This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json) Hash identifier: OjEvH++Tocu2c6jgCKu/RrG/T3fgc7osqzRjhuL3Zr4= Subject key identifier: 62:B8:E5:03:82:A2:7B:DF:EC:28:83:ED:E9:DD:93:54:1B:C0:3C:4D Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60 Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260 Certificate serial: 019AF5AE68DFEBD09A1D199F795456067E1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 22:00:39 +0000 Manifest this update: Sat 06 Dec 2025 22:00:39 +0000 Manifest next update: Sun 07 Dec 2025 22:00:39 +0000 Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: /RxCYTWWVcRptJQSIrmhKhYNNzQV3XdhUX40ocm9GzY=) 2: mWwPnP2S4g9JhxWYKKryZjEy1Ao.roa (hash: HyXUe+PYjqIKyOZOZZRdFXR1ckNBvzFOngXjiDgbrBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:68:df:eb:d0:9a:1d:19:9f:79:54:56:06:7e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260 Validity Not Before: Dec 6 22:00:39 2025 GMT Not After : Dec 7 22:00:39 2025 GMT Subject: CN=62b8e50382a27bdfec2883ede9dd93541bc03c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:1b:c4:b7:91:bd:ee:f2:c1:de:ab:74:ac: 73:34:cb:e1:2f:ec:63:2a:13:80:d1:12:df:e1:94: cb:18:1d:f5:57:ab:bd:49:7d:c6:07:8a:11:92:8d: b4:00:f9:7c:0d:8c:73:82:f1:63:90:09:e1:0d:04: f2:25:fe:09:12:2f:5b:fb:65:90:c1:ca:fa:de:87: 24:d1:fb:e5:25:d5:6b:b8:40:6c:d4:2d:3d:de:b9: aa:80:d8:f9:2e:24:ab:ab:6e:57:8d:b5:49:d0:54: 84:7c:73:db:67:96:27:ec:e6:43:39:03:53:d2:e9: 03:a7:52:50:b7:53:d8:3f:80:7f:10:40:ad:e8:b0: 2b:4d:6c:21:a1:4a:42:cf:eb:00:a5:ee:46:f3:d9: cd:14:d6:0a:9d:af:88:74:fd:20:2a:2d:94:d4:78: 8d:cf:91:f7:16:78:7e:a2:e4:dd:57:62:5c:5d:75: 66:30:f1:92:3e:90:52:12:c9:e6:ab:81:c6:18:a7: 65:80:43:e0:b7:c9:f8:a4:59:37:4e:d0:6f:53:ac: 2c:49:d1:5a:00:be:3c:30:27:b3:81:29:f9:3b:44: 6d:cb:4b:4d:2f:06:66:1f:6f:60:e0:85:c7:80:37: c1:79:40:ad:bf:b1:67:31:fd:ac:c8:b7:ae:44:8e: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B8:E5:03:82:A2:7B:DF:EC:28:83:ED:E9:DD:93:54:1B:C0:3C:4D X509v3 Authority Key Identifier: keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:10:d9:b9:ac:17:2a:f1:70:d4:b5:83:8f:06:1a:2f:14:8f: 73:7c:5e:e5:8f:d5:72:4e:75:3a:b2:0a:03:95:fa:28:06:d2: 95:9b:d2:71:ca:d7:8c:50:1e:8c:ef:02:4a:fe:7d:41:3e:75: d0:20:66:72:f3:36:12:6a:be:e0:1b:be:25:a3:6b:16:dc:11: c6:0b:7e:d9:f2:42:9d:0b:00:f6:bf:66:c8:e1:2c:bd:6e:18: a4:cb:f2:0a:9a:4b:f1:e1:d8:70:40:41:36:5f:35:2e:17:48: 53:91:c7:42:71:fc:51:7a:df:b1:9f:f0:ce:e3:c0:97:9f:76: 84:52:09:d6:ea:91:6a:cf:4c:b6:b5:08:e2:e8:17:a5:4d:23: de:1d:28:60:14:1a:80:a4:f1:b2:f4:0f:42:52:e6:5e:87:13: 39:bb:d4:3b:78:6a:35:fd:76:28:69:10:43:65:2b:7e:7b:4d: c3:59:2b:8e:c9:49:8c:cd:ec:3d:e5:d8:92:7d:2a:c5:b5:ec: 0c:b2:d4:9d:ad:d5:c9:52:e1:19:a7:6d:08:f1:89:9a:72:b6: 22:46:f0:4c:40:d7:be:76:45:cf:52:9f:be:c5:f8:ca:2c:53: 4c:17:00:41:59:59:87:e3:00:49:00:79:6f:50:66:f0:59:13: c6:c8:53:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rmjf69CaHRmfeVRWBn4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTFiYzUwY2ZlZDlkMDJlNTgxOTZhMmM4MWM5ODhlMzBi YTEyNjAwHhcNMjUxMjA2MjIwMDM5WhcNMjUxMjA3MjIwMDM5WjAzMTEwLwYDVQQD Eyg2MmI4ZTUwMzgyYTI3YmRmZWMyODgzZWRlOWRkOTM1NDFiYzAzYzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt90bxLeRve7ywd6rdKxzNMvhL+xj KhOA0RLf4ZTLGB31V6u9SX3GB4oRko20APl8DYxzgvFjkAnhDQTyJf4JEi9b+2WQ wcr63ock0fvlJdVruEBs1C093rmqgNj5LiSrq25XjbVJ0FSEfHPbZ5Yn7OZDOQNT 0ukDp1JQt1PYP4B/EECt6LArTWwhoUpCz+sApe5G89nNFNYKna+IdP0gKi2U1HiN z5H3Fnh+ouTdV2JcXXVmMPGSPpBSEsnmq4HGGKdlgEPgt8n4pFk3TtBvU6wsSdFa AL48MCezgSn5O0Rty0tNLwZmH29g4IXHgDfBeUCtv7FnMf2syLeuRI6HEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK45QOConvf7CiD7endk1QbwDxNMB8GA1UdIwQY MBaAFAgRvFDP7Z0C5YGWosgcmI4wuhJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYt ZWU1YTY3NDNiZTU2LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYtZWU1YTY3NDNiZTU2 LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRDZuawX KvFw1LWDjwYaLxSPc3xe5Y/Vck51OrIKA5X6KAbSlZvSccrXjFAejO8CSv59QT51 0CBmcvM2Emq+4Bu+JaNrFtwRxgt+2fJCnQsA9r9myOEsvW4YpMvyCppL8eHYcEBB Nl81LhdIU5HHQnH8UXrfsZ/wzuPAl592hFIJ1uqRas9MtrUI4ugXpU0j3h0oYBQa gKTxsvQPQlLmXocTObvUO3hqNf12KGkQQ2UrfntNw1krjslJjM3sPeXYkn0qxbXs DLLUna3VyVLhGadtCPGJmnK2IkbwTEDXvnZFz1KfvsX4yixTTBcAQVlZh+MASQB5 b1Bm8FkTxshT9A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:11 2025 by rpki-client