This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json) Hash identifier: sQY4gBcawEzuN2qCiMTlHmlYYS19pYCLDU4LxWVbTOM= Subject key identifier: 87:0E:B4:F6:1F:78:2E:C6:3E:1B:D3:A2:13:DA:AF:F3:74:09:C5:04 Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20 Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220 Certificate serial: 019AF50A364782EC8C49F660209B9F9CAD8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft Manifest number: 09C7 Signing time: Sat 06 Dec 2025 19:01:18 +0000 Manifest this update: Sat 06 Dec 2025 19:01:18 +0000 Manifest next update: Sun 07 Dec 2025 19:01:18 +0000 Files and hashes: 1: XeS-j2IYyupPYwAd3k1rQhL0Pjk.roa (hash: LaZnavonJdxkwg+OL44y91TnIY6G41jXIPEjOAmHc4s=) 2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: GhW53gjmy/htzfl5afxAxWD+uolDHT5mZDKr3sYIBNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:36:47:82:ec:8c:49:f6:60:20:9b:9f:9c:ad:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220 Validity Not Before: Dec 6 19:01:18 2025 GMT Not After : Dec 7 19:01:18 2025 GMT Subject: CN=870eb4f61f782ec63e1bd3a213daaff37409c504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:be:f4:b2:e2:0d:fd:47:c6:55:fc:2d:a9: 6d:f1:02:4f:cc:35:2f:d1:b7:42:3f:9f:d5:61:7a: 9a:60:9b:b9:00:a9:05:94:f7:21:09:00:0a:7b:ff: 00:6e:a9:12:ba:4c:16:9c:27:af:51:87:d0:73:8d: 6c:a8:e4:3a:9c:58:d9:d5:6a:bd:c6:44:7b:e1:d8: b9:74:d6:de:21:a7:60:75:22:0e:4f:45:02:9a:03: 47:dd:96:98:7e:fb:a0:2e:20:ef:da:f1:92:c6:ac: da:7d:01:94:0e:0a:de:76:14:ac:60:da:31:c3:b0: 3e:99:45:d0:d1:64:0e:d0:18:13:9d:27:99:78:ac: 7e:44:24:c4:19:6e:39:d6:d7:37:3b:f9:92:07:7c: 9e:b0:a7:2f:ca:d7:24:64:92:d5:3c:87:69:c2:08: a7:b0:ff:4b:62:92:3a:7e:43:6f:38:8e:69:c5:28: 79:19:a6:ff:a6:4f:0f:9f:2e:47:97:b2:10:57:d6: 32:5f:9d:d9:ab:2a:2a:a7:fd:80:cb:06:db:50:4e: 2e:a7:c0:88:43:d2:51:60:e0:e7:7d:97:96:77:54: 02:9f:fd:a9:f2:fb:a7:21:14:34:11:38:ae:a5:21: cf:7e:78:16:51:63:27:94:d8:5b:02:ef:2e:be:7a: 3a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0E:B4:F6:1F:78:2E:C6:3E:1B:D3:A2:13:DA:AF:F3:74:09:C5:04 X509v3 Authority Key Identifier: keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9a:ae:d6:81:ec:8b:a3:e6:ba:9d:49:52:42:c0:41:dd:22: f8:3c:9c:49:37:cd:5a:b8:aa:ce:38:1c:80:80:18:dc:d8:a5: 22:86:7e:2e:f7:28:1e:a6:82:2b:de:86:c7:64:9c:64:d3:e7: b1:d2:a8:ce:1a:e9:cb:45:cc:9e:78:b2:e3:ac:62:8c:a8:f6: 23:89:21:8d:87:d2:fb:96:5c:93:af:32:74:c6:26:5f:94:e8: cc:86:f6:7f:ca:56:08:7d:ec:53:a9:ea:7c:f4:24:99:ca:bd: 40:e4:c3:95:bb:3b:61:d3:c3:21:b0:1a:cc:17:78:0a:5f:12: 52:47:fe:7c:69:2f:17:e2:06:37:d4:95:eb:97:9b:9e:1b:97: 79:db:9d:12:62:b6:63:30:c8:14:67:a7:0a:d9:b6:83:d6:e4: 86:b1:ca:14:08:33:b1:3e:78:44:ab:2c:14:2d:33:d5:00:c7: 2c:f5:85:65:97:dc:2a:98:74:26:a0:4b:5d:1e:68:23:97:be: e2:a2:13:50:c9:f8:c9:1a:00:ce:d0:9d:c7:0b:74:3c:05:d1: ff:ac:9e:96:cf:84:dd:6d:9e:7d:92:6b:8c:39:84:18:a9:24: db:30:6d:d7:13:17:56:14:3b:26:3b:b5:70:e2:86:2d:ed:05: 4c:44:f0:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjZHguyMSfZgIJufnK2PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDBiYTc0NGUwOWUxZDM2Y2I3MDQ2Y2I1ODk5NWMxZTM1 MTMyMjAwHhcNMjUxMjA2MTkwMTE4WhcNMjUxMjA3MTkwMTE4WjAzMTEwLwYDVQQD Eyg4NzBlYjRmNjFmNzgyZWM2M2UxYmQzYTIxM2RhYWZmMzc0MDljNTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppe+9LLiDf1HxlX8Lalt8QJPzDUv 0bdCP5/VYXqaYJu5AKkFlPchCQAKe/8AbqkSukwWnCevUYfQc41sqOQ6nFjZ1Wq9 xkR74di5dNbeIadgdSIOT0UCmgNH3ZaYfvugLiDv2vGSxqzafQGUDgredhSsYNox w7A+mUXQ0WQO0BgTnSeZeKx+RCTEGW451tc3O/mSB3yesKcvytckZJLVPIdpwgin sP9LYpI6fkNvOI5pxSh5Gab/pk8Pny5Hl7IQV9YyX53Zqyoqp/2AywbbUE4up8CI Q9JRYODnfZeWd1QCn/2p8vunIRQ0ETiupSHPfngWUWMnlNhbAu8uvno6swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcOtPYfeC7GPhvTohPar/N0CcUEMB8GA1UdIwQY MBaAFHJAunROCeHTbLcEbLWJlcHjUTIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tDNmRFNEo0ZE5zdHdSc3RZbVZ3ZU5STWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82MTRkNzctZDM0Yy00ZmJhLTk0ZTMt MmI1ZWM2NTJhZjZkLzEvY2tDNmRFNEo0ZE5zdHdSc3RZbVZ3ZU5STWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS82MTRkNzctZDM0Yy00ZmJhLTk0ZTMtMmI1ZWM2NTJhZjZk LzEvY2tDNmRFNEo0ZE5zdHdSc3RZbVZ3ZU5STWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZqu1oHs i6Pmup1JUkLAQd0i+DycSTfNWriqzjgcgIAY3NilIoZ+LvcoHqaCK96Gx2ScZNPn sdKozhrpy0XMnniy46xijKj2I4khjYfS+5Zck68ydMYmX5TozIb2f8pWCH3sU6nq fPQkmcq9QOTDlbs7YdPDIbAazBd4Cl8SUkf+fGkvF+IGN9SV65ebnhuXedudEmK2 YzDIFGenCtm2g9bkhrHKFAgzsT54RKssFC0z1QDHLPWFZZfcKph0JqBLXR5oI5e+ 4qITUMn4yRoAztCdxwt0PAXR/6yels+E3W2efZJrjDmEGKkk2zBt1xMXVhQ7Jju1 cOKGLe0FTETw2w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:09 2025 by rpki-client