This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json) Hash identifier: 8KLwEaZwCKLeSkWCmeQ5UappE5fRSW6iLZvbqW78Ol4= Subject key identifier: F7:08:A5:98:2C:E6:C8:44:1F:6B:B2:6F:96:00:5C:95:C5:F5:A7:6A Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec Certificate serial: 019AF76667936F7F39DFB1CB9E3006543FEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft Manifest number: 12E7 Signing time: Sun 07 Dec 2025 06:01:14 +0000 Manifest this update: Sun 07 Dec 2025 06:01:14 +0000 Manifest next update: Mon 08 Dec 2025 06:01:14 +0000 Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: L5sZ99ayovYx/+gfJ0LP8W3TSm/KoauvlLCK6tVWxtc=) 2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:67:93:6f:7f:39:df:b1:cb:9e:30:06:54:3f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec Validity Not Before: Dec 7 06:01:14 2025 GMT Not After : Dec 8 06:01:14 2025 GMT Subject: CN=f708a5982ce6c8441f6bb26f96005c95c5f5a76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9e:0f:57:af:b2:f7:c1:ce:a9:35:6d:40:58: b4:cf:51:69:b9:5b:e1:a4:42:fe:02:42:77:f1:05: c5:02:41:f2:82:22:4d:bb:2b:d2:84:a1:62:ed:04: 91:04:b9:f2:86:fd:67:8a:7d:35:8c:3a:6f:a0:2c: 9c:48:e8:0a:de:c7:c6:62:38:cc:95:91:4c:29:13: 06:eb:cd:2f:35:0b:71:8f:5a:c7:bf:83:b1:c8:2e: c8:37:b3:e6:60:6c:03:54:d0:93:b2:c0:2e:a2:cb: 2a:36:08:ca:90:64:ff:a7:09:f5:2e:da:d5:4f:da: 1b:20:77:47:a1:1a:a6:ba:d8:40:e6:a0:a5:19:73: 4c:d8:99:a7:ff:39:9f:e0:87:f3:98:b4:8d:59:8e: 98:2f:82:2c:e2:3b:cf:ef:ae:b0:a2:a5:65:cd:e6: 15:50:7f:d2:db:97:78:66:ee:3c:38:00:25:66:76: 32:e6:ff:cc:8f:90:62:21:85:f3:20:1d:66:e0:a7: 96:74:23:94:c0:67:4d:cf:1d:10:48:75:00:0e:37: 0a:6e:2e:94:97:0f:16:c6:68:ae:7b:82:3c:cc:59: 46:24:fc:b6:59:cf:56:c5:e5:55:96:16:11:f0:70: b7:92:66:52:74:d6:b6:47:f9:95:72:4b:40:6b:a1: b1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:08:A5:98:2C:E6:C8:44:1F:6B:B2:6F:96:00:5C:95:C5:F5:A7:6A X509v3 Authority Key Identifier: keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c2:14:25:9c:5f:6a:80:65:12:a6:04:dd:49:91:da:4a:eb: bd:d6:37:86:a9:44:d5:f7:55:33:15:c9:0e:af:7a:b2:95:ef: 5f:af:dc:b7:fb:e8:10:d1:f9:f8:02:4c:7b:18:3d:39:17:ce: df:8e:06:d4:ff:8d:97:f1:73:e9:59:3f:06:de:70:f0:50:29: 9b:18:8f:d8:2d:58:e5:3a:96:c1:67:2e:99:97:53:b0:a1:e4: 25:c4:61:17:36:30:f4:48:fb:d3:27:b4:6f:6c:0d:75:68:cc: cb:1d:7e:a0:de:46:69:4d:39:bd:6f:8b:aa:bd:4c:d7:5c:1d: f0:3c:2a:71:f6:cd:0e:f0:77:36:b0:35:b5:5b:73:60:58:4d: 93:e8:9c:49:6b:01:5c:cb:db:04:cf:d1:f5:e0:c6:bc:f1:1f: c1:b6:a8:34:72:d6:ef:07:45:75:17:3a:ff:83:eb:56:b0:92: b4:3f:bb:b0:21:41:ba:49:d7:3a:1e:80:e1:fa:5d:cf:12:18: 2b:dd:16:d9:a7:d8:0e:37:e5:c6:10:72:a6:74:1b:94:69:bd: 3e:ad:2c:bf:e5:5b:ea:31:e5:5d:be:b0:06:1f:60:47:54:b9: bf:df:88:a0:d5:e7:34:04:f5:5b:6b:08:da:76:1d:f5:1c:48: 07:d6:01:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3ZmeTb38537HLnjAGVD/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NzgxMzE0MmIwZDNmMDY4ZGVhNmRkNDM0MWM0ZTBiOTA3 OTg4ZWMwHhcNMjUxMjA3MDYwMTE0WhcNMjUxMjA4MDYwMTE0WjAzMTEwLwYDVQQD EyhmNzA4YTU5ODJjZTZjODQ0MWY2YmIyNmY5NjAwNWM5NWM1ZjVhNzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw54PV6+y98HOqTVtQFi0z1FpuVvh pEL+AkJ38QXFAkHygiJNuyvShKFi7QSRBLnyhv1nin01jDpvoCycSOgK3sfGYjjM lZFMKRMG680vNQtxj1rHv4OxyC7IN7PmYGwDVNCTssAuossqNgjKkGT/pwn1LtrV T9obIHdHoRqmuthA5qClGXNM2Jmn/zmf4IfzmLSNWY6YL4Is4jvP766woqVlzeYV UH/S25d4Zu48OAAlZnYy5v/Mj5BiIYXzIB1m4KeWdCOUwGdNzx0QSHUADjcKbi6U lw8Wxmiue4I8zFlGJPy2Wc9WxeVVlhYR8HC3kmZSdNa2R/mVcktAa6GxUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcIpZgs5shEH2uyb5YAXJXF9adqMB8GA1UdIwQY MBaAFAh4ExQrDT8Gjept1DQcTguQeYjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUt N2UxNTdiYWU2YzJiLzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUtN2UxNTdiYWU2YzJi LzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcIUJZxf aoBlEqYE3UmR2krrvdY3hqlE1fdVMxXJDq96spXvX6/ct/voENH5+AJMexg9ORfO 344G1P+Nl/Fz6Vk/Bt5w8FApmxiP2C1Y5TqWwWcumZdTsKHkJcRhFzYw9Ej70ye0 b2wNdWjMyx1+oN5GaU05vW+Lqr1M11wd8DwqcfbNDvB3NrA1tVtzYFhNk+icSWsB XMvbBM/R9eDGvPEfwbaoNHLW7wdFdRc6/4PrVrCStD+7sCFBuknXOh6A4fpdzxIY K90W2afYDjflxhBypnQblGm9Pq0sv+Vb6jHlXb6wBh9gR1S5v9+IoNXnNAT1W2sI 2nYd9RxIB9YBmw== -----END CERTIFICATE-----Generated at Sun Dec 7 13:04:52 2025 by rpki-client