This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json) Hash identifier: rN47ADpCN/suPz0jIByHkWYkwVgccFtn42iNeR7CfdY= Subject key identifier: E3:85:B6:FA:A4:22:23:E4:6C:E5:DD:F3:0D:3E:FC:04:AE:2C:DB:3A Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Certificate serial: 019B4023D392F493FF79C1CA1A3C60BFFCA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft Manifest number: 14BF Signing time: Sun 21 Dec 2025 09:00:48 +0000 Manifest this update: Sun 21 Dec 2025 09:00:48 +0000 Manifest next update: Mon 22 Dec 2025 09:00:48 +0000 Files and hashes: 1: 6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa (hash: SC/T7Z+hBtwyyJiKTDTnhcNot2zvgILN7qV02Pf6Nbs=) 2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: EvkKv33ECwR4vEIq0NsgftfvtwdcMIqHeWoXizTR3Ko=) 3: G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa (hash: hw5cMOBfO5nlB/szU8+JwoMA13fSqw9OG26l4otUomg=) 4: ix-SbgJ0KZNB1myeWrVVRoU9yZc.roa (hash: i2bHi3g/koF19f8fYSJRGS021J2WcS0NKuTpTsc6lFo=) 5: mcUm3eQPGX_ltyGK8VBFHE-uYD8.roa (hash: 54jP0qFsXw4LB88KxrDKN6WgxZjAC7fRz1J28jdpG7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:d3:92:f4:93:ff:79:c1:ca:1a:3c:60:bf:fc:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Validity Not Before: Dec 21 09:00:48 2025 GMT Not After : Dec 22 09:00:48 2025 GMT Subject: CN=e385b6faa42223e46ce5ddf30d3efc04ae2cdb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d4:03:9d:95:2c:08:2a:d1:f4:f0:1d:46:6c: 75:fd:71:e6:6d:bb:bf:8d:28:b9:52:bd:d0:cf:d3: bf:87:7b:80:fe:c8:84:25:66:2a:c1:64:e1:66:3d: 70:4e:9e:ee:7a:b3:ff:69:04:a9:4d:8f:bf:80:f7: cd:9d:d1:92:23:33:0d:e9:22:56:e1:32:7d:e6:d1: 88:4f:87:77:a1:b8:4a:04:70:d9:30:75:93:c0:b9: 48:e2:3f:e2:b0:d3:9a:0a:db:8d:c8:68:a4:9b:03: d6:b5:ee:f7:27:e1:31:8a:7c:41:0a:22:f6:b3:f6: 51:4f:ca:ba:80:4b:93:46:80:b1:1d:f0:c7:1d:79: d1:86:8c:c1:c1:cf:09:1c:37:19:b5:fb:f1:cc:a5: 5e:6c:86:9a:1c:89:5e:41:b4:22:24:dc:b6:73:dd: 95:82:40:19:bb:24:fa:49:32:6f:78:4a:1f:4c:eb: ec:94:79:1d:ad:52:55:4e:ef:ec:57:d0:bc:68:1d: 3b:be:0a:57:2e:6c:06:2c:56:8c:50:2f:57:01:87: a4:6b:ed:13:3f:8d:c9:e1:22:fa:a5:d1:2d:23:4c: d6:1c:4f:f0:77:88:7b:ff:39:44:ff:39:ec:65:64: 60:e0:5a:32:86:81:11:b0:c0:21:06:fc:90:ca:e0: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:85:B6:FA:A4:22:23:E4:6C:E5:DD:F3:0D:3E:FC:04:AE:2C:DB:3A X509v3 Authority Key Identifier: keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:31:3e:db:22:ca:96:a6:0e:1b:ff:a5:7b:3f:19:d8:7c:4c: 93:9a:e6:0a:d1:63:ee:89:d2:f0:97:f6:90:41:c5:fe:35:12: 3c:06:3e:54:22:a9:3f:ff:5d:95:d9:d0:9f:4c:20:4b:ba:c2: 8b:55:db:96:be:02:2f:37:98:0a:38:b7:b2:f9:19:13:2a:92: 15:02:15:9b:30:b6:6d:40:d2:03:25:7b:8c:fb:21:fa:d8:48: 9e:32:dc:dc:0c:90:e3:bc:78:6b:44:8b:5f:e1:00:9f:e8:21: 63:5a:47:66:bc:11:92:6c:df:0f:04:c3:6b:07:c5:bf:a4:c1: 21:9d:2e:28:f8:51:79:3f:d0:02:2f:bd:36:76:a8:88:25:fb: cb:f1:11:af:19:49:33:ba:fa:05:63:a7:32:a8:0b:f0:04:98: 88:7f:40:31:99:e9:e8:95:db:dd:a0:73:82:88:90:5c:71:aa: b7:31:c0:3d:f3:b3:3e:2c:20:2d:7d:59:da:7b:f4:e8:09:f8: b9:db:13:b0:23:62:02:29:ce:a5:f3:ee:ac:57:b5:6f:0d:3c: 1b:3c:62:eb:26:f6:38:96:19:98:68:d6:b5:c3:45:3c:28:c5: 12:b0:6f:a0:1b:21:c6:d6:67:d6:b2:b0:39:3a:d8:eb:f9:5b: f2:81:e4:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI9OS9JP/ecHKGjxgv/yjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx ZGQ0MTMwHhcNMjUxMjIxMDkwMDQ4WhcNMjUxMjIyMDkwMDQ4WjAzMTEwLwYDVQQD EyhlMzg1YjZmYWE0MjIyM2U0NmNlNWRkZjMwZDNlZmMwNGFlMmNkYjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNQDnZUsCCrR9PAdRmx1/XHmbbu/ jSi5Ur3Qz9O/h3uA/siEJWYqwWThZj1wTp7uerP/aQSpTY+/gPfNndGSIzMN6SJW 4TJ95tGIT4d3obhKBHDZMHWTwLlI4j/isNOaCtuNyGikmwPWte73J+ExinxBCiL2 s/ZRT8q6gEuTRoCxHfDHHXnRhozBwc8JHDcZtfvxzKVebIaaHIleQbQiJNy2c92V gkAZuyT6STJveEofTOvslHkdrVJVTu/sV9C8aB07vgpXLmwGLFaMUC9XAYeka+0T P43J4SL6pdEtI0zWHE/wd4h7/zlE/znsZWRg4FoyhoERsMAhBvyQyuBHlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOFtvqkIiPkbOXd8w0+/ASuLNs6MB8GA1UdIwQY MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct OTU4MTEyYTQ4OWE0LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0 LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzE+2yLK lqYOG/+lez8Z2HxMk5rmCtFj7onS8Jf2kEHF/jUSPAY+VCKpP/9dldnQn0wgS7rC i1Xblr4CLzeYCji3svkZEyqSFQIVmzC2bUDSAyV7jPsh+thInjLc3AyQ47x4a0SL X+EAn+ghY1pHZrwRkmzfDwTDawfFv6TBIZ0uKPhReT/QAi+9NnaoiCX7y/ERrxlJ M7r6BWOnMqgL8ASYiH9AMZnp6JXb3aBzgoiQXHGqtzHAPfOzPiwgLX1Z2nv06An4 udsTsCNiAinOpfPurFe1bw08Gzxi6yb2OJYZmGjWtcNFPCjFErBvoBshxtZn1rKw OTrY6/lb8oHkxw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:54:29 2025 by rpki-client