This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json) Hash identifier: TvSL+0mKkoyX9xGcQI8PfhqnUNYwn4B7x3hFvZ85TTo= Subject key identifier: 4A:A0:9B:E9:4E:2E:A9:DF:95:FF:1F:25:BA:16:5C:EC:B4:72:96:C0 Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92 Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392 Certificate serial: 019AF1D21CF429F1ADEA6E2802ADB03F970C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft Manifest number: 13BF Signing time: Sat 06 Dec 2025 04:01:10 +0000 Manifest this update: Sat 06 Dec 2025 04:01:10 +0000 Manifest next update: Sun 07 Dec 2025 04:01:10 +0000 Files and hashes: 1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: ER+sY6UqPLGDFyORmNn8QBDym8eqRj+GXLIxn/+j6sE=) 2: DgOe6d2o2BQOj9Wt3sGLRcqwsJY.roa (hash: 4FSuJ9FPuzzlW3Hsq3b3yqhIsDO/q6s/Z+iendZviDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1c:f4:29:f1:ad:ea:6e:28:02:ad:b0:3f:97:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392 Validity Not Before: Dec 6 04:01:10 2025 GMT Not After : Dec 7 04:01:10 2025 GMT Subject: CN=4aa09be94e2ea9df95ff1f25ba165cecb47296c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:c1:7e:91:c8:38:9e:21:c9:b1:58:90:a0: 8f:59:64:13:83:64:c8:3e:2b:54:43:4e:74:01:16: dc:42:a4:77:e8:16:9d:25:0d:69:30:20:db:d6:51: da:78:d3:b8:92:69:25:a4:d3:ae:f5:78:19:7f:f1: 28:f4:a5:b3:ed:dd:c6:62:6e:62:92:b6:c2:d1:7d: c2:13:96:29:f9:a2:ce:90:0d:cc:24:a8:43:4c:4f: b6:da:08:46:2e:3f:73:99:32:a7:44:47:c9:24:22: d3:1c:1a:6a:b9:ef:2c:6c:0c:e5:74:70:a2:7f:7b: a6:6f:0a:21:66:fa:e0:ee:d2:49:41:dd:48:1c:80: cf:16:61:88:54:6d:29:12:9a:15:ba:51:f5:04:7d: 24:52:a5:dc:d1:3b:7a:73:28:49:2c:05:78:11:c4: a3:a6:4e:41:ba:00:40:38:5c:db:be:a0:31:6d:75: e5:52:7f:44:c8:22:93:4a:9a:20:fe:3d:82:fb:c5: c6:1b:19:3e:82:6c:db:fd:7a:4e:59:c0:45:db:78: 72:ab:b2:8d:2e:c2:7e:e8:8f:40:de:97:4c:42:12: cf:af:e9:a4:ba:41:8f:53:af:28:69:a7:8d:c4:61: 51:40:b2:d1:64:93:a1:78:ac:86:7a:8c:45:d4:df: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A0:9B:E9:4E:2E:A9:DF:95:FF:1F:25:BA:16:5C:EC:B4:72:96:C0 X509v3 Authority Key Identifier: keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e0:b8:50:a6:dc:07:51:25:7a:83:d2:66:f6:f0:0e:3a:92: 59:25:c0:aa:60:50:7d:14:de:5f:70:9f:73:6f:45:23:f4:34: 80:55:15:16:3d:1d:ac:51:66:90:2a:66:2b:b6:37:10:54:a5: 60:10:3f:0b:fa:50:91:6f:96:98:9b:d0:f9:cc:fc:24:d6:a4: 03:cc:f4:65:2b:12:55:a6:03:f5:f5:8e:45:d3:b7:2e:4d:9c: 8f:4b:a9:0c:71:cc:40:d3:af:c4:f3:73:bf:87:aa:36:54:fc: 33:bb:8b:88:16:2d:a8:45:15:31:16:44:15:a4:31:8c:2d:fc: f9:84:ce:18:ab:f2:83:9b:57:d2:93:b8:56:de:d3:e0:ee:e8: 40:4f:00:bc:99:30:d0:1e:cf:f1:e8:f8:a1:b1:41:bb:f2:3c: 7d:1d:e4:6e:77:42:9d:77:7a:31:60:db:a9:85:6a:6e:86:ea: 79:fd:7d:f2:64:8c:f9:d7:44:e8:8d:97:62:2f:c4:14:62:ea: cd:bc:49:30:e4:a8:dc:d7:37:de:4d:e9:fe:dd:b8:98:d2:33: f4:85:7f:04:c1:f9:c8:78:a5:b0:a9:51:6f:54:ad:43:30:a8: e7:02:a2:8e:a3:1b:e7:98:a6:5b:35:e6:43:02:3c:25:86:27: be:ce:6d:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hz0KfGt6m4oAq2wP5cMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTQ5YWIzZjE4ZWMzZWQzNmZmMmE4MWQ0ODlhZjEwNjk5 Y2IzOTIwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD Eyg0YWEwOWJlOTRlMmVhOWRmOTVmZjFmMjViYTE2NWNlY2I0NzI5NmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX/BfpHIOJ4hybFYkKCPWWQTg2TI PitUQ050ARbcQqR36BadJQ1pMCDb1lHaeNO4kmklpNOu9XgZf/Eo9KWz7d3GYm5i krbC0X3CE5Yp+aLOkA3MJKhDTE+22ghGLj9zmTKnREfJJCLTHBpque8sbAzldHCi f3umbwohZvrg7tJJQd1IHIDPFmGIVG0pEpoVulH1BH0kUqXc0Tt6cyhJLAV4EcSj pk5BugBAOFzbvqAxbXXlUn9EyCKTSpog/j2C+8XGGxk+gmzb/XpOWcBF23hyq7KN LsJ+6I9A3pdMQhLPr+mkukGPU68oaaeNxGFRQLLRZJOheKyGeoxF1N+/mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqgm+lOLqnflf8fJboWXOy0cpbAMB8GA1UdIwQY MBaAFAgUmrPxjsPtNv8qgdSJrxBpnLOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMt ZDg3MTEyY2E5OWFlLzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMtZDg3MTEyY2E5OWFl LzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+C4UKbc B1EleoPSZvbwDjqSWSXAqmBQfRTeX3Cfc29FI/Q0gFUVFj0drFFmkCpmK7Y3EFSl YBA/C/pQkW+WmJvQ+cz8JNakA8z0ZSsSVaYD9fWORdO3Lk2cj0upDHHMQNOvxPNz v4eqNlT8M7uLiBYtqEUVMRZEFaQxjC38+YTOGKvyg5tX0pO4Vt7T4O7oQE8AvJkw 0B7P8ej4obFBu/I8fR3kbndCnXd6MWDbqYVqbobqef198mSM+ddE6I2XYi/EFGLq zbxJMOSo3Nc33k3p/t24mNIz9IV/BMH5yHilsKlRb1StQzCo5wKijqMb55imWzXm QwI8JYYnvs5tng== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:13 2025 by rpki-client