This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft File: ckaDTR5JovonRtw_ZtcMItUPRvk.mft (raw, json) Hash identifier: Bt1u5izWBeYB3Oon8VTFOIUmDJ0WJ3C0Dd/LRJU7LvY= Subject key identifier: 1A:67:EA:F5:0F:9A:02:15:E8:CE:B8:4F:54:86:B0:95:5A:26:7C:9B Authority key identifier: 72:46:83:4D:1E:49:A2:FA:27:46:DC:3F:66:D7:0C:22:D5:0F:46:F9 Certificate issuer: /CN=7246834d1e49a2fa2746dc3f66d70c22d50f46f9 Certificate serial: 019AF2E440D8AC75BABF091455271D22AE14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft Manifest number: 52 Signing time: Sat 06 Dec 2025 09:00:36 +0000 Manifest this update: Sat 06 Dec 2025 09:00:36 +0000 Manifest next update: Sun 07 Dec 2025 09:00:36 +0000 Files and hashes: 1: AUaN_d3P8p-a3G9MXBdbFbttw0I.roa (hash: SEOUmcZd0WH3BJHYd8E0islvyo0HeJdNxtoBcNVaYuQ=) 2: ckaDTR5JovonRtw_ZtcMItUPRvk.crl (hash: +HeO9fx/gN+DL/dcOw3W+PEIJric1+qUwVnhF8gOrcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:40:d8:ac:75:ba:bf:09:14:55:27:1d:22:ae:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7246834d1e49a2fa2746dc3f66d70c22d50f46f9 Validity Not Before: Dec 6 09:00:36 2025 GMT Not After : Dec 7 09:00:36 2025 GMT Subject: CN=1a67eaf50f9a0215e8ceb84f5486b0955a267c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:32:fc:07:9a:4e:2b:0a:cf:52:1a:78:6d: 80:ee:03:98:b6:0f:fe:63:1c:a1:75:4c:9d:0c:49: dc:8e:3c:19:86:3b:24:22:23:78:20:ea:76:f0:f2: 79:5f:7f:43:fb:05:f0:e1:1c:87:2c:cb:6a:ba:68: 39:92:3d:33:fc:41:6c:42:0e:f8:0f:0f:d2:fb:c7: e2:49:3b:6d:9b:48:11:59:2a:f5:6f:7f:45:79:a9: b2:8e:16:48:7b:46:6e:cb:9c:f0:c4:54:1e:ae:2d: 2d:9c:ab:ff:02:6b:83:b2:ef:61:22:e6:9f:85:fb: bc:3f:df:fe:e1:3f:5f:ef:94:1a:bf:c0:93:41:26: 35:2d:5c:f1:ac:ed:02:f6:b9:c5:fa:23:32:83:b0: ba:6c:a6:6f:ed:e0:cd:79:ce:7e:e5:b8:54:8d:97: d8:be:ad:73:c6:ca:da:ac:e0:f3:e4:4f:02:3f:a0: ba:ec:1c:e5:a4:0e:23:2e:1a:c1:1a:e5:df:cc:99: 7f:f7:02:de:2e:b0:4a:64:67:86:1f:0e:c0:2f:a7: 12:f1:73:94:88:9c:4e:40:c1:5e:3b:be:0d:d2:99: 3e:72:26:74:0d:58:97:30:18:7f:6c:7d:d9:45:bd: 71:88:15:5f:ad:6a:d3:b9:1d:67:1f:3c:2e:74:c2: 94:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:67:EA:F5:0F:9A:02:15:E8:CE:B8:4F:54:86:B0:95:5A:26:7C:9B X509v3 Authority Key Identifier: keyid:72:46:83:4D:1E:49:A2:FA:27:46:DC:3F:66:D7:0C:22:D5:0F:46:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9d:58:60:bd:0a:57:7a:2f:28:21:b7:3c:54:92:80:f2:1c: 