This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json) Hash identifier: msOLvJeSxD/pvb8q9c7xtsgCjVMKUapXF6S0DgxDI74= Subject key identifier: E3:AA:4F:09:21:97:E5:5D:B1:3E:2D:9C:B6:C2:1D:61:A9:47:F7:BC Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39 Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739 Certificate serial: 019B4F29C3E1318982F69D307DDBAB64BAD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft Manifest number: 11C7 Signing time: Wed 24 Dec 2025 07:01:35 +0000 Manifest this update: Wed 24 Dec 2025 07:01:35 +0000 Manifest next update: Thu 25 Dec 2025 07:01:35 +0000 Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: jm4yMDfm8BoDyXy+G+YUE3VKuFlqB5g/hZPALxyndSo=) 2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:c3:e1:31:89:82:f6:9d:30:7d:db:ab:64:ba:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a16747018e944e405a6d23a564701a155f43739 Validity Not Before: Dec 24 07:01:35 2025 GMT Not After : Dec 25 07:01:35 2025 GMT Subject: CN=e3aa4f092197e55db13e2d9cb6c21d61a947f7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:63:7d:c6:3d:76:74:43:65:0e:68:63:46: ad:35:65:59:99:db:b1:86:5a:ab:c9:08:2b:35:bd: 87:97:2d:6d:7c:33:6c:c1:f2:01:8d:79:02:a1:13: a0:fe:db:7b:3d:9c:ab:2b:c6:0a:21:42:dd:fa:59: e4:fc:5f:18:5a:e8:3e:06:33:2e:8c:48:ee:f2:5c: fd:51:8b:fd:55:6e:5b:22:b4:22:8c:b0:39:ca:b4: 0c:c9:b8:41:22:f4:f4:48:3f:c4:7b:68:71:8a:dc: 66:9a:cf:6f:25:a5:9d:94:f5:c1:84:40:89:e3:08: 3c:83:0d:2b:df:64:76:ca:eb:88:82:79:b2:5b:92: 30:f1:dd:db:f6:ac:d1:a7:76:dd:34:4b:f4:a4:41: d0:48:82:da:ee:a4:19:63:69:fe:2b:27:ad:3c:6f: 84:2a:85:c4:c9:3d:ee:1f:dd:c6:f3:dd:33:2c:f3: 48:21:35:bb:93:52:bb:62:b1:ef:38:f7:6b:fc:f8: b5:5c:9b:74:18:66:e8:a0:81:f2:c7:fb:46:65:95: 57:4d:cb:a4:5a:bc:dd:13:cf:4e:7b:4c:b1:91:36: 60:a4:de:c7:97:72:a3:a5:29:3a:07:95:92:3a:99: 19:40:d9:6f:29:77:48:87:9e:a0:46:3b:49:62:de: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AA:4F:09:21:97:E5:5D:B1:3E:2D:9C:B6:C2:1D:61:A9:47:F7:BC X509v3 Authority Key Identifier: keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:3f:54:55:93:b6:eb:ef:6a:4f:9f:a0:3b:aa:d2:54:5a:08: ff:7d:ce:8e:b7:ba:3d:a3:46:06:7d:08:91:f3:c2:ac:b1:f0: 4b:46:b4:a2:17:fb:48:2f:cb:fc:30:df:3b:61:4b:03:1d:66: e9:eb:9c:37:2a:83:a0:e7:b3:33:9c:a7:12:e8:3a:9a:0f:43: b3:3d:1a:2c:a3:06:ef:9f:3f:cb:36:c7:1e:3b:79:07:40:52: 29:1b:1b:70:bd:60:fb:09:ae:f8:6c:3a:72:2a:b4:15:78:84: 2c:24:7e:9d:15:62:a2:ae:b3:59:1d:4e:e0:12:ce:53:6d:7a: 70:58:51:e7:0a:c2:11:7b:66:07:34:3d:b4:95:ad:b2:e7:a9: bf:08:23:11:33:24:8b:4c:b5:f4:e7:d1:5d:f4:b5:2e:ed:b4: 1a:a5:0a:ac:9d:f5:08:17:78:22:f8:1c:3f:ed:a4:d0:06:29: 4b:09:39:ff:4b:94:8d:3d:25:17:b2:52:13:0e:6a:01:25:fe: 37:cf:00:ac:9f:91:aa:0e:d8:b4:33:e9:da:5c:a2:07:f8:35: ef:ef:f0:91:90:7a:34:46:d2:67:fb:f4:1f:ac:47:61:40:97: 4d:a5:31:85:99:e6:71:fe:da:20:b3:71:03:aa:60:30:90:47: ed:c5:73:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKcPhMYmC9p0wfdurZLrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMTY3NDcwMThlOTQ0ZTQwNWE2ZDIzYTU2NDcwMWExNTVm NDM3MzkwHhcNMjUxMjI0MDcwMTM1WhcNMjUxMjI1MDcwMTM1WjAzMTEwLwYDVQQD EyhlM2FhNGYwOTIxOTdlNTVkYjEzZTJkOWNiNmMyMWQ2MWE5NDdmN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11djfcY9dnRDZQ5oY0atNWVZmdux hlqryQgrNb2Hly1tfDNswfIBjXkCoROg/tt7PZyrK8YKIULd+lnk/F8YWug+BjMu jEju8lz9UYv9VW5bIrQijLA5yrQMybhBIvT0SD/Ee2hxitxmms9vJaWdlPXBhECJ 4wg8gw0r32R2yuuIgnmyW5Iw8d3b9qzRp3bdNEv0pEHQSILa7qQZY2n+KyetPG+E KoXEyT3uH93G890zLPNIITW7k1K7YrHvOPdr/Pi1XJt0GGbooIHyx/tGZZVXTcuk WrzdE89Oe0yxkTZgpN7Hl3KjpSk6B5WSOpkZQNlvKXdIh56gRjtJYt6e7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOqTwkhl+VdsT4tnLbCHWGpR/e8MB8GA1UdIwQY MBaAFAoWdHAY6UTkBabSOlZHAaFV9Dc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWIt ZDlkMGFhMjhhYjJiLzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWItZDlkMGFhMjhhYjJi LzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsz9UVZO2 6+9qT5+gO6rSVFoI/33Ojre6PaNGBn0IkfPCrLHwS0a0ohf7SC/L/DDfO2FLAx1m 6eucNyqDoOezM5ynEug6mg9Dsz0aLKMG758/yzbHHjt5B0BSKRsbcL1g+wmu+Gw6 ciq0FXiELCR+nRVioq6zWR1O4BLOU216cFhR5wrCEXtmBzQ9tJWtsuepvwgjETMk i0y19OfRXfS1Lu20GqUKrJ31CBd4IvgcP+2k0AYpSwk5/0uUjT0lF7JSEw5qASX+ N88ArJ+Rqg7YtDPp2lyiB/g17+/wkZB6NEbSZ/v0H6xHYUCXTaUxhZnmcf7aILNx A6pgMJBH7cVzdw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:41:22 2025 by rpki-client