This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json) Hash identifier: HopnT1meky9L0RUHCmlmNtoyDr8RUX8/18PFSFCNayc= Subject key identifier: E9:9C:87:A4:64:79:9B:72:33:56:1C:AF:C9:7E:FF:1B:B1:22:5D:D2 Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52 Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652 Certificate serial: 019B31FAA8ACAB7CC140C582D44B16C2819A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 15:01:09 +0000 Manifest this update: Thu 18 Dec 2025 15:01:09 +0000 Manifest next update: Fri 19 Dec 2025 15:01:09 +0000 Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: XPPVUBMTxm/ug2PL0dt1PyrUdY8HxwcD6hGx96vwCyU=) 2: FuulQ2OCXlEeKOdXSHSbO4OXD9g.roa (hash: vDsoze7SRq5/DcfNiXEwTROz6jQawFkLYnYc3el4ix8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:a8:ac:ab:7c:c1:40:c5:82:d4:4b:16:c2:81:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652 Validity Not Before: Dec 18 15:01:09 2025 GMT Not After : Dec 19 15:01:09 2025 GMT Subject: CN=e99c87a464799b7233561cafc97eff1bb1225dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:0f:d9:eb:cc:5d:8c:a4:5f:7e:56:97:e8: 7f:34:f1:29:ae:0e:a8:13:9c:6f:e0:37:04:34:43: 5c:35:4a:91:b0:2c:a1:44:c1:f9:56:e6:00:b2:72: 35:e9:55:a6:7d:a8:e4:ef:ca:b8:e3:af:74:d4:24: d6:43:82:17:83:0e:bc:65:4b:0f:b0:a1:2c:55:5f: 39:ec:52:45:66:f0:d0:36:48:1f:11:ad:a4:6b:10: ea:d9:dc:d2:f1:da:ef:55:e3:c0:82:1e:ed:70:98: bb:19:17:a7:95:d5:a4:0a:55:85:57:86:b1:5f:15: 79:de:af:14:fb:ac:2f:2c:23:12:a6:16:51:26:7b: bf:25:07:10:61:36:5d:71:52:2f:ca:10:bb:41:98: f9:fb:be:f0:20:28:b0:4f:e8:fd:61:79:61:d9:7e: 4e:76:70:e6:8f:64:37:77:20:0c:0d:39:b0:2e:db: f8:34:3e:7d:af:a9:eb:db:57:5c:6d:38:34:6a:dc: d8:e8:70:c7:19:4f:ab:74:33:0b:07:db:7e:cd:17: 99:9d:ce:44:49:ea:03:9f:19:45:c9:32:62:49:a1: c7:7f:11:f6:cc:f3:a8:ef:31:a2:ae:f2:52:3e:b8: 3c:22:54:53:00:69:f2:ee:3d:e4:6f:a0:4c:96:21: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9C:87:A4:64:79:9B:72:33:56:1C:AF:C9:7E:FF:1B:B1:22:5D:D2 X509v3 Authority Key Identifier: keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d7:24:7c:b7:89:3f:8a:0f:91:bf:86:0a:ba:ec:d0:db:37: bd:e9:5c:01:f4:44:9a:77:fc:85:fc:fd:82:be:99:e5:5c:d7: 88:00:9c:7a:f6:21:ab:cd:48:9e:17:d7:c5:ef:2f:d6:83:28: c5:b7:40:84:35:22:68:bf:8f:9f:04:48:22:b2:48:03:c7:59: 49:8e:a9:b8:a3:b2:c8:b3:2b:09:0a:74:e7:68:e4:e4:8e:23: ec:b8:bd:ac:94:1c:67:ab:a4:f2:8e:e0:db:f7:a5:03:0b:ab: a3:7e:5d:55:1e:4f:91:8e:df:d3:91:c0:08:72:62:a6:54:54: 63:f4:30:71:95:b4:7d:c0:2c:c9:20:30:f7:bd:13:7e:09:19: cb:36:3f:f9:6f:2c:86:ca:81:ad:8c:6a:d6:d5:3f:b9:84:70: 12:f8:30:cf:94:2a:4b:d2:cf:21:fe:17:e4:ad:5c:e6:53:48: 68:d9:15:09:b3:1d:0a:c3:ce:64:8e:80:03:61:52:0d:51:05: 65:98:6a:56:2c:23:9e:b4:58:0e:36:ee:e8:7c:58:86:78:40: 12:6e:ea:44:11:f1:84:c0:08:35:10:c0:5a:22:7c:27:af:37: 41:a8:57:ba:c1:78:ac:51:ad:bb:76:7f:9e:a6:7c:d7:92:92: 33:44:14:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+qisq3zBQMWC1EsWwoGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4Mjg1NDczYzk3OGNhNTFjZTU0NjlhYTRhZWRjYTE2NDQ1 YmQ2NTIwHhcNMjUxMjE4MTUwMTA5WhcNMjUxMjE5MTUwMTA5WjAzMTEwLwYDVQQD EyhlOTljODdhNDY0Nzk5YjcyMzM1NjFjYWZjOTdlZmYxYmIxMjI1ZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjgP2evMXYykX35Wl+h/NPEprg6o E5xv4DcENENcNUqRsCyhRMH5VuYAsnI16VWmfajk78q446901CTWQ4IXgw68ZUsP sKEsVV857FJFZvDQNkgfEa2kaxDq2dzS8drvVePAgh7tcJi7GRenldWkClWFV4ax XxV53q8U+6wvLCMSphZRJnu/JQcQYTZdcVIvyhC7QZj5+77wICiwT+j9YXlh2X5O dnDmj2Q3dyAMDTmwLtv4ND59r6nr21dcbTg0atzY6HDHGU+rdDMLB9t+zReZnc5E SeoDnxlFyTJiSaHHfxH2zPOo7zGirvJSPrg8IlRTAGny7j3kb6BMliHgtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmch6RkeZtyM1Ycr8l+/xuxIl3SMB8GA1UdIwQY MBaAFAgoVHPJeMpRzlRpqkrtyhZEW9ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4Zjgt OGUzMDBlZmQxM2JjLzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4ZjgtOGUzMDBlZmQxM2Jj LzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNckfLeJ P4oPkb+GCrrs0Ns3velcAfREmnf8hfz9gr6Z5VzXiACcevYhq81InhfXxe8v1oMo xbdAhDUiaL+PnwRIIrJIA8dZSY6puKOyyLMrCQp052jk5I4j7Li9rJQcZ6uk8o7g 2/elAwuro35dVR5PkY7f05HACHJiplRUY/QwcZW0fcAsySAw970TfgkZyzY/+W8s hsqBrYxq1tU/uYRwEvgwz5QqS9LPIf4X5K1c5lNIaNkVCbMdCsPOZI6AA2FSDVEF ZZhqViwjnrRYDjbu6HxYhnhAEm7qRBHxhMAINRDAWiJ8J683QahXusF4rFGtu3Z/ nqZ815KSM0QUSA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:11:32 2025 by rpki-client