This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json) Hash identifier: dB4MGGzPjg5/jXp902XXgpF7VaYL67TOPWG0gaOM3+w= Subject key identifier: 48:50:8F:65:B2:0D:D1:C4:83:47:01:31:48:67:4A:A3:D2:AF:B7:83 Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce Certificate serial: 019B1A296AB10F518B9F97BBCD62FB022429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft Manifest number: 0F75 Signing time: Sun 14 Dec 2025 00:01:20 +0000 Manifest this update: Sun 14 Dec 2025 00:01:20 +0000 Manifest next update: Mon 15 Dec 2025 00:01:20 +0000 Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: ztLGSinAIe1NrNpEnMhWefRyibdt2jRM2OUKqs469tU=) 2: giN_6FdawPpa4U_l8L6GI6SQrxU.roa (hash: RqHHQJIozmk50JvefJWS+0ODDB8lkETbKjm2gNuR+7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:6a:b1:0f:51:8b:9f:97:bb:cd:62:fb:02:24:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce Validity Not Before: Dec 14 00:01:20 2025 GMT Not After : Dec 15 00:01:20 2025 GMT Subject: CN=48508f65b20dd1c48347013148674aa3d2afb783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:42:30:8f:7a:08:b3:77:f9:c5:06:0f:42: a8:b6:85:da:da:03:d9:21:c1:cc:f8:2f:df:67:32: f3:e9:7e:3c:88:d4:8e:ee:8d:b9:14:63:9c:cf:84: 38:a0:04:19:ff:de:a7:0d:e1:9e:b5:2b:f6:2f:1c: ce:7f:85:92:aa:41:0c:fd:15:79:df:9c:88:cb:d3: 38:d0:4e:0a:48:de:b6:1b:33:ac:e6:cb:44:4c:c3: b9:84:5e:ff:29:0c:44:08:96:ff:f7:bc:ab:60:07: 9d:50:22:6a:f8:be:b1:13:2c:86:61:df:33:80:b0: 9b:73:33:f0:17:bf:1b:d7:bb:4b:ab:6e:78:72:b7: 3d:b1:2a:9e:7e:e9:1c:a1:d2:ec:a1:a1:ee:2f:8d: 7d:ec:81:be:a1:0f:4c:b7:64:5d:f8:3e:8e:a3:51: df:b7:20:8f:36:c1:38:f8:68:ba:84:4d:85:fb:13: b0:f8:5e:b8:ac:bc:f4:dd:81:97:c7:35:ae:7f:b7: 49:8b:ba:a7:1e:d3:ea:e1:63:30:fd:0d:2c:99:0a: 11:9e:97:ff:2a:df:1e:a8:d7:ae:32:fb:2d:bb:a1: 86:fd:41:4b:24:f7:7e:32:f9:24:3c:a2:01:2b:f9: d0:47:4f:8f:db:9b:45:33:5f:54:a7:30:24:4d:22: 99:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:50:8F:65:B2:0D:D1:C4:83:47:01:31:48:67:4A:A3:D2:AF:B7:83 X509v3 Authority Key Identifier: keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8c:a5:f5:7b:2d:49:b1:f6:a4:42:ce:17:69:82:65:da:dc: ce:a5:3b:4c:ac:b0:a8:d9:bd:c1:e4:e3:db:27:74:93:5f:57: 4c:58:e2:e9:c6:9c:04:a6:3f:51:95:8b:b6:cc:32:b1:de:c0: 5b:75:3f:2f:15:b7:b8:6d:9f:0a:16:b8:49:16:ca:f1:8f:65: 99:dc:3e:2e:ec:47:85:9a:c5:27:f6:4e:39:ad:7f:4b:e5:e5: 4f:bf:68:56:44:e7:40:3e:2e:5d:c2:d5:3c:01:22:0b:2c:11: 59:7d:89:d9:2a:d4:79:fb:af:db:c0:bf:ee:fa:2b:4b:e8:cc: b3:81:3d:10:b9:e2:47:c6:ae:ca:21:72:ab:eb:ec:16:b1:9d: 80:9f:c9:6a:be:eb:cb:40:e3:e3:da:09:ba:a2:53:ad:2e:da: 6d:41:c8:b6:c8:b6:72:14:49:1c:8c:ca:de:4e:fa:56:75:e9: b5:4f:47:ae:ae:93:85:ae:54:7c:15:b2:e3:98:3f:09:b8:aa: 08:c4:fd:28:ab:ac:8b:8a:65:df:28:f6:70:2f:06:91:6c:a9: 43:43:c3:e8:de:04:a8:39:91:fd:56:5b:b0:01:86:9c:62:b9: ab:52:8c:21:20:2f:f3:97:8f:4b:17:83:b1:60:27:04:eb:c8: 0b:69:25:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKWqxD1GLn5e7zWL7AiQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4N2Y1OWMzNmUyMmQxZjkwMzg0ZjQxZGE2MDcwNWFjNzRk Nzc5Y2UwHhcNMjUxMjE0MDAwMTIwWhcNMjUxMjE1MDAwMTIwWjAzMTEwLwYDVQQD Eyg0ODUwOGY2NWIyMGRkMWM0ODM0NzAxMzE0ODY3NGFhM2QyYWZiNzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FFCMI96CLN3+cUGD0KotoXa2gPZ IcHM+C/fZzLz6X48iNSO7o25FGOcz4Q4oAQZ/96nDeGetSv2LxzOf4WSqkEM/RV5 35yIy9M40E4KSN62GzOs5stETMO5hF7/KQxECJb/97yrYAedUCJq+L6xEyyGYd8z gLCbczPwF78b17tLq254crc9sSqefukcodLsoaHuL4197IG+oQ9Mt2Rd+D6Oo1Hf tyCPNsE4+Gi6hE2F+xOw+F64rLz03YGXxzWuf7dJi7qnHtPq4WMw/Q0smQoRnpf/ Kt8eqNeuMvstu6GG/UFLJPd+MvkkPKIBK/nQR0+P25tFM19UpzAkTSKZWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhQj2WyDdHEg0cBMUhnSqPSr7eDMB8GA1UdIwQY MBaAFAh/WcNuItH5A4T0HaYHBax013nOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgt YzA0YmUwMjAzN2U4LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgtYzA0YmUwMjAzN2U4 LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoyl9Xst SbH2pELOF2mCZdrczqU7TKywqNm9weTj2yd0k19XTFji6cacBKY/UZWLtswysd7A W3U/LxW3uG2fCha4SRbK8Y9lmdw+LuxHhZrFJ/ZOOa1/S+XlT79oVkTnQD4uXcLV PAEiCywRWX2J2SrUefuv28C/7vorS+jMs4E9ELniR8auyiFyq+vsFrGdgJ/Jar7r y0Dj49oJuqJTrS7abUHItsi2chRJHIzK3k76VnXptU9Hrq6Tha5UfBWy45g/Cbiq CMT9KKusi4pl3yj2cC8GkWypQ0PD6N4EqDmR/VZbsAGGnGK5q1KMISAv85ePSxeD sWAnBOvIC2klFA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:22 2025 by rpki-client