This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json) Hash identifier: rWnTM+B+nHFktlyPCt+Qi83/vuWzFL4W4EUF0rcLr/c= Subject key identifier: EB:1B:67:4D:51:5B:7D:A6:2F:37:A1:1E:0C:0D:41:38:DB:78:D6:C9 Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65 Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65 Certificate serial: 019AF240074868D95276494CDDAB9631C66A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: V44EJOX2ns5LwZ/lEEKP3JJ43ta5ZAYJWtvtjBp/JOM=) 2: Sl7vs7epJo1jh-smoHIDy3MLe90.roa (hash: +DnNPnPqq4n8ubPLxyevCl394y1niM+tRJ57hRES2xk=) 3: hER6wRwe_hUZJ0u9RImVrBTy1as.roa (hash: iyJ20Ahzbr3qZY7vMtDGjDttWYIPJenArxH2H2QEoYE=) 4: zSb8_4z_t4ghRM_Xlv4jNaBnlZo.roa (hash: lIQeqP7XnTmZINxSIi5omnfSVVcthpIv6JLsOviMBeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:07:48:68:d9:52:76:49:4c:dd:ab:96:31:c6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65 Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=eb1b674d515b7da62f37a11e0c0d4138db78d6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:c7:bd:96:e2:2a:59:18:64:79:34:84:07: 6c:1e:f7:57:8e:17:d0:cc:33:8b:4e:11:9d:e3:61: bd:f3:94:0d:f0:4a:38:f4:1c:55:62:7f:c6:57:f7: 5a:ff:cc:d3:69:26:0f:b0:7c:e1:9a:fd:83:e7:1f: 41:4c:de:69:ff:4a:1f:71:fc:59:f8:1d:90:d6:f9: a1:d1:cb:ad:05:43:d0:47:be:19:42:33:05:ad:50: cd:eb:f0:4c:62:67:ad:b5:9e:78:9d:73:53:d4:b8: 7b:36:a5:3d:c2:24:e7:41:e5:2e:89:0f:16:c0:11: 65:77:cc:fe:80:12:ff:bf:98:b3:f5:15:b7:96:4c: d3:62:77:3a:30:58:dd:22:df:7e:2d:a5:f1:33:88: 73:0c:02:04:d6:7a:61:ad:d6:0a:e8:d2:ac:1e:f1: 20:63:93:c9:80:64:07:0c:da:73:10:47:4a:19:f7: 0c:bf:13:ec:9f:8d:77:26:a2:cd:4d:f1:1b:be:33: ae:e6:ca:f2:ae:78:6a:67:44:55:d6:c1:fa:8d:94: c6:51:15:1b:93:bc:59:f6:1d:3e:82:6f:2e:68:62: 9b:fe:05:7f:ab:01:3b:83:2d:90:b5:06:66:31:12: c8:bb:b8:b3:eb:0a:cd:1e:f1:35:a8:e9:8b:f8:c8: 7e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1B:67:4D:51:5B:7D:A6:2F:37:A1:1E:0C:0D:41:38:DB:78:D6:C9 X509v3 Authority Key Identifier: keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:63:3c:76:64:1a:34:4e:27:8e:6e:d8:fc:fd:13:cd:d4:f8: 00:84:0e:c1:c3:1e:6b:79:2e:88:b3:28:54:eb:63:b7:bf:f0: 19:eb:cb:80:5d:e9:43:d6:3d:37:16:cf:18:91:f8:d7:dd:d4: 8c:6c:ae:29:7a:5e:e0:fa:a0:f4:60:6e:2c:5b:57:47:0a:f9: 06:22:7a:c0:7d:67:8c:3c:b2:47:d0:e5:66:e2:f2:5e:21:fd: 71:ac:55:34:5f:e3:c0:03:03:df:8d:31:f4:10:fe:c6:25:d6: c2:51:6b:1b:5f:d2:e8:14:15:97:03:d0:12:e1:9e:e8:9d:bd: 4f:dd:fa:09:46:be:82:15:14:8c:06:d9:b0:5c:aa:14:7c:97: 10:98:7b:42:ec:b8:85:d1:4d:8a:f5:f8:ab:18:3e:d8:79:b5: b7:cc:49:ec:83:77:8e:45:13:da:02:b8:0c:45:f7:21:19:31: fb:1a:96:b3:8c:e7:ce:20:36:b6:58:5c:57:50:bd:d8:97:3e: 44:90:81:35:f1:19:b5:92:e0:63:d0:d5:21:33:de:d9:ef:69: 96:42:45:5c:33:e9:d1:3a:1b:33:b2:df:4c:dd:6d:db:3b:62: 07:34:4b:a4:58:af:35:1f:ab:12:2f:26:9a:f3:32:f9:0f:11: f5:75:b4:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAdIaNlSdklM3auWMcZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDFhNWEyYTE4MzM5NjI5Y2MxMzAzZTZkZWM4YmI2MDVk ZGNhNjUwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EyhlYjFiNjc0ZDUxNWI3ZGE2MmYzN2ExMWUwYzBkNDEzOGRiNzhkNmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLPHvZbiKlkYZHk0hAdsHvdXjhfQ zDOLThGd42G985QN8Eo49BxVYn/GV/da/8zTaSYPsHzhmv2D5x9BTN5p/0ofcfxZ +B2Q1vmh0cutBUPQR74ZQjMFrVDN6/BMYmettZ54nXNT1Lh7NqU9wiTnQeUuiQ8W wBFld8z+gBL/v5iz9RW3lkzTYnc6MFjdIt9+LaXxM4hzDAIE1nphrdYK6NKsHvEg Y5PJgGQHDNpzEEdKGfcMvxPsn413JqLNTfEbvjOu5sryrnhqZ0RV1sH6jZTGURUb k7xZ9h0+gm8uaGKb/gV/qwE7gy2QtQZmMRLIu7iz6wrNHvE1qOmL+Mh+twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsbZ01RW32mLzehHgwNQTjbeNbJMB8GA1UdIwQY MBaAFApBpaKhgzlinMEwPm3si7YF3cplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjIt ODBmN2ZkNmVhOWM5LzEvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjItODBmN2ZkNmVhOWM5 LzEvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmM8dmQa NE4njm7Y/P0TzdT4AIQOwcMea3kuiLMoVOtjt7/wGevLgF3pQ9Y9NxbPGJH4193U jGyuKXpe4Pqg9GBuLFtXRwr5BiJ6wH1njDyyR9DlZuLyXiH9caxVNF/jwAMD340x 9BD+xiXWwlFrG1/S6BQVlwPQEuGe6J29T936CUa+ghUUjAbZsFyqFHyXEJh7Quy4 hdFNivX4qxg+2Hm1t8xJ7IN3jkUT2gK4DEX3IRkx+xqWs4znziA2tlhcV1C92Jc+ RJCBNfEZtZLgY9DVITPe2e9plkJFXDPp0TobM7LfTN1t2ztiBzRLpFivNR+rEi8m mvMy+Q8R9XW0bg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:38 2025 by rpki-client