This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft File: cha_aL4onmHE01vUAmZi2OT76vE.mft (raw, json) Hash identifier: 3mL/WT0m49TN3i3wHw5lxo2VI8rIdxdRt0Zf23WrDfQ= Subject key identifier: 22:42:05:91:A5:B7:63:11:37:1A:AD:D6:D8:F4:D1:B5:BB:0F:65:15 Authority key identifier: 72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1 Certificate issuer: /CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1 Certificate serial: 019B597705840C0AA0E9344119ABC344C6E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft Manifest number: B0 Signing time: Fri 26 Dec 2025 07:02:10 +0000 Manifest this update: Fri 26 Dec 2025 07:02:10 +0000 Manifest next update: Sat 27 Dec 2025 07:02:10 +0000 Files and hashes: 1: cha_aL4onmHE01vUAmZi2OT76vE.crl (hash: N2L6NpK2ZmjaFXcxl+5LF44SQpUykyNEnC+Hfc3WPzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:05:84:0c:0a:a0:e9:34:41:19:ab:c3:44:c6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1 Validity Not Before: Dec 26 07:02:10 2025 GMT Not After : Dec 27 07:02:10 2025 GMT Subject: CN=22420591a5b76311371aadd6d8f4d1b5bb0f6515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:cc:ce:8a:20:a2:6c:2a:18:22:e5:42:17: 9b:0b:a8:1a:b9:53:d8:d2:96:2a:cd:9f:92:59:fd: fa:0c:86:3f:91:21:47:1f:3b:25:b3:7b:f5:39:bc: 8a:0b:62:f0:b0:8a:93:98:c9:ab:76:69:59:2b:dd: 1f:8e:92:f9:3e:71:3d:92:cf:de:6c:e2:2d:28:96: 81:e6:f7:05:f6:a8:04:ac:87:79:26:df:12:c7:fa: 4a:c2:bc:d6:c6:f2:92:dd:29:7e:67:90:3c:f1:76: 37:63:9c:86:00:f8:4e:39:e9:6b:77:11:3e:80:c7: c9:3d:eb:6d:af:c4:70:b1:64:4b:1e:d8:89:fb:08: f7:e1:db:55:8d:10:e0:4d:22:a1:3c:e9:e1:27:d6: 22:14:b9:86:ca:be:47:78:e2:c8:7b:1c:52:6f:bc: df:f7:64:f7:c2:e4:46:06:8e:e7:50:7f:ac:b8:9c: 7c:10:bd:64:3d:2b:3e:4c:56:d6:88:d5:c1:0b:40: 53:0c:df:c0:e1:12:79:44:55:8e:81:df:dc:77:66: ad:59:c7:b5:5a:4d:b0:d7:93:4f:cb:4e:97:58:0b: b3:01:ad:74:f2:cc:4b:d9:b7:af:b1:cc:ec:80:fc: 4c:04:04:b5:48:aa:19:4c:4e:eb:79:e8:d4:23:80: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:42:05:91:A5:B7:63:11:37:1A:AD:D6:D8:F4:D1:B5:BB:0F:65:15 X509v3 Authority Key Identifier: keyid:72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b6:7b:9e:0c:6e:e2:8c:08:21:6a:8e:63:d1:ba:53:8b:b1: 01:31:ff:db:32:ef:fd:92:e7:b0:c7:7f:27:32:87:a9:f7:64: 76:50:01:c8:39:bd:04:a0:d5:28:21:8f:95:4d:d3:cc:ff:1e: 38:6a:93:da:cb:bc:de:f2:5a:c7:23:1d:22:e9:69:1a:46:88: 22:8d:d8:c7:67:e6:d6:84:e7:7c:43:bc:52:fe:a8:c3:94:6b: 70:8d:f8:34:3f:65:be:28:df:7a:4c:4e:8d:68:2c:e2:34:a2: dd:91:20:fb:11:44:f4:ab:26:8a:07:94:fb:0a:65:de:fa:f2: 42:a7:8c:47:87:13:22:d1:f7:e3:ab:e1:e4:19:e5:4c:1b:d0: 10:14:fe:29:b1:b7:c2:00:12:a5:0c:6e:82:bf:e3:20:19:03: 18:54:56:40:f0:45:35:9e:72:92:9e:92:48:09:ba:ab:bd:48: e6:24:54:85:b4:6b:b1:7a:7e:d3:d3:06:58:c9:33:b6:2f:fd: 15:3c:4c:1a:c6:cd:ce:84:8b:ca:2c:89:5e:7c:c8:df:70:0a: f9:75:d8:8f:ee:24:a8:37:2c:cb:19:21:5d:b2:6d:69:03:2a: 75:29:c9:4c:5a:f0:3b:07:76:55:41:ab:ff:16:26:d6:1b:4d: df:8a:f5:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdwWEDAqg6TRBGavDRMbpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMTZiZjY4YmUyODllNjFjNGQzNWJkNDAyNjY2MmQ4ZTRm YmVhZjEwHhcNMjUxMjI2MDcwMjEwWhcNMjUxMjI3MDcwMjEwWjAzMTEwLwYDVQQD EygyMjQyMDU5MWE1Yjc2MzExMzcxYWFkZDZkOGY0ZDFiNWJiMGY2NTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkbMzoogomwqGCLlQhebC6gauVPY 0pYqzZ+SWf36DIY/kSFHHzsls3v1ObyKC2LwsIqTmMmrdmlZK90fjpL5PnE9ks/e bOItKJaB5vcF9qgErId5Jt8Sx/pKwrzWxvKS3Sl+Z5A88XY3Y5yGAPhOOelrdxE+ gMfJPettr8RwsWRLHtiJ+wj34dtVjRDgTSKhPOnhJ9YiFLmGyr5HeOLIexxSb7zf 92T3wuRGBo7nUH+suJx8EL1kPSs+TFbWiNXBC0BTDN/A4RJ5RFWOgd/cd2atWce1 Wk2w15NPy06XWAuzAa108sxL2bevsczsgPxMBAS1SKoZTE7reejUI4Db9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJCBZGlt2MRNxqt1tj00bW7D2UVMB8GA1UdIwQY MBaAFHIWv2i+KJ5hxNNb1AJmYtjk++rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YmJhNDktNjE5Mi00OGUzLTk0ZjAt NGQ0NTIzMWM3MjMzLzEvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85YmJhNDktNjE5Mi00OGUzLTk0ZjAtNGQ0NTIzMWM3MjMz LzEvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7Z7ngxu 4owIIWqOY9G6U4uxATH/2zLv/ZLnsMd/JzKHqfdkdlAByDm9BKDVKCGPlU3TzP8e OGqT2su83vJaxyMdIulpGkaIIo3Yx2fm1oTnfEO8Uv6ow5RrcI34ND9lvijfekxO jWgs4jSi3ZEg+xFE9KsmigeU+wpl3vryQqeMR4cTItH346vh5BnlTBvQEBT+KbG3 wgASpQxugr/jIBkDGFRWQPBFNZ5ykp6SSAm6q71I5iRUhbRrsXp+09MGWMkzti/9 FTxMGsbNzoSLyiyJXnzI33AK+XXYj+4kqDcsyxkhXbJtaQMqdSnJTFrwOwd2VUGr /xYm1htN34r1AQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:50 2025 by rpki-client