This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json) Hash identifier: JEI5NYArl4zfMWjJuw3YXAdK1MD1OHcWXmk5CLCVEOg= Subject key identifier: 54:A7:6F:CA:D6:58:5B:3D:B0:4F:D8:89:0D:CB:2F:0B:79:34:40:3A Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78 Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578 Certificate serial: 019AF2ADA56D34CDA1557C994983E0B1D8CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft Manifest number: 0A2F Signing time: Sat 06 Dec 2025 08:00:57 +0000 Manifest this update: Sat 06 Dec 2025 08:00:57 +0000 Manifest next update: Sun 07 Dec 2025 08:00:57 +0000 Files and hashes: 1: B-j6lkFyqvjbC_PQncwIGbX8TJo.roa (hash: UphQUvnVM6eEU6Z6D8ssHUSQvyAzogcc5pnYk33x3jA=) 2: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: VuEFKbLw2udcPh8FsW1P6xNa6UX0U/I/X8GBCGKVzuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a5:6d:34:cd:a1:55:7c:99:49:83:e0:b1:d8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0818344a520a3999279bb8247e179e88406e3578 Validity Not Before: Dec 6 08:00:57 2025 GMT Not After : Dec 7 08:00:57 2025 GMT Subject: CN=54a76fcad6585b3db04fd8890dcb2f0b7934403a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:32:57:62:74:9b:e7:e7:db:87:43:70:72: db:32:63:bd:be:f0:e7:0b:45:5c:e9:70:0f:43:db: 01:7d:8d:3e:c2:0b:10:b5:3c:37:60:28:80:1f:ec: 29:1a:c5:4f:61:90:fc:cc:6e:d2:ea:f6:53:a3:83: 6e:5e:1a:63:19:a5:b0:a3:1e:06:d0:b3:5b:c2:ff: 27:13:c1:59:7e:30:bd:44:72:f3:a5:f0:45:17:e6: eb:cb:60:c8:71:18:97:bc:f0:c1:a5:ab:6a:dd:e9: 3a:49:62:95:66:96:05:87:f3:20:43:ad:2c:26:68: cd:8d:aa:84:8c:c7:6c:d3:6d:b6:ec:d5:1c:2a:62: 51:5a:dd:40:a2:b7:e0:dc:1c:90:97:3a:4a:3c:80: 34:dc:31:60:bc:14:9f:8c:2d:83:bb:0b:3f:d8:83: 80:84:ff:90:15:ba:15:08:fe:7d:f5:92:7a:93:a4: cf:9e:e7:ec:99:f1:6e:75:b6:e8:ee:f4:f5:92:57: 8e:75:a6:87:3e:45:e2:34:fd:e9:0b:d2:a3:69:e6: c0:c4:40:67:94:a6:cc:42:e3:24:4c:e5:34:09:3b: a8:50:8f:2a:dc:04:0e:7a:3f:71:9a:36:29:36:dd: 14:8a:a0:a7:d1:8e:05:c0:fb:a3:dd:46:0e:bf:52: 07:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A7:6F:CA:D6:58:5B:3D:B0:4F:D8:89:0D:CB:2F:0B:79:34:40:3A X509v3 Authority Key Identifier: keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:54:d8:3b:b8:f0:72:1e:a3:9d:e8:13:53:5f:08:ad:d4:93: 40:b1:25:ff:d2:3d:7c:41:4f:69:84:24:1d:bd:45:86:6b:1a: de:58:51:14:31:86:f2:54:98:73:56:54:85:31:1b:28:71:ed: 53:23:a7:16:ac:e2:a9:0f:94:70:88:a2:93:71:e8:22:bc:0f: 74:15:f2:ed:31:3e:36:2d:86:4b:d2:ae:6c:d7:ff:57:8f:de: 8b:ee:6b:49:ce:6a:06:ef:6a:92:aa:7b:fb:ec:2c:5a:25:18: 9f:63:9d:73:03:af:a7:84:82:7a:19:0b:82:3e:5a:ec:74:90: f2:cf:fd:ae:36:3d:88:1f:2e:ed:2e:de:e3:21:48:d1:19:75: ac:27:0b:09:da:f4:d5:85:2a:bf:cc:63:8a:ae:17:7a:d6:92: c9:b6:15:34:70:9b:b0:ff:bd:6d:50:b9:9c:a7:8b:40:f5:f6: ba:25:03:24:fe:55:b2:f0:68:d1:e0:65:27:03:05:67:29:e6: a8:46:bb:db:73:f0:12:fa:88:b3:da:01:88:41:03:f0:99:b9: 92:77:8a:64:20:1c:3c:40:b3:82:12:72:b6:32:d2:75:02:65: ee:7f:69:2b:ba:40:56:6f:35:d9:02:51:76:21:cd:05:d1:18: 50:e1:0f:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraVtNM2hVXyZSYPgsdjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTgzNDRhNTIwYTM5OTkyNzliYjgyNDdlMTc5ZTg4NDA2 ZTM1NzgwHhcNMjUxMjA2MDgwMDU3WhcNMjUxMjA3MDgwMDU3WjAzMTEwLwYDVQQD Eyg1NGE3NmZjYWQ2NTg1YjNkYjA0ZmQ4ODkwZGNiMmYwYjc5MzQ0MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwewyV2J0m+fn24dDcHLbMmO9vvDn C0Vc6XAPQ9sBfY0+wgsQtTw3YCiAH+wpGsVPYZD8zG7S6vZTo4NuXhpjGaWwox4G 0LNbwv8nE8FZfjC9RHLzpfBFF+bry2DIcRiXvPDBpatq3ek6SWKVZpYFh/MgQ60s JmjNjaqEjMds02227NUcKmJRWt1Aorfg3ByQlzpKPIA03DFgvBSfjC2Duws/2IOA hP+QFboVCP599ZJ6k6TPnufsmfFudbbo7vT1kleOdaaHPkXiNP3pC9KjaebAxEBn lKbMQuMkTOU0CTuoUI8q3AQOej9xmjYpNt0UiqCn0Y4FwPuj3UYOv1IHRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSnb8rWWFs9sE/YiQ3LLwt5NEA6MB8GA1UdIwQY MBaAFAgYNEpSCjmZJ5u4JH4XnohAbjV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMt ODUxZWE2NWNiOThiLzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMtODUxZWE2NWNiOThi LzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFTYO7jw ch6jnegTU18IrdSTQLEl/9I9fEFPaYQkHb1Fhmsa3lhRFDGG8lSYc1ZUhTEbKHHt UyOnFqziqQ+UcIiik3HoIrwPdBXy7TE+Ni2GS9KubNf/V4/ei+5rSc5qBu9qkqp7 ++wsWiUYn2OdcwOvp4SCehkLgj5a7HSQ8s/9rjY9iB8u7S7e4yFI0Rl1rCcLCdr0 1YUqv8xjiq4XetaSybYVNHCbsP+9bVC5nKeLQPX2uiUDJP5VsvBo0eBlJwMFZynm qEa723PwEvqIs9oBiEED8Jm5kneKZCAcPECzghJytjLSdQJl7n9pK7pAVm812QJR diHNBdEYUOEPiA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:53 2025 by rpki-client