAFAilw6ukIbeKfV0Jt1tM475Sc8qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQt MzY0ZmFlN2M3MmM0LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQtMzY0ZmFlN2M3MmM0 LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwkriSr8 JMi7Xomk1ZriIZJklZt2dZL35qnu7tKA9kFdnyx6XbW8w07z8o5W+0RRgzDPe/Fa q+ETQTNPEbBcLAu7+WP8pMiT+JayAgb6wlz4/4y4e6B2Le1ofWfaHbBGCoUt0sWR AnuWNoJrrhUK023jmvryK3biDoMo8Piaw6YrRQVnHcrqOAnR1AIqsUCAH1hKkNOK VrqhBsGOKWEOwyGP9RF9b1UMjmFRyQhS17eJarsL9cmYgg4xiRUr32EBtUFGOnpm qm8pitzEzfPweRQzUVlfHg+3A6GVjvQi2Rn90yE/vF5COTARrlmp8HKHECJNBfBv 5X9tCy/6ZrShvA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:24:56 2025 by rpki-client