This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json) Hash identifier: XN3fBVzz5whrCSzhXvJNMPPBtxY1KKs+aVdSm+KG+Kc= Subject key identifier: 72:C4:37:48:EB:58:EE:4B:18:DA:FE:0D:CE:1D:98:95:50:F9:F5:4E Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55 Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555 Certificate serial: 019B50A9A1BCB0A08BBB78BD7FF12B931DA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft Manifest number: 073E Signing time: Wed 24 Dec 2025 14:00:52 +0000 Manifest this update: Wed 24 Dec 2025 14:00:52 +0000 Manifest next update: Thu 25 Dec 2025 14:00:52 +0000 Files and hashes: 1: N-I7atLziy8-qeIjadSqHT5aCyA.roa (hash: V6zqdN9aPhv6jPMMfcX/1JdGJzCCjaFU3hvgfHZaU/A=) 2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: Rzmddd7sBkH20hJbgNn4iR3J3u0Ep87cMTJm3U1/Ung=) 3: p96GHk0OQlbK3_guMxYIgfEgqkQ.roa (hash: NLGJ0dT4sru3lzXBmBNcFTNXezy7QjsSc92C97+9nWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:a1:bc:b0:a0:8b:bb:78:bd:7f:f1:2b:93:1d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555 Validity Not Before: Dec 24 14:00:52 2025 GMT Not After : Dec 25 14:00:52 2025 GMT Subject: CN=72c43748eb58ee4b18dafe0dce1d989550f9f54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:3e:75:c3:c4:37:b1:58:5b:af:7b:e3:2d: 77:c8:f8:84:fa:41:a2:44:7a:77:9e:77:0b:39:ce: 83:f0:b7:00:49:7f:bd:3c:86:33:4b:ee:85:bc:93: 16:46:4d:64:25:41:3d:a1:c5:70:9c:e6:1b:1b:e7: e1:31:69:e2:7c:c6:d3:d3:29:28:b7:8d:6d:f1:98: 41:62:44:cc:b3:f0:2b:4b:f2:09:b5:44:61:8b:a7: d5:75:f4:da:b0:cc:23:2b:e4:40:3f:44:23:aa:20: c2:63:12:78:d8:d5:a0:77:23:95:3d:6c:51:eb:95: db:24:b9:f2:97:d6:9d:b3:69:c7:46:6b:5d:cd:fc: 3e:e0:13:67:59:43:fe:c0:67:fa:0a:e6:49:ec:17: 4f:23:ae:cf:f9:bf:2a:e2:12:a3:66:bf:52:b9:f9: e6:50:02:38:2d:66:0d:98:a1:bb:c5:51:32:62:dd: 52:1c:fd:86:d2:5f:9f:08:0e:1d:d4:64:50:b3:be: 13:29:56:5a:b3:46:36:0b:b1:9a:70:34:f0:8b:68: 40:76:c8:68:42:ea:97:ea:31:92:cf:51:4a:1d:fc: 47:35:78:1b:25:d4:98:c6:d8:85:e7:74:bb:4e:d5: 4a:70:47:d2:39:2e:26:7f:22:7e:c4:6b:9d:94:b6: d1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C4:37:48:EB:58:EE:4B:18:DA:FE:0D:CE:1D:98:95:50:F9:F5:4E X509v3 Authority Key Identifier: keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:46:13:24:07:af:8d:ac:63:36:2d:35:05:3c:7b:02:3b:2a: 80:c8:53:16:d6:96:49:3e:59:86:d6:ab:f6:48:a9:e6:44:c9: 19:d3:bf:08:5b:4c:06:12:44:fe:9b:b2:2c:63:6b:bd:6e:87: 68:5b:e4:91:88:0b:d3:56:f8:15:a7:26:3e:8d:0c:fa:16:89: 33:39:75:52:30:60:96:a1:13:b5:17:13:ba:f1:55:67:ef:24: 06:e2:09:64:45:5c:37:09:45:59:ca:1a:e7:93:72:04:0a:55: 3d:de:39:1a:31:8b:f0:7f:05:74:cd:50:6c:79:72:99:14:a4: 7e:07:97:6b:8a:ae:a1:5f:ab:79:e4:2e:4b:27:fc:f8:c3:52: e9:0b:1a:f8:4b:b0:10:39:80:85:05:04:62:34:a7:8e:c2:8a: 0e:da:22:7c:ca:6a:44:63:02:e2:1d:84:0b:c2:12:91:7c:c6: 97:2a:15:1c:66:ed:68:ae:61:17:a6:56:03:86:07:5f:65:ea: a2:ef:66:b0:1c:09:60:c0:cc:5e:da:3d:8c:7a:c9:92:27:6c: a2:69:f1:ff:09:ab:a5:86:22:4b:6a:c6:7b:46:a0:29:90:34: 4d:a0:cd:8e:72:dc:f5:fc:ee:af:74:3f:00:78:3e:ce:29:ce: 95:e4:1e:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqaG8sKCLu3i9f/Erkx2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMjFkNzUyOGJlNzEzYTRiYTJjYjRkYjVlNThkNjRkODgy ZWI1NTUwHhcNMjUxMjI0MTQwMDUyWhcNMjUxMjI1MTQwMDUyWjAzMTEwLwYDVQQD Eyg3MmM0Mzc0OGViNThlZTRiMThkYWZlMGRjZTFkOTg5NTUwZjlmNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydU+dcPEN7FYW6974y13yPiE+kGi RHp3nncLOc6D8LcASX+9PIYzS+6FvJMWRk1kJUE9ocVwnOYbG+fhMWnifMbT0yko t41t8ZhBYkTMs/ArS/IJtURhi6fVdfTasMwjK+RAP0QjqiDCYxJ42NWgdyOVPWxR 65XbJLnyl9ads2nHRmtdzfw+4BNnWUP+wGf6CuZJ7BdPI67P+b8q4hKjZr9Sufnm UAI4LWYNmKG7xVEyYt1SHP2G0l+fCA4d1GRQs74TKVZas0Y2C7GacDTwi2hAdsho QuqX6jGSz1FKHfxHNXgbJdSYxtiF53S7TtVKcEfSOS4mfyJ+xGudlLbRKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLEN0jrWO5LGNr+Dc4dmJVQ+fVOMB8GA1UdIwQY MBaAFHAh11KL5xOkuiy0215Y1k2ILrVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAt OTI4MWYwZDIzZGJmLzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAtOTI4MWYwZDIzZGJm LzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUYTJAev jaxjNi01BTx7AjsqgMhTFtaWST5Zhtar9kip5kTJGdO/CFtMBhJE/puyLGNrvW6H aFvkkYgL01b4FacmPo0M+haJMzl1UjBglqETtRcTuvFVZ+8kBuIJZEVcNwlFWcoa 55NyBApVPd45GjGL8H8FdM1QbHlymRSkfgeXa4quoV+reeQuSyf8+MNS6Qsa+Euw EDmAhQUEYjSnjsKKDtoifMpqRGMC4h2EC8ISkXzGlyoVHGbtaK5hF6ZWA4YHX2Xq ou9msBwJYMDMXto9jHrJkidsomnx/wmrpYYiS2rGe0agKZA0TaDNjnLc9fzur3Q/ AHg+zinOleQeQA== -----END CERTIFICATE-----Generated at Wed Dec 24 16:40:41 2025 by rpki-client