This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: wuzn3Waji+wXX+JMnDWwtKGzXTB3z9/hACN5Gt9Ah60= Subject key identifier: 4A:BA:A0:EC:56:11:42:F5:90:34:2E:61:8E:A9:70:21:7D:02:5C:21 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019AF1641C772EC4E79FCD620F0BFC8354C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0D63 Signing time: Sat 06 Dec 2025 02:01:01 +0000 Manifest this update: Sat 06 Dec 2025 02:01:01 +0000 Manifest next update: Sun 07 Dec 2025 02:01:01 +0000 Files and hashes: 1: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 2: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 3: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (hash: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=) 4: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 5: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=) 6: Vw7opLTGJ7meoIjP73G2m5jJNxM.roa (hash: XiNVkm1WPALBICMNh3T3KE5041D5HP4IFNLB/PzL5cE=) 7: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 8: cHxFGRMAoDhujIVPqex6UpYerSk.roa (hash: nZJDNb9YsAXZ6YCYxmWtUk5NYEQ2e2DtDUO7vnLQQxk=) 9: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: HBJIaPVWb8twju1LIn/VFoj3xweuPdXoZo/km64WDi0=) 10: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 11: qTTergxDeV9PAn74EwkjtHgbn2o.roa (hash: LFYDt+uYMND5224RZAEk1RWxDOCG+EkRnKKIkEZ5Cic=) 12: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 13: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1c:77:2e:c4:e7:9f:cd:62:0f:0b:fc:83:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Dec 6 02:01:01 2025 GMT Not After : Dec 7 02:01:01 2025 GMT Subject: CN=4abaa0ec561142f590342e618ea970217d025c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:ae:c8:06:36:28:fa:a3:ca:4c:a3:16:07: d5:19:62:84:72:b8:a1:c8:4d:57:42:6c:61:27:af: 8b:fa:98:bc:3d:ac:40:90:32:df:c3:e6:3d:ee:d4: a9:92:33:9e:c6:f0:df:b7:5a:8f:d5:a7:7f:9e:ba: 0e:70:ae:1d:b4:2b:4f:a7:0f:92:b6:8a:94:24:3e: 25:aa:64:32:57:88:c0:35:3e:7a:b9:d8:da:36:4a: cd:ad:44:57:d2:a2:5e:36:9c:23:4d:d9:dc:6a:52: bf:f9:24:d6:89:c8:2c:55:e3:46:c3:2e:7d:9b:49: 34:0d:bb:fa:42:29:f8:41:aa:14:70:00:7a:86:cd: 2c:bb:86:ff:1c:23:2b:cd:e0:8f:b7:a5:68:ce:b2: 28:08:14:43:73:a6:c6:d5:51:9e:51:71:56:d2:e5: 01:0f:8d:43:44:77:be:03:5b:ba:7c:68:9b:5e:53: 7e:c1:bc:55:9e:8b:a6:94:39:7d:ec:cd:7f:d9:79: 70:c9:6b:90:e9:5f:fb:6a:1a:41:d4:18:15:40:97: 1e:26:6f:b1:81:d1:68:74:6d:d1:18:ef:31:6f:39: fb:c4:b1:b3:da:3e:60:d3:ce:56:8d:a0:0f:79:8f: 29:7c:e6:ef:aa:e0:b5:68:f3:21:86:9a:ce:d6:d3: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BA:A0:EC:56:11:42:F5:90:34:2E:61:8E:A9:70:21:7D:02:5C:21 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1c:38:26:f6:2d:0c:01:44:1a:87:8e:61:91:67:77:8a:df: aa:72:21:85:88:55:3b:7d:a1:34:0d:0a:25:fc:68:e2:6b:16: f8:01:72:fb:ed:41:9a:d0:34:0f:72:36:f7:99:51:ba:2e:9f: 5b:44:b6:37:9b:c9:db:25:dd:59:36:ce:d4:9a:ac:c5:44:ca: a8:91:9f:6d:2f:17:07:13:ec:bd:aa:aa:6e:88:63:82:24:61: b3:65:01:52:df:3f:c0:a8:cd:b0:e2:d4:74:2d:c2:41:d3:01: e6:a4:a1:e9:bc:ce:ce:ab:c6:0c:a3:97:eb:b3:9d:83:4b:a5: 45:4a:ae:0f:be:d4:1d:76:97:ec:96:e6:a1:a0:3c:08:2e:de: d4:c2:cd:2d:c1:39:8d:6f:90:3c:95:19:83:78:56:47:95:36: 13:05:6f:e5:eb:de:c5:6a:5a:22:f3:49:2f:79:e8:1d:21:72: 93:2a:25:a9:e2:d4:91:03:17:c1:2e:1f:ed:7c:8b:06:bd:a1: 6e:15:a6:d9:29:59:68:b0:f0:d3:f4:b1:80:4f:9d:9b:c4:3e: f0:85:5f:ca:48:44:51:75:60:64:a3:f3:d9:7f:9c:91:11:c0: e0:50:6b:92:32:a5:e2:4d:26:52:7f:17:22:02:69:1c:60:38: 69:21:70:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBx3LsTnn81iDwv8g1TAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUxMjA2MDIwMTAxWhcNMjUxMjA3MDIwMTAxWjAzMTEwLwYDVQQD Eyg0YWJhYTBlYzU2MTE0MmY1OTAzNDJlNjE4ZWE5NzAyMTdkMDI1YzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgyuyAY2KPqjykyjFgfVGWKEcrih yE1XQmxhJ6+L+pi8PaxAkDLfw+Y97tSpkjOexvDft1qP1ad/nroOcK4dtCtPpw+S toqUJD4lqmQyV4jANT56udjaNkrNrURX0qJeNpwjTdncalK/+STWicgsVeNGwy59 m0k0Dbv6Qin4QaoUcAB6hs0su4b/HCMrzeCPt6VozrIoCBRDc6bG1VGeUXFW0uUB D41DRHe+A1u6fGibXlN+wbxVnoumlDl97M1/2XlwyWuQ6V/7ahpB1BgVQJceJm+x gdFodG3RGO8xbzn7xLGz2j5g085WjaAPeY8pfObvquC1aPMhhprO1tPUSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEq6oOxWEUL1kDQuYY6pcCF9AlwhMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhw4JvYt DAFEGoeOYZFnd4rfqnIhhYhVO32hNA0KJfxo4msW+AFy++1BmtA0D3I295lRui6f W0S2N5vJ2yXdWTbO1JqsxUTKqJGfbS8XBxPsvaqqbohjgiRhs2UBUt8/wKjNsOLU dC3CQdMB5qSh6bzOzqvGDKOX67Odg0ulRUquD77UHXaX7JbmoaA8CC7e1MLNLcE5 jW+QPJUZg3hWR5U2EwVv5evexWpaIvNJL3noHSFykyolqeLUkQMXwS4f7XyLBr2h bhWm2SlZaLDw0/SxgE+dm8Q+8IVfykhEUXVgZKPz2X+ckRHA4FBrkjKl4k0mUn8X IgJpHGA4aSFw+g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:41 2025 by rpki-client