This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json) Hash identifier: ZNGSdeNHw5OPraXW9NAxa3tODhhce6TCjJMU0Tq9C/A= Subject key identifier: 4C:CB:94:A6:78:4E:43:ED:46:8A:EC:1C:93:82:AB:83:18:DB:8B:E3 Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Certificate serial: 019AF2AD8FB0D3CDC98F373348F20D83D319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft Manifest number: 0446 Signing time: Sat 06 Dec 2025 08:00:52 +0000 Manifest this update: Sat 06 Dec 2025 08:00:52 +0000 Manifest next update: Sun 07 Dec 2025 08:00:52 +0000 Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: KkHKfJiK5eyYAEhUeVLuIZezwvWzxP9ls4QI2qg7VD4=) 2: LoNlBcNLDsjTpM52ykl2lebJEjI.roa (hash: lOQ33XAT96wBpF3zqP8+czX8fkzmJEjqnIn0kWh3SsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8f:b0:d3:cd:c9:8f:37:33:48:f2:0d:83:d3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Validity Not Before: Dec 6 08:00:52 2025 GMT Not After : Dec 7 08:00:52 2025 GMT Subject: CN=4ccb94a6784e43ed468aec1c9382ab8318db8be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:d6:dc:67:fc:a2:c2:74:49:53:07:59:73: e5:1f:02:1d:79:34:9c:35:1d:53:a1:ee:7f:03:c2: 2a:e3:a6:c8:54:bb:72:ca:b6:00:2d:27:5b:0a:50: 7b:00:89:61:ab:16:f7:b0:f0:bc:41:2b:65:3f:3f: 25:38:05:4e:6d:24:2a:99:e7:51:6b:0b:da:f6:37: 2b:42:1b:13:38:3d:66:e9:46:e9:38:9a:f7:be:a8: 39:2a:b7:67:c7:91:21:bb:6b:84:ca:fe:ea:11:27: 49:4c:cd:35:22:b6:bd:3d:a0:d2:18:9a:cd:1d:bb: a1:7f:5e:c9:af:2a:3d:13:59:59:c7:da:cd:41:cc: 90:af:0e:30:5a:89:df:3b:93:3c:73:f9:5e:ed:d6: fd:11:b9:2d:73:e3:46:bf:60:2c:53:ac:12:96:50: 43:46:26:1c:23:17:a7:ba:6a:b0:bc:f6:73:04:0a: 3c:8d:95:26:82:c0:96:30:74:e7:af:ca:a9:59:69: 13:60:0b:a6:08:85:d6:a6:47:69:6e:3d:76:10:a8: 83:6c:34:11:65:1f:cb:a2:40:1e:2d:f0:95:dc:62: 3f:53:ea:74:31:2d:76:f8:a1:de:43:6b:0c:88:a3: 8c:49:46:58:f4:90:1a:1d:14:7e:b0:57:6c:4a:79: 24:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CB:94:A6:78:4E:43:ED:46:8A:EC:1C:93:82:AB:83:18:DB:8B:E3 X509v3 Authority Key Identifier: keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:68:fb:e6:de:06:27:4c:4f:d2:29:57:e5:00:5c:62:15:df: 50:f3:86:37:04:7a:d1:85:c2:fa:85:06:fb:d0:15:64:7f:e8: 54:cf:d2:67:fc:d8:07:30:5f:00:70:d6:08:e5:f2:54:98:8d: df:69:be:50:bc:99:aa:e1:28:c9:d7:a2:2c:e5:2f:d0:f6:d0: 93:dd:36:e3:53:b8:61:db:1f:6b:74:99:c3:3b:79:28:d9:8a: 44:b0:1e:54:8a:bf:b2:6e:30:15:48:c3:05:05:22:21:db:24: e7:0f:cc:c8:e1:9e:8a:30:35:08:a9:44:81:a3:a2:65:d5:3b: 0a:f6:a3:ba:75:2e:9b:7f:5a:92:4d:7a:9a:31:f3:f2:b3:bf: 87:44:a5:f3:08:be:84:03:0d:36:6c:92:2c:73:37:1f:d8:15: 27:c2:50:3f:5b:9f:e7:bb:e2:68:b4:6a:13:0d:0e:44:83:0c: 22:b0:6b:ad:47:92:e6:bb:e5:f9:3a:ba:ef:54:f0:7b:4c:a9: c8:dd:fb:e5:ea:9d:30:88:fa:26:4f:c1:75:9c:2f:f6:63:f3: 18:a0:71:94:91:33:24:e1:35:55:cd:1b:60:0c:db:ed:a7:eb: 63:17:bd:47:e8:be:c7:d2:d4:0c:75:b0:3b:7c:9e:c6:d0:1b: a2:b4:0f:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrY+w083JjzczSPINg9MZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh NjUxZjQwHhcNMjUxMjA2MDgwMDUyWhcNMjUxMjA3MDgwMDUyWjAzMTEwLwYDVQQD Eyg0Y2NiOTRhNjc4NGU0M2VkNDY4YWVjMWM5MzgyYWI4MzE4ZGI4YmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGLW3Gf8osJ0SVMHWXPlHwIdeTSc NR1Toe5/A8Iq46bIVLtyyrYALSdbClB7AIlhqxb3sPC8QStlPz8lOAVObSQqmedR awva9jcrQhsTOD1m6UbpOJr3vqg5Krdnx5Ehu2uEyv7qESdJTM01Ira9PaDSGJrN Hbuhf17Jryo9E1lZx9rNQcyQrw4wWonfO5M8c/le7db9Ebktc+NGv2AsU6wSllBD RiYcIxenumqwvPZzBAo8jZUmgsCWMHTnr8qpWWkTYAumCIXWpkdpbj12EKiDbDQR ZR/LokAeLfCV3GI/U+p0MS12+KHeQ2sMiKOMSUZY9JAaHRR+sFdsSnkk/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzLlKZ4TkPtRorsHJOCq4MY24vjMB8GA1UdIwQY MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGj75t4G J0xP0ilX5QBcYhXfUPOGNwR60YXC+oUG+9AVZH/oVM/SZ/zYBzBfAHDWCOXyVJiN 32m+ULyZquEoydeiLOUv0PbQk90241O4Ydsfa3SZwzt5KNmKRLAeVIq/sm4wFUjD BQUiIdsk5w/MyOGeijA1CKlEgaOiZdU7CvajunUum39akk16mjHz8rO/h0Sl8wi+ hAMNNmySLHM3H9gVJ8JQP1uf57viaLRqEw0ORIMMIrBrrUeS5rvl+Tq671Twe0yp yN375eqdMIj6Jk/BdZwv9mPzGKBxlJEzJOE1Vc0bYAzb7afrYxe9R+i+x9LUDHWw O3yextAborQPVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:45 2025 by rpki-client