This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json) Hash identifier: mhSsvoQ5pNrbRNJwskEqsFz2nuRMwyO6eag2/Z3MUu0= Subject key identifier: 0E:C3:9B:82:80:C5:BD:88:AA:0E:0A:BA:3E:B5:70:3E:26:39:19:05 Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9 Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9 Certificate serial: 019AF12E4E999273DE4B20168FE044507D0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft Manifest number: 1525 Signing time: Sat 06 Dec 2025 01:02:15 +0000 Manifest this update: Sat 06 Dec 2025 01:02:15 +0000 Manifest next update: Sun 07 Dec 2025 01:02:15 +0000 Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: Cop8dv4FavlKLI3hf3LO+XKdhi2yP90Ir5hpno4PkL4=) 2: o4Fd53Yi8gf1Z2E5SaQrj9OqD_Y.roa (hash: ju/o7BILnihNNjEqI90onU7QdzoVAl2fjP/NUv+3xWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4e:99:92:73:de:4b:20:16:8f:e0:44:50:7d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9 Validity Not Before: Dec 6 01:02:15 2025 GMT Not After : Dec 7 01:02:15 2025 GMT Subject: CN=0ec39b8280c5bd88aa0e0aba3eb5703e26391905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:e0:68:14:aa:61:1e:e7:d1:72:1f:10:71: ee:95:28:f4:4a:62:bf:50:7c:42:7d:ce:e7:d9:4b: ad:5f:88:28:52:57:33:2b:f3:38:e0:98:32:5c:dd: 46:2f:65:ae:8e:74:a1:e4:db:9b:ae:b5:bd:0f:f2: 5d:66:71:16:f9:2a:28:16:b6:36:fd:2e:f6:54:70: 73:7c:d0:d8:a9:86:ee:50:c8:ca:74:6e:f3:10:bc: 9a:eb:ce:de:db:df:32:b5:b5:fa:09:08:d3:c8:b7: 90:ff:1e:90:09:28:18:3a:b9:42:37:a8:b1:88:aa: 8a:73:f1:0c:e3:c7:a1:4c:62:3e:45:d8:e7:8c:ff: 8b:1e:2a:8f:08:a4:dd:61:13:08:22:9a:6d:3c:eb: 95:6e:1d:02:c3:3c:f1:4e:f7:05:b6:34:e2:b5:b4: ee:3f:a3:6f:a8:11:23:0b:5b:50:3c:07:b5:a5:14: df:f0:28:90:d6:87:ad:1e:6c:91:9c:bc:a1:b7:dd: ea:5a:5d:70:db:29:d4:01:07:cf:96:3e:1c:11:fa: fd:1e:5c:1e:e4:d2:bc:66:4c:2a:41:25:5b:1f:e1: 30:d5:ed:8f:4f:e8:21:27:c4:96:dc:bf:27:28:7a: d0:a7:f6:23:9f:a7:56:5f:c3:04:4f:4c:6b:2a:6c: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C3:9B:82:80:C5:BD:88:AA:0E:0A:BA:3E:B5:70:3E:26:39:19:05 X509v3 Authority Key Identifier: keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:3e:cc:b6:47:e2:19:41:43:69:44:11:31:22:99:e9:13:fe: 68:6e:2b:33:58:e2:0c:60:37:1f:01:76:4a:14:ec:8a:c5:48: be:37:49:77:e7:0f:15:b3:92:97:bc:88:3c:13:29:a6:32:e7: 6c:99:bb:fe:85:f2:9f:a6:9d:21:24:d0:31:ba:b3:44:6a:f8: a6:a8:60:b3:e7:ab:2d:0a:67:c7:49:e8:23:8d:29:7e:4a:8d: ce:29:61:3a:33:e9:93:72:03:3a:4f:9e:b6:93:7f:e8:79:67: d5:88:e4:fa:90:89:a0:98:40:59:d6:46:c4:3d:e2:d7:74:bb: be:45:f7:de:09:9e:1c:d6:2a:4c:07:8b:85:db:01:fb:4d:d9: 98:84:1e:32:43:e4:c8:a4:15:ac:1f:6a:68:72:d6:ca:12:1a: 4b:f7:92:8e:c0:90:3d:79:54:8e:01:94:fb:60:15:c0:33:6b: 0f:a7:9a:81:28:64:48:81:4f:72:70:19:a8:00:7b:cd:99:49: 94:ef:4d:a7:97:af:71:de:6a:14:f1:eb:a7:4e:c3:1c:9d:da: 5e:39:c6:0f:6b:bd:38:c9:91:bc:ec:a4:b7:67:94:ec:08:f5: 64:73:31:70:2b:3c:2d:2b:27:f7:69:9b:1d:a4:af:1f:41:cf: 2a:a9:52:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLk6ZknPeSyAWj+BEUH0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YmI2MzI3Y2RmYTE2NTI0ZGM3ZDAzMzcxMzhhZjMyNWZi NWUyZDkwHhcNMjUxMjA2MDEwMjE1WhcNMjUxMjA3MDEwMjