This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json) Hash identifier: f0hs50SuZUtNndJtBhsZ9qUGqH4kqQYm2Jj91H3FDiM= Subject key identifier: AA:EE:49:A6:5A:5A:9E:C1:15:75:90:21:EB:B8:7D:9E:80:98:8E:7C Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55 Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555 Certificate serial: 019AF7D424419252A4D05E8A47859D0EE6B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft Manifest number: 0710 Signing time: Sun 07 Dec 2025 08:01:06 +0000 Manifest this update: Sun 07 Dec 2025 08:01:06 +0000 Manifest next update: Mon 08 Dec 2025 08:01:06 +0000 Files and hashes: 1: N-I7atLziy8-qeIjadSqHT5aCyA.roa (hash: V6zqdN9aPhv6jPMMfcX/1JdGJzCCjaFU3hvgfHZaU/A=) 2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: GvvVM6dCi/mMadbdaeTZDm4Far09auKQ3YK2PrxQsbQ=) 3: p96GHk0OQlbK3_guMxYIgfEgqkQ.roa (hash: NLGJ0dT4sru3lzXBmBNcFTNXezy7QjsSc92C97+9nWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:24:41:92:52:a4:d0:5e:8a:47:85:9d:0e:e6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555 Validity Not Before: Dec 7 08:01:06 2025 GMT Not After : Dec 8 08:01:06 2025 GMT Subject: CN=aaee49a65a5a9ec115759021ebb87d9e80988e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:a2:38:cb:22:21:9c:d7:ca:d5:3c:ec:47: 7b:62:a4:18:48:7d:eb:56:9f:03:bd:cf:d7:90:6b: 84:3d:a5:50:1b:3f:af:15:0b:ca:f9:ec:29:59:e0: 49:2c:1c:98:43:bf:7a:5d:15:e5:66:fa:b9:00:8b: a3:fd:43:f8:04:fb:79:17:4e:a4:07:b2:df:c4:1e: 0b:42:9f:cf:f4:b1:8e:2c:f7:a3:b4:8b:70:5c:ae: 13:cd:a5:67:15:e1:6e:b9:2e:6d:17:d9:23:e5:a1: e0:10:74:08:4a:d0:8f:90:f8:cf:c7:58:74:69:ee: c1:bb:12:bd:3f:0c:13:0f:39:c1:7e:13:47:a6:0d: 39:02:b4:e8:52:56:95:34:3d:f4:d3:9c:8a:a1:7f: b0:23:3a:29:a5:05:f9:0f:6a:2f:4b:0d:be:48:ac: 53:4b:97:2a:12:1d:ef:4e:ad:51:36:1b:7d:88:d6: 00:8b:af:d0:ef:4a:a6:70:2a:9f:df:09:0e:62:1f: 1e:09:5d:f5:d1:42:93:b1:4b:3c:8a:8c:9f:b1:e6: 3f:10:e1:8f:df:da:17:9c:d5:2b:77:72:4a:9c:f8: 4c:13:98:54:9c:f2:a1:87:a2:a0:18:ad:62:f0:ff: c1:54:6d:b0:50:fe:81:49:75:cd:b7:05:ec:b7:1e: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EE:49:A6:5A:5A:9E:C1:15:75:90:21:EB:B8:7D:9E:80:98:8E:7C X509v3 Authority Key Identifier: keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:19:0a:63:2b:4b:41:3b:bf:3f:34:55:68:7c:8b:a0:df:b5: 31:e0:b6:3e:97:a4:da:86:77:08:b9:3e:c4:57:1f:ac:ce:84: 63:3f:99:0e:95:df:e0:2c:96:13:d8:bb:ae:79:63:49:7e:1b: 8e:b8:a8:b1:17:c6:17:32:e8:53:0d:ae:b3:81:3a:d6:7b:79: 84:d3:28:c4:61:30:cb:8b:1a:92:c5:5d:9f:d7:62:8d:eb:77: d3:a2:45:e0:0c:60:11:53:9c:fc:5a:ad:e5:d1:98:09:ba:35: 53:b7:9a:11:0c:86:c8:c7:54:30:5d:98:e7:59:80:1f:8b:5e: 53:47:e5:3e:ab:87:c3:b9:e5:be:d7:ae:5c:cf:1f:35:0f:7d: dd:51:88:a9:eb:0a:1f:f0:34:9f:91:b5:65:8c:9c:fe:f7:55: 04:35:2c:99:ff:5b:35:11:7e:98:e2:e7:7c:20:72:a7:b8:68: b1:12:3f:12:44:47:87:c8:30:96:55:60:15:4a:38:9a:8c:b5: c5:e7:6b:a6:57:15:55:c2:78:3c:15:42:72:6e:7f:6e:44:4a: ff:4b:f9:fb:a4:e7:e9:74:4d:e2:b9:a6:8a:ea:0d:72:64:9c: 43:56:ac:01:0a:57:c5:0a:19:92:33:1f:77:9e:ff:df:db:3c: 95:a4:c6:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31CRBklKk0F6KR4WdDuawMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMjFkNzUyOGJlNzEzYTRiYTJjYjRkYjVlNThkNjRkODgy ZWI1NTUwHhcNMjUxMjA3MDgwMTA2WhcNMjUxMjA4MDgwMTA2WjAzMTEwLwYDVQQD EyhhYWVlNDlhNjVhNWE5ZWMxMTU3NTkwMjFlYmI4N2Q5ZTgwOTg4ZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxCiOMsiIZzXytU87Ed7YqQYSH3r Vp8Dvc/XkGuEPaVQGz+vFQvK+ewpWeBJLByYQ796XRXlZvq5AIuj/UP4BPt5F06k B7LfxB4LQp/P9LGOLPejtItwXK4TzaVnFeFuuS5tF9kj5aHgEHQIStCPkPjPx1h0 ae7BuxK9PwwTDznBfhNHpg05ArToUlaVND3005yKoX+wIzoppQX5D2ovSw2+SKxT S5cqEh3vTq1RNht9iNYAi6/Q70qmcCqf3wkOYh8eCV310UKTsUs8ioyfseY/EOGP 39oXnNUrd3JKnPhME5hUnPKhh6KgGK1i8P/BVG2wUP6BSXXNtwXstx6u/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKruSaZaWp7BFXWQIeu4fZ6AmI58MB8GA1UdIwQY MBaAFHAh11KL5xOkuiy0215Y1k2ILrVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAt OTI4MWYwZDIzZGJmLzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAtOTI4MWYwZDIzZGJm LzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxkKYytL QTu/PzRVaHyLoN+1MeC2Ppek2oZ3CLk+xFcfrM6EYz+ZDpXf4CyWE9i7rnljSX4b jriosRfGFzLoUw2us4E61nt5hNMoxGEwy4saksVdn9dijet306JF4AxgEVOc/Fqt 5dGYCbo1U7eaEQyGyMdUMF2Y51mAH4teU0flPquHw7nlvteuXM8fNQ993VGIqesK H/A0n5G1ZYyc/vdVBDUsmf9bNRF+mOLnfCByp7hosRI/EkRHh8gwllVgFUo4moy1 xedrplcVVcJ4PBVCcm5/bkRK/0v5+6Tn6XRN4rmmiuoNcmScQ1asAQpXxQoZkjMf d57/39s8laTG2A== -----END CERTIFICATE-----Generated at Sun Dec 7 13:07:59 2025 by rpki-client