This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft File: Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json) Hash identifier: zS9N90soI5feimpu8bG/3aD5zGnXsppvpAux4oxP7a4= Subject key identifier: F1:DA:7C:21:50:02:C3:F1:B7:78:2F:5F:AB:DC:EC:74:38:B6:75:BD Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5 Certificate issuer: /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5 Certificate serial: 019B3D2347D58F6D8C8293002F275DEBCD73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft Manifest number: 1611 Signing time: Sat 20 Dec 2025 19:01:20 +0000 Manifest this update: Sat 20 Dec 2025 19:01:20 +0000 Manifest next update: Sun 21 Dec 2025 19:01:20 +0000 Files and hashes: 1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: TKPtGkqEYGsvw0+GfCXYV9VKGGjnF2ufnFAbiaqVe4w=) 2: PvWxO00iUa3ctfHwCdtyJD0RWh0.roa (hash: WHY5/KEo1RVdlR9QfwLVXSmW+Ddxfbtak63Ebi49yak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:47:d5:8f:6d:8c:82:93:00:2f:27:5d:eb:cd:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5 Validity Not Before: Dec 20 19:01:20 2025 GMT Not After : Dec 21 19:01:20 2025 GMT Subject: CN=f1da7c215002c3f1b7782f5fabdcec7438b675bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:c5:df:e8:fa:5b:a5:85:9a:46:70:4a:29: 68:bb:13:f7:09:d5:4a:b1:ec:33:cb:4e:e6:92:27: 3a:46:d1:6d:9f:3c:60:5c:0d:e1:0f:51:93:1a:a2: fe:02:ec:da:36:20:e3:da:53:77:fb:83:e1:42:26: b5:6a:05:cc:f0:65:2c:be:0e:e0:f6:d6:06:38:fd: 11:86:cb:01:27:2f:54:6e:34:e8:59:cc:42:81:c4: 27:f0:4e:b6:0c:a5:e8:32:96:8e:94:38:4b:2f:4a: a5:e8:74:1a:74:fa:d1:c7:4d:69:84:4d:01:01:a8: af:35:e7:e2:12:c9:b6:6f:49:fa:b1:73:85:02:a2: a4:69:02:77:1f:c6:8b:9b:2a:7a:9a:14:bc:1e:ea: 85:e9:9d:73:b5:ba:d4:6f:b2:ac:e9:45:91:14:a4: 95:fd:4f:91:19:c9:c4:8e:76:33:b8:24:6c:03:da: 54:b2:fa:5b:17:f1:ce:ad:e4:86:17:ed:89:d9:66: 74:93:56:14:01:97:9b:7a:1e:1c:9b:0f:9f:67:3f: 3f:fb:0a:22:5b:a9:bb:d7:30:9e:45:e0:97:34:d8: d7:d1:98:9f:55:cb:c4:f7:0b:4f:84:d1:05:2d:3a: 30:9d:64:a5:16:c8:c4:d3:10:f0:3d:e7:b7:99:f3: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DA:7C:21:50:02:C3:F1:B7:78:2F:5F:AB:DC:EC:74:38:B6:75:BD X509v3 Authority Key Identifier: keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0a:bc:8d:73:69:80:8b:4a:e2:98:c2:c2:ad:a4:01:47:37: c1:0d:e2:79:e4:f9:b7:78:d8:88:2b:3c:7a:3c:8e:41:c1:c1: ed:d2:0a:dd:8b:b5:fb:2e:e1:05:f0:b9:83:9f:ba:1f:a8:6a: 67:e0:92:46:80:2a:b9:6d:af:54:11:3e:78:f2:da:c0:3c:94: a8:bc:93:28:f1:e1:6d:f1:db:03:c8:85:84:aa:bf:fa:d4:be: bb:55:14:fb:4f:73:2b:4a:3b:11:5b:e0:2a:ab:42:59:ad:04: 28:d8:26:cf:37:62:f1:85:aa:df:ef:46:e4:2a:f2:74:89:5c: e8:92:ae:33:8f:08:96:d0:06:73:9a:d8:cb:78:22:84:da:e2: e3:0f:da:fe:53:8f:24:8a:20:ec:3f:43:f1:4d:65:0f:22:35: 8a:8f:fe:f5:4a:f8:47:f2:4c:a1:ba:dc:c6:15:10:ac:6f:d2: 6c:98:0d:f0:ad:ea:61:21:ec:4e:ab:18:13:b5:14:27:4a:c2: 14:2b:c4:58:57:0b:10:96:98:5b:2c:6a:64:18:55:4c:8a:d3: e0:c8:a9:c8:31:24:36:37:93:c4:0b:63:d8:25:d3:54:c5:32: 90:d1:02:2a:f7:2f:ff:45:b2:35:04:7f:dd:32:17:80:fb:0b: da:52:34:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I0fVj22MgpMALydd681zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMWZkYjgwZWZmNWJjZTE2NTRhYzhjNmI5MjJlNzgxZmQy ZDM2YTUwHhcNMjUxMjIwMTkwMTIwWhcNMjUxMjIxMTkwMTIwWjAzMTEwLwYDVQQD EyhmMWRhN2MyMTUwMDJjM2YxYjc3ODJmNWZhYmRjZWM3NDM4YjY3NWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FHF3+j6W6WFmkZwSilouxP3CdVK sewzy07mkic6RtFtnzxgXA3hD1GTGqL+AuzaNiDj2lN3+4PhQia1agXM8GUsvg7g 9tYGOP0RhssBJy9UbjToWcxCgcQn8E62DKXoMpaOlDhLL0ql6HQadPrRx01phE0B AaivNefiEsm2b0n6sXOFAqKkaQJ3H8aLmyp6mhS8HuqF6Z1ztbrUb7Ks6UWRFKSV /U+RGcnEjnYzuCRsA9pUsvpbF/HOreSGF+2J2WZ0k1YUAZebeh4cmw+fZz8/+woi W6m71zCeReCXNNjX0ZifVcvE9wtPhNEFLTownWSlFsjE0xDwPee3mfNBOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHafCFQAsPxt3gvX6vc7HQ4tnW9MB8GA1UdIwQY MBaAFAof24Dv9bzhZUrIxrki54H9LTalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgt MDRiYzg3YTI5ZTRkLzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgtMDRiYzg3YTI5ZTRk LzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwq8jXNp gItK4pjCwq2kAUc3wQ3ieeT5t3jYiCs8ejyOQcHB7dIK3Yu1+y7hBfC5g5+6H6hq Z+CSRoAquW2vVBE+ePLawDyUqLyTKPHhbfHbA8iFhKq/+tS+u1UU+09zK0o7EVvg KqtCWa0EKNgmzzdi8YWq3+9G5CrydIlc6JKuM48IltAGc5rYy3gihNri4w/a/lOP JIog7D9D8U1lDyI1io/+9Ur4R/JMobrcxhUQrG/SbJgN8K3qYSHsTqsYE7UUJ0rC FCvEWFcLEJaYWyxqZBhVTIrT4MipyDEkNjeTxAtj2CXTVMUykNECKvcv/0WyNQR/ 3TIXgPsL2lI0gA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:08:45 2025 by rpki-client