This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json) Hash identifier: cFwf665npdImIbZG3wm0CAb8pklxb7gE1i5PT6FV2Cc= Subject key identifier: F7:60:79:33:EC:51:9B:FF:20:DD:6C:F6:2D:25:34:A7:C6:D6:CE:0A Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61 Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61 Certificate serial: 019B2C2F069DD8074AE436BA144F15A74541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft Manifest number: 1788 Signing time: Wed 17 Dec 2025 12:00:37 +0000 Manifest this update: Wed 17 Dec 2025 12:00:37 +0000 Manifest next update: Thu 18 Dec 2025 12:00:37 +0000 Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: LeTQm51PVOOvTK+0pVRi9OFPk8Gmg0yNRuQn9eU1zt4=) 2: OZJAkQeWPGiu0MMG4YGewg2oUhI.roa (hash: kvD4Jh7HATnFEhZqQFNvhTQZ3Ir8ynHCKw0hu3/CQds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:06:9d:d8:07:4a:e4:36:ba:14:4f:15:a7:45:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61 Validity Not Before: Dec 17 12:00:37 2025 GMT Not After : Dec 18 12:00:37 2025 GMT Subject: CN=f7607933ec519bff20dd6cf62d2534a7c6d6ce0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:56:59:e1:66:7e:45:97:02:01:87:af:83: 8a:1f:0c:ae:5a:e8:28:3d:57:4a:b7:7f:7a:d9:40: f6:15:1c:ef:8b:08:d3:33:ae:36:8a:f4:1a:49:b0: 69:07:54:22:f4:15:9f:dc:67:fc:38:e1:f3:39:22: 20:4b:c0:8e:ae:4b:88:c4:00:62:3b:f4:78:07:9a: 81:c7:8c:07:c8:6c:74:6f:2a:87:55:4a:c5:7e:58: 57:85:17:ec:c3:8f:d5:d4:5e:83:68:f8:8f:8c:4a: 1b:4c:2f:8c:43:c5:5d:26:ce:a5:c5:b7:0f:1d:bb: 9d:04:d8:c4:72:b6:37:1a:7d:aa:9f:56:66:a4:d3: c3:ec:d9:ac:84:b0:69:ad:21:ab:8a:bd:8e:15:45: 0b:bf:09:63:ab:18:92:b8:25:57:80:b8:a3:20:fa: dc:1c:96:d5:33:95:ce:a0:e8:be:bd:b8:f7:1f:3f: cf:66:bf:e0:8a:9a:50:ea:41:2b:e2:c3:ab:88:1e: 3f:77:7e:e4:b2:da:62:fd:e7:c7:7f:4c:94:2b:e1: 7b:c5:e2:e9:21:69:b7:03:06:c9:34:e8:77:06:64: 0f:f1:64:bd:3e:6c:f4:f3:a6:30:a9:aa:3d:65:0c: ae:50:b7:c8:48:ba:ef:e4:86:64:af:c2:fe:74:50: 60:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:60:79:33:EC:51:9B:FF:20:DD:6C:F6:2D:25:34:A7:C6:D6:CE:0A X509v3 Authority Key Identifier: keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:49:71:06:ad:6c:f3:66:66:d5:da:af:05:99:ba:fb:1a:c6: b6:73:df:ef:b1:6b:90:b5:9d:f6:c9:9e:65:42:5d:46:fd:d3: 40:45:37:b5:c0:dd:7c:31:4d:97:b1:f1:ea:0d:ad:d5:24:fa: a1:27:2a:cf:3c:10:fa:5e:6c:84:65:b5:b2:85:2d:62:38:3d: 6b:1c:d1:20:35:9a:21:cf:cf:da:96:50:6e:64:b8:c0:e0:68: d8:7f:9b:7a:20:37:a3:40:94:91:9d:e4:a0:7e:2d:b3:b1:6b: c7:95:86:96:1f:69:fa:33:a2:9e:96:12:1d:0c:e1:24:b2:9a: c0:24:01:03:66:a0:4f:43:27:fe:af:6d:d6:18:9f:a4:29:77: 23:2b:97:c5:9f:7a:84:4d:e2:7e:8a:70:c4:0d:d2:ce:ae:4a: 7f:03:c7:90:91:15:80:24:be:70:19:2b:23:c0:93:2c:46:de: ec:e7:0b:5d:34:8a:40:db:30:c8:c2:9f:a7:2c:ad:8a:79:9f: dd:2e:9f:f5:12:4a:83:72:61:0d:0d:0e:bf:59:73:58:52:9e: 70:f9:d7:2b:d5:48:a9:a6:83:40:fc:f6:df:50:7a:d9:5d:98: 51:94:9b:30:6c:0b:e6:40:8c:b3:6b:67:00:e4:2f:9c:63:05: b0:55:18:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLwad2AdK5Da6FE8Vp0VBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNGE4NjFkN2MxNGI0Y2E1ZTZkMWM3ZDYwYWFlZWIzMmVh OGVmNjEwHhcNMjUxMjE3MTIwMDM3WhcNMjUxMjE4MTIwMDM3WjAzMTEwLwYDVQQD EyhmNzYwNzkzM2VjNTE5YmZmMjBkZDZjZjYyZDI1MzRhN2M2ZDZjZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXFWWeFmfkWXAgGHr4OKHwyuWugo PVdKt3962UD2FRzviwjTM642ivQaSbBpB1Qi9BWf3Gf8OOHzOSIgS8COrkuIxABi O/R4B5qBx4wHyGx0byqHVUrFflhXhRfsw4/V1F6DaPiPjEobTC+MQ8VdJs6lxbcP HbudBNjEcrY3Gn2qn1ZmpNPD7NmshLBprSGrir2OFUULvwljqxiSuCVXgLijIPrc HJbVM5XOoOi+vbj3Hz/PZr/gippQ6kEr4sOriB4/d37kstpi/efHf0yUK+F7xeLp IWm3AwbJNOh3BmQP8WS9Pmz086Ywqao9ZQyuULfISLrv5IZkr8L+dFBgxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdgeTPsUZv/IN1s9i0lNKfG1s4KMB8GA1UdIwQY MBaAFApKhh18FLTKXm0cfWCq7rMuqO9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2It OTRkYmYzZmQwZTJkLzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2ItOTRkYmYzZmQwZTJk LzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUlxBq1s 82Zm1dqvBZm6+xrGtnPf77FrkLWd9smeZUJdRv3TQEU3tcDdfDFNl7Hx6g2t1ST6 oScqzzwQ+l5shGW1soUtYjg9axzRIDWaIc/P2pZQbmS4wOBo2H+beiA3o0CUkZ3k oH4ts7Frx5WGlh9p+jOinpYSHQzhJLKawCQBA2agT0Mn/q9t1hifpCl3IyuXxZ96 hE3ifopwxA3Szq5KfwPHkJEVgCS+cBkrI8CTLEbe7OcLXTSKQNswyMKfpyytinmf 3S6f9RJKg3JhDQ0Ov1lzWFKecPnXK9VIqaaDQPz231B62V2YUZSbMGwL5kCMs2tn AOQvnGMFsFUYuA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:04:07 2025 by rpki-client