This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json) Hash identifier: WX+m/vErfqwnT5WqSxeEnm/FNUrTebCmt2PpvgLuwyQ= Subject key identifier: 02:A2:3F:6A:F7:03:50:52:09:A1:79:1E:DF:40:A4:2E:57:8B:AF:ED Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f Certificate serial: 019AF12DA8F9C24FA4098FF49AB7C2DF9DE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft Manifest number: 0570 Signing time: Sat 06 Dec 2025 01:01:32 +0000 Manifest this update: Sat 06 Dec 2025 01:01:32 +0000 Manifest next update: Sun 07 Dec 2025 01:01:32 +0000 Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: hqsgic3fALxHBAcSZRhyYkOgjveTsAH97bNax5xsmNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a8:f9:c2:4f:a4:09:8f:f4:9a:b7:c2:df:9d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f Validity Not Before: Dec 6 01:01:32 2025 GMT Not After : Dec 7 01:01:32 2025 GMT Subject: CN=02a23f6af703505209a1791edf40a42e578bafed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:fd:bf:ac:6e:40:45:e0:14:89:38:6f:5c: 61:c3:df:a8:cf:c3:56:96:b5:26:47:07:07:f9:62: 8a:fd:cc:d6:78:3a:bc:24:d0:7f:fc:0a:3e:f1:90: 7e:bc:b0:f5:2a:bf:4d:a6:a3:6c:87:cd:f1:cc:a0: 42:a5:8b:b2:4e:3b:db:6e:22:5c:60:61:25:7d:c9: b0:a8:bb:50:e9:7a:e1:c5:76:b6:21:70:c4:55:73: 55:15:b3:8b:d3:d9:10:96:64:f0:51:05:cb:e1:33: de:a4:ac:84:61:78:7b:e7:55:3c:6e:5f:4b:ab:2f: 90:fb:b3:62:53:41:4a:11:72:a4:41:80:a8:56:d4: d2:7d:37:e8:c2:d3:92:02:45:ec:bc:44:e1:28:c0: 25:3c:a2:59:a9:6e:c8:25:96:fa:6d:74:83:64:00: 15:43:ad:0f:2c:d0:0f:ac:f2:b7:c5:a0:78:70:b3: b5:16:76:f9:0e:98:55:7e:c0:19:64:fd:54:86:c3: d4:9c:fb:3b:29:3a:e4:0e:74:cd:c0:b3:fd:75:cc: 4a:ce:fb:2e:0e:33:f7:00:5c:d6:52:bd:03:8a:3e: 28:02:c0:f6:5d:22:a2:d4:60:5f:0c:8d:1d:c6:70: f7:2e:eb:14:c0:28:a3:33:b2:9f:a6:56:15:6d:c2: 71:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A2:3F:6A:F7:03:50:52:09:A1:79:1E:DF:40:A4:2E:57:8B:AF:ED X509v3 Authority Key Identifier: keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:2a:94:67:2d:96:96:d5:39:45:97:e1:9b:ea:b2:a5:5a:d9: a9:5a:b2:7e:5d:4e:7d:51:ae:ec:e5:45:2a:35:f4:0a:f4:10: 87:0b:99:c6:25:66:89:4c:58:d8:ac:2c:40:b2:cd:f7:1f:53: 72:da:d6:c5:e5:64:53:36:17:3f:68:d6:de:85:c5:77:b3:87: e5:58:a3:e3:ba:ec:48:f6:01:ce:8c:71:4c:ea:3d:c4:1d:6a: ff:da:8f:ce:73:fa:23:96:f0:30:49:9e:3f:52:e1:bf:04:33: cb:4e:a7:bc:e0:b3:9d:ca:a3:28:5c:89:83:e7:65:2a:f1:ac: e8:a8:51:0b:36:b9:84:d3:0e:70:e5:40:7d:5d:bd:df:11:60: 93:09:a4:fa:50:3c:08:dd:fd:47:2b:4d:36:51:04:92:12:16: 05:dc:44:7e:1d:ef:f0:fc:7f:5f:6d:09:79:53:04:56:88:22: ee:d8:1a:f2:17:e6:a4:93:dd:5a:81:43:31:1d:fe:7a:79:0c: 44:54:a5:a0:7a:84:27:1a:ca:e2:48:7b:d0:e4:81:30:e5:ff: f5:8c:90:db:f3:40:ae:8a:eb:f8:8c:5d:26:cd:8e:04:39:b2: e4:28:39:19:ea:30:53:14:77:4a:3a:be:47:4c:c5:cd:ad:de: be:0c:96:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaj5wk+kCY/0mrfC353jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YThiOGZlMGM4ODVhNDVmMjQ4NTUyMzM0MmU5YmE4ZGM4 OWU2OGYwHhcNMjUxMjA2MDEwMTMyWhcNMjUxMjA3MDEwMTMyWjAzMTEwLwYDVQQD EygwMmEyM2Y2YWY3MDM1MDUyMDlhMTc5MWVkZjQwYTQyZTU3OGJhZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAD9v6xuQEXgFIk4b1xhw9+oz8NW lrUmRwcH+WKK/czWeDq8JNB//Ao+8ZB+vLD1Kr9NpqNsh83xzKBCpYuyTjvbbiJc YGElfcmwqLtQ6XrhxXa2IXDEVXNVFbOL09kQlmTwUQXL4TPepKyEYXh751U8bl9L qy+Q+7NiU0FKEXKkQYCoVtTSfTfowtOSAkXsvEThKMAlPKJZqW7IJZb6bXSDZAAV Q60PLNAPrPK3xaB4cLO1Fnb5DphVfsAZZP1UhsPUnPs7KTrkDnTNwLP9dcxKzvsu DjP3AFzWUr0Dij4oAsD2XSKi1GBfDI0dxnD3LusUwCijM7KfplYVbcJxXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKiP2r3A1BSCaF5Ht9ApC5Xi6/tMB8GA1UdIwQY MBaAFAiouP4MiFpF8khVIzQum6jcieaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0tpNF9neUlXa1h5U0ZVak5DNmJxTnlKNW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mOGU1OTktYjU3YS00NGEyLTljMzUt OWVlNTM0NDJjM2U5LzEvQ0tpNF9neUlXa1h5U0ZVak5DNmJxTnlKNW84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mOGU1OTktYjU3YS00NGEyLTljMzUtOWVlNTM0NDJjM2U5 LzEvQ0tpNF9neUlXa1h5U0ZVak5DNmJxTnlKNW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiqUZy2W ltU5RZfhm+qypVrZqVqyfl1OfVGu7OVFKjX0CvQQhwuZxiVmiUxY2KwsQLLN9x9T ctrWxeVkUzYXP2jW3oXFd7OH5Vij47rsSPYBzoxxTOo9xB1q/9qPznP6I5bwMEme P1LhvwQzy06nvOCzncqjKFyJg+dlKvGs6KhRCza5hNMOcOVAfV293xFgkwmk+lA8 CN39RytNNlEEkhIWBdxEfh3v8Px/X20JeVMEVogi7tga8hfmpJPdWoFDMR3+enkM RFSloHqEJxrK4kh70OSBMOX/9YyQ2/NArorr+IxdJs2OBDmy5Cg5GeowUxR3Sjq+ R0zFza3evgyWhw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:02:46 2025 by rpki-client