This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json) Hash identifier: 5jQbU7bJCGbPNQTpKQK+1T8u3hdgHH5Pf3hQCOYAYKk= Subject key identifier: BB:BA:1F:CE:68:F6:07:54:8D:CE:F4:F1:BB:55:33:F3:A2:45:50:C7 Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39 Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739 Certificate serial: 019AF08838E394361BD8ABFA8293421E5754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft Manifest number: 1196 Signing time: Fri 05 Dec 2025 22:00:50 +0000 Manifest this update: Fri 05 Dec 2025 22:00:50 +0000 Manifest next update: Sat 06 Dec 2025 22:00:50 +0000 Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: QbRxggemoGmYPrQlj9Kwcs9qHytcuKybK9Rvv8hxvv0=) 2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:38:e3:94:36:1b:d8:ab:fa:82:93:42:1e:57:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a16747018e944e405a6d23a564701a155f43739 Validity Not Before: Dec 5 22:00:50 2025 GMT Not After : Dec 6 22:00:50 2025 GMT Subject: CN=bbba1fce68f607548dcef4f1bb5533f3a24550c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6d:08:d8:78:d2:c9:96:ef:24:f8:9e:c9:9a: 2a:01:aa:f2:c0:37:94:0e:d0:79:a1:93:9c:4f:bf: 2d:b6:ec:8e:92:53:65:cc:3b:1b:c5:27:44:55:9e: f5:69:f6:31:6b:ad:55:01:d1:13:dc:fd:5d:20:7c: 9f:6b:ff:df:0a:22:67:e3:a9:2e:e6:61:92:10:e1: ee:9f:e9:94:c1:8b:f1:bb:31:83:81:a5:b1:cf:9a: fe:af:75:a6:80:42:a5:67:30:b3:65:58:61:67:1f: 32:05:b6:01:95:53:07:c2:55:b7:0d:74:21:5c:67: ed:af:8e:a1:c4:79:c3:1c:a2:38:51:0e:ce:ff:62: 30:4f:1f:e2:5e:0e:c9:49:11:f9:02:60:d1:2f:08: f5:61:1f:af:16:e5:7d:c6:30:4d:fb:4e:15:4d:43: 91:cc:19:19:9e:ec:16:9f:54:17:21:0b:15:2b:7a: 71:e8:cc:ed:17:f6:33:c9:3f:a2:7f:79:6a:e5:0d: 15:36:68:60:8a:77:ca:f7:1c:11:c1:24:75:ba:6a: 8a:33:9a:3f:b0:f4:5a:67:4c:97:9a:60:0d:2f:9e: 61:5f:c5:a6:bf:df:19:85:05:21:10:9c:18:97:ef: 39:57:2d:d9:22:00:49:12:df:86:06:42:e8:ab:90: 66:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BA:1F:CE:68:F6:07:54:8D:CE:F4:F1:BB:55:33:F3:A2:45:50:C7 X509v3 Authority Key Identifier: keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b5:dd:43:62:56:38:b7:04:9d:1d:45:ba:8d:7a:59:15:2d: 4b:ff:70:34:0a:1e:ad:1d:d4:75:93:e3:88:21:e4:04:71:5f: 5a:e1:30:a3:76:b0:36:98:8c:e4:f3:61:b4:1c:c8:c4:a1:7a: 66:74:09:a0:1e:b4:dd:10:f7:ec:ee:4a:9d:75:32:05:e7:cc: 77:38:ef:5d:ae:ed:4b:35:40:c3:f1:f6:e0:8f:d9:18:3a:de: 25:c5:32:ad:af:19:d6:1a:a9:0c:ad:4d:05:1b:39:28:ce:08: b0:9b:75:13:91:dc:26:dd:03:b9:94:1e:38:ca:68:39:1a:c9: cf:b0:9a:ed:41:99:f3:5c:e5:60:0f:70:38:90:49:fd:d7:bd: fa:dc:23:ee:80:37:53:12:d4:76:6d:a3:07:e7:1e:bc:a6:ad: 18:9c:9b:ef:34:51:dc:39:5d:b4:fb:1c:ce:8d:38:46:ef:e0: 87:de:47:bb:ad:9b:4d:32:b7:f5:c5:38:89:ce:a7:84:fe:35: 81:d5:15:b9:12:d8:74:01:c0:08:1e:f5:33:04:7e:fa:18:c1: 00:2e:25:89:3c:3d:92:8f:0c:8c:d4:cc:4f:8d:20:f6:a3:46: 5d:7b:f9:21:21:db:58:08:c4:c3:ba:5c:2a:ea:2a:40:d2:c1: 3d:63:3c:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDjjlDYb2Kv6gpNCHldUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMTY3NDcwMThlOTQ0ZTQwNWE2ZDIzYTU2NDcwMWExNTVm NDM3MzkwHhcNMjUxMjA1MjIwMDUwWhcNMjUxMjA2MjIwMDUwWjAzMTEwLwYDVQQD EyhiYmJhMWZjZTY4ZjYwNzU0OGRjZWY0ZjFiYjU1MzNmM2EyNDU1MGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m0I2HjSyZbvJPieyZoqAarywDeU DtB5oZOcT78ttuyOklNlzDsbxSdEVZ71afYxa61VAdET3P1dIHyfa//fCiJn46ku 5mGSEOHun+mUwYvxuzGDgaWxz5r+r3WmgEKlZzCzZVhhZx8yBbYBlVMHwlW3DXQh XGftr46hxHnDHKI4UQ7O/2IwTx/iXg7JSRH5AmDRLwj1YR+vFuV9xjBN+04VTUOR zBkZnuwWn1QXIQsVK3px6MztF/YzyT+if3lq5Q0VNmhginfK9xwRwSR1umqKM5o/ sPRaZ0yXmmANL55hX8Wmv98ZhQUhEJwYl+85Vy3ZIgBJEt+GBkLoq5BmkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLu6H85o9gdUjc708btVM/OiRVDHMB8GA1UdIwQY MBaAFAoWdHAY6UTkBabSOlZHAaFV9Dc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWIt ZDlkMGFhMjhhYjJiLzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWItZDlkMGFhMjhhYjJi LzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7XdQ2JW OLcEnR1Fuo16WRUtS/9wNAoerR3UdZPjiCHkBHFfWuEwo3awNpiM5PNhtBzIxKF6 ZnQJoB603RD37O5KnXUyBefMdzjvXa7tSzVAw/H24I/ZGDreJcUyra8Z1hqpDK1N BRs5KM4IsJt1E5HcJt0DuZQeOMpoORrJz7Ca7UGZ81zlYA9wOJBJ/de9+twj7oA3 UxLUdm2jB+cevKatGJyb7zRR3DldtPsczo04Ru/gh95Hu62bTTK39cU4ic6nhP41 gdUVuRLYdAHACB71MwR++hjBAC4liTw9ko8MjNTMT40g9qNGXXv5ISHbWAjEw7pc KuoqQNLBPWM86w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:20 2025 by rpki-client