This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft File: ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft (raw, json) Hash identifier: OXp7kWdvFMFhaDchsvrdoD0GXOx5zXJbqp83qvkPJvw= Subject key identifier: 25:80:B0:86:FE:EA:E9:CE:66:24:F6:70:25:7E:C7:59:7C:DF:18:DF Authority key identifier: 72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2 Certificate issuer: /CN=724f14189ab7105620375daf9baa814d6dd937a2 Certificate serial: 019AF12DECEE8B3D4EDAFEE1ECA01A67B01D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft Manifest number: 08CF Signing time: Sat 06 Dec 2025 01:01:50 +0000 Manifest this update: Sat 06 Dec 2025 01:01:50 +0000 Manifest next update: Sun 07 Dec 2025 01:01:50 +0000 Files and hashes: 1: ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl (hash: 2rmU3X/VxF5GSefh4dl/PadsWcVnqo7bqzutBd3ufjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ec:ee:8b:3d:4e:da:fe:e1:ec:a0:1a:67:b0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=724f14189ab7105620375daf9baa814d6dd937a2 Validity Not Before: Dec 6 01:01:50 2025 GMT Not After : Dec 7 01:01:50 2025 GMT Subject: CN=2580b086feeae9ce6624f670257ec7597cdf18df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4d:72:2d:18:55:67:5a:13:b1:d4:96:1d:5e: a1:d4:53:71:72:8f:9a:7f:3a:f1:53:f3:f5:bf:08: d2:4d:32:14:0a:44:ec:d9:16:2c:1a:13:74:fd:34: 01:76:5f:14:3a:42:1a:63:a7:3f:ef:dd:d2:67:29: 6f:8e:d6:02:4b:0b:0d:0a:d2:2a:df:75:f1:26:d1: 64:88:17:7d:57:1a:03:10:43:3b:3e:d5:0e:57:1f: 50:f5:c6:06:54:20:d9:9a:ba:db:83:03:35:01:aa: c7:4a:09:a8:64:20:a8:e4:1a:b6:8d:58:25:8e:d2: 59:39:eb:83:52:56:a3:89:34:f5:d0:a3:cc:3d:ea: e8:8b:fe:5d:2a:2f:e3:bb:ec:18:0e:37:b3:c7:64: 86:14:1d:d4:46:13:f2:ca:2f:4e:60:44:60:9a:20: ad:ee:b4:58:20:14:42:2c:b9:5b:63:f2:83:0f:8e: 8d:14:07:78:d5:64:80:0a:b5:dd:86:fa:17:13:a4: be:ad:88:ea:82:e3:09:e2:8b:ca:2e:7e:e5:7b:ea: a3:d3:d0:68:cf:85:5d:83:4c:55:45:7c:df:2d:75: db:39:3a:a3:49:59:16:a6:c8:c9:fa:65:43:ba:ca: 7f:a1:bf:2c:35:45:61:f4:6f:ac:54:51:ac:e5:a8: 8e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:80:B0:86:FE:EA:E9:CE:66:24:F6:70:25:7E:C7:59:7C:DF:18:DF X509v3 Authority Key Identifier: keyid:72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ee:a0:23:74:8f:52:e3:e9:20:a7:c7:db:94:54:db:9d:3e: f2:45:fb:dc:35:0b:21:fe:f3:e2:3d:78:02:f9:16:4b:25:92: ec:12:47:9f:09:de:17:7a:d7:9b:68:b8:c5:49:d3:d5:b2:14: 9b:b9:5d:e7:3d:e3:8c:ce:6c:99:a7:b4:22:51:d5:1c:b9:0c: 58:15:e6:5b:ee:6c:87:d7:aa:86:3c:09:79:8d:41:42:f7:9a: d2:a2:91:f8:cb:a9:7e:89:5d:37:3b:01:cb:21:59:31:97:7b: 54:72:d7:3e:82:ab:e1:fd:a8:4f:49:34:75:27:6c:63:db:74: cc:32:9f:57:89:7f:d9:66:06:3d:f7:0a:4f:cc:32:9f:18:b6: 1e:43:b8:db:af:14:65:0c:9c:4f:4f:6f:dd:b7:b6:7a:6c:aa: 7e:42:b5:9a:1d:46:5c:2f:2d:82:d3:29:31:a5:39:9e:8f:bd: 2f:d1:42:63:22:4c:cf:76:d6:8d:b2:f1:f7:d1:48:a2:4b:f5: 4d:b1:c4:88:dc:c4:6d:bc:93:96:45:ea:ac:81:c1:43:6f:21: d1:fe:a8:5e:e9:5e:24:80:50:10:d0:f3:90:a8:ab:33:aa:a7: f4:47:e0:c6:5a:3b:cb:9d:ac:53:95:05:04:17:56:97:69:14: 52:dc:59:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLezuiz1O2v7h7KAaZ7AdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNGYxNDE4OWFiNzEwNTYyMDM3NWRhZjliYWE4MTRkNmRk OTM3YTIwHhcNMjUxMjA2MDEwMTUwWhcNMjUxMjA3MDEwMTUwWjAzMTEwLwYDVQQD EygyNTgwYjA4NmZlZWFlOWNlNjYyNGY2NzAyNTdlYzc1OTdjZGYxOGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz01yLRhVZ1oTsdSWHV6h1FNxco+a fzrxU/P1vwjSTTIUCkTs2RYsGhN0/TQBdl8UOkIaY6c/793SZylvjtYCSwsNCtIq 33XxJtFkiBd9VxoDEEM7PtUOVx9Q9cYGVCDZmrrbgwM1AarHSgmoZCCo5Bq2jVgl jtJZOeuDUlajiTT10KPMPeroi/5dKi/ju+wYDjezx2SGFB3URhPyyi9OYERgmiCt 7rRYIBRCLLlbY/KDD46NFAd41WSACrXdhvoXE6S+rYjqguMJ4ovKLn7le+qj09Bo z4Vdg0xVRXzfLXXbOTqjSVkWpsjJ+mVDusp/ob8sNUVh9G+sVFGs5aiOFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWAsIb+6unOZiT2cCV+x1l83xjfMB8GA1UdIwQY MBaAFHJPFBiatxBWIDddr5uqgU1t2TeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2s4VUdKcTNFRllnTjEydm02cUJUVzNaTjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jYmQ3MmItZjY0Yi00NTRlLWI1OGMt MjcxNWViNzEwZTgwLzEvY2s4VUdKcTNFRllnTjEydm02cUJUVzNaTjZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9jYmQ3MmItZjY0Yi00NTRlLWI1OGMtMjcxNWViNzEwZTgw LzEvY2s4VUdKcTNFRllnTjEydm02cUJUVzNaTjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGu6gI3SP UuPpIKfH25RU250+8kX73DULIf7z4j14AvkWSyWS7BJHnwneF3rXm2i4xUnT1bIU m7ld5z3jjM5smae0IlHVHLkMWBXmW+5sh9eqhjwJeY1BQvea0qKR+MupfoldNzsB yyFZMZd7VHLXPoKr4f2oT0k0dSdsY9t0zDKfV4l/2WYGPfcKT8wynxi2HkO4268U ZQycT09v3be2emyqfkK1mh1GXC8tgtMpMaU5no+9L9FCYyJMz3bWjbLx99FIokv1 TbHEiNzEbbyTlkXqrIHBQ28h0f6oXuleJIBQENDzkKirM6qn9Efgxlo7y52sU5UF BBdWl2kUUtxZzA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:50 2025 by rpki-client