This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json) Hash identifier: S3oVgLDq6UR6DttuEl36HtodWJshgPBHNl5V1g38acw= Subject key identifier: 2C:0E:E3:53:90:BC:23:51:99:52:A3:E3:57:1D:C7:CD:F6:97:B9:01 Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1 Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1 Certificate serial: 019AF208BE45EB62DC8EFF4F7F54BAB20CBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft Manifest number: 08A5 Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: GdpmDFcDQBOFPFsWoghCN++gPfq2P27LwdKrToyq3YU=) 2: nA6xks4oQE9N25Xp7uQGkNyo-7Y.roa (hash: F+E2ylwyKz3DO5lKloF7/MKQO4W4GhOJOnJmcBpu/7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:be:45:eb:62:dc:8e:ff:4f:7f:54:ba:b2:0c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1 Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=2c0ee35390bc23519952a3e3571dc7cdf697b901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:57:10:5b:be:e5:a8:91:d4:aa:12:2a:66: 9f:b5:3d:34:3d:f6:1d:4b:7d:4d:a3:ba:f7:85:de: d6:2f:03:d5:7a:95:6a:22:8d:a2:a1:39:6d:08:df: 36:36:f7:ba:13:6d:73:e2:ee:e2:59:dd:b6:67:b0: 31:93:e1:c7:08:76:94:43:21:64:a2:ac:7c:04:29: 1c:82:17:20:d8:69:c4:bc:52:04:c4:e2:75:06:ef: 5c:23:e9:9f:2b:d2:0c:50:77:99:2d:ff:af:73:2e: 30:83:a6:1b:c7:08:df:ac:c3:14:8c:89:0c:d5:e0: bd:30:7b:7e:e4:5a:83:55:8b:1d:45:1b:59:da:85: b1:e9:90:71:45:06:87:37:37:0e:be:85:b6:7b:c7: ee:38:4b:f6:96:2d:5d:3e:02:a8:ac:38:16:14:53: b2:43:53:77:87:7f:2e:60:80:73:17:e3:69:7f:7f: 2a:33:47:44:31:4d:d0:59:03:ad:4d:f2:ac:45:25: 4f:d5:08:7c:63:45:de:e6:b7:2f:48:c1:2f:0e:8c: 01:13:22:5e:0c:3e:c2:d0:4b:ca:52:a7:c0:bf:97: ab:e0:26:c2:07:ed:a5:e0:40:1a:f3:cc:d0:49:2b: e0:da:ec:25:71:c5:da:98:2a:a2:82:7d:27:a9:74: f4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0E:E3:53:90:BC:23:51:99:52:A3:E3:57:1D:C7:CD:F6:97:B9:01 X509v3 Authority Key Identifier: keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:a4:f0:42:a8:60:3a:fe:d7:b1:05:11:d1:bc:78:e4:15:96: 57:6d:4c:82:1c:8c:5c:ce:d2:80:c1:6d:13:b8:ab:ca:6a:5c: a6:8d:22:51:65:94:23:cc:5e:d4:0e:8a:a9:d9:4d:59:e1:56: 95:77:ae:e4:04:f1:d9:af:c3:e0:b0:60:69:8f:d8:aa:b4:b2: 04:67:12:46:17:8b:f4:d1:83:30:4d:ca:ff:08:8a:ca:45:cd: d3:8d:9d:83:95:4d:87:19:99:ff:3f:80:e7:c0:45:3b:ae:34: fb:ae:4b:a5:42:d1:15:dc:15:ba:9e:e7:6b:d5:9e:fa:4e:78: 55:81:63:ff:bf:83:58:29:6b:77:7d:c8:da:74:85:c4:16:ee: 4b:d1:9f:c0:c7:38:88:41:3a:38:7a:d0:2a:45:85:7a:28:8f: 3c:cc:1a:84:e8:80:25:6b:bd:00:57:65:01:bf:f4:64:2e:56: 3b:38:8c:51:47:e0:5f:1b:99:a6:fd:00:55:bf:94:33:dc:6f: 78:38:4d:fd:b0:0d:a3:42:e1:8d:66:54:bb:7d:de:df:c7:be: 52:06:da:a5:d3:36:e9:78:4c:12:6c:e8:da:50:96:96:f4:ea: 33:ac:10:4b:3e:50:96:01:38:c4:6e:7c:3d:6c:74:5f:90:f6: 45:41:4a:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCL5F62Lcjv9Pf1S6sgy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYjJiMDRmZjliNzJlYmZiZWI5MTgzODUyMzNlMDI4Yzhm M2ZkZjEwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD EygyYzBlZTM1MzkwYmMyMzUxOTk1MmEzZTM1NzFkYzdjZGY2OTdiOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwpXEFu+5aiR1KoSKmaftT00PfYd S31No7r3hd7WLwPVepVqIo2ioTltCN82Nve6E21z4u7iWd22Z7Axk+HHCHaUQyFk oqx8BCkcghcg2GnEvFIExOJ1Bu9cI+mfK9IMUHeZLf+vcy4wg6YbxwjfrMMUjIkM 1eC9MHt+5FqDVYsdRRtZ2oWx6ZBxRQaHNzcOvoW2e8fuOEv2li1dPgKorDgWFFOy Q1N3h38uYIBzF+Npf38qM0dEMU3QWQOtTfKsRSVP1Qh8Y0Xe5rcvSMEvDowBEyJe DD7C0EvKUqfAv5er4CbCB+2l4EAa88zQSSvg2uwlccXamCqign0nqXT0uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwO41OQvCNRmVKj41cdx832l7kBMB8GA1UdIwQY MBaAFHGysE/5ty6/vrkYOFIz4CjI8/3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQt OTU5NTU5Yjk2Zjg3LzEvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQtOTU5NTU5Yjk2Zjg3 LzEvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqTwQqhg Ov7XsQUR0bx45BWWV21MghyMXM7SgMFtE7irympcpo0iUWWUI8xe1A6KqdlNWeFW lXeu5ATx2a/D4LBgaY/YqrSyBGcSRheL9NGDME3K/wiKykXN042dg5VNhxmZ/z+A 58BFO640+65LpULRFdwVup7na9We+k54VYFj/7+DWClrd33I2nSFxBbuS9GfwMc4 iEE6OHrQKkWFeiiPPMwahOiAJWu9AFdlAb/0ZC5WOziMUUfgXxuZpv0AVb+UM9xv eDhN/bANo0LhjWZUu33e38e+UgbapdM26XhMEmzo2lCWlvTqM6wQSz5QlgE4xG58 PWx0X5D2RUFKRw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:59 2025 by rpki-client