This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json) Hash identifier: urjD2gFAaUqHip2teuAbaovp7eA54zFXJlCW6dzEmGg= Subject key identifier: 15:F4:DD:5C:02:FA:A9:3F:13:71:C6:0E:35:FF:62:20:B9:45:A0:18 Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec Certificate serial: 019B59E46F2512B663F36FEA618F43F42D49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft Manifest number: 131A Signing time: Fri 26 Dec 2025 09:01:41 +0000 Manifest this update: Fri 26 Dec 2025 09:01:41 +0000 Manifest next update: Sat 27 Dec 2025 09:01:41 +0000 Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: gAy8bd+A/Xl3CwwvyWkfFZLR9TkUj226gS21F+IKS7Y=) 2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:6f:25:12:b6:63:f3:6f:ea:61:8f:43:f4:2d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec Validity Not Before: Dec 26 09:01:41 2025 GMT Not After : Dec 27 09:01:41 2025 GMT Subject: CN=15f4dd5c02faa93f1371c60e35ff6220b945a018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:05:ef:f5:84:c0:49:2f:6e:9a:88:ce:66: 43:5a:4f:df:eb:89:a7:4f:7d:d1:7c:f1:40:f6:66: d7:5b:19:d4:ec:ca:d8:37:fd:66:85:df:ac:8f:67: 7e:c7:dd:3b:7f:5f:3c:19:c2:07:5b:3e:38:cd:fc: 48:1e:f5:59:02:58:8c:88:5b:8e:3c:f8:12:3f:54: 7a:9d:f5:eb:93:a0:49:d1:76:bd:78:5d:ce:7c:50: 2a:76:b9:3a:5b:cb:69:3a:d5:01:7d:5f:25:ee:2d: 47:ab:87:bd:ef:ac:56:3b:75:72:2f:f4:88:73:78: ac:93:52:da:f1:d8:94:16:7a:65:6e:cd:cd:db:51: a8:22:bc:f8:55:44:52:d2:f6:d0:f5:42:42:53:6b: 87:57:83:01:ca:14:9f:27:87:de:82:17:fc:35:9c: a6:ad:2b:c1:f6:b0:f3:d5:ab:f8:b6:0a:7e:e7:2d: b5:43:0a:96:4f:16:bf:37:26:2c:c9:43:3c:0a:c7: db:da:07:cf:75:ce:97:e9:94:87:c4:88:64:0c:c3: 2f:b6:5c:de:0b:cc:fc:10:99:95:43:60:21:ca:28: cb:c5:b6:12:1d:c2:d0:8f:7c:e1:c5:82:72:40:04: 18:5a:38:cc:c9:aa:ab:e5:8d:a8:8f:ae:46:b9:f6: 5d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F4:DD:5C:02:FA:A9:3F:13:71:C6:0E:35:FF:62:20:B9:45:A0:18 X509v3 Authority Key Identifier: keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:9a:0c:43:91:38:ae:da:5b:24:e2:ba:db:e6:de:db:73:dc: 89:06:56:a2:2a:d3:22:5e:0e:df:ab:82:52:5f:e5:3a:5f:8e: 35:f2:6d:1a:a1:2d:1e:92:5c:8c:92:9f:60:33:37:b4:22:ad: 5a:62:e2:89:60:42:b1:29:d3:90:15:ba:ff:6b:f9:73:c8:46: 75:ee:c3:9f:7d:12:39:2f:4a:94:31:ef:dd:2b:5d:f2:55:47: ae:07:d2:da:4a:74:9d:8f:d1:76:3c:b8:73:66:27:d7:ed:8f: 6e:85:5f:62:8e:92:c8:4a:83:39:f8:8d:00:92:5a:06:13:28: e7:d0:e7:c2:92:62:78:93:76:37:f5:e2:4e:af:e9:92:36:ca: 0b:c1:76:2c:23:c7:c5:58:f8:5e:8f:86:19:9f:c5:6d:42:33: c0:0b:e7:41:af:cc:00:06:b6:db:de:19:45:c9:56:4e:82:bc: 09:40:9d:8f:38:fd:2a:aa:14:2e:c9:5f:b6:02:13:25:b4:d9: 73:90:4d:13:80:26:90:a4:6a:e5:e6:cc:46:e2:c5:66:30:66: f9:3d:10:86:27:12:8b:38:22:a7:1b:33:22:0e:63:32:99:e2: bd:69:cc:84:58:1c:bd:6c:4b:ac:f7:a6:67:e0:ad:2e:49:e5: e6:58:b6:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5G8lErZj82/qYY9D9C1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NzgxMzE0MmIwZDNmMDY4ZGVhNmRkNDM0MWM0ZTBiOTA3 OTg4ZWMwHhcNMjUxMjI2MDkwMTQxWhcNMjUxMjI3MDkwMTQxWjAzMTEwLwYDVQQD EygxNWY0ZGQ1YzAyZmFhOTNmMTM3MWM2MGUzNWZmNjIyMGI5NDVhMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRkF7/WEwEkvbpqIzmZDWk/f64mn T33RfPFA9mbXWxnU7MrYN/1mhd+sj2d+x907f188GcIHWz44zfxIHvVZAliMiFuO PPgSP1R6nfXrk6BJ0Xa9eF3OfFAqdrk6W8tpOtUBfV8l7i1Hq4e976xWO3VyL/SI c3isk1La8diUFnplbs3N21GoIrz4VURS0vbQ9UJCU2uHV4MByhSfJ4feghf8NZym rSvB9rDz1av4tgp+5y21QwqWTxa/NyYsyUM8Csfb2gfPdc6X6ZSHxIhkDMMvtlze C8z8EJmVQ2AhyijLxbYSHcLQj3zhxYJyQAQYWjjMyaqr5Y2oj65GufZdWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBX03VwC+qk/E3HGDjX/YiC5RaAYMB8GA1UdIwQY MBaAFAh4ExQrDT8Gjept1DQcTguQeYjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUt N2UxNTdiYWU2YzJiLzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUtN2UxNTdiYWU2YzJi LzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5oMQ5E4 rtpbJOK62+be23PciQZWoirTIl4O36uCUl/lOl+ONfJtGqEtHpJcjJKfYDM3tCKt WmLiiWBCsSnTkBW6/2v5c8hGde7Dn30SOS9KlDHv3Std8lVHrgfS2kp0nY/Rdjy4 c2Yn1+2PboVfYo6SyEqDOfiNAJJaBhMo59DnwpJieJN2N/XiTq/pkjbKC8F2LCPH xVj4Xo+GGZ/FbUIzwAvnQa/MAAa2294ZRclWToK8CUCdjzj9KqoULslftgITJbTZ c5BNE4AmkKRq5ebMRuLFZjBm+T0QhicSizgipxszIg5jMpnivWnMhFgcvWxLrPem Z+CtLknl5li2xA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:35 2025 by rpki-client