This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft File: aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json) Hash identifier: z3NDVG34uPVJDgaWx3guPWDB9qSf/13mqOZkvUk/3QY= Subject key identifier: 91:E5:2E:D1:F0:3A:DD:B4:5E:E4:BC:20:66:96:5A:8C:30:03:67:AF Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80 Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80 Certificate serial: 019B3CECB4300CA6F8FB9C202E59A02D0020 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 18:01:44 +0000 Manifest this update: Sat 20 Dec 2025 18:01:44 +0000 Manifest next update: Sun 21 Dec 2025 18:01:44 +0000 Files and hashes: 1: NmoeARNR5KlnZdBERWuM-iNzYM0.roa (hash: HgaWyfSju8BbiVq620WeDucyKoI/pqgp0CZAcN9HrcI=) 2: OxQUm2cc932_SbZHxUC7er0Sf-I.roa (hash: j3K3BKXe7Af0d19rliHQJv9FsfvecTZMNvSiBZonE64=) 3: ZH-i__Oj4SIwtAOHRRVv0u8J8eI.roa (hash: WEK6Mlk9pLflVadH6HQ/a95uE6G+8NUpMYALAx2797k=) 4: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: PVB6WEALQ9tEyaEgZFlbk0sp1NyrrJQoGXvhD96TcC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:b4:30:0c:a6:f8:fb:9c:20:2e:59:a0:2d:00:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80 Validity Not Before: Dec 20 18:01:44 2025 GMT Not After : Dec 21 18:01:44 2025 GMT Subject: CN=91e52ed1f03addb45ee4bc2066965a8c300367af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:cc:fa:5a:ff:9a:99:5c:75:ed:87:04:97: 2f:14:d3:56:6c:51:57:54:32:e6:e7:86:41:d0:56: 91:f6:d4:99:b8:ff:ae:6f:72:b1:49:1b:9d:44:93: 07:8f:35:32:ee:32:df:28:5b:74:eb:ac:13:16:71: ec:e3:63:8f:82:7a:5f:d2:4d:6e:02:1d:c2:52:41: 69:ff:59:4c:d1:0e:f1:29:df:8d:30:64:24:b3:90: 44:a6:53:fd:fd:d3:d2:01:90:2d:20:c9:a9:09:39: c5:36:07:13:85:08:b7:8f:a6:6a:8a:14:52:19:9e: ca:7c:c9:54:fb:06:33:65:98:c6:75:0f:f3:69:3d: 1c:d3:dc:60:25:60:c2:5e:5a:3d:14:ce:fa:d4:a4: 5f:b9:f3:cf:9e:14:4a:3f:a3:b1:08:b6:e2:9e:81: 32:a8:9b:a4:c8:aa:85:f9:fe:7e:ac:15:dc:91:a9: 74:72:37:08:7f:1e:79:c4:f7:8a:65:df:cd:75:f6: 82:ea:a4:1c:57:73:37:f7:9a:d7:56:1e:5d:83:68: c8:9d:53:a9:5f:c1:e4:17:f9:72:ef:0c:56:ae:dc: 1d:98:e6:2d:7f:ef:c5:7d:7b:98:29:ba:c5:d0:a6: 5f:eb:72:82:57:8f:ab:f4:d0:1b:bb:52:36:89:b7: 3c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E5:2E:D1:F0:3A:DD:B4:5E:E4:BC:20:66:96:5A:8C:30:03:67:AF X509v3 Authority Key Identifier: keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d5:8e:d5:3c:57:d4:18:a9:ae:78:f1:a5:b8:f3:5c:d1:5a: cd:ed:4c:19:11:e1:43:52:ae:e3:42:ad:3d:10:12:1e:d1:0e: 76:51:61:dc:4f:95:f8:b2:7f:09:63:e0:7c:21:bd:47:21:c6: 7c:32:83:39:ec:d5:b2:75:1e:18:7d:25:35:5f:a3:8a:3c:59: ca:d1:ab:92:3c:20:65:d4:a4:77:d3:80:94:e3:32:72:2d:95: 92:8b:eb:5e:82:f9:f0:f2:17:7b:f9:b6:96:16:31:fd:0a:dc: c1:7c:3d:8f:1c:c9:fb:7b:a4:bc:ea:70:8b:c1:52:cb:b8:23: 1f:f6:8c:9d:a3:42:be:03:0e:64:3e:48:02:6e:36:d6:ac:da: df:6b:0f:40:6c:45:8f:5f:8d:ac:18:87:b1:98:5e:d3:8f:cf: 09:f8:32:fd:58:58:1f:b7:6b:f9:ad:12:3c:77:b1:f5:81:68: 15:40:6b:dc:d7:41:df:6e:a9:da:df:6d:07:9a:20:3e:64:1e: 17:ed:b4:93:1d:7c:46:77:ce:d3:1d:ae:bb:ef:55:7f:a4:c6: 8f:86:40:81:b0:be:db:b1:5b:d3:02:56:11:e0:b3:be:1b:04: d4:6e:00:17:cb:57:3a:64:89:51:20:55:a7:f0:ae:d2:8a:a7: ad:1c:1a:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87LQwDKb4+5wgLlmgLQAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MjFjOGZmMDQzN2Y3ZWRkODI5MTY2ZmRlMDM0NDZmODYx MDlkODAwHhcNMjUxMjIwMTgwMTQ0WhcNMjUxMjIxMTgwMTQ0WjAzMTEwLwYDVQQD Eyg5MWU1MmVkMWYwM2FkZGI0NWVlNGJjMjA2Njk2NWE4YzMwMDM2N2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojLM+lr/mplcde2HBJcvFNNWbFFX VDLm54ZB0FaR9tSZuP+ub3KxSRudRJMHjzUy7jLfKFt066wTFnHs42OPgnpf0k1u Ah3CUkFp/1lM0Q7xKd+NMGQks5BEplP9/dPSAZAtIMmpCTnFNgcThQi3j6ZqihRS GZ7KfMlU+wYzZZjGdQ/zaT0c09xgJWDCXlo9FM761KRfufPPnhRKP6OxCLbinoEy qJukyKqF+f5+rBXckal0cjcIfx55xPeKZd/NdfaC6qQcV3M395rXVh5dg2jInVOp X8HkF/ly7wxWrtwdmOYtf+/FfXuYKbrF0KZf63KCV4+r9NAbu1I2ibc84wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHlLtHwOt20XuS8IGaWWowwA2evMB8GA1UdIwQY MBaAFGghyP8EN/ft2CkWb94DRG+GEJ2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMt MjVhZTkyOTNmNmI0LzEvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMtMjVhZTkyOTNmNmI0 LzEvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9WO1TxX 1BiprnjxpbjzXNFaze1MGRHhQ1Ku40KtPRASHtEOdlFh3E+V+LJ/CWPgfCG9RyHG fDKDOezVsnUeGH0lNV+jijxZytGrkjwgZdSkd9OAlOMyci2VkovrXoL58PIXe/m2 lhYx/QrcwXw9jxzJ+3ukvOpwi8FSy7gjH/aMnaNCvgMOZD5IAm421qza32sPQGxF j1+NrBiHsZhe04/PCfgy/VhYH7dr+a0SPHex9YFoFUBr3NdB326p2t9tB5ogPmQe F+20kx18RnfO0x2uu+9Vf6TGj4ZAgbC+27Fb0wJWEeCzvhsE1G4AF8tXOmSJUSBV p/Cu0oqnrRwacA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:08:19 2025 by rpki-client