This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json) Hash identifier: 7ZG51W9ujtUHx+0UzvQh71lLg+XRoV0EvJPiLfVSBzo= Subject key identifier: 27:D5:EF:5C:22:DD:5C:69:AB:F5:FE:99:AD:3C:AE:81:53:8C:C3:96 Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b Certificate serial: 019AF12E781CF4F2487D97D34B0EFFCD0462 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=) 2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: tf0JXcFLKbU3EbehSQtgAtagz8mEC6kd2kDu00YDZhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:78:1c:f4:f2:48:7d:97:d3:4b:0e:ff:cd:04:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=27d5ef5c22dd5c69abf5fe99ad3cae81538cc396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:c8:18:84:5f:44:9b:73:00:f0:a0:74:ee: 7c:b8:09:a4:7c:82:76:39:0f:d5:b0:92:7c:00:f6: 7a:07:e5:68:d6:50:c6:dd:e9:5f:05:a9:0c:a7:7f: 53:51:83:e2:df:96:50:27:b3:9f:5c:88:f2:9d:f8: cf:ad:09:83:1f:37:9b:55:00:03:00:3e:92:a9:4f: 5b:52:0b:93:9b:29:be:85:6b:f4:7e:02:7a:ef:d6: e1:fa:b2:1a:68:79:0d:9a:c2:cd:52:a8:8c:ac:be: b5:3e:b3:d4:eb:a8:5b:e9:de:04:52:47:b7:32:65: 71:7d:5c:25:43:85:86:3c:75:7d:bf:6c:e7:4a:d3: 5c:44:84:51:76:e1:f1:52:78:c4:f5:8f:5c:68:66: 29:d4:98:78:fe:3b:47:f6:3f:63:59:f1:d3:59:4e: 7f:89:58:a7:10:c3:5a:96:5d:a5:57:df:04:92:7a: 4f:e0:52:2f:45:e4:44:a6:c4:c3:b9:55:30:fa:57: d2:53:a9:3e:cd:91:13:3a:4f:96:17:90:cc:d7:e5: 6e:11:71:a8:23:aa:fe:10:91:0a:01:b9:ed:5b:0e: 85:fa:fa:57:9c:91:5b:9f:b7:5c:d2:e3:ca:ae:77: c0:2b:e6:67:1f:79:d1:78:81:e6:73:8a:47:08:31: 82:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D5:EF:5C:22:DD:5C:69:AB:F5:FE:99:AD:3C:AE:81:53:8C:C3:96 X509v3 Authority Key Identifier: keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:da:11:f7:8d:cc:46:60:19:6a:d9:40:53:14:c6:8a:60:2d: 0f:4a:bd:9a:ec:bb:67:de:76:7e:be:41:d2:b0:10:d5:77:1a: 10:7c:c5:78:c4:8a:3a:bc:5b:1c:3e:fa:d6:e2:ae:3b:37:f0: 4b:1b:55:86:f5:2c:2c:7f:a2:b2:e4:bb:5e:f5:42:40:c8:eb: 1b:4f:29:ad:5c:e1:a9:9e:f6:c1:7b:e8:2a:cd:31:c5:c6:88: 03:be:d2:80:5c:91:c7:38:a1:07:7c:89:42:99:f8:f5:69:6b: dd:41:17:11:10:cf:4c:47:dd:36:a0:60:8c:80:0f:3f:6c:55: 4a:9f:80:c1:4b:61:ff:6a:54:1d:e2:04:d9:af:a3:00:6a:41: 12:63:d1:4d:c8:91:47:2c:9e:0d:ce:7d:b9:53:35:b4:33:9d: 1b:a1:0c:0f:b5:f6:48:2e:5e:93:e5:2a:5c:20:eb:4d:47:da: 12:44:39:e1:26:96:2e:8f:f1:1f:aa:2e:58:ae:c9:f2:92:3b: 1a:3a:25:ca:db:72:ba:8e:87:99:f2:f6:86:fa:bb:36:f0:ad: 58:27:f6:f7:bc:38:53:8e:85:ef:2e:df:25:22:a0:82:89:89: 16:8c:2b:59:20:38:2f:15:ab:bb:b5:2b:98:b7:57:f2:11:ee: 8b:b5:c0:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLngc9PJIfZfTSw7/zQRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDUxOGE1NzA2OWNhZmQ4M2UyMWI1YzYwZmIyNjJkOGVk ZjM0MmIwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD EygyN2Q1ZWY1YzIyZGQ1YzY5YWJmNWZlOTlhZDNjYWU4MTUzOGNjMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDPIGIRfRJtzAPCgdO58uAmkfIJ2 OQ/VsJJ8APZ6B+Vo1lDG3elfBakMp39TUYPi35ZQJ7OfXIjynfjPrQmDHzebVQAD AD6SqU9bUguTmym+hWv0fgJ679bh+rIaaHkNmsLNUqiMrL61PrPU66hb6d4EUke3 MmVxfVwlQ4WGPHV9v2znStNcRIRRduHxUnjE9Y9caGYp1Jh4/jtH9j9jWfHTWU5/ iVinEMNall2lV98EknpP4FIvReREpsTDuVUw+lfSU6k+zZETOk+WF5DM1+VuEXGo I6r+EJEKAbntWw6F+vpXnJFbn7dc0uPKrnfAK+ZnH3nReIHmc4pHCDGCCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfV71wi3Vxpq/X+ma08roFTjMOWMB8GA1UdIwQY MBaAFHJFGKVwacr9g+IbXGD7Ji2O3zQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMt N2Y0YmQ5YjU0ZTYyLzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMtN2Y0YmQ5YjU0ZTYy LzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNoR943M RmAZatlAUxTGimAtD0q9muy7Z952fr5B0rAQ1XcaEHzFeMSKOrxbHD761uKuOzfw SxtVhvUsLH+isuS7XvVCQMjrG08prVzhqZ72wXvoKs0xxcaIA77SgFyRxzihB3yJ Qpn49Wlr3UEXERDPTEfdNqBgjIAPP2xVSp+AwUth/2pUHeIE2a+jAGpBEmPRTciR RyyeDc59uVM1tDOdG6EMD7X2SC5ek+UqXCDrTUfaEkQ54SaWLo/xH6ouWK7J8pI7 Gjolyttyuo6HmfL2hvq7NvCtWCf297w4U46F7y7fJSKggomJFowrWSA4LxWru7Ur mLdX8hHui7XAMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:47 2025 by rpki-client