This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft File: CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json) Hash identifier: bGYYYNST2KfLI+vvpv7SvUqcagOOZMnFPiNb6xmm4SU= Subject key identifier: 31:A7:1E:53:E2:F4:48:86:EB:90:5E:31:26:38:5B:82:40:11:DC:D7 Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77 Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077 Certificate serial: 019B318D20C05D0E3C07B9E1D40205496E37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft Manifest number: 05EA Signing time: Thu 18 Dec 2025 13:01:31 +0000 Manifest this update: Thu 18 Dec 2025 13:01:31 +0000 Manifest next update: Fri 19 Dec 2025 13:01:31 +0000 Files and hashes: 1: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: aAG1/yYj0CmpLb+GV+UbCq16Fj37nbfEfiGWuGSQU7s=) 2: z81aD-MDwzkjF_KOvhdaxj86KX4.roa (hash: E1FgG/yobviIZfsUKtsw9yD/n1PK8j1TNBK/5+kRW/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8d:20:c0:5d:0e:3c:07:b9:e1:d4:02:05:49:6e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077 Validity Not Before: Dec 18 13:01:31 2025 GMT Not After : Dec 19 13:01:31 2025 GMT Subject: CN=31a71e53e2f44886eb905e3126385b824011dcd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:20:ac:32:c5:6d:d2:2c:42:7d:ea:04:85:7c: 4e:f2:0d:9a:a7:45:2d:1f:57:29:0a:d9:e7:5a:7e: fa:b6:41:20:61:2b:f3:3b:28:e4:27:00:82:9d:f1: 94:e3:f2:a2:c7:09:93:0c:dc:d3:37:e5:24:06:0f: a8:c3:8e:ed:2e:92:d4:4d:4b:27:8b:f8:c4:d0:38: 2e:bb:ff:60:a9:40:60:82:a8:92:8c:91:b9:30:d6: 29:58:ce:b1:62:8a:39:fc:98:66:81:8c:9f:db:d7: 9a:31:b7:51:e7:51:21:e0:a1:04:7f:7c:0d:f3:dd: 51:79:7c:f8:38:12:c6:7c:6e:fa:9a:26:38:99:44: 71:67:2a:be:73:77:67:5a:89:8f:b9:f6:de:47:68: 03:a1:09:d7:60:01:80:2c:da:7b:68:24:43:31:66: f5:7a:7d:82:34:d6:d8:6f:7d:32:81:e0:e9:0a:d8: c2:6f:ca:17:16:c1:78:57:0d:97:8d:7d:3a:38:c8: 92:5d:15:95:2b:05:7e:a8:1e:81:66:0b:31:9e:11: 66:88:b6:73:5d:f0:84:96:36:fb:6e:a2:21:19:c8: d3:55:03:31:55:1a:e7:67:89:ce:ce:d4:bd:0f:58: 5f:0a:d2:99:77:fd:51:ce:23:2c:c2:6e:c0:34:07: 30:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A7:1E:53:E2:F4:48:86:EB:90:5E:31:26:38:5B:82:40:11:DC:D7 X509v3 Authority Key Identifier: keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ab:04:50:7c:26:9d:ca:21:f6:62:89:39:c7:38:94:2a:39: eb:4e:f0:76:61:03:98:94:c2:cc:6d:64:00:e8:6c:d4:39:48: 2d:54:8f:52:fd:64:1d:b0:88:dd:02:20:6e:9c:36:44:49:20: ee:13:9f:1d:2c:51:00:f5:40:38:62:45:8c:d6:78:bd:0d:fd: a6:6f:67:d0:ae:bc:95:1f:b4:62:ff:0a:32:34:5c:20:68:e7: d7:72:30:37:52:a6:74:81:5d:30:fc:62:33:4b:3c:21:64:f8: 7e:da:fc:b4:06:4e:11:35:8e:f1:e7:f6:ec:ec:0d:35:9f:a8: f9:54:d7:c9:d8:c3:a5:72:93:e6:75:eb:67:af:e3:03:94:32: d2:1c:2c:4d:d7:7c:70:8b:c4:70:ba:86:f6:2a:ae:8a:f6:04: fc:b1:ae:70:63:c6:35:2f:0e:d5:f4:e7:26:08:4e:ad:ca:52: 8a:be:99:f9:0e:37:4e:25:78:b3:fa:3a:11:13:78:8a:d7:0c: 36:7b:a2:cf:19:28:6c:69:60:5e:b0:ed:89:a9:f0:2f:2e:a9: d9:e4:d5:8e:99:f1:2e:9b:61:5f:f4:ea:c0:87:0b:f8:04:8b: dd:34:2d:a9:37:8f:d7:3a:57:4f:d9:f6:5c:aa:3a:0e:77:90: bd:28:3d:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjSDAXQ48B7nh1AIFSW43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4N2FhYzY3NGU0ZTU3OTYwMjAxYTM0YzJjMDQyNDg2MWE3 ZmIwNzcwHhcNMjUxMjE4MTMwMTMxWhcNMjUxMjE5MTMwMTMxWjAzMTEwLwYDVQQD EygzMWE3MWU1M2UyZjQ0ODg2ZWI5MDVlMzEyNjM4NWI4MjQwMTFkY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSCsMsVt0ixCfeoEhXxO8g2ap0Ut H1cpCtnnWn76tkEgYSvzOyjkJwCCnfGU4/KixwmTDNzTN+UkBg+ow47tLpLUTUsn i/jE0Dguu/9gqUBggqiSjJG5MNYpWM6xYoo5/JhmgYyf29eaMbdR51Eh4KEEf3wN 891ReXz4OBLGfG76miY4mURxZyq+c3dnWomPufbeR2gDoQnXYAGALNp7aCRDMWb1 en2CNNbYb30ygeDpCtjCb8oXFsF4Vw2XjX06OMiSXRWVKwV+qB6BZgsxnhFmiLZz XfCEljb7bqIhGcjTVQMxVRrnZ4nOztS9D1hfCtKZd/1RziMswm7ANAcwWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGnHlPi9EiG65BeMSY4W4JAEdzXMB8GA1UdIwQY MBaAFAh6rGdOTleWAgGjTCwEJIYaf7B3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNTgyZTgtMDY5OC00YmFmLTkwMjgt ZGYwMmIxM2UyZTRhLzEvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xNTgyZTgtMDY5OC00YmFmLTkwMjgtZGYwMmIxM2UyZTRh LzEvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqsEUHwm ncoh9mKJOcc4lCo5607wdmEDmJTCzG1kAOhs1DlILVSPUv1kHbCI3QIgbpw2REkg 7hOfHSxRAPVAOGJFjNZ4vQ39pm9n0K68lR+0Yv8KMjRcIGjn13IwN1KmdIFdMPxi M0s8IWT4ftr8tAZOETWO8ef27OwNNZ+o+VTXydjDpXKT5nXrZ6/jA5Qy0hwsTdd8 cIvEcLqG9iquivYE/LGucGPGNS8O1fTnJghOrcpSir6Z+Q43TiV4s/o6ERN4itcM NnuizxkobGlgXrDtianwLy6p2eTVjpnxLpthX/TqwIcL+ASL3TQtqTeP1zpXT9n2 XKo6DneQvSg9AA== -----END CERTIFICATE-----Generated at Thu Dec 18 21:46:08 2025 by rpki-client