This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json) Hash identifier: OKapIFagxfpCKcwhe7IJK6TfD7KomdYX0TUlm6qM6Fw= Subject key identifier: C5:E6:D4:47:7D:E3:F3:B5:31:98:87:A9:14:F5:E1:BA:5B:52:AE:F3 Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3 Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3 Certificate serial: 019B397DB656B7CF52375934F3D82AAA7B46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 02:01:38 +0000 Manifest this update: Sat 20 Dec 2025 02:01:38 +0000 Manifest next update: Sun 21 Dec 2025 02:01:38 +0000 Files and hashes: 1: ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa (hash: 3c+azDmhzkHSEBi1SBo0t88glQEIBlV01Qc6ZBYXFN8=) 2: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: K2Xl476FxuIRBFE2C4gXYmsTQHnOzJ0jz73UZX/4Lrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:b6:56:b7:cf:52:37:59:34:f3:d8:2a:aa:7b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3 Validity Not Before: Dec 20 02:01:38 2025 GMT Not After : Dec 21 02:01:38 2025 GMT Subject: CN=c5e6d4477de3f3b5319887a914f5e1ba5b52aef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:6d:ab:70:85:70:d2:75:82:14:7d:31:ee: 1e:16:2f:34:b4:3f:ec:8e:fd:b9:54:19:3d:e7:7a: 69:de:81:d3:1a:f1:4f:36:98:b2:c0:29:31:2d:3d: e8:f0:90:7e:c3:7c:cc:d6:f2:06:96:4e:2a:f9:d6: 33:ca:f4:45:95:e3:e4:11:9d:d3:b6:f7:cf:9a:cb: 9d:ea:43:bb:74:d9:81:13:e5:61:26:54:8f:0d:be: a9:96:4c:d7:52:57:01:df:e1:72:90:e6:ea:cb:fd: 2d:81:41:fd:8a:64:0f:24:d3:61:91:ac:78:f0:b4: 32:ce:c2:12:9b:1d:d4:80:d9:95:14:3e:5b:ba:76: 95:47:b8:6e:81:be:d2:c0:6f:e8:02:6a:b6:db:27: 83:58:b2:53:bd:9f:f3:59:8e:32:3d:3f:d3:30:97: 25:32:b0:e1:60:6b:3b:93:9f:08:d3:b1:68:c5:cd: f6:02:5d:fd:dd:00:f2:e6:10:55:14:bf:4e:35:77: 72:2d:54:10:42:41:80:48:06:38:58:58:f1:d4:4c: e3:47:8f:a5:fa:67:aa:79:30:25:76:31:71:e6:98: 9e:77:88:a6:69:9e:92:d2:54:2a:5b:8c:cb:d7:57: af:25:d2:1c:40:b0:4f:e2:42:0f:4a:7c:f5:e2:69: cf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E6:D4:47:7D:E3:F3:B5:31:98:87:A9:14:F5:E1:BA:5B:52:AE:F3 X509v3 Authority Key Identifier: keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:56:9b:17:7d:76:79:94:97:c1:9a:17:34:5d:ae:af:82:9e: 11:ba:ad:48:b6:0e:8c:2a:a4:27:77:37:4c:ba:aa:6a:9a:89: 19:79:0d:49:2d:7a:91:7b:94:4a:fc:f0:9e:04:52:6b:e0:33: a6:62:d3:cd:c0:21:20:64:51:07:5f:6f:f9:4b:6b:3e:4d:6e: 39:5f:02:39:31:28:05:8e:9b:84:6f:69:21:e6:80:07:fc:fe: 09:8a:a5:22:cd:87:1d:7a:e1:ec:7b:64:70:5a:46:e4:35:c9: 41:69:27:a4:1c:c2:dc:07:63:3f:98:0b:ad:02:8f:89:dc:80: 52:ca:8a:21:48:21:ba:a3:4c:4a:97:80:40:9f:11:1b:b5:54: 9a:02:eb:15:dc:e8:f5:55:3a:ff:25:28:8b:c0:13:bc:a2:a3: a3:73:0a:eb:5c:15:59:2f:72:8d:d5:fc:67:5c:73:ef:28:e3: d8:f7:7b:8e:50:25:21:1a:b0:43:10:c2:3f:5e:86:e3:6e:4b: 5d:0f:32:72:42:0e:43:09:d3:c7:e0:91:51:34:a8:30:dd:f9: 5b:21:d3:76:61:8a:58:34:a3:81:09:26:92:39:05:e4:69:f8: 4e:07:b4:eb:e2:01:31:9b:fc:5e:05:73:e6:f0:d2:29:8f:8d: 80:72:40:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fbZWt89SN1k089gqqntGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk ODhmZTMwHhcNMjUxMjIwMDIwMTM4WhcNMjUxMjIxMDIwMTM4WjAzMTEwLwYDVQQD EyhjNWU2ZDQ0NzdkZTNmM2I1MzE5ODg3YTkxNGY1ZTFiYTViNTJhZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBNtq3CFcNJ1ghR9Me4eFi80tD/s jv25VBk953pp3oHTGvFPNpiywCkxLT3o8JB+w3zM1vIGlk4q+dYzyvRFlePkEZ3T tvfPmsud6kO7dNmBE+VhJlSPDb6plkzXUlcB3+FykObqy/0tgUH9imQPJNNhkax4 8LQyzsISmx3UgNmVFD5bunaVR7hugb7SwG/oAmq22yeDWLJTvZ/zWY4yPT/TMJcl MrDhYGs7k58I07Foxc32Al393QDy5hBVFL9ONXdyLVQQQkGASAY4WFjx1EzjR4+l +meqeTAldjFx5pied4imaZ6S0lQqW4zL11evJdIcQLBP4kIPSnz14mnPNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXm1Ed94/O1MZiHqRT14bpbUq7zMB8GA1UdIwQY MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFabF312 eZSXwZoXNF2ur4KeEbqtSLYOjCqkJ3c3TLqqapqJGXkNSS16kXuUSvzwngRSa+Az pmLTzcAhIGRRB19v+UtrPk1uOV8COTEoBY6bhG9pIeaAB/z+CYqlIs2HHXrh7Htk cFpG5DXJQWknpBzC3AdjP5gLrQKPidyAUsqKIUghuqNMSpeAQJ8RG7VUmgLrFdzo 9VU6/yUoi8ATvKKjo3MK61wVWS9yjdX8Z1xz7yjj2Pd7jlAlIRqwQxDCP16G425L XQ8yckIOQwnTx+CRUTSoMN35WyHTdmGKWDSjgQkmkjkF5Gn4Tge06+IBMZv8XgVz 5vDSKY+NgHJAFQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:49:34 2025 by rpki-client