This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json) Hash identifier: Qvy1VWYsuV6lnrQECnh5vu2fdWCuDN1WuKxJyu9tSVA= Subject key identifier: A1:C1:01:B4:DF:A9:AF:70:3F:90:93:56:D2:B6:CE:AF:97:15:AA:75 Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce Certificate serial: 019AF19B6DC2E07E3E79799F78A3010B3B5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft Manifest number: 0F60 Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: 7u5i8tA+QmMsy7u4WSvtgI/9RtL5QriQkKXpPJXD+Bc=) 2: giN_6FdawPpa4U_l8L6GI6SQrxU.roa (hash: RqHHQJIozmk50JvefJWS+0ODDB8lkETbKjm2gNuR+7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6d:c2:e0:7e:3e:79:79:9f:78:a3:01:0b:3b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=a1c101b4dfa9af703f909356d2b6ceaf9715aa75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a4:25:b5:87:36:0f:31:3a:16:92:09:b6:ab: ed:89:7a:a9:b7:27:5d:e5:35:36:65:3e:6d:4c:ad: 1a:68:2a:02:34:31:86:11:bd:4b:4c:c0:2d:04:08: fc:0b:3a:21:4b:3e:98:b9:09:32:74:43:36:b9:d8: 78:55:b0:39:e4:b3:4f:1f:ce:fb:c2:15:d2:6d:10: 82:e6:ff:a7:48:24:3c:06:2b:bb:14:dc:e9:13:3c: 9c:53:62:33:42:15:db:be:0b:41:5d:1b:cd:e1:f1: 45:99:12:03:bb:8b:37:8c:e8:0c:84:4c:24:85:e9: 23:a5:e5:83:4a:dd:84:6e:2f:06:b8:27:05:e8:fd: 31:77:94:a4:d0:f6:1d:0b:4d:12:db:55:f5:16:63: dc:37:7a:11:29:ed:bb:51:2d:53:c1:94:fe:41:88: b7:be:8d:32:38:31:3e:a0:2f:99:80:95:03:1a:76: e7:84:42:fd:6a:b2:8a:45:4f:e3:05:e5:dc:3c:29: d8:f3:e1:88:ce:ca:79:7c:d6:58:a4:ed:1c:1f:f8: 7a:e3:7c:33:2f:41:d8:73:7b:d8:ab:ed:72:15:d9: eb:47:0a:48:27:c6:a5:49:10:56:6e:95:d4:b7:ee: 86:5a:88:ad:f1:d9:23:35:a9:4d:5a:12:b1:57:48: 87:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C1:01:B4:DF:A9:AF:70:3F:90:93:56:D2:B6:CE:AF:97:15:AA:75 X509v3 Authority Key Identifier: keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bf:c2:7c:d0:c3:eb:71:10:20:7e:1c:65:43:b0:82:a8:9c: 03:bf:6f:0a:3d:0b:a7:4c:99:b0:6d:90:54:20:b3:f7:c6:12: 63:98:ac:32:92:c2:e5:f0:35:47:5b:19:9a:eb:93:a7:c6:a9: ca:98:98:1c:4b:65:cc:48:d3:da:b9:2c:05:34:34:94:b1:37: a3:5f:8d:9a:b3:c1:7c:5a:4f:ce:fa:63:58:8f:f6:63:3f:6d: 0d:f8:72:f5:eb:af:a2:56:c4:42:74:51:38:77:4f:5b:8f:c0: 33:1b:63:66:93:7d:59:49:5f:c4:12:7c:62:9f:e8:e7:f0:bd: 7b:7b:a9:be:be:61:30:9c:f2:8f:63:c1:e1:80:54:33:ef:60: 25:52:4b:38:63:ce:0e:69:9b:4f:35:f0:bc:e2:04:8b:92:fe: 57:95:60:32:2a:4b:f7:2b:68:78:29:a0:a3:10:9d:e1:94:b1: 99:8d:ad:59:e3:d3:fb:9c:95:af:10:de:aa:37:6d:7e:6c:70: a8:5f:39:74:fa:97:6d:c3:eb:12:75:bd:80:46:19:ba:12:3c: dc:ad:db:86:32:13:80:12:74:69:64:ce:61:eb:c8:2e:a5:b0: f1:07:c2:63:c1:c9:30:9e:25:81:b7:a4:f8:8b:af:07:51:3f: 3e:38:ee:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm23C4H4+eXmfeKMBCztaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4N2Y1OWMzNmUyMmQxZjkwMzg0ZjQxZGE2MDcwNWFjNzRk Nzc5Y2UwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD EyhhMWMxMDFiNGRmYTlhZjcwM2Y5MDkzNTZkMmI2Y2VhZjk3MTVhYTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKQltYc2DzE6FpIJtqvtiXqptydd 5TU2ZT5tTK0aaCoCNDGGEb1LTMAtBAj8CzohSz6YuQkydEM2udh4VbA55LNPH877 whXSbRCC5v+nSCQ8Biu7FNzpEzycU2IzQhXbvgtBXRvN4fFFmRIDu4s3jOgMhEwk hekjpeWDSt2Ebi8GuCcF6P0xd5Sk0PYdC00S21X1FmPcN3oRKe27US1TwZT+QYi3 vo0yODE+oC+ZgJUDGnbnhEL9arKKRU/jBeXcPCnY8+GIzsp5fNZYpO0cH/h643wz L0HYc3vYq+1yFdnrRwpIJ8alSRBWbpXUt+6GWoit8dkjNalNWhKxV0iHXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHBAbTfqa9wP5CTVtK2zq+XFap1MB8GA1UdIwQY MBaAFAh/WcNuItH5A4T0HaYHBax013nOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgt YzA0YmUwMjAzN2U4LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgtYzA0YmUwMjAzN2U4 LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKr/CfNDD 63EQIH4cZUOwgqicA79vCj0Lp0yZsG2QVCCz98YSY5isMpLC5fA1R1sZmuuTp8ap ypiYHEtlzEjT2rksBTQ0lLE3o1+NmrPBfFpPzvpjWI/2Yz9tDfhy9euvolbEQnRR OHdPW4/AMxtjZpN9WUlfxBJ8Yp/o5/C9e3upvr5hMJzyj2PB4YBUM+9gJVJLOGPO DmmbTzXwvOIEi5L+V5VgMipL9ytoeCmgoxCd4ZSxmY2tWePT+5yVrxDeqjdtfmxw qF85dPqXbcPrEnW9gEYZuhI83K3bhjITgBJ0aWTOYevILqWw8QfCY8HJMJ4lgbek +IuvB1E/PjjufQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:47 2025 by rpki-client