This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft File: chprP17V-3TQNRIhZRPEyB7-Hlw.mft (raw, json) Hash identifier: 6kuofvGHweYFb62RQHajV6RQSMRNSsVLn19QKozZhWc= Subject key identifier: 47:91:61:D6:45:87:2D:4F:09:0C:3D:30:D7:5C:5D:F2:72:D1:7A:3E Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c Certificate serial: 019B45B7EA82A416D74DE2C7DA117DB8A89C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft Manifest number: 0E70 Signing time: Mon 22 Dec 2025 11:00:39 +0000 Manifest this update: Mon 22 Dec 2025 11:00:39 +0000 Manifest next update: Tue 23 Dec 2025 11:00:39 +0000 Files and hashes: 1: chprP17V-3TQNRIhZRPEyB7-Hlw.crl (hash: IVxDCjipKlQ19hhfofiClALRG158GlGPsLNP0yxIW+U=) 2: kXwe6i_ywP7BuQfaKeMIx8MSFQ8.roa (hash: /QfuO16P3y+Nn1KiVZoDEz0J7D7ghuw9uLlF/vWhXd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b7:ea:82:a4:16:d7:4d:e2:c7:da:11:7d:b8:a8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c Validity Not Before: Dec 22 11:00:39 2025 GMT Not After : Dec 23 11:00:39 2025 GMT Subject: CN=479161d645872d4f090c3d30d75c5df272d17a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bc:35:81:ad:78:89:8f:0d:02:72:0d:f8:13: 61:5f:3a:dc:d6:3b:4b:9e:cc:6a:34:00:58:a8:41: e5:f9:aa:b6:42:81:0f:58:72:9a:40:a5:4b:0c:97: 3c:0c:4a:e4:6d:2c:ae:cc:82:c7:d8:37:9d:01:f8: 20:59:1b:75:ba:8d:94:23:53:d2:88:57:cc:34:33: 4d:01:0e:85:d4:5a:4d:c7:7c:fa:03:81:38:50:a2: 51:8d:d0:1d:d5:13:87:6e:68:9e:71:39:de:36:9c: af:67:c3:c1:3e:35:9c:ab:82:a1:0f:60:ff:48:c7: e7:12:9c:a6:55:52:9d:30:e9:6e:eb:16:eb:fd:fa: b8:4d:bf:a0:23:01:bb:ff:34:54:1c:45:35:fa:03: 61:66:c3:d3:e8:b0:97:35:e2:af:1e:40:4b:fa:a3: 47:1f:f3:cc:00:4d:b0:93:ec:02:70:b8:9f:be:ed: 2b:29:4a:da:45:61:4f:54:73:ec:84:f7:04:9d:13: 10:6c:90:ca:56:a0:d0:14:5d:a2:f2:c9:e8:28:a8: 99:81:fb:b3:0c:be:be:b6:21:7a:11:32:19:8e:9f: dd:92:3c:01:d8:de:ab:9c:bd:56:04:74:d0:33:7a: 84:ec:18:b4:ff:79:f4:74:3f:d4:31:1f:e4:67:bd: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:91:61:D6:45:87:2D:4F:09:0C:3D:30:D7:5C:5D:F2:72:D1:7A:3E X509v3 Authority Key Identifier: keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:72:aa:fa:2e:67:23:ef:96:14:32:b3:c0:ff:d6:d8:d3:11: 76:0b:1e:35:2c:2f:77:e9:3b:e4:44:2c:8e:6d:30:a7:99:d6: b9:51:00:80:74:28:23:9a:43:ef:17:33:42:9b:03:31:e9:cd: 02:ca:39:84:29:93:da:31:81:bd:55:eb:18:c1:2a:e2:6c:f1: 6f:02:6f:69:ba:4f:6f:ca:55:74:15:d2:39:fc:a1:67:27:43: a2:33:64:9d:97:d9:95:6a:05:98:5e:db:97:a7:58:56:b6:de: 38:7f:81:20:2c:ea:52:5f:d8:01:94:8f:dd:d9:73:f1:bb:ad: 16:e1:65:ee:32:4b:ac:d0:3e:76:92:39:98:e8:53:71:cc:f7: a3:3f:cb:2e:9f:00:22:7b:2c:c5:5d:eb:da:f2:10:06:df:04: 15:88:5d:7a:38:ea:9e:c1:51:dc:fc:ae:b4:91:ed:48:81:2f: b3:3c:e2:ba:50:df:88:14:84:f7:af:53:0b:f4:20:43:ce:55: 91:01:42:10:6d:1b:e4:30:53:bc:0d:9c:ef:73:f5:bc:65:12: 47:5d:0c:57:fd:55:88:ee:e4:87:8a:a7:f8:a4:01:9b:1c:1e: 8d:39:54:22:09:c4:c7:dc:55:6e:99:25:30:c0:2d:a7:c4:8b: 87:5b:49:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFt+qCpBbXTeLH2hF9uKicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMWE2YjNmNWVkNWZiNzRkMDM1MTIyMTY1MTNjNGM4MWVm ZTFlNWMwHhcNMjUxMjIyMTEwMDM5WhcNMjUxMjIzMTEwMDM5WjAzMTEwLwYDVQQD Eyg0NzkxNjFkNjQ1ODcyZDRmMDkwYzNkMzBkNzVjNWRmMjcyZDE3YTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrw1ga14iY8NAnIN+BNhXzrc1jtL nsxqNABYqEHl+aq2QoEPWHKaQKVLDJc8DErkbSyuzILH2DedAfggWRt1uo2UI1PS iFfMNDNNAQ6F1FpNx3z6A4E4UKJRjdAd1ROHbmiecTneNpyvZ8PBPjWcq4KhD2D/ SMfnEpymVVKdMOlu6xbr/fq4Tb+gIwG7/zRUHEU1+gNhZsPT6LCXNeKvHkBL+qNH H/PMAE2wk+wCcLifvu0rKUraRWFPVHPshPcEnRMQbJDKVqDQFF2i8snoKKiZgfuz DL6+tiF6ETIZjp/dkjwB2N6rnL1WBHTQM3qE7Bi0/3n0dD/UMR/kZ7045QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeRYdZFhy1PCQw9MNdcXfJy0Xo+MB8GA1UdIwQY MBaAFHIaaz9e1ft00DUSIWUTxMge/h5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hZjMxMGMtMmJkOC00ZWZkLTg4ZTQt ODBjMzFkYjIwYWM1LzEvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9hZjMxMGMtMmJkOC00ZWZkLTg4ZTQtODBjMzFkYjIwYWM1 LzEvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3Kq+i5n I++WFDKzwP/W2NMRdgseNSwvd+k75EQsjm0wp5nWuVEAgHQoI5pD7xczQpsDMenN Aso5hCmT2jGBvVXrGMEq4mzxbwJvabpPb8pVdBXSOfyhZydDojNknZfZlWoFmF7b l6dYVrbeOH+BICzqUl/YAZSP3dlz8butFuFl7jJLrNA+dpI5mOhTccz3oz/LLp8A InssxV3r2vIQBt8EFYhdejjqnsFR3PyutJHtSIEvszziulDfiBSE969TC/QgQ85V kQFCEG0b5DBTvA2c73P1vGUSR10MV/1ViO7kh4qn+KQBmxwejTlUIgnEx9xVbpkl MMAtp8SLh1tJ6g== -----END CERTIFICATE-----Generated at Mon Dec 22 15:39:50 2025 by rpki-client