This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json) Hash identifier: lwj16mxCUQf/ZTXNH3bLH0SPiqQA5UEhFUxQOBt1LbM= Subject key identifier: 7B:F1:A1:B6:A0:E8:10:A7:2D:B9:F9:82:03:D9:37:2E:D4:9C:3F:AD Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Certificate serial: 019AF1D1F9334852F8509C415E9D597D4FAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: H/j1QUrMvOT7+j6C0YD7rui3fplujS+vB3RQPevB/l4=) 2: tICvfkE-wd7ljGY6sghDtS75C50.roa (hash: EofEa7cxTHv8xJhHBChQPwYV0i7JZnqjIowIrpKVJDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f9:33:48:52:f8:50:9c:41:5e:9d:59:7d:4f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=7bf1a1b6a0e810a72db9f98203d9372ed49c3fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:3d:ef:4c:a2:9d:27:0d:c6:02:b8:a7:23: b6:d8:9a:2d:15:99:73:e2:da:86:0e:6f:5e:ee:d0: 39:32:b9:c2:5b:ca:17:79:25:11:0f:17:a3:2d:7d: 16:7f:ae:a5:35:b3:1f:ba:7d:d1:43:cb:2d:fc:ee: 16:e4:66:3e:85:91:7e:12:b2:3a:0a:4b:d9:a7:68: 78:be:79:6a:c2:f1:1c:74:e4:85:f5:27:c2:27:9c: db:79:52:e0:5e:51:c7:a2:2b:2c:bb:e6:0d:98:44: 65:24:24:ea:2c:4b:92:62:e1:98:09:6d:90:7f:f4: 13:ae:03:d9:a8:0a:ee:85:98:91:69:f5:ad:6a:02: 49:51:12:be:a8:9e:62:a0:df:2e:8a:18:34:d6:51: 6b:23:47:7e:a3:d6:e4:d9:d3:4b:0c:58:00:ec:ec: c3:ca:b6:2e:d5:a4:cc:ad:2d:7f:f3:f6:a5:2f:a9: d8:c2:27:f0:d9:0a:e3:5c:0a:f2:52:b6:ce:b2:8f: 2a:f0:e7:a7:92:b2:0d:70:22:89:6c:0d:2a:20:c2: 8d:db:94:9e:07:a9:33:28:58:f0:83:ff:b4:50:0a: 62:be:fa:85:1f:20:34:64:cf:c8:d9:ba:38:08:70: 75:88:de:09:7a:be:3f:bb:a2:3e:1c:fc:d6:54:bf: b5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F1:A1:B6:A0:E8:10:A7:2D:B9:F9:82:03:D9:37:2E:D4:9C:3F:AD X509v3 Authority Key Identifier: keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b1:89:06:b4:27:19:4a:e7:df:82:d4:44:f0:df:b8:7d:38: cf:84:1e:d0:bf:df:e4:b5:99:fd:6e:57:09:26:62:1e:b7:7e: fd:dc:fc:8d:19:4f:74:f3:25:25:91:69:0c:6a:df:4a:e9:fc: 0d:c4:aa:ca:17:5d:33:5f:54:a1:0e:a0:a8:83:70:b9:9d:07: 4d:a8:d1:cf:68:b7:0d:24:f5:66:ea:e4:65:a4:95:d3:0e:8b: 61:58:ad:6a:1e:5c:01:01:a8:f6:e6:13:cf:f8:36:73:7d:4a: d2:32:28:16:bd:f9:96:92:1d:e7:48:3c:e2:a8:f3:e3:e1:1f: 6b:f6:a6:67:a7:74:1f:79:dc:59:93:1a:81:e3:e2:6b:2c:5f: 2e:88:7b:67:31:24:8c:77:68:f5:76:4e:c2:74:c9:69:38:b3: b8:06:10:5d:15:7e:59:fb:f8:22:60:33:0d:84:ab:8e:fa:ae: f8:a4:a1:54:bb:4d:27:05:15:c5:24:41:29:13:b0:0d:5e:97: f6:b2:b0:13:a0:66:7d:d6:a4:f5:c3:81:a8:d1:c0:92:71:03: 91:98:d3:81:ad:24:4c:43:3c:7c:64:62:63:75:cd:ef:01:67: 05:94:9c:78:63:7b:a1:47:22:b5:52:9c:ab:94:6b:e3:3c:3e: 05:f2:b8:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fkzSFL4UJxBXp1ZfU+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNGJkMWQzMGY3MjM1Y2Q3MTczOWMwNDIzMTBkYzI2MDgw NzM4ZjYwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD Eyg3YmYxYTFiNmEwZTgxMGE3MmRiOWY5ODIwM2Q5MzcyZWQ0OWMzZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6o970yinScNxgK4pyO22JotFZlz 4tqGDm9e7tA5MrnCW8oXeSURDxejLX0Wf66lNbMfun3RQ8st/O4W5GY+hZF+ErI6 CkvZp2h4vnlqwvEcdOSF9SfCJ5zbeVLgXlHHoissu+YNmERlJCTqLEuSYuGYCW2Q f/QTrgPZqAruhZiRafWtagJJURK+qJ5ioN8uihg01lFrI0d+o9bk2dNLDFgA7OzD yrYu1aTMrS1/8/alL6nYwifw2QrjXAryUrbOso8q8OenkrINcCKJbA0qIMKN25Se B6kzKFjwg/+0UApivvqFHyA0ZM/I2bo4CHB1iN4Jer4/u6I+HPzWVL+1zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvxobag6BCnLbn5ggPZNy7UnD+tMB8GA1UdIwQY MBaAFApL0dMPcjXNcXOcBCMQ3CYIBzj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEt Mzg4NDQzZDVmMDBmLzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEtMzg4NDQzZDVmMDBm LzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLGJBrQn GUrn34LURPDfuH04z4Qe0L/f5LWZ/W5XCSZiHrd+/dz8jRlPdPMlJZFpDGrfSun8 DcSqyhddM19UoQ6gqINwuZ0HTajRz2i3DST1ZurkZaSV0w6LYVitah5cAQGo9uYT z/g2c31K0jIoFr35lpId50g84qjz4+Efa/amZ6d0H3ncWZMagePiayxfLoh7ZzEk jHdo9XZOwnTJaTizuAYQXRV+Wfv4ImAzDYSrjvqu+KShVLtNJwUVxSRBKROwDV6X 9rKwE6Bmfdak9cOBqNHAknEDkZjTga0kTEM8fGRiY3XN7wFnBZSceGN7oUcitVKc q5Rr4zw+BfK4zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:43 2025 by rpki-client