This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft File: CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json) Hash identifier: gwBy03PIFeG2whlgk+vKrV2x6/i+aCkr/zBFtcoIsJA= Subject key identifier: 91:DD:E8:80:6B:E2:79:E3:3E:A3:CC:22:AC:38:E3:01:29:27:47:A7 Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B Certificate issuer: /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b Certificate serial: 019AF2AD51BDFFD6BA5FC520330C00EBE051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 08:00:36 +0000 Manifest this update: Sat 06 Dec 2025 08:00:36 +0000 Manifest next update: Sun 07 Dec 2025 08:00:36 +0000 Files and hashes: 1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: OuRbqBSYlN9rTFgK/Cum03Wx/Syd5HgKDGvNz3VYrUU=) 2: zyLhO2pA8EoiaCGmhzCvFXO3PZQ.roa (hash: zOCqTwjJOxNebqI94cAaf6aPymCO5NPJ+zXjaPobnkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:51:bd:ff:d6:ba:5f:c5:20:33:0c:00:eb:e0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b Validity Not Before: Dec 6 08:00:36 2025 GMT Not After : Dec 7 08:00:36 2025 GMT Subject: CN=91dde8806be279e33ea3cc22ac38e301292747a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f4:23:5f:7b:68:c2:8e:be:f3:6a:18:58:b6: 63:90:96:96:5e:f3:ca:2b:e2:76:38:16:35:02:eb: 88:b1:c1:51:92:34:dc:68:d4:02:fd:0e:a4:02:21: 3c:fd:d7:be:e0:ff:b3:f8:fa:54:61:e0:8e:5f:76: bc:96:1a:c5:ea:ed:d5:2e:57:76:4d:bd:a5:79:5c: b5:a1:a7:3d:d7:c5:ce:3b:8b:8d:51:66:85:c7:38: 21:ce:87:94:a1:14:be:be:c2:9f:3e:a9:6d:80:2f: 10:41:98:e4:23:62:0d:d8:73:58:90:93:26:8d:a1: 66:1e:93:ae:4b:a8:57:d8:46:aa:97:81:af:e6:41: d8:d4:b3:74:6d:87:5c:25:44:c7:01:66:9a:c2:a8: 82:c1:c5:ff:fe:aa:61:29:e8:41:50:e8:5a:86:d4: 1b:9c:e0:f6:fc:ce:31:27:9d:6c:af:ce:7b:6b:f5: 42:4a:68:c1:95:2b:30:e8:90:fe:65:e7:c0:fd:ec: 61:d1:e0:fa:d7:46:c6:7a:b4:c0:cb:07:40:23:b2: a2:22:42:38:57:35:f5:83:3f:9d:2b:10:41:82:a6: 75:d5:e1:b2:66:5c:50:5a:f2:eb:22:97:ff:76:0c: 11:3f:cd:8a:5e:e9:26:21:e8:aa:dc:17:11:29:62: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DD:E8:80:6B:E2:79:E3:3E:A3:CC:22:AC:38:E3:01:29:27:47:A7 X509v3 Authority Key Identifier: keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:50:65:51:10:c5:e6:aa:4b:fb:21:a7:29:6a:a6:71:5c:98: b8:a6:d4:8e:dd:5c:1d:bc:f8:7f:98:42:b5:a2:67:78:8a:c7: 26:5a:d5:ef:c9:7f:df:05:49:aa:d8:c2:b7:24:c0:dc:68:f6: cf:5e:d4:b8:8c:0c:61:3f:a5:e3:10:31:0a:fd:d7:f0:bc:33: 9b:65:bb:d3:bc:d4:6e:7b:cd:13:bc:57:c3:61:d7:d8:bd:1b: ba:75:7e:ea:df:3f:58:32:74:c6:73:0f:a9:19:07:16:08:ef: 29:83:b9:ac:01:1b:b1:e3:6c:76:e5:e1:32:08:34:59:c2:18: 08:f7:02:6d:20:90:18:a5:c4:3c:eb:40:a4:3b:27:2f:7b:6d: 38:45:4b:1b:f0:83:71:05:58:2d:da:bb:2a:94:80:96:f8:d0: 01:07:05:3c:d8:b9:9e:f9:02:a7:d0:c3:50:a2:03:99:7a:05: ea:6b:2c:0e:da:4a:75:fa:8f:3c:fe:20:16:a0:16:06:fa:16: f0:19:54:51:2e:a3:13:12:60:48:0c:f2:24:e2:92:59:5d:bd: 46:a9:89:91:06:c6:57:43:34:11:ef:ce:e6:d3:40:22:15:bc: cd:00:ae:e9:49:bf:09:f0:f4:89:a6:f9:30:d5:dd:77:83:3b: 1e:4b:58:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVG9/9a6X8UgMwwA6+BRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YjAxMTBhZTRiODE3OTRhNTA4ODMxZmNiNWVkY2M4ZDVm ZDJmMWIwHhcNMjUxMjA2MDgwMDM2WhcNMjUxMjA3MDgwMDM2WjAzMTEwLwYDVQQD Eyg5MWRkZTg4MDZiZTI3OWUzM2VhM2NjMjJhYzM4ZTMwMTI5Mjc0N2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfQjX3towo6+82oYWLZjkJaWXvPK K+J2OBY1AuuIscFRkjTcaNQC/Q6kAiE8/de+4P+z+PpUYeCOX3a8lhrF6u3VLld2 Tb2leVy1oac918XOO4uNUWaFxzghzoeUoRS+vsKfPqltgC8QQZjkI2IN2HNYkJMm jaFmHpOuS6hX2Eaql4Gv5kHY1LN0bYdcJUTHAWaawqiCwcX//qphKehBUOhahtQb nOD2/M4xJ51sr857a/VCSmjBlSsw6JD+ZefA/exh0eD610bGerTAywdAI7KiIkI4 VzX1gz+dKxBBgqZ11eGyZlxQWvLrIpf/dgwRP82KXukmIeiq3BcRKWK5VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHd6IBr4nnjPqPMIqw44wEpJ0enMB8GA1UdIwQY MBaAFAmwEQrkuBeUpQiDH8te3MjV/S8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAt NmQyMGY1YzE5N2Y2LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAtNmQyMGY1YzE5N2Y2 LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVBlURDF 5qpL+yGnKWqmcVyYuKbUjt1cHbz4f5hCtaJneIrHJlrV78l/3wVJqtjCtyTA3Gj2 z17UuIwMYT+l4xAxCv3X8Lwzm2W707zUbnvNE7xXw2HX2L0bunV+6t8/WDJ0xnMP qRkHFgjvKYO5rAEbseNsduXhMgg0WcIYCPcCbSCQGKXEPOtApDsnL3ttOEVLG/CD cQVYLdq7KpSAlvjQAQcFPNi5nvkCp9DDUKIDmXoF6mssDtpKdfqPPP4gFqAWBvoW 8BlUUS6jExJgSAzyJOKSWV29RqmJkQbGV0M0Ee/O5tNAIhW8zQCu6Um/CfD0iab5 MNXdd4M7HktYaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:34 2025 by rpki-client