This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json) Hash identifier: FMFzRxTqT0mz+7bEYnEauOqVDTXZiLmXFiQu+dL0qGY= Subject key identifier: F0:05:CE:0F:1C:3C:D3:27:21:14:7B:6B:90:E8:38:D8:42:B1:97:BB Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce Certificate serial: 019B2B8A5CAE7A7AF5FBA81A3611F19B0E19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft Manifest number: 0F7E Signing time: Wed 17 Dec 2025 09:00:46 +0000 Manifest this update: Wed 17 Dec 2025 09:00:46 +0000 Manifest next update: Thu 18 Dec 2025 09:00:46 +0000 Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: zbA74Adf70BBLSy/tJFAlBb8a93IEXCq3J1yRtGQM4Y=) 2: giN_6FdawPpa4U_l8L6GI6SQrxU.roa (hash: RqHHQJIozmk50JvefJWS+0ODDB8lkETbKjm2gNuR+7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:5c:ae:7a:7a:f5:fb:a8:1a:36:11:f1:9b:0e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce Validity Not Before: Dec 17 09:00:46 2025 GMT Not After : Dec 18 09:00:46 2025 GMT Subject: CN=f005ce0f1c3cd32721147b6b90e838d842b197bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c9:d0:6f:7e:16:fe:28:15:1c:b1:fc:bc:40: da:e4:26:12:5c:26:57:21:0d:a6:47:8e:bd:08:65: 26:d8:4a:22:90:bf:78:43:44:d2:f4:b4:87:17:5f: 6f:1e:14:93:09:ed:af:95:3c:49:11:8a:23:84:f5: d0:60:fb:38:04:67:6e:16:20:21:9c:47:71:ff:03: b0:38:4a:71:97:fc:3d:cf:33:6f:57:ed:4d:01:34: 51:a3:43:fb:fb:42:02:32:2b:01:2e:64:ce:37:53: b1:f9:0e:73:c8:0a:4c:ec:ec:d6:12:5f:63:37:59: 16:67:09:01:1f:e4:b1:4e:76:2a:2d:2b:14:4c:2d: 2c:44:ee:d5:46:79:92:f3:d0:27:c8:52:1d:ef:df: 3a:cc:6e:0f:59:36:74:b6:96:f4:03:21:93:b2:2c: 39:f7:4a:e4:da:3c:60:30:aa:2b:76:a1:c7:e5:bf: 63:93:a4:2e:0c:99:58:9b:86:f1:f5:c4:76:a5:b1: 15:0e:f7:93:34:5a:d9:3e:44:56:d1:84:75:02:52: ee:11:5a:69:11:d1:5b:65:25:fe:12:34:cc:35:c1: 7d:cf:c8:c3:e8:b5:08:7f:9c:52:81:91:5d:9a:dc: 1d:e6:c5:c1:55:56:98:2b:b7:9f:a1:8b:04:37:13: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:05:CE:0F:1C:3C:D3:27:21:14:7B:6B:90:E8:38:D8:42:B1:97:BB X509v3 Authority Key Identifier: keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f3:0d:51:7f:64:60:f8:b2:db:a1:9e:2f:fb:aa:5f:9e:9f: f5:c9:1e:76:3d:13:c3:e8:15:e3:06:28:d8:1c:0b:20:93:5a: c0:a7:c3:39:e9:cd:6a:b7:fd:23:4e:75:44:5a:f3:4b:e7:36: 81:0e:e6:e9:d2:f1:21:5f:79:f4:88:81:6e:b9:a1:f8:24:12: 53:f8:55:ba:d7:d9:95:4e:6d:32:ba:52:db:e4:0a:37:bd:3d: 7c:45:18:9c:a9:2a:39:f0:c9:2e:50:1e:7a:c8:25:3d:a9:69: 57:b5:c8:3e:fa:21:d7:85:78:61:dc:b9:3e:22:96:dd:22:14: 8c:94:18:85:a3:03:d1:c9:34:0a:a3:90:aa:27:7a:c4:9d:ba: 6a:27:fe:9d:83:7a:2a:ad:3d:51:20:3e:18:a2:4c:ae:02:1f: d2:6b:40:36:04:03:60:b2:c5:0a:60:8d:d6:f2:d4:45:47:c0: 96:ff:a1:fe:40:2a:b0:21:1d:64:bc:a3:2e:59:13:fc:9e:3b: e9:c6:63:45:c3:d8:ef:02:b1:ab:0d:95:bd:0a:8e:d9:07:b5: ee:2b:dd:da:b0:1c:4c:09:00:50:e9:9c:12:1a:2c:c7:4d:18: 78:61:80:24:db:1d:5d:81:07:58:4c:f4:29:b3:9a:46:d0:75: 16:be:9f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrilyuenr1+6gaNhHxmw4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4N2Y1OWMzNmUyMmQxZjkwMzg0ZjQxZGE2MDcwNWFjNzRk Nzc5Y2UwHhcNMjUxMjE3MDkwMDQ2WhcNMjUxMjE4MDkwMDQ2WjAzMTEwLwYDVQQD EyhmMDA1Y2UwZjFjM2NkMzI3MjExNDdiNmI5MGU4MzhkODQyYjE5N2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisnQb34W/igVHLH8vEDa5CYSXCZX IQ2mR469CGUm2EoikL94Q0TS9LSHF19vHhSTCe2vlTxJEYojhPXQYPs4BGduFiAh nEdx/wOwOEpxl/w9zzNvV+1NATRRo0P7+0ICMisBLmTON1Ox+Q5zyApM7OzWEl9j N1kWZwkBH+SxTnYqLSsUTC0sRO7VRnmS89AnyFId7986zG4PWTZ0tpb0AyGTsiw5 90rk2jxgMKordqHH5b9jk6QuDJlYm4bx9cR2pbEVDveTNFrZPkRW0YR1AlLuEVpp EdFbZSX+EjTMNcF9z8jD6LUIf5xSgZFdmtwd5sXBVVaYK7efoYsENxN3OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAFzg8cPNMnIRR7a5DoONhCsZe7MB8GA1UdIwQY MBaAFAh/WcNuItH5A4T0HaYHBax013nOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgt YzA0YmUwMjAzN2U4LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgtYzA0YmUwMjAzN2U4 LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvMNUX9k YPiy26GeL/uqX56f9ckedj0Tw+gV4wYo2BwLIJNawKfDOenNarf9I051RFrzS+c2 gQ7m6dLxIV959IiBbrmh+CQSU/hVutfZlU5tMrpS2+QKN709fEUYnKkqOfDJLlAe esglPalpV7XIPvoh14V4Ydy5PiKW3SIUjJQYhaMD0ck0CqOQqid6xJ26aif+nYN6 Kq09USA+GKJMrgIf0mtANgQDYLLFCmCN1vLURUfAlv+h/kAqsCEdZLyjLlkT/J47 6cZjRcPY7wKxqw2VvQqO2Qe17ivd2rAcTAkAUOmcEhosx00YeGGAJNsdXYEHWEz0 KbOaRtB1Fr6fuA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:24:23 2025 by rpki-client