This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json) Hash identifier: qK7PLNxQuiaf2/xWcpzh5v0YHXnGjcBIwZzs1QRSTzI= Subject key identifier: 87:8E:A9:18:92:17:7A:F7:D4:26:A1:96:E4:68:8A:FE:F8:EC:98:BA Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5 Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5 Certificate serial: 019AF1D25A144511B8E84D9725E60AA0D4E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: A8W6CpFfd33w+/BbrPhxYjeQ6k9jQGsYoTLVxEw8Okw=) 2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5a:14:45:11:b8:e8:4d:97:25:e6:0a:a0:d4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5 Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=878ea91892177af7d426a196e4688afef8ec98ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:b2:0c:fe:1e:c7:04:62:6e:3d:cc:39:7f: fe:e7:61:4e:02:6a:c5:3c:5c:05:6d:21:f0:93:61: 5b:c1:79:29:1d:f9:28:1a:92:49:16:04:73:84:e0: 46:9e:71:ea:95:0f:4c:14:c8:e8:50:ec:d9:9c:16: 43:31:0f:b0:96:6b:47:f3:6b:ad:cc:ee:52:a1:f5: 92:6c:a3:7d:c3:10:ce:d8:aa:81:34:74:97:94:a4: ad:13:82:34:f5:2d:32:f9:bd:b7:7f:dc:b5:8b:79: c1:43:70:09:c8:c9:92:fc:0c:ca:c1:df:45:3d:ba: d1:56:48:55:82:f8:a8:e0:3e:9b:b7:9f:a8:00:1c: b3:ad:7c:43:a4:9f:99:cf:c0:3e:1d:ae:28:65:1f: 3f:d2:67:9b:5c:de:19:3c:c5:c9:d0:01:d3:67:58: 5a:5d:a1:5b:a5:5e:4a:5f:f5:7a:dc:ef:da:27:9c: 93:35:0f:1c:fd:ec:32:33:f5:8e:c8:35:1d:3b:84: 77:e5:3c:ce:bb:ad:e5:9a:34:78:00:db:24:d5:d1: 57:cb:c1:da:89:ea:51:ed:50:58:09:d8:8e:a2:91: e3:70:11:b4:2a:6a:be:96:f0:ba:32:ba:76:fc:ac: 21:14:e6:02:47:ab:c8:2c:d8:86:1f:32:49:95:e5: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8E:A9:18:92:17:7A:F7:D4:26:A1:96:E4:68:8A:FE:F8:EC:98:BA X509v3 Authority Key Identifier: keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:e2:f6:94:bc:52:2c:f6:35:f6:e1:1d:54:40:e5:e3:4f:ac: 2f:ce:76:c8:69:f4:83:f1:0c:96:01:cb:d7:e2:39:f1:94:ca: 43:9b:35:d2:e0:d5:89:1e:d5:a5:2d:64:56:be:a2:c1:f9:a9: a1:39:20:07:be:c6:be:1f:27:32:a4:eb:22:44:9a:a4:d3:e4: 9b:43:4a:2a:12:57:57:1d:1e:a7:8a:52:ac:bc:37:73:53:e4: 2a:bc:30:1f:aa:94:e2:65:bd:c7:2b:d4:77:ef:3d:d2:03:a2: df:6f:c3:09:03:11:93:b6:bd:bb:d2:3f:6d:12:83:b8:d4:e0: dc:f8:a4:46:0b:d1:e0:fa:13:0e:e1:20:65:04:c3:07:d4:d6: 36:bf:4d:94:39:78:ad:f9:40:61:29:e7:63:11:90:2e:e5:7a: 58:18:36:78:7c:05:06:be:90:d6:dd:0d:0d:c9:e0:6f:cf:64: f6:19:00:2c:b8:5f:5b:e9:1e:dc:09:73:8e:da:d8:92:47:7b: 87:16:2e:c8:03:de:5c:54:42:79:a4:8e:b1:3d:68:a1:7c:82: 84:ad:1d:84:e2:07:e5:eb:22:09:9a:ff:6b:70:e4:41:4b:0d: a2:4d:2b:2e:c9:83:3a:65:e3:6a:b1:2f:90:06:75:18:eb:e3: 43:e0:68:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0loURRG46E2XJeYKoNTgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYjkwYzgzZDkwZjNkNGVmMjJkYjgyODUwMmU2MTUyYjZk NWJmZTUwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD Eyg4NzhlYTkxODkyMTc3YWY3ZDQyNmExOTZlNDY4OGFmZWY4ZWM5OGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPuyDP4exwRibj3MOX/+52FOAmrF PFwFbSHwk2FbwXkpHfkoGpJJFgRzhOBGnnHqlQ9MFMjoUOzZnBZDMQ+wlmtH82ut zO5SofWSbKN9wxDO2KqBNHSXlKStE4I09S0y+b23f9y1i3nBQ3AJyMmS/AzKwd9F PbrRVkhVgvio4D6bt5+oAByzrXxDpJ+Zz8A+Ha4oZR8/0mebXN4ZPMXJ0AHTZ1ha XaFbpV5KX/V63O/aJ5yTNQ8c/ewyM/WOyDUdO4R35TzOu63lmjR4ANsk1dFXy8Ha iepR7VBYCdiOopHjcBG0Kmq+lvC6Mrp2/KwhFOYCR6vILNiGHzJJleW0oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeOqRiSF3r31CahluRoiv747Ji6MB8GA1UdIwQY MBaAFHG5DIPZDz1O8i24KFAuYVK21b/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWIt N2NmYjliMDdmNDBmLzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWItN2NmYjliMDdmNDBm LzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzOL2lLxS LPY19uEdVEDl40+sL852yGn0g/EMlgHL1+I58ZTKQ5s10uDViR7VpS1kVr6iwfmp oTkgB77Gvh8nMqTrIkSapNPkm0NKKhJXVx0ep4pSrLw3c1PkKrwwH6qU4mW9xyvU d+890gOi32/DCQMRk7a9u9I/bRKDuNTg3PikRgvR4PoTDuEgZQTDB9TWNr9NlDl4 rflAYSnnYxGQLuV6WBg2eHwFBr6Q1t0NDcngb89k9hkALLhfW+ke3AlzjtrYkkd7 hxYuyAPeXFRCeaSOsT1ooXyChK0dhOIH5esiCZr/a3DkQUsNok0rLsmDOmXjarEv kAZ1GOvjQ+Bo8w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:47 2025 by rpki-client