This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json) Hash identifier: LpQBWYr9C4VOvCYXmginNzw4JUEzt+v/0yuzudSSgRs= Subject key identifier: 74:99:2B:E8:98:BD:EB:69:64:CC:B1:2E:E6:F8:6B:A9:F9:07:16:3C Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55 Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555 Certificate serial: 019AF3F76331C2CBE1F38E64D312C4FF38C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft Manifest number: 070E Signing time: Sat 06 Dec 2025 14:01:07 +0000 Manifest this update: Sat 06 Dec 2025 14:01:07 +0000 Manifest next update: Sun 07 Dec 2025 14:01:07 +0000 Files and hashes: 1: N-I7atLziy8-qeIjadSqHT5aCyA.roa (hash: V6zqdN9aPhv6jPMMfcX/1JdGJzCCjaFU3hvgfHZaU/A=) 2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: DZ8HyeCye6x9XQOsJfDskPDth0BzB2VNZJnaL8AHiiI=) 3: p96GHk0OQlbK3_guMxYIgfEgqkQ.roa (hash: NLGJ0dT4sru3lzXBmBNcFTNXezy7QjsSc92C97+9nWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:63:31:c2:cb:e1:f3:8e:64:d3:12:c4:ff:38:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555 Validity Not Before: Dec 6 14:01:07 2025 GMT Not After : Dec 7 14:01:07 2025 GMT Subject: CN=74992be898bdeb6964ccb12ee6f86ba9f907163c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:24:94:e2:45:d3:c2:2e:3a:b3:e2:04:4d: bd:a8:f5:e1:54:36:f3:91:d8:48:0a:ab:54:72:08: 62:0c:f2:9a:2a:2f:c5:f1:41:c8:de:27:4a:f9:a9: 46:d2:4e:b8:a2:08:28:6d:e9:7f:7b:d8:b0:ba:18: 67:47:f1:ee:b0:f1:a4:cb:5b:50:b4:5c:93:9a:e8: d9:db:e3:0d:13:22:b9:ee:bb:de:a5:52:c9:06:13: 8f:a1:e0:16:2a:74:e0:b0:fd:9a:c1:61:b2:5d:5b: 36:e7:2c:37:d1:fb:ed:24:0d:f8:31:2f:b7:dd:8a: 34:22:42:0a:c8:0e:ea:8a:65:5d:92:d0:6e:39:41: 75:eb:57:c7:0a:f3:72:11:01:f7:aa:0c:91:16:cf: 07:9a:7a:c5:da:5a:e5:a7:4b:26:00:34:1e:1e:6f: ab:9b:a5:bc:7b:83:93:3c:f2:b8:3c:c0:b1:b8:d5: 1d:91:aa:c7:b2:95:9d:f0:fd:a7:ff:6a:47:4b:68: f0:b5:b4:79:e0:1f:53:5a:71:ed:b2:89:5f:f4:ae: 80:2f:c5:62:85:f4:32:39:44:cf:7f:c0:81:d0:b6: ab:97:1b:30:f7:c9:14:4e:5b:a7:3e:34:1b:8d:94: c0:fe:8e:f1:b0:9d:e0:ed:4e:69:85:40:b2:16:a9: e7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:99:2B:E8:98:BD:EB:69:64:CC:B1:2E:E6:F8:6B:A9:F9:07:16:3C X509v3 Authority Key Identifier: keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:50:d9:b5:bb:a6:22:3e:9e:3c:57:2d:38:65:86:63:1b:28: 2c:6b:64:0e:c1:48:26:73:fa:c7:7a:b5:06:54:55:65:98:aa: a1:f3:26:ab:df:e9:3d:da:23:33:c1:51:ca:9d:0b:36:1c:7a: e1:eb:b6:d2:b8:ea:57:2f:5d:ab:ab:76:39:30:1d:75:22:03: 39:50:6c:29:f2:fc:e3:ac:da:4d:3f:b0:5b:f9:42:cd:3e:b7: 12:45:5f:7a:75:fa:03:39:da:8c:4c:67:6b:8a:55:e7:ee:03: b5:75:6b:cf:6f:04:ec:36:4b:27:c6:bd:7f:ca:80:8a:1f:63: 97:8a:29:dd:d4:75:8a:29:8c:a1:81:ce:b9:e4:95:c8:8e:f5: f3:a9:97:aa:41:97:e8:34:46:0d:15:3d:04:fa:db:f2:c3:e5: 7f:a8:cc:d1:e0:6c:f9:b6:47:eb:80:6d:b5:f8:c9:96:5e:ae: 4a:cf:4f:00:29:8b:73:b6:dd:93:09:2d:7d:db:d0:dc:90:11: a3:19:75:3f:47:79:2f:33:c9:83:09:a9:9b:50:53:7a:d3:80: 3d:06:8f:12:db:6e:f0:b4:73:be:1e:a9:d7:c3:a6:45:96:be: 4d:5d:39:a2:f7:41:2b:27:ad:52:ad:5a:4b:e5:c5:ad:be:97: 0d:a0:63:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz92Mxwsvh845k0xLE/zjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMjFkNzUyOGJlNzEzYTRiYTJjYjRkYjVlNThkNjRkODgy ZWI1NTUwHhcNMjUxMjA2MTQwMTA3WhcNMjUxMjA3MTQwMTA3WjAzMTEwLwYDVQQD Eyg3NDk5MmJlODk4YmRlYjY5NjRjY2IxMmVlNmY4NmJhOWY5MDcxNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiMklOJF08IuOrPiBE29qPXhVDbz kdhICqtUcghiDPKaKi/F8UHI3idK+alG0k64oggobel/e9iwuhhnR/HusPGky1tQ tFyTmujZ2+MNEyK57rvepVLJBhOPoeAWKnTgsP2awWGyXVs25yw30fvtJA34MS+3 3Yo0IkIKyA7qimVdktBuOUF161fHCvNyEQH3qgyRFs8HmnrF2lrlp0smADQeHm+r m6W8e4OTPPK4PMCxuNUdkarHspWd8P2n/2pHS2jwtbR54B9TWnHtsolf9K6AL8Vi hfQyOUTPf8CB0Larlxsw98kUTlunPjQbjZTA/o7xsJ3g7U5phUCyFqnndwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSZK+iYvetpZMyxLub4a6n5BxY8MB8GA1UdIwQY MBaAFHAh11KL5xOkuiy0215Y1k2ILrVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAt OTI4MWYwZDIzZGJmLzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAtOTI4MWYwZDIzZGJm LzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1DZtbum Ij6ePFctOGWGYxsoLGtkDsFIJnP6x3q1BlRVZZiqofMmq9/pPdojM8FRyp0LNhx6 4eu20rjqVy9dq6t2OTAddSIDOVBsKfL846zaTT+wW/lCzT63EkVfenX6AznajExn a4pV5+4DtXVrz28E7DZLJ8a9f8qAih9jl4op3dR1iimMoYHOueSVyI7186mXqkGX 6DRGDRU9BPrb8sPlf6jM0eBs+bZH64BttfjJll6uSs9PACmLc7bdkwktfdvQ3JAR oxl1P0d5LzPJgwmpm1BTetOAPQaPEttu8LRzvh6p18OmRZa+TV05ovdBKyetUq1a S+XFrb6XDaBjtw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:56:25 2025 by rpki-client