This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json) Hash identifier: aIyTXbnsvrb2lDV9CvSVmIymOl4OWOldFeNqh3iWBRQ= Subject key identifier: 7B:0F:A5:44:A7:55:5B:37:2A:5C:2D:9B:28:4A:DF:7C:BF:AD:7A:EE Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92 Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92 Certificate serial: 019AF23FEB8ABAAEBE48EC91317F84099375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft Manifest number: 095B Signing time: Sat 06 Dec 2025 06:01:06 +0000 Manifest this update: Sat 06 Dec 2025 06:01:06 +0000 Manifest next update: Sun 07 Dec 2025 06:01:06 +0000 Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: qgvQe29QVNNWjZHwsZjExSzfiS18m+OO63ukSZLKTDA=) 2: eO8gPZF0Xg3a6oErz3xsis78_yg.roa (hash: ARYdnlTRJg0XCA/7uUE4AwiYMl9F7vHnb8qFPrerwpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:eb:8a:ba:ae:be:48:ec:91:31:7f:84:09:93:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92 Validity Not Before: Dec 6 06:01:06 2025 GMT Not After : Dec 7 06:01:06 2025 GMT Subject: CN=7b0fa544a7555b372a5c2d9b284adf7cbfad7aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:f8:43:08:10:6f:77:f9:9c:c9:b3:24:92: b5:c6:98:f0:55:61:31:97:7b:13:88:77:83:f9:fd: 6a:31:18:2d:6c:ad:cf:8c:04:2a:68:80:ec:ad:5b: 08:72:58:1b:fc:c2:2d:eb:d6:20:08:0c:1f:3b:2f: 30:8a:a0:9b:4b:d4:93:3c:99:9f:63:6f:be:6a:9d: 18:43:68:78:5e:c4:3c:06:23:ae:96:c2:7a:4b:43: b8:68:7e:f0:b7:47:78:e0:78:dd:02:50:15:4c:a8: f0:97:2f:47:9a:d0:6b:23:ca:74:ff:60:ed:53:a4: d8:6e:51:4b:9b:14:89:f8:a3:ed:e7:61:29:3f:0f: 54:77:b4:31:7e:d7:a2:cf:3a:ff:ab:32:3e:1c:14: 2b:ed:8d:a0:01:91:09:8c:ba:dc:c0:7d:df:db:33: af:cb:04:48:27:44:11:03:87:00:da:18:c2:f9:5a: 9a:90:97:b3:d8:16:62:a6:51:cb:ed:e4:13:13:48: 40:4b:cb:5a:6d:c9:c7:a3:2e:12:69:a4:86:b5:98: 31:91:32:b9:42:ac:fa:af:0b:7a:9f:73:c6:fc:62: 30:73:c8:ae:d5:5c:c1:a6:a2:e0:31:ff:6b:e2:7c: 3a:57:7b:75:bf:bc:4b:41:b4:6f:13:99:6e:5f:73: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0F:A5:44:A7:55:5B:37:2A:5C:2D:9B:28:4A:DF:7C:BF:AD:7A:EE X509v3 Authority Key Identifier: keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c5:26:aa:6b:91:12:01:a4:6e:82:20:71:43:7d:23:02:08: 41:e4:18:43:c2:73:6f:e7:4f:fb:1f:33:f7:04:69:fc:0d:35: ce:ba:35:6d:40:87:80:c5:83:57:a8:ac:34:2a:66:77:7f:2d: 22:a8:56:f1:c7:cd:1a:ea:c6:0e:25:39:9c:ef:0d:35:e8:3a: ee:eb:83:64:c2:6d:ec:2a:46:a4:8e:70:89:fc:38:80:87:95: 51:cf:50:2b:71:5b:7b:4d:f0:77:65:02:df:c8:3e:a2:de:2a: 43:67:ad:ee:2e:28:ea:85:79:da:a3:89:28:6b:38:84:fd:41: dc:30:83:fa:d8:e5:fe:b5:ad:91:74:67:37:c8:b7:b2:70:aa: 04:50:dd:d2:c5:82:29:4d:3f:74:b8:4b:26:65:42:94:f9:28: 92:07:f9:8f:d0:88:a2:75:56:4d:aa:da:9e:38:e0:7d:a6:2c: bd:f1:c1:34:20:15:5c:de:39:67:fe:54:c7:43:47:1e:5a:2b: f8:3e:66:bf:16:d6:50:da:1e:95:ba:63:6c:59:b8:fb:4b:d7: db:ab:73:09:bd:2e:f1:31:60:b0:e6:87:22:ed:fa:58:00:bb: c9:7c:8e:c5:c2:30:95:81:81:2e:ef:67:6a:40:9a:fe:3a:cd: fd:f4:71:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+uKuq6+SOyRMX+ECZN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMTA4YTI4YzcwN2IwZTVjMmMyZTZjMjEzN2Q0NTg3OTEx NGJiOTIwHhcNMjUxMjA2MDYwMTA2WhcNMjUxMjA3MDYwMTA2WjAzMTEwLwYDVQQD Eyg3YjBmYTU0NGE3NTU1YjM3MmE1YzJkOWIyODRhZGY3Y2JmYWQ3YWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL74QwgQb3f5nMmzJJK1xpjwVWEx l3sTiHeD+f1qMRgtbK3PjAQqaIDsrVsIclgb/MIt69YgCAwfOy8wiqCbS9STPJmf Y2++ap0YQ2h4XsQ8BiOulsJ6S0O4aH7wt0d44HjdAlAVTKjwly9HmtBrI8p0/2Dt U6TYblFLmxSJ+KPt52EpPw9Ud7Qxfteizzr/qzI+HBQr7Y2gAZEJjLrcwH3f2zOv ywRIJ0QRA4cA2hjC+VqakJez2BZiplHL7eQTE0hAS8tabcnHoy4SaaSGtZgxkTK5 Qqz6rwt6n3PG/GIwc8iu1VzBpqLgMf9r4nw6V3t1v7xLQbRvE5luX3PrjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsPpUSnVVs3KlwtmyhK33y/rXruMB8GA1UdIwQY MBaAFAoQiijHB7DlwsLmwhN9RYeRFLuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xMzlkMjMtODAyZC00MjI0LTgzMmUt MWY4NTgxNDIxNzYwLzEvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xMzlkMjMtODAyZC00MjI0LTgzMmUtMWY4NTgxNDIxNzYw LzEvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcUmqmuR EgGkboIgcUN9IwIIQeQYQ8Jzb+dP+x8z9wRp/A01zro1bUCHgMWDV6isNCpmd38t IqhW8cfNGurGDiU5nO8NNeg67uuDZMJt7CpGpI5wifw4gIeVUc9QK3Fbe03wd2UC 38g+ot4qQ2et7i4o6oV52qOJKGs4hP1B3DCD+tjl/rWtkXRnN8i3snCqBFDd0sWC KU0/dLhLJmVClPkokgf5j9CIonVWTaranjjgfaYsvfHBNCAVXN45Z/5Ux0NHHlor +D5mvxbWUNoelbpjbFm4+0vX26tzCb0u8TFgsOaHIu36WAC7yXyOxcIwlYGBLu9n akCa/jrN/fRxXw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:29 2025 by rpki-client