This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json) Hash identifier: wVxNA82BNtGvnLOqldWya9Itv9Sz4Ayqmi2e6ZT/CiA= Subject key identifier: 49:9D:D1:8A:EA:BC:40:46:9E:04:69:A1:B2:F6:B7:B3:AB:CE:20:E7 Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92 Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92 Certificate serial: 019B3D90E75CAA9670D1A9036D9F5B72E455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft Manifest number: 0982 Signing time: Sat 20 Dec 2025 21:01:05 +0000 Manifest this update: Sat 20 Dec 2025 21:01:05 +0000 Manifest next update: Sun 21 Dec 2025 21:01:05 +0000 Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: NPdtcnTGyzDSOtS0Sk5Dq/PpWBwYKrzb4ki0kayRmEw=) 2: eO8gPZF0Xg3a6oErz3xsis78_yg.roa (hash: ARYdnlTRJg0XCA/7uUE4AwiYMl9F7vHnb8qFPrerwpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:e7:5c:aa:96:70:d1:a9:03:6d:9f:5b:72:e4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92 Validity Not Before: Dec 20 21:01:05 2025 GMT Not After : Dec 21 21:01:05 2025 GMT Subject: CN=499dd18aeabc40469e0469a1b2f6b7b3abce20e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:be:19:6a:4a:40:38:1c:a5:7b:86:e8:c5: 56:61:16:74:44:2c:72:14:a2:bb:22:05:20:a6:6a: 4e:2b:ea:13:e7:21:e6:8e:2d:76:1f:14:31:98:e7: 90:8f:73:f0:ad:b0:4a:45:8b:e7:e3:82:46:56:91: d8:c6:d2:27:dd:27:ce:31:b5:22:2f:57:08:e0:93: 5a:f0:92:a0:aa:f0:64:52:f3:07:30:47:40:df:9b: eb:c6:69:45:c2:79:99:2e:2e:a0:be:f1:66:ec:ed: 5b:3d:2e:64:9e:93:93:1c:b9:17:9e:2a:1b:08:06: 66:3c:ea:8b:7c:10:91:98:d3:46:6d:2e:06:f5:f4: e7:25:70:1a:21:ad:3c:06:56:eb:0b:4a:65:15:48: a5:ed:bf:55:36:32:01:cf:12:17:ac:58:e3:21:b9: 50:d3:44:2f:99:65:40:fd:1f:f9:9e:85:8b:66:fa: df:f8:f8:36:b3:b8:ad:12:b3:bf:b3:9e:b9:8a:ad: 64:45:fc:48:d3:3f:e2:2b:f1:ae:fe:5d:3d:d0:ad: 91:7f:34:30:b6:0a:ce:dd:ee:c8:04:58:6d:72:4c: 7a:ef:e9:7d:1b:98:ee:7c:de:15:3b:f5:b7:71:0d: 00:5b:c4:81:e2:2d:2c:93:f4:e8:8e:9b:a7:a3:fa: ee:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9D:D1:8A:EA:BC:40:46:9E:04:69:A1:B2:F6:B7:B3:AB:CE:20:E7 X509v3 Authority Key Identifier: keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a6:9b:7d:b1:83:8d:7f:1a:fb:87:7c:0e:02:b1:ac:9f:25: fa:bc:98:79:7d:ff:c1:d6:15:54:6b:8b:19:ea:98:8a:01:7d: fb:8f:17:46:94:94:bd:40:0a:6d:7a:49:9a:58:e2:d7:80:f1: db:eb:0a:1e:5a:d5:ce:9f:66:e7:e7:b9:b3:64:94:d1:95:32: 0a:e9:f1:fb:6c:1f:be:11:6f:97:e5:2b:53:4a:c1:f0:cd:d8: d6:eb:5a:9e:c4:82:d9:0b:e5:4d:21:90:7e:cc:51:a9:cc:c8: bb:e0:ff:c3:cf:48:d3:57:dc:8a:2e:5c:33:72:29:4b:0f:2d: a0:f5:04:a0:17:f5:f9:09:36:66:db:9a:8d:04:99:66:a4:e3: 77:48:e2:57:9b:05:e7:12:e8:9b:a3:5d:aa:23:3b:fb:74:3f: 22:1b:cc:49:9f:13:76:ee:b0:d7:30:71:df:7a:ff:69:41:ee: 52:9a:3b:39:a5:92:48:b8:5b:49:f8:87:e9:a8:5c:73:b5:d2: 22:60:9c:55:df:cd:5e:05:1b:72:41:68:79:ab:96:a3:cf:32: 2e:52:39:92:c7:41:69:c6:73:7d:71:88:f9:80:6e:66:c0:4f: b0:79:8d:41:08:22:54:a6:47:fc:e0:4d:f2:f6:5d:1b:9c:6c: 0d:07:ad:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kOdcqpZw0akDbZ9bcuRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMTA4YTI4YzcwN2IwZTVjMmMyZTZjMjEzN2Q0NTg3OTEx NGJiOTIwHhcNMjUxMjIwMjEwMTA1WhcNMjUxMjIxMjEwMTA1WjAzMTEwLwYDVQQD Eyg0OTlkZDE4YWVhYmM0MDQ2OWUwNDY5YTFiMmY2YjdiM2FiY2UyMGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytW+GWpKQDgcpXuG6MVWYRZ0RCxy FKK7IgUgpmpOK+oT5yHmji12HxQxmOeQj3PwrbBKRYvn44JGVpHYxtIn3SfOMbUi L1cI4JNa8JKgqvBkUvMHMEdA35vrxmlFwnmZLi6gvvFm7O1bPS5knpOTHLkXniob CAZmPOqLfBCRmNNGbS4G9fTnJXAaIa08BlbrC0plFUil7b9VNjIBzxIXrFjjIblQ 00QvmWVA/R/5noWLZvrf+Pg2s7itErO/s565iq1kRfxI0z/iK/Gu/l090K2RfzQw tgrO3e7IBFhtckx67+l9G5jufN4VO/W3cQ0AW8SB4i0sk/Tojpuno/rugQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmd0YrqvEBGngRpobL2t7OrziDnMB8GA1UdIwQY MBaAFAoQiijHB7DlwsLmwhN9RYeRFLuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xMzlkMjMtODAyZC00MjI0LTgzMmUt MWY4NTgxNDIxNzYwLzEvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xMzlkMjMtODAyZC00MjI0LTgzMmUtMWY4NTgxNDIxNzYw LzEvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqabfbGD jX8a+4d8DgKxrJ8l+ryYeX3/wdYVVGuLGeqYigF9+48XRpSUvUAKbXpJmlji14Dx 2+sKHlrVzp9m5+e5s2SU0ZUyCunx+2wfvhFvl+UrU0rB8M3Y1utansSC2QvlTSGQ fsxRqczIu+D/w89I01fcii5cM3IpSw8toPUEoBf1+Qk2ZtuajQSZZqTjd0jiV5sF 5xLom6NdqiM7+3Q/IhvMSZ8Tdu6w1zBx33r/aUHuUpo7OaWSSLhbSfiH6ahcc7XS ImCcVd/NXgUbckFoeauWo88yLlI5ksdBacZzfXGI+YBuZsBPsHmNQQgiVKZH/OBN 8vZdG5xsDQetQw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:52:54 2025 by rpki-client