This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json) Hash identifier: vlO/NbBWGedPzPinrazZCgqgGEDF3ZWuy8lbeoYpc2s= Subject key identifier: 48:C6:7F:99:A2:CC:2B:61:5E:B6:82:50:0D:02:50:36:B6:51:01:CE Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51 Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051 Certificate serial: 019B3B349158EE1024436CEEF54FDA62A844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 10:00:59 +0000 Manifest this update: Sat 20 Dec 2025 10:00:59 +0000 Manifest next update: Sun 21 Dec 2025 10:00:59 +0000 Files and hashes: 1: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (hash: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=) 2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: LJ2FTKcveC+xKKxFRUiNkF0ndTmZjCGxzIH9rEKmlC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:91:58:ee:10:24:43:6c:ee:f5:4f:da:62:a8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051 Validity Not Before: Dec 20 10:00:59 2025 GMT Not After : Dec 21 10:00:59 2025 GMT Subject: CN=48c67f99a2cc2b615eb682500d025036b65101ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:c7:7a:53:bd:c4:95:3b:89:f5:01:45:a6: d8:55:a6:ea:53:d0:80:f9:ab:f3:e0:74:04:b6:7f: ed:8a:6e:6d:a2:ee:41:c5:4b:11:73:f7:fb:b1:8a: 8d:a9:5e:a7:8b:08:ce:98:1e:0c:42:62:5a:d0:a2: a2:4b:0e:2c:e1:3d:21:48:1d:e4:1d:a1:2d:d4:2d: e1:3e:f9:de:07:b0:68:91:f8:4e:66:b2:81:da:31: b8:a3:e6:6e:3a:dc:3e:49:17:9c:7e:71:31:3d:7e: 26:c2:6c:41:f2:69:76:3a:aa:80:b8:52:ce:57:ec: 55:7b:bf:f9:1f:12:39:d0:d7:2f:94:92:59:ea:50: d3:6a:82:df:c6:29:39:dc:37:30:60:a9:5f:6e:c8: 08:4e:7b:74:70:e0:e4:5f:af:96:4b:4f:f7:74:96: ab:ff:25:1a:58:84:bc:01:b3:76:41:bd:d3:4f:9c: f4:8f:26:13:ac:5d:c0:e1:68:ef:be:06:4a:87:f7: d2:ba:ac:aa:14:76:5d:e2:d4:ab:78:51:ff:a1:3b: 2b:ed:0e:9d:9e:81:57:89:4f:71:6b:03:8a:43:b1: da:ec:30:b3:80:91:f2:63:4f:97:fb:ac:e0:a8:6c: d2:50:cb:84:c9:52:72:16:e1:8d:61:ac:2e:cf:6a: 16:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C6:7F:99:A2:CC:2B:61:5E:B6:82:50:0D:02:50:36:B6:51:01:CE X509v3 Authority Key Identifier: keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:e7:b5:af:56:44:15:c5:ce:76:df:79:48:c9:6d:9f:e0:e8: 37:78:1f:1a:79:5b:94:ba:ba:61:09:0b:d4:fe:9c:5a:03:8b: d7:ad:9f:08:a6:74:d1:fb:0f:a4:2f:34:2b:31:bf:07:43:2a: ac:e5:99:c0:f0:90:ae:e8:d6:b6:45:c8:ef:9f:eb:8a:57:40: 5b:f6:0a:61:c9:65:98:1c:02:1f:8a:f4:32:f6:03:dd:de:4d: 1f:f4:3b:92:75:66:c1:d3:90:0d:4c:7c:15:b5:3f:32:08:a3: d1:69:01:ec:0e:b4:b8:c9:13:62:a2:fb:90:e9:e4:cd:86:1f: 8e:8c:ae:a4:2b:80:bd:13:08:8b:ff:4b:f3:7c:96:36:89:fe: f3:95:30:9b:e0:8c:79:bc:36:fd:2d:9a:57:6c:53:e7:39:b3: db:4c:1a:ee:48:c1:04:16:96:be:86:5a:d7:a4:d9:1a:75:f9: a0:95:a5:86:eb:77:51:bb:8c:76:f8:58:0a:79:cc:ee:f2:55: 57:eb:16:60:be:4c:66:00:ba:5e:a2:52:f0:8e:4a:85:2e:94: 39:9e:b1:19:aa:7e:20:d5:7f:6b:12:5d:de:25:c2:0e:c9:be: 60:9e:aa:92:8e:35:a8:48:1e:63:27:e2:ec:f9:84:cd:97:f3: 7c:0a:03:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NJFY7hAkQ2zu9U/aYqhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMTUxYTlhMThjOGE5MmI0Yjc2NzhkYzk2MGNjMmExYmI5 MDgwNTEwHhcNMjUxMjIwMTAwMDU5WhcNMjUxMjIxMTAwMDU5WjAzMTEwLwYDVQQD Eyg0OGM2N2Y5OWEyY2MyYjYxNWViNjgyNTAwZDAyNTAzNmI2NTEwMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwbHelO9xJU7ifUBRabYVabqU9CA +avz4HQEtn/tim5tou5BxUsRc/f7sYqNqV6niwjOmB4MQmJa0KKiSw4s4T0hSB3k HaEt1C3hPvneB7BokfhOZrKB2jG4o+ZuOtw+SRecfnExPX4mwmxB8ml2OqqAuFLO V+xVe7/5HxI50NcvlJJZ6lDTaoLfxik53DcwYKlfbsgITnt0cODkX6+WS0/3dJar /yUaWIS8AbN2Qb3TT5z0jyYTrF3A4WjvvgZKh/fSuqyqFHZd4tSreFH/oTsr7Q6d noFXiU9xawOKQ7Ha7DCzgJHyY0+X+6zgqGzSUMuEyVJyFuGNYawuz2oWMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjGf5mizCthXraCUA0CUDa2UQHOMB8GA1UdIwQY MBaAFHIVGpoYyKkrS3Z43JYMwqG7kIBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2hVYW1oaklxU3RMZG5qY2xnekNvYnVRZ0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNGZkYmMtM2M4OC00MGI1LThkNzUt Y2JmOTRhMDBjYzgzLzEvY2hVYW1oaklxU3RMZG5qY2xnekNvYnVRZ0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNGZkYmMtM2M4OC00MGI1LThkNzUtY2JmOTRhMDBjYzgz LzEvY2hVYW1oaklxU3RMZG5qY2xnekNvYnVRZ0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzee1r1ZE FcXOdt95SMltn+DoN3gfGnlblLq6YQkL1P6cWgOL162fCKZ00fsPpC80KzG/B0Mq rOWZwPCQrujWtkXI75/rildAW/YKYcllmBwCH4r0MvYD3d5NH/Q7knVmwdOQDUx8 FbU/Mgij0WkB7A60uMkTYqL7kOnkzYYfjoyupCuAvRMIi/9L83yWNon+85Uwm+CM ebw2/S2aV2xT5zmz20wa7kjBBBaWvoZa16TZGnX5oJWlhut3UbuMdvhYCnnM7vJV V+sWYL5MZgC6XqJS8I5KhS6UOZ6xGap+INV/axJd3iXCDsm+YJ6qko41qEgeYyfi 7PmEzZfzfAoDpg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:54:47 2025 by rpki-client