44:b0:42:b8:ba:61:eb:e0:dd:b3:22:e5:ad:04:61:37:ff:f6: ac:6c:18:fd:f6:07:c3:e6:85:10:d1:58:a8:40:ef:a3:0f:ca: ad:a8:fb:40:9a:ea:0c:63:d1:39:a5:0f:e1:5b:c1:54:3e:dd: ce:d0:d4:74:b3:da:d2:8f:07:92:08:12:d1:5d:5b:7d:f0:96: 50:5b:38:75:af:e5:ca:01:0b:1a:4a:cd:9a:9c:52:f2:b3:b2: e7:09:11:0c:e5:b4:35:4d:11:21:6a:52:b9:71:e8:b5:dd:4a: fa:b3:98:81:aa:8f:05:de:23:d8:27:9a:16:4f:52:19:b2:26: cf:8c:2c:b2:58:a7:2d:04:0b:1e:c5:f9:b1:5c:58:1e:22:28: 67:7d:4c:19:a4:93:6d:fd:51:cd:4f:c0:e5:cc:51:f5:81:a3: e9:d7:b3:e5:9c:55:95:76:aa:10:82:f8:f2:6d:48:26:da:52: ab:45:d4:a4:87:99:9d:4d:62:9c:c4:c8:dd:f5:78:6c:23:78: 89:1b:66:53:e6:02:cb:47:61:c0:96:e8:b0:0f:bd:f4:4b:74: cd:fe:3e:c2:cf:00:01:f8:ee:a8:ba:21:2f:70:3c:ef:0a:8b: fe:ff:e6:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EDYrHW6vwkUVScdIq4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDY4MzRkMWU0OWEyZmEyNzQ2ZGMzZjY2ZDcwYzIyZDUw ZjQ2ZjkwHhcNMjUxMjA2MDkwMDM2WhcNMjUxMjA3MDkwMDM2WjAzMTEwLwYDVQQD EygxYTY3ZWFmNTBmOWEwMjE1ZThjZWI4NGY1NDg2YjA5NTVhMjY3YzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc4y/AeaTisKz1IaeG2A7gOYtg/+ YxyhdUydDEncjjwZhjskIiN4IOp28PJ5X39D+wXw4RyHLMtqumg5kj0z/EFsQg74 Dw/S+8fiSTttm0gRWSr1b39FeamyjhZIe0Zuy5zwxFQeri0tnKv/AmuDsu9hIuaf hfu8P9/+4T9f75Qav8CTQSY1LVzxrO0C9rnF+iMyg7C6bKZv7eDNec5+5bhUjZfY vq1zxsrarODz5E8CP6C67BzlpA4jLhrBGuXfzJl/9wLeLrBKZGeGHw7AL6cS8XOU iJxOQMFeO74N0pk+ciZ0DViXMBh/bH3ZRb1xiBVfrWrTuR1nHzwudMKUxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpn6vUPmgIV6M64T1SGsJVaJnybMB8GA1UdIwQY MBaAFHJGg00eSaL6J0bcP2bXDCLVD0b5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2thRFRSNUpvdm9uUnR3X1p0Y01JdFVQUnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xNzZlOTQtMmVlNS00ZjJmLWE3NDAt ODMyNDYxYjg0ZGYzLzEvY2thRFRSNUpvdm9uUnR3X1p0Y01JdFVQUnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xNzZlOTQtMmVlNS00ZjJmLWE3NDAtODMyNDYxYjg0ZGYz LzEvY2thRFRSNUpvdm9uUnR3X1p0Y01JdFVQUnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJ1YYL0K V3ovKCG3PFSSgPIcRLBCuLph6+DdsyLlrQRhN//2rGwY/fYHw+aFENFYqEDvow/K raj7QJrqDGPROaUP4VvBVD7dztDUdLPa0o8HkggS0V1bffCWUFs4da/lygELGkrN mpxS8rOy5wkRDOW0NU0RIWpSuXHotd1K+rOYgaqPBd4j2CeaFk9SGbImz4wsslin LQQLHsX5sVxYHiIoZ31MGaSTbf1RzU/A5cxR9YGj6dez5ZxVlXaqEIL48m1IJtpS q0XUpIeZnU1inMTI3fV4bCN4iRtmU+YCy0dhwJbosA+99Et0zf4+ws8AAfjuqLoh L3A87wqL/v/mwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:49:52 2025 by rpki-client