This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft File: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json) Hash identifier: jyFiuH9cxT7wZrPM5WlIyJBttRxlomubuqdddwgl1eQ= Subject key identifier: BD:A6:5F:4E:75:86:B2:C3:35:9E:B3:A9:22:1F:CB:A4:5E:7C:17:F3 Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24 Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24 Certificate serial: 019AF19BAA5ED15637BD8F1F5D48F6947692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=) 2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: ewwMl1B3xoW/RvJA2qH3bn8ecU0yMzysi/AoPcM51T4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:aa:5e:d1:56:37:bd:8f:1f:5d:48:f6:94:76:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24 Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=bda65f4e7586b2c3359eb3a9221fcba45e7c17f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:50:e8:ce:20:a4:40:b3:0d:3c:cf:cc:52:55: 93:4f:a9:d0:6b:2c:61:ba:bd:8f:c0:58:a8:2f:f0: 0d:27:e0:e0:b6:3d:b8:08:83:8c:3e:60:d0:f9:97: 1f:33:18:be:1b:50:0c:1f:93:d7:99:23:83:c9:10: 3b:e4:b2:6b:46:88:43:fd:b8:a5:e3:94:f5:8d:14: 54:9e:f1:55:f3:5e:72:ec:04:04:3c:67:fc:19:a0: 7b:c4:8a:dd:e4:33:ef:51:31:7b:9e:2b:5c:a0:01: 40:81:79:4f:b5:f2:72:1f:c0:e3:79:77:b7:5e:5e: b1:7c:0b:65:76:5f:75:7b:a6:88:93:09:e1:b9:d7: 5c:93:8b:b5:1d:99:28:df:e0:61:9b:8a:2d:47:e0: 0a:83:a1:91:8c:e5:1c:fd:bb:e7:34:03:c2:20:65: 27:73:74:2b:76:3b:ca:d0:ff:92:00:28:8f:5d:21: 50:77:ae:73:22:47:40:bc:ad:98:fe:32:04:7c:30: 11:2c:4a:6e:a2:aa:5e:64:6b:ce:60:51:53:57:41: 5b:26:1d:90:f3:66:df:08:e5:ce:af:ac:04:c2:af: 62:cd:ea:ae:03:e8:33:e3:b2:b6:6f:88:c1:e3:ff: 00:a6:fa:f9:b2:24:49:08:0e:e6:df:32:b8:68:b4: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A6:5F:4E:75:86:B2:C3:35:9E:B3:A9:22:1F:CB:A4:5E:7C:17:F3 X509v3 Authority Key Identifier: keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e6:4f:f2:2b:0f:ed:55:8d:e8:2f:a2:a3:c9:94:d7:2d:a5: 88:0e:0c:00:fc:4b:bb:3c:27:3f:49:48:b8:34:8f:41:3b:04: ad:78:ca:56:a7:15:08:75:f0:9b:5a:af:67:e4:37:63:49:25: 07:0e:c4:93:b7:7b:22:06:16:7e:48:f0:64:f6:b4:37:37:1b: 05:d5:d9:b4:58:03:e0:13:64:14:c5:bf:dd:2c:d5:40:0e:5d: 10:0b:14:13:20:97:ff:18:4a:f1:f1:bd:36:3d:cb:ad:d9:6a: 8f:84:d2:12:ab:ba:cd:c3:9f:8c:f6:d7:23:49:5a:aa:7c:8c: a7:d6:01:5a:f3:57:6c:a4:51:31:96:79:b9:e5:63:27:6d:a4: 6f:e6:49:c7:7a:26:e7:d6:1d:3b:41:e7:55:20:60:9d:09:e4: 8b:24:07:58:df:5d:9b:38:47:b6:72:2e:97:95:30:1d:a1:52: a3:92:ba:a5:ce:8f:77:14:f1:ab:59:1d:6f:0a:32:c4:2b:5d: 0f:c5:bf:25:08:c7:48:8e:c3:d1:3d:9b:11:22:3d:0d:cc:36: 2d:e9:65:50:b3:ae:64:eb:e2:05:d9:cb:86:bd:6c:be:46:a0: 37:be:ca:fc:e0:9b:76:66:bb:8a:79:a6:f9:aa:63:d1:f8:54: 95:e5:48:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6pe0VY3vY8fXUj2lHaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMTYyNGZmYzU3MjFjMTU4ZTRjYzliYjA3MWViNGZiODdk ODhjMjQwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD EyhiZGE2NWY0ZTc1ODZiMmMzMzU5ZWIzYTkyMjFmY2JhNDVlN2MxN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFDoziCkQLMNPM/MUlWTT6nQayxh ur2PwFioL/ANJ+Dgtj24CIOMPmDQ+ZcfMxi+G1AMH5PXmSODyRA75LJrRohD/bil 45T1jRRUnvFV815y7AQEPGf8GaB7xIrd5DPvUTF7nitcoAFAgXlPtfJyH8DjeXe3 Xl6xfAtldl91e6aIkwnhuddck4u1HZko3+Bhm4otR+AKg6GRjOUc/bvnNAPCIGUn c3QrdjvK0P+SACiPXSFQd65zIkdAvK2Y/jIEfDARLEpuoqpeZGvOYFFTV0FbJh2Q 82bfCOXOr6wEwq9izequA+gz47K2b4jB4/8Apvr5siRJCA7m3zK4aLRHGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2mX051hrLDNZ6zqSIfy6RefBfzMB8GA1UdIwQY MBaAFHAWJP/FchwVjkzJuwcetPuH2IwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEt NjNlNzVlOTUzYTkzLzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEtNjNlNzVlOTUzYTkz LzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeZP8isP 7VWN6C+io8mU1y2liA4MAPxLuzwnP0lIuDSPQTsErXjKVqcVCHXwm1qvZ+Q3Y0kl Bw7Ek7d7IgYWfkjwZPa0NzcbBdXZtFgD4BNkFMW/3SzVQA5dEAsUEyCX/xhK8fG9 Nj3Lrdlqj4TSEqu6zcOfjPbXI0laqnyMp9YBWvNXbKRRMZZ5ueVjJ22kb+ZJx3om 59YdO0HnVSBgnQnkiyQHWN9dmzhHtnIul5UwHaFSo5K6pc6PdxTxq1kdbwoyxCtd D8W/JQjHSI7D0T2bESI9Dcw2LellULOuZOviBdnLhr1svkagN77K/OCbdma7inmm +apj0fhUleVIeA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:37 2025 by rpki-client