This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft File: Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json) Hash identifier: XuKS9EsmLjAOYfSOdA8PwcR3394xKlgkcgVHzy1GSj4= Subject key identifier: D5:E4:4F:19:F3:DB:D2:B6:F5:95:9C:2E:10:96:17:CB:F7:8A:ED:DF Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5 Certificate issuer: /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5 Certificate serial: 019B29D2E434E21B824B999D3FEEA345E255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft Manifest number: 1607 Signing time: Wed 17 Dec 2025 01:00:45 +0000 Manifest this update: Wed 17 Dec 2025 01:00:45 +0000 Manifest next update: Thu 18 Dec 2025 01:00:45 +0000 Files and hashes: 1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: dvfJM5GKm/WcC3XV+bqETzOsGqvEigbt7lBQt2MYb2I=) 2: PvWxO00iUa3ctfHwCdtyJD0RWh0.roa (hash: WHY5/KEo1RVdlR9QfwLVXSmW+Ddxfbtak63Ebi49yak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:d2:e4:34:e2:1b:82:4b:99:9d:3f:ee:a3:45:e2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5 Validity Not Before: Dec 17 01:00:45 2025 GMT Not After : Dec 18 01:00:45 2025 GMT Subject: CN=d5e44f19f3dbd2b6f5959c2e109617cbf78aeddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:ba:79:79:ce:73:49:90:39:d5:e2:0d:dc: a3:3f:03:3a:6f:e4:1a:aa:dc:c3:e2:9e:99:f9:7b: 0a:d2:38:59:57:d9:c9:eb:29:45:e9:a6:cd:17:3a: 12:5b:d3:34:21:32:5c:97:f7:bf:87:2d:cb:c9:0d: 2e:01:b0:59:00:52:93:6f:a5:8a:1b:f8:5d:54:b8: 69:72:2a:cd:6e:d9:aa:4c:31:57:10:16:30:19:27: 0c:e9:c8:a5:22:d6:55:5d:e7:4b:24:ab:8e:c1:ea: 4e:c3:af:9e:ab:92:49:bf:34:a9:7c:63:27:12:3f: 23:91:8c:c8:80:53:b3:12:a1:be:31:f2:72:fe:c7: 34:10:97:66:9e:b8:82:ad:82:3a:32:d5:81:96:89: 81:55:4a:c8:7c:de:c3:4b:f9:2b:1d:52:68:44:d5: e9:ca:74:43:3b:13:b5:80:75:75:28:c8:37:48:15: 38:d4:9a:67:5a:07:b7:37:a6:0d:d0:18:fd:a1:83: 43:61:d5:fe:30:0c:c4:27:0e:1e:33:5e:98:93:11: 2b:7e:1b:7a:55:ad:a6:90:ab:fa:a8:f5:55:1d:b3: d4:82:02:fd:56:cc:73:af:8e:34:f6:59:e7:1a:b2: 34:cc:8e:67:d6:a9:d3:56:e6:84:0a:0c:1f:0e:cd: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E4:4F:19:F3:DB:D2:B6:F5:95:9C:2E:10:96:17:CB:F7:8A:ED:DF X509v3 Authority Key Identifier: keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:67:8c:5e:06:90:b0:a5:ed:8f:3c:4b:c0:ae:1b:b8:60:09: 19:c7:e1:c9:f2:be:8e:21:b4:ac:b1:86:4c:d0:b8:aa:60:66: 72:d4:6b:f5:f6:4a:73:9e:e7:31:18:99:96:13:a0:35:a5:f3: 5f:df:b9:02:f1:ff:47:6e:3d:9f:e0:24:ac:2f:51:c9:37:08: 4b:50:05:be:6b:1c:49:6b:a9:40:21:8e:fe:e8:d5:31:bb:15: 36:b9:38:2a:8d:17:f0:d2:51:ff:fe:aa:e1:d1:0b:fd:98:bb: fa:2f:a4:bc:eb:e7:36:36:43:eb:64:15:5f:7f:3a:1b:49:a6: 22:6e:80:26:49:1d:fe:c5:e5:42:59:cf:06:ff:e5:63:0a:31: 4e:6e:62:df:ee:6c:ca:77:b7:2d:3f:bb:78:19:6b:f3:f4:57: 72:6b:95:11:32:38:ec:42:e2:8a:d6:46:a5:5e:da:22:a5:a1: 5a:42:c6:67:f1:4a:c2:4b:42:1c:6d:9e:44:82:b7:2a:30:e8: 1f:d4:aa:9b:a7:b1:d7:7b:b6:85:da:fd:5c:7d:73:dc:32:ff: 84:f2:de:f3:c8:56:3a:8b:9d:7d:fd:b8:d4:a9:4a:1a:d4:2d: 2b:2a:1e:5d:58:48:fc:a8:d3:ef:9d:4c:0d:e7:36:d8:2c:ee: ea:27:49:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsp0uQ04huCS5mdP+6jReJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMWZkYjgwZWZmNWJjZTE2NTRhYzhjNmI5MjJlNzgxZmQy ZDM2YTUwHhcNMjUxMjE3MDEwMDQ1WhcNMjUxMjE4MDEwMDQ1WjAzMTEwLwYDVQQD EyhkNWU0NGYxOWYzZGJkMmI2ZjU5NTljMmUxMDk2MTdjYmY3OGFlZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8e6eXnOc0mQOdXiDdyjPwM6b+Qa qtzD4p6Z+XsK0jhZV9nJ6ylF6abNFzoSW9M0ITJcl/e/hy3LyQ0uAbBZAFKTb6WK G/hdVLhpcirNbtmqTDFXEBYwGScM6cilItZVXedLJKuOwepOw6+eq5JJvzSpfGMn Ej8jkYzIgFOzEqG+MfJy/sc0EJdmnriCrYI6MtWBlomBVUrIfN7DS/krHVJoRNXp ynRDOxO1gHV1KMg3SBU41JpnWge3N6YN0Bj9oYNDYdX+MAzEJw4eM16YkxErfht6 Va2mkKv6qPVVHbPUggL9Vsxzr4409lnnGrI0zI5n1qnTVuaECgwfDs2VlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXkTxnz29K29ZWcLhCWF8v3iu3fMB8GA1UdIwQY MBaAFAof24Dv9bzhZUrIxrki54H9LTalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgt MDRiYzg3YTI5ZTRkLzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgtMDRiYzg3YTI5ZTRk LzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmeMXgaQ sKXtjzxLwK4buGAJGcfhyfK+jiG0rLGGTNC4qmBmctRr9fZKc57nMRiZlhOgNaXz X9+5AvH/R249n+AkrC9RyTcIS1AFvmscSWupQCGO/ujVMbsVNrk4Ko0X8NJR//6q 4dEL/Zi7+i+kvOvnNjZD62QVX386G0mmIm6AJkkd/sXlQlnPBv/lYwoxTm5i3+5s yne3LT+7eBlr8/RXcmuVETI47ELiitZGpV7aIqWhWkLGZ/FKwktCHG2eRIK3KjDo H9Sqm6ex13u2hdr9XH1z3DL/hPLe88hWOoudff241KlKGtQtKyoeXVhI/KjT751M Dec22Czu6idJbA== -----END CERTIFICATE-----Generated at Wed Dec 17 05:55:19 2025 by rpki-client