This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json) Hash identifier: 2L2LE6psG6O4YGn+q1GxzEExZBBKCQu4VsWzCYo/Q5w= Subject key identifier: 99:C1:27:7E:43:2D:34:79:17:1B:F0:A4:4F:0F:70:E3:84:60:96:D2 Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39 Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739 Certificate serial: 019B115D0C3C466C5AD6E4A59395A82A81DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft Manifest number: 11A7 Signing time: Fri 12 Dec 2025 07:01:09 +0000 Manifest this update: Fri 12 Dec 2025 07:01:09 +0000 Manifest next update: Sat 13 Dec 2025 07:01:09 +0000 Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: hdMhTUuo6GGXYqcQq7A4uicTbJ0GZKEqNAReOqnLHfI=) 2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:0c:3c:46:6c:5a:d6:e4:a5:93:95:a8:2a:81:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a16747018e944e405a6d23a564701a155f43739 Validity Not Before: Dec 12 07:01:09 2025 GMT Not After : Dec 13 07:01:09 2025 GMT Subject: CN=99c1277e432d3479171bf0a44f0f70e3846096d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:3d:a8:38:ba:92:2c:01:78:e1:b4:3f:44: 90:f0:cd:b7:0c:23:82:27:0c:ee:ea:d8:b4:7f:39: 3b:09:f1:ac:c8:9f:41:e3:1c:e7:af:31:b6:8c:3f: fc:74:79:dc:b1:3c:06:4a:04:f4:65:1b:a9:bc:46: ca:58:09:eb:31:07:94:1c:7e:70:fb:3c:53:11:76: 16:f0:5a:9e:2f:f6:2f:61:1b:2b:41:d7:d0:ac:d4: c0:ba:f8:7d:aa:03:a6:1c:f9:85:d5:00:1c:d8:94: 15:a8:47:d4:50:d3:ba:77:e2:04:92:34:f4:54:bf: bc:3f:3c:37:29:18:4d:fc:05:1d:6d:06:fc:65:da: 67:76:e5:31:52:5a:88:dd:d3:5b:14:f9:ae:ba:4f: ae:d2:10:9a:d5:d9:76:b6:ff:d5:c0:1d:9d:fa:02: 97:fb:43:e3:b5:51:e7:32:81:85:2c:fe:d9:85:3c: eb:32:2c:26:42:14:1d:db:97:70:f8:bc:d5:c0:cf: 32:6e:77:c0:6c:7b:2a:e4:b3:11:fd:13:60:f3:55: 71:14:45:46:ac:3e:53:ce:19:fc:ec:f0:8f:12:84: 21:c0:7f:7c:40:3e:bd:06:60:d0:66:2a:c7:b1:4a: 1d:ff:3d:a3:87:04:d2:e7:b4:5f:fa:eb:cf:85:3e: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C1:27:7E:43:2D:34:79:17:1B:F0:A4:4F:0F:70:E3:84:60:96:D2 X509v3 Authority Key Identifier: keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e6:7d:f6:b6:31:4a:e3:c4:ab:98:23:a3:31:49:7e:c7:99: 7c:8c:67:d1:29:12:81:98:54:02:a5:e0:5c:b5:3c:f1:b9:00: 0b:c7:be:2c:d0:3b:46:63:6b:57:b9:c7:35:3d:76:c8:11:56: 78:fe:8f:6e:00:78:d3:5f:ce:18:b1:6e:68:e9:35:c2:3b:3e: 86:82:08:5f:13:54:89:74:bf:7c:7c:90:22:fa:f4:c3:0e:4c: 02:a1:bd:42:87:7c:c4:a1:53:c8:ab:83:45:ae:4f:0b:07:a8: 87:b1:f7:ca:e0:45:00:17:b5:6d:45:d9:9e:36:2f:32:03:0a: 49:fe:b4:5a:19:fa:59:71:56:1e:a6:29:ec:75:d2:5f:73:d0: 67:51:22:90:44:b7:5f:40:f9:97:b7:72:5f:72:28:f8:f8:82: db:4d:20:01:7b:bf:f7:7b:62:f6:94:b0:b8:60:60:79:52:4c: 4e:cd:7c:a3:82:28:0a:ec:e3:6c:7f:d9:d2:ae:f0:80:ae:00: dd:9c:c7:de:0f:6c:05:e3:20:9f:64:e2:83:fd:04:13:11:ec: 1e:8d:e9:c9:ac:12:dd:8e:ce:56:ce:c6:8e:94:fb:2d:f8:04: 2c:ed:1e:9f:bd:03:34:76:0a:52:82:b4:52:bc:5d:2c:d0:67: 9b:d9:7c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXQw8Rmxa1uSlk5WoKoHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMTY3NDcwMThlOTQ0ZTQwNWE2ZDIzYTU2NDcwMWExNTVm NDM3MzkwHhcNMjUxMjEyMDcwMTA5WhcNMjUxMjEzMDcwMTA5WjAzMTEwLwYDVQQD Eyg5OWMxMjc3ZTQzMmQzNDc5MTcxYmYwYTQ0ZjBmNzBlMzg0NjA5NmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/k9qDi6kiwBeOG0P0SQ8M23DCOC Jwzu6ti0fzk7CfGsyJ9B4xznrzG2jD/8dHncsTwGSgT0ZRupvEbKWAnrMQeUHH5w +zxTEXYW8FqeL/YvYRsrQdfQrNTAuvh9qgOmHPmF1QAc2JQVqEfUUNO6d+IEkjT0 VL+8Pzw3KRhN/AUdbQb8ZdpnduUxUlqI3dNbFPmuuk+u0hCa1dl2tv/VwB2d+gKX +0PjtVHnMoGFLP7ZhTzrMiwmQhQd25dw+LzVwM8ybnfAbHsq5LMR/RNg81VxFEVG rD5Tzhn87PCPEoQhwH98QD69BmDQZirHsUod/z2jhwTS57Rf+uvPhT433QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnBJ35DLTR5FxvwpE8PcOOEYJbSMB8GA1UdIwQY MBaAFAoWdHAY6UTkBabSOlZHAaFV9Dc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWIt ZDlkMGFhMjhhYjJiLzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWItZDlkMGFhMjhhYjJi LzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOZ99rYx SuPEq5gjozFJfseZfIxn0SkSgZhUAqXgXLU88bkAC8e+LNA7RmNrV7nHNT12yBFW eP6PbgB401/OGLFuaOk1wjs+hoIIXxNUiXS/fHyQIvr0ww5MAqG9Qod8xKFTyKuD Ra5PCweoh7H3yuBFABe1bUXZnjYvMgMKSf60Whn6WXFWHqYp7HXSX3PQZ1EikES3 X0D5l7dyX3Io+PiC200gAXu/93ti9pSwuGBgeVJMTs18o4IoCuzjbH/Z0q7wgK4A 3ZzH3g9sBeMgn2Tig/0EExHsHo3pyawS3Y7OVs7GjpT7LfgELO0en70DNHYKUoK0 UrxdLNBnm9l8EA== -----END CERTIFICATE-----Generated at Fri Dec 12 10:48:33 2025 by rpki-client