This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json) Hash identifier: 5iEz2X73AVu95f3FRRt5jAk+091cXjeIFXTsHVVQBk4= Subject key identifier: 2F:57:B5:EF:BE:86:06:99:C1:27:8B:B9:EB:50:2C:FE:F4:6A:7E:FA Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Certificate serial: 019B3A588E77096449DF6C7B3AD35CBACFF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft Manifest number: 14BC Signing time: Sat 20 Dec 2025 06:00:40 +0000 Manifest this update: Sat 20 Dec 2025 06:00:40 +0000 Manifest next update: Sun 21 Dec 2025 06:00:40 +0000 Files and hashes: 1: 6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa (hash: SC/T7Z+hBtwyyJiKTDTnhcNot2zvgILN7qV02Pf6Nbs=) 2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: C9KEI/YfZfiEUaNib9mib0Bo+qIs1tveH3UJaWJxacQ=) 3: G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa (hash: hw5cMOBfO5nlB/szU8+JwoMA13fSqw9OG26l4otUomg=) 4: ix-SbgJ0KZNB1myeWrVVRoU9yZc.roa (hash: i2bHi3g/koF19f8fYSJRGS021J2WcS0NKuTpTsc6lFo=) 5: mcUm3eQPGX_ltyGK8VBFHE-uYD8.roa (hash: 54jP0qFsXw4LB88KxrDKN6WgxZjAC7fRz1J28jdpG7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:8e:77:09:64:49:df:6c:7b:3a:d3:5c:ba:cf:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Validity Not Before: Dec 20 06:00:40 2025 GMT Not After : Dec 21 06:00:40 2025 GMT Subject: CN=2f57b5efbe860699c1278bb9eb502cfef46a7efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e9:1a:ec:dc:2f:c6:f2:73:99:64:c5:3c:a3: ea:30:ed:fc:13:1f:3e:20:99:f7:5c:31:11:a2:d9: b6:80:b5:ad:98:de:f9:57:fb:26:0a:e6:e4:7d:8f: c9:71:30:97:8f:c8:9f:cb:40:3d:10:5c:ff:1e:d7: f3:39:4e:90:59:79:f6:4c:f5:f3:23:52:bb:de:94: eb:d3:62:94:3a:a4:e6:ff:20:fc:0c:fe:ad:ff:24: fa:61:b2:81:c9:de:22:69:37:9c:97:48:20:e2:2e: b1:87:51:95:b4:8e:0c:86:3a:cc:f4:a0:53:e8:50: 6a:de:6c:46:c0:47:53:31:72:30:70:f4:24:be:b1: db:c8:b3:31:7b:81:96:f6:18:2a:11:d7:bf:f6:4e: 99:f8:73:d5:b1:81:5d:8a:4a:06:cb:e5:5e:c4:07: 9a:56:ea:3c:04:57:06:12:d7:5c:82:b8:99:93:9d: 71:ba:50:27:8f:98:88:f0:3a:59:88:4c:d9:83:93: 6e:42:0f:69:ae:1a:31:d6:7a:0f:89:c9:5c:44:06: 1c:2d:8e:fe:08:48:38:1a:54:f6:88:cb:3b:a2:33: 7f:a7:2b:73:9b:c4:fd:02:74:ae:7e:c0:9e:be:be: 2d:b9:2c:2c:fb:26:e3:18:76:d9:ac:9e:3a:bd:18: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:57:B5:EF:BE:86:06:99:C1:27:8B:B9:EB:50:2C:FE:F4:6A:7E:FA X509v3 Authority Key Identifier: keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:7a:e3:de:ff:56:e3:6a:7f:52:07:d3:ce:90:1d:49:91:6e: a5:79:3d:ea:18:c6:34:20:c6:c0:79:e3:67:68:2b:59:b5:4d: 96:12:0d:d8:22:5f:53:ca:c3:89:d8:ae:91:7c:74:ff:cf:79: af:22:23:ed:af:9b:44:5a:54:41:b0:71:cb:6b:a5:aa:96:1f: cc:f8:45:6c:e9:df:5d:d7:37:f3:91:5d:48:d7:de:13:5c:e4: a4:35:77:84:e5:93:42:43:11:cc:7c:50:7e:83:0c:3e:d2:39: 1c:22:f0:2c:5a:f6:22:19:40:bb:3f:83:59:50:8d:af:4c:47: 8e:03:51:5a:12:08:4f:bc:81:22:ac:62:3b:8f:f4:ba:32:54: 44:fe:93:0d:b0:ec:bf:45:17:91:a5:4f:d1:c0:db:a8:1e:a4: 9e:af:f3:bc:d8:ce:af:68:bd:71:e5:fe:6a:eb:38:1c:b7:e8: 98:d3:0f:06:9f:1d:74:bf:0d:8d:df:68:c2:ae:4f:33:82:f2: 6a:70:a7:5c:cf:cb:f5:d5:5a:c8:93:00:c6:3e:23:9d:d5:b1: f8:04:8b:cc:b4:25:42:b4:1c:71:fa:1a:1a:bf:26:35:44:92: 24:fc:54:a0:ee:87:0f:99:1c:68:e4:cf:4a:15:06:17:12:fe: fe:f8:11:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WI53CWRJ32x7OtNcus/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx ZGQ0MTMwHhcNMjUxMjIwMDYwMDQwWhcNMjUxMjIxMDYwMDQwWjAzMTEwLwYDVQQD EygyZjU3YjVlZmJlODYwNjk5YzEyNzhiYjllYjUwMmNmZWY0NmE3ZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuka7NwvxvJzmWTFPKPqMO38Ex8+ IJn3XDERotm2gLWtmN75V/smCubkfY/JcTCXj8ify0A9EFz/HtfzOU6QWXn2TPXz I1K73pTr02KUOqTm/yD8DP6t/yT6YbKByd4iaTecl0gg4i6xh1GVtI4MhjrM9KBT 6FBq3mxGwEdTMXIwcPQkvrHbyLMxe4GW9hgqEde/9k6Z+HPVsYFdikoGy+VexAea Vuo8BFcGEtdcgriZk51xulAnj5iI8DpZiEzZg5NuQg9prhox1noPiclcRAYcLY7+ CEg4GlT2iMs7ojN/pytzm8T9AnSufsCevr4tuSws+ybjGHbZrJ46vRiIxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9Xte++hgaZwSeLuetQLP70an76MB8GA1UdIwQY MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct OTU4MTEyYTQ4OWE0LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0 LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXrj3v9W 42p/UgfTzpAdSZFupXk96hjGNCDGwHnjZ2grWbVNlhIN2CJfU8rDidiukXx0/895 ryIj7a+bRFpUQbBxy2ulqpYfzPhFbOnfXdc385FdSNfeE1zkpDV3hOWTQkMRzHxQ foMMPtI5HCLwLFr2IhlAuz+DWVCNr0xHjgNRWhIIT7yBIqxiO4/0ujJURP6TDbDs v0UXkaVP0cDbqB6knq/zvNjOr2i9ceX+aus4HLfomNMPBp8ddL8Njd9owq5PM4Ly anCnXM/L9dVayJMAxj4jndWx+ASLzLQlQrQccfoaGr8mNUSSJPxUoO6HD5kcaOTP ShUGFxL+/vgRPw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:04 2025 by rpki-client