This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json) Hash identifier: oYyX6Ft0enXzZ/tXCXba9nDyC0tfHX9V5ac5DEEAT8Y= Subject key identifier: 07:93:E9:37:82:F1:5E:C8:80:C3:E7:D6:E1:B2:15:D3:2E:A1:14:3C Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76 Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276 Certificate serial: 019AF19B2A312EFA457905410F4D2971E6A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft Manifest number: 07E6 Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: QRiTXdlUEjrXKX0W58fS9Vr0NKUGy0snWuwEUXIYzLY=) 2: m3oyez4opl0YbbQ1CR2fl2aO7F8.roa (hash: FqYvVOjK/elvRD3q2xJweF4ZvocMCS6cmWVMXbFh3Mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2a:31:2e:fa:45:79:05:41:0f:4d:29:71:e6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276 Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=0793e93782f15ec880c3e7d6e1b215d32ea1143c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:09:80:a1:8e:c8:5a:be:c2:ee:cf:19:01:aa: 4a:2e:23:23:ac:c0:2b:81:ad:14:08:04:04:aa:c6: 6f:6f:34:6d:b6:f6:7b:99:71:26:c2:4e:64:d3:3b: db:33:94:8c:23:00:99:25:c4:ec:3c:bc:df:20:13: 4a:c4:a2:23:31:84:27:f3:a4:ec:22:dd:47:d3:70: 38:9c:1b:20:b4:d3:f7:69:2e:f7:6f:50:2c:c8:0f: d7:de:b3:5f:b1:3b:ba:9d:c9:88:b2:1f:05:ce:90: 9e:d4:6c:57:f0:ac:2b:f2:a2:a8:1a:1b:db:5d:dd: a3:67:88:4a:ee:04:3c:b8:da:03:55:cb:da:0b:df: 47:01:55:db:f5:a2:9b:ad:a2:ce:72:a8:0a:1b:a9: 22:94:96:9a:d9:d7:57:1c:c8:e9:31:7d:20:4d:84: a9:eb:e6:8c:5e:4d:03:33:4e:f9:ed:86:e1:dd:1e: be:45:56:95:da:97:77:e7:4f:97:18:bc:50:2b:29: 50:c9:41:da:52:46:f5:75:42:6e:7d:c7:35:d4:df: 04:b4:81:14:27:c4:53:2e:34:16:ea:ab:8e:4f:03: 1e:4f:0c:63:95:f3:c8:04:aa:79:4e:d7:5c:10:04: 78:37:f0:3e:67:56:3c:cf:3d:74:c3:fb:47:9e:40: f1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:93:E9:37:82:F1:5E:C8:80:C3:E7:D6:E1:B2:15:D3:2E:A1:14:3C X509v3 Authority Key Identifier: keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:15:19:17:76:80:46:bb:2f:29:07:b7:ab:4e:41:5a:75:32: 62:c6:22:ce:93:57:06:43:e0:67:db:71:4c:8c:b3:27:14:55: 6e:83:58:6a:c0:32:84:37:93:d1:20:d0:5e:fa:56:b0:3b:1c: 7e:5f:cb:a7:b8:af:99:e9:01:82:af:35:ce:33:1b:4c:e7:87: 14:46:36:53:ab:06:47:7b:6f:be:5e:6c:e3:96:80:e1:53:9c: d9:fd:41:f2:dd:2f:da:81:a2:31:81:ce:77:b6:af:6f:d7:df: 39:f6:ef:f8:6d:8c:0e:b6:02:03:f0:a7:56:7d:f9:21:eb:ea: 16:09:16:c5:c2:75:b5:c9:1f:fa:b3:ee:27:bf:e0:f7:3a:61: e8:db:5a:fa:d2:9e:0d:39:ee:eb:a6:3c:13:43:01:ad:84:8f: 50:5c:be:e0:79:0a:9d:5d:88:fe:e4:cf:34:22:df:eb:07:74: d1:09:ae:8b:f6:bb:97:da:4b:30:4f:34:67:1c:c9:ee:a5:f4: ae:4d:08:64:7f:4b:18:d5:8d:b6:d2:20:80:63:b4:1a:ee:3c: c4:7b:51:ba:c1:48:43:e2:1c:2a:09:dd:11:7b:1a:41:0e:d3: 4f:93:a6:7d:6f:c1:22:ed:98:3e:ea:22:8e:95:a1:56:40:27: 2f:93:8d:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyoxLvpFeQVBD00pceaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYjZkMGUwMDcyZDBjYWIyOWJmYTg3MzdkZTJhNTNlNTE0 MTgyNzYwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD EygwNzkzZTkzNzgyZjE1ZWM4ODBjM2U3ZDZlMWIyMTVkMzJlYTExNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgmAoY7IWr7C7s8ZAapKLiMjrMAr ga0UCAQEqsZvbzRttvZ7mXEmwk5k0zvbM5SMIwCZJcTsPLzfIBNKxKIjMYQn86Ts It1H03A4nBsgtNP3aS73b1AsyA/X3rNfsTu6ncmIsh8FzpCe1GxX8Kwr8qKoGhvb Xd2jZ4hK7gQ8uNoDVcvaC99HAVXb9aKbraLOcqgKG6kilJaa2ddXHMjpMX0gTYSp 6+aMXk0DM0757Ybh3R6+RVaV2pd350+XGLxQKylQyUHaUkb1dUJufcc11N8EtIEU J8RTLjQW6quOTwMeTwxjlfPIBKp5TtdcEAR4N/A+Z1Y8zz10w/tHnkDxgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeT6TeC8V7IgMPn1uGyFdMuoRQ8MB8GA1UdIwQY MBaAFHG20OAHLQyrKb+oc33ipT5RQYJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wYzM1NTQtY2NhZC00Njk4LWJmOWYt YjFmY2YzODk2OTk5LzEvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8wYzM1NTQtY2NhZC00Njk4LWJmOWYtYjFmY2YzODk2OTk5 LzEvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRUZF3aA RrsvKQe3q05BWnUyYsYizpNXBkPgZ9txTIyzJxRVboNYasAyhDeT0SDQXvpWsDsc fl/Lp7ivmekBgq81zjMbTOeHFEY2U6sGR3tvvl5s45aA4VOc2f1B8t0v2oGiMYHO d7avb9ffOfbv+G2MDrYCA/CnVn35IevqFgkWxcJ1tckf+rPuJ7/g9zph6Nta+tKe DTnu66Y8E0MBrYSPUFy+4HkKnV2I/uTPNCLf6wd00Qmui/a7l9pLME80ZxzJ7qX0 rk0IZH9LGNWNttIggGO0Gu48xHtRusFIQ+IcKgndEXsaQQ7TT5OmfW/BIu2YPuoi jpWhVkAnL5ONfA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:00 2025 by rpki-client