This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json) Hash identifier: 6jjhrh7cFY2emikf7hIav7lz2UITSqMgPO6y1aOPTvU= Subject key identifier: 37:64:90:47:BA:91:B4:6A:04:17:D5:9E:21:92:4B:1F:60:9B:AE:44 Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20 Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220 Certificate serial: 019AF6F9C111232437577683E3CFF7434128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft Manifest number: 09C8 Signing time: Sun 07 Dec 2025 04:02:34 +0000 Manifest this update: Sun 07 Dec 2025 04:02:34 +0000 Manifest next update: Mon 08 Dec 2025 04:02:34 +0000 Files and hashes: 1: XeS-j2IYyupPYwAd3k1rQhL0Pjk.roa (hash: LaZnavonJdxkwg+OL44y91TnIY6G41jXIPEjOAmHc4s=) 2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: UgjcxSnj0iA85z5iMC9OPnI/71VVvLHvYqbL/34IZGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:c1:11:23:24:37:57:76:83:e3:cf:f7:43:41:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220 Validity Not Before: Dec 7 04:02:34 2025 GMT Not After : Dec 8 04:02:34 2025 GMT Subject: CN=37649047ba91b46a0417d59e21924b1f609bae44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:29:00:a4:20:dd:e2:ec:55:e3:3c:50:15: df:7c:a2:a9:54:68:85:be:53:f7:c9:4f:1b:fa:c1: 61:6e:63:b1:37:c8:00:9d:46:53:1b:7a:53:7d:30: e2:a5:3b:32:ab:84:c7:4b:88:56:b1:63:02:50:31: 6f:80:c5:02:bf:9c:2f:5e:95:02:33:05:e0:a0:3b: 42:c8:48:a3:ab:f8:13:2e:50:9b:37:82:85:a7:1c: 51:05:4d:76:a9:b2:a4:e7:f7:8d:22:a2:8f:bc:c4: f3:b5:a5:97:53:be:08:a8:3b:08:fa:33:a1:21:39: 17:77:84:4c:cb:dc:98:c4:37:2e:1c:8d:d5:6f:32: 52:a0:f7:3d:77:7b:b6:39:d4:87:c0:82:77:13:f6: ef:17:57:40:35:5a:8d:71:7d:8d:e7:f7:3e:ff:0e: 77:57:7d:58:d9:69:a8:9a:19:97:32:0a:fd:2a:a1: 20:de:8c:e6:6c:90:f3:2e:ed:30:44:06:3f:e6:f8: 25:0b:8c:ee:f8:54:2e:13:11:e6:4e:2f:5e:c4:a1: 71:7b:8c:e4:2e:20:9f:21:5f:7c:2c:b5:a2:93:a7: 60:68:e8:cd:6c:47:43:75:e1:4c:37:b5:36:8b:a3: a0:fa:c0:e0:07:da:bf:2e:c5:47:cd:0d:ed:15:e1: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:64:90:47:BA:91:B4:6A:04:17:D5:9E:21:92:4B:1F:60:9B:AE:44 X509v3 Authority Key Identifier: keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:59:82:15:e6:dc:17:99:bd:5b:11:74:c2:0d:53:50:db:ed: 87:75:25:e0:dd:07:e9:93:1c:d6:cc:38:87:4b:fc:06:f4:5e: 06:9c:29:ef:fa:19:46:28:5b:75:1f:84:d2:43:35:14:b2:39: 6d:c3:c8:27:bc:4c:8d:61:3c:a3:a7:25:1d:f6:f7:bf:07:ec: af:e2:b6:89:5a:9b:61:bb:36:0e:82:24:9b:a1:80:58:5c:d6: 1c:e0:49:a2:8c:75:68:ad:56:84:44:18:27:e9:aa:dc:88:57: 91:62:ca:56:0e:8c:37:71:8b:52:5e:10:df:f0:8e:dc:ca:c9: 16:e2:97:0c:05:00:23:65:63:7d:c6:4a:eb:24:c5:27:49:d6: 7d:c5:36:59:0e:c8:ee:42:f4:ca:e5:f7:d4:61:45:35:d4:b4: 7b:3f:2e:3f:ae:68:e4:bb:39:be:62:c5:fa:b4:c3:d2:49:3f: ff:7d:2b:6b:fc:a7:a9:51:bb:86:96:b9:5c:94:79:ad:7b:16: e3:d1:03:fa:f8:0b:7b:1f:b4:74:b1:06:a8:d0:46:23:f7:a4: 6f:e8:1b:f2:68:f6:01:2e:05:f7:d6:dc:20:fe:4b:4d:0c:db: 0d:e1:90:f5:e1:a3:03:14:30:c4:fd:1a:99:ce:2e:6f:a0:b0: e3:20:14:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+cERIyQ3V3aD48/3Q0EoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDBiYTc0NGUwOWUxZDM2Y2I3MDQ2Y2I1ODk5NWMxZTM1 MTMyMjAwHhcNMjUxMjA3MDQwMjM0WhcNMjUxMjA4MDQwMjM0WjAzMTEwLwYDVQQD EygzNzY0OTA0N2JhOTFiNDZhMDQxN2Q1OWUyMTkyNGIxZjYwOWJhZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIMpAKQg3eLsVeM8UBXffKKpVGiF vlP3yU8b+sFhbmOxN8gAnUZTG3pTfTDipTsyq4THS4hWsWMCUDFvgMUCv5wvXpUC MwXgoDtCyEijq/gTLlCbN4KFpxxRBU12qbKk5/eNIqKPvMTztaWXU74IqDsI+jOh ITkXd4RMy9yYxDcuHI3VbzJSoPc9d3u2OdSHwIJ3E/bvF1dANVqNcX2N5/c+/w53 V31Y2WmomhmXMgr9KqEg3ozmbJDzLu0wRAY/5vglC4zu+FQuExHmTi9exKFxe4zk LiCfIV98LLWik6dgaOjNbEdDdeFMN7U2i6Og+sDgB9q/LsVHzQ3tFeFqIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdkkEe6kbRqBBfVniGSSx9gm65EMB8GA1UdIwQY MBaAFHJAunROCeHTbLcEbLWJlcHjUTIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tDNmRFNEo0ZE5zdHdSc3RZbVZ3ZU5STWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82MTRkNzctZDM0Yy00ZmJhLTk0ZTMt MmI1ZWM2NTJhZjZkLzEvY2tDNmRFNEo0ZE5zdHdSc3RZbVZ3ZU5STWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS82MTRkNzctZDM0Yy00ZmJhLTk0ZTMtMmI1ZWM2NTJhZjZk LzEvY2tDNmRFNEo0ZE5zdHdSc3RZbVZ3ZU5STWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFmCFebc F5m9WxF0wg1TUNvth3Ul4N0H6ZMc1sw4h0v8BvReBpwp7/oZRihbdR+E0kM1FLI5 bcPIJ7xMjWE8o6clHfb3vwfsr+K2iVqbYbs2DoIkm6GAWFzWHOBJoox1aK1WhEQY J+mq3IhXkWLKVg6MN3GLUl4Q3/CO3MrJFuKXDAUAI2VjfcZK6yTFJ0nWfcU2WQ7I 7kL0yuX31GFFNdS0ez8uP65o5Ls5vmLF+rTD0kk//30ra/ynqVG7hpa5XJR5rXsW 49ED+vgLex+0dLEGqNBGI/ekb+gb8mj2AS4F99bcIP5LTQzbDeGQ9eGjAxQwxP0a mc4ub6Cw4yAUPw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:58:02 2025 by rpki-client