This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json) Hash identifier: TsOAx5vcFeWSUioF1QlHThtldW5m8AS1lx7oZLYAZuw= Subject key identifier: F3:1F:F9:97:A9:3B:46:9D:8A:12:DC:C5:09:E9:65:FB:F1:08:2D:2F Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1 Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1 Certificate serial: 019B3F47D4FB73EE24D644A15BCEC875B088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft Manifest number: 08CD Signing time: Sun 21 Dec 2025 05:00:30 +0000 Manifest this update: Sun 21 Dec 2025 05:00:30 +0000 Manifest next update: Mon 22 Dec 2025 05:00:30 +0000 Files and hashes: 1: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: ys3ddTVxBm1iPrICRNIlSrUC/dO72e2sNj1VsTzzuBs=) 2: nA6xks4oQE9N25Xp7uQGkNyo-7Y.roa (hash: F+E2ylwyKz3DO5lKloF7/MKQO4W4GhOJOnJmcBpu/7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:d4:fb:73:ee:24:d6:44:a1:5b:ce:c8:75:b0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1 Validity Not Before: Dec 21 05:00:30 2025 GMT Not After : Dec 22 05:00:30 2025 GMT Subject: CN=f31ff997a93b469d8a12dcc509e965fbf1082d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:a8:62:59:44:43:f5:01:c6:98:8b:a6:1f: fa:56:5c:f1:e4:56:18:bb:91:5d:16:44:5d:74:49: b5:99:36:cd:e8:48:1a:00:1e:40:28:ec:ca:a7:2d: 31:5e:67:39:19:81:be:44:ba:00:c0:3a:f8:9e:eb: 86:83:17:58:b4:86:fc:fe:13:fb:65:3a:6c:24:6c: 62:a8:29:58:7f:7d:b0:71:82:f9:44:4b:ba:00:b4: cf:26:a1:3f:b2:94:ba:30:c3:c1:07:b2:8f:d4:04: 52:38:65:8b:be:01:a8:24:77:db:93:45:cf:9c:90: 7d:43:05:e1:4c:c4:64:39:94:68:91:38:92:f2:0d: b3:60:d0:85:c7:9d:99:b1:cf:2b:bc:dc:f4:cc:35: 4a:0f:71:34:e1:da:f6:fe:c9:51:b8:b7:58:43:e2: 59:9f:ec:f6:1b:72:62:83:9c:87:9f:d4:1a:a7:bc: bf:e9:4e:f4:e9:8e:f2:84:44:c5:04:50:82:19:6b: cf:90:af:7f:a3:72:25:49:fa:cd:cf:55:b2:90:75: 1a:6e:25:71:40:5c:b1:d2:81:7b:86:29:b2:43:43: be:18:13:1f:36:a9:10:ec:65:e9:6d:99:16:16:71: 63:f3:32:e5:a3:23:a1:a2:75:32:91:96:ff:dc:db: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1F:F9:97:A9:3B:46:9D:8A:12:DC:C5:09:E9:65:FB:F1:08:2D:2F X509v3 Authority Key Identifier: keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:48:69:4c:83:48:fe:8a:c7:f0:80:7c:86:7b:b0:6e:54:9b: 34:76:7d:fd:06:8f:4e:91:87:eb:82:7d:b9:a2:46:87:0b:80: 58:26:94:5a:a0:e0:f2:11:52:18:b2:27:40:b1:ab:3d:3e:41: ca:5c:3f:2b:66:b0:0c:d4:5f:4c:40:2e:bd:eb:39:de:42:98: 44:25:13:8e:16:73:c3:06:51:11:dc:6b:d3:3c:ab:61:f8:b3: a1:13:a9:b3:55:55:77:67:56:ea:7b:c2:99:33:c9:d8:bf:7e: 54:75:2f:ce:ad:c6:d2:44:47:53:e4:27:80:f4:dd:d4:55:b9: ca:fb:e9:7f:b8:92:2e:0d:9d:c7:6c:4a:8a:17:40:24:e7:d8: bd:bf:9c:f0:49:79:84:50:8a:1d:23:df:5c:88:14:7a:45:f3: 3d:b5:c8:ab:e8:cf:da:cf:0f:85:35:89:f7:d0:96:08:82:7e: 87:30:c9:aa:28:0a:57:82:2e:ba:ac:d4:91:36:78:5e:6e:c6: 22:54:4e:18:0c:ed:8e:f9:d1:c2:d7:45:81:6c:73:32:22:77: e5:bd:c3:26:bd:86:38:dc:fa:c6:af:16:03:fc:ad:0d:8e:a6: b1:06:4c:ff:84:05:41:94:10:f2:09:f2:4f:83:ae:4b:1a:ae: e9:0b:c8:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R9T7c+4k1kShW87IdbCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYjJiMDRmZjliNzJlYmZiZWI5MTgzODUyMzNlMDI4Yzhm M2ZkZjEwHhcNMjUxMjIxMDUwMDMwWhcNMjUxMjIyMDUwMDMwWjAzMTEwLwYDVQQD EyhmMzFmZjk5N2E5M2I0NjlkOGExMmRjYzUwOWU5NjVmYmYxMDgyZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8ioYllEQ/UBxpiLph/6Vlzx5FYY u5FdFkRddEm1mTbN6EgaAB5AKOzKpy0xXmc5GYG+RLoAwDr4nuuGgxdYtIb8/hP7 ZTpsJGxiqClYf32wcYL5REu6ALTPJqE/spS6MMPBB7KP1ARSOGWLvgGoJHfbk0XP nJB9QwXhTMRkOZRokTiS8g2zYNCFx52Zsc8rvNz0zDVKD3E04dr2/slRuLdYQ+JZ n+z2G3Jig5yHn9Qap7y/6U706Y7yhETFBFCCGWvPkK9/o3IlSfrNz1WykHUabiVx QFyx0oF7himyQ0O+GBMfNqkQ7GXpbZkWFnFj8zLloyOhonUykZb/3NvohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMf+ZepO0adihLcxQnpZfvxCC0vMB8GA1UdIwQY MBaAFHGysE/5ty6/vrkYOFIz4CjI8/3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQt OTU5NTU5Yjk2Zjg3LzEvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQtOTU5NTU5Yjk2Zjg3 LzEvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0hpTINI /orH8IB8hnuwblSbNHZ9/QaPTpGH64J9uaJGhwuAWCaUWqDg8hFSGLInQLGrPT5B ylw/K2awDNRfTEAuves53kKYRCUTjhZzwwZREdxr0zyrYfizoROps1VVd2dW6nvC mTPJ2L9+VHUvzq3G0kRHU+QngPTd1FW5yvvpf7iSLg2dx2xKihdAJOfYvb+c8El5 hFCKHSPfXIgUekXzPbXIq+jP2s8PhTWJ99CWCIJ+hzDJqigKV4IuuqzUkTZ4Xm7G IlROGAztjvnRwtdFgWxzMiJ35b3DJr2GONz6xq8WA/ytDY6msQZM/4QFQZQQ8gny T4OuSxqu6QvIWA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:44:40 2025 by rpki-client