This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft File: cha_aL4onmHE01vUAmZi2OT76vE.mft (raw, json) Hash identifier: nGwpBBRQ+kpZPAx0QRxkWVoMK1Eh5FYOCyxB2iB/LOE= Subject key identifier: 6D:CF:DD:7C:56:4F:06:6C:27:D0:5E:6A:9A:F6:A0:27:C1:F1:01:4E Authority key identifier: 72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1 Certificate issuer: /CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1 Certificate serial: 019AF31D1D32D98AA4CEC7C09788A66AD17F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft Manifest number: 7B Signing time: Sat 06 Dec 2025 10:02:42 +0000 Manifest this update: Sat 06 Dec 2025 10:02:42 +0000 Manifest next update: Sun 07 Dec 2025 10:02:42 +0000 Files and hashes: 1: cha_aL4onmHE01vUAmZi2OT76vE.crl (hash: pUDeb5EmBkcP13dbc4GLMcLF3MW5bXssxmmZs2eeF90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:1d:32:d9:8a:a4:ce:c7:c0:97:88:a6:6a:d1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1 Validity Not Before: Dec 6 10:02:42 2025 GMT Not After : Dec 7 10:02:42 2025 GMT Subject: CN=6dcfdd7c564f066c27d05e6a9af6a027c1f1014e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:8e:ce:95:19:dd:d7:d5:4a:fe:0b:39:ed: f4:d0:e2:9f:63:86:3a:38:0b:6e:de:ed:77:3d:55: 23:e2:be:59:08:b2:a9:81:33:c5:3b:e1:84:69:58: ce:a9:a8:9b:39:ce:fc:30:cd:5a:4b:a0:8a:21:28: 0a:69:09:f4:19:d0:48:2f:7e:3d:d3:54:0c:c1:ad: 3d:c2:ec:c2:77:5d:63:4c:88:ec:1d:d2:bf:c9:44: b9:73:28:b1:a8:de:8e:91:a9:41:51:e0:97:18:29: 5c:87:2a:f4:40:c0:0d:1b:06:5e:8f:98:b8:d0:dd: 5a:70:aa:56:0d:d8:cf:32:75:2e:f1:43:6a:0b:2f: 01:c0:ee:c2:e4:85:95:e5:74:75:4c:b9:98:de:9a: 9d:33:53:d4:6b:60:12:be:02:1b:e3:de:f8:a4:af: 7e:b5:ab:da:98:73:78:18:b0:7f:8e:80:7c:95:02: 10:51:e1:b8:f7:d9:33:b0:32:12:1f:7d:c8:fe:fc: 06:78:a5:8d:74:06:ca:65:d1:6c:66:0e:d7:c0:3d: c2:43:2d:13:b5:c3:69:1f:f2:59:d1:6a:f6:6d:00: 5d:95:1b:89:b2:39:81:d2:21:e0:90:a4:73:a3:ad: 17:58:4b:46:a4:7a:52:33:1b:4c:82:24:61:63:2f: 08:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CF:DD:7C:56:4F:06:6C:27:D0:5E:6A:9A:F6:A0:27:C1:F1:01:4E X509v3 Authority Key Identifier: keyid:72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:81:5e:ba:da:d0:ab:23:58:da:9d:96:9a:d7:72:12:97:55: 76:1a:3e:aa:58:96:6a:2b:47:f4:7e:45:76:0e:46:60:7f:23: e9:d1:6b:95:fe:45:59:66:7d:22:8c:ac:bf:f9:84:c3:da:76: 72:7c:bc:dd:d2:de:75:89:1b:e9:b5:3e:7c:d9:a9:f2:d7:8b: bc:60:83:49:c6:28:1c:8c:2c:a2:34:aa:00:61:ce:34:bb:ba: d8:2d:ac:b1:f5:e6:2c:c3:7e:57:b1:92:a7:52:b2:54:dd:ba: 00:74:b9:1e:f2:8b:ad:46:0a:a7:9a:ac:e7:4c:8b:97:b0:ab: 6f:82:f5:86:74:d0:0f:73:da:0c:72:53:85:6c:83:75:f9:91: 4d:01:b1:08:24:e4:74:3c:41:63:54:07:9e:b3:d0:35:f2:fc: 92:a3:91:69:1e:1c:fb:3c:e8:49:86:32:34:ec:0c:ba:91:6b: 35:be:f4:5b:1b:b8:4c:cc:e0:06:35:67:d5:44:f8:0c:b6:78: 2c:45:12:11:b2:03:b4:4e:9c:c0:8a:c0:0e:e6:19:be:5f:94: 72:15:0a:3c:76:95:57:a7:c2:bc:16:ed:49:57:13:0d:fb:2c: ef:7d:0d:4b:02:35:95:0f:47:c0:35:52:65:0c:1e:cc:5e:96: f6:64:e0:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHR0y2YqkzsfAl4imatF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMTZiZjY4YmUyODllNjFjNGQzNWJkNDAyNjY2MmQ4ZTRm YmVhZjEwHhcNMjUxMjA2MTAwMjQyWhcNMjUxMjA3MTAwMjQyWjAzMTEwLwYDVQQD Eyg2ZGNmZGQ3YzU2NGYwNjZjMjdkMDVlNmE5YWY2YTAyN2MxZjEwMTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurOOzpUZ3dfVSv4LOe300OKfY4Y6 OAtu3u13PVUj4r5ZCLKpgTPFO+GEaVjOqaibOc78MM1aS6CKISgKaQn0GdBIL349 01QMwa09wuzCd11jTIjsHdK/yUS5cyixqN6OkalBUeCXGClchyr0QMANGwZej5i4 0N1acKpWDdjPMnUu8UNqCy8BwO7C5IWV5XR1TLmY3pqdM1PUa2ASvgIb4974pK9+ tavamHN4GLB/joB8lQIQUeG499kzsDISH33I/vwGeKWNdAbKZdFsZg7XwD3CQy0T tcNpH/JZ0Wr2bQBdlRuJsjmB0iHgkKRzo60XWEtGpHpSMxtMgiRhYy8IPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3P3XxWTwZsJ9Beapr2oCfB8QFOMB8GA1UdIwQY MBaAFHIWv2i+KJ5hxNNb1AJmYtjk++rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YmJhNDktNjE5Mi00OGUzLTk0ZjAt NGQ0NTIzMWM3MjMzLzEvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85YmJhNDktNjE5Mi00OGUzLTk0ZjAtNGQ0NTIzMWM3MjMz LzEvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioFeutrQ qyNY2p2WmtdyEpdVdho+qliWaitH9H5Fdg5GYH8j6dFrlf5FWWZ9Ioysv/mEw9p2 cny83dLedYkb6bU+fNmp8teLvGCDScYoHIwsojSqAGHONLu62C2ssfXmLMN+V7GS p1KyVN26AHS5HvKLrUYKp5qs50yLl7Crb4L1hnTQD3PaDHJThWyDdfmRTQGxCCTk dDxBY1QHnrPQNfL8kqORaR4c+zzoSYYyNOwMupFrNb70Wxu4TMzgBjVn1UT4DLZ4 LEUSEbIDtE6cwIrADuYZvl+UchUKPHaVV6fCvBbtSVcTDfss730NSwI1lQ9HwDVS ZQwezF6W9mTgEw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:19:49 2025 by rpki-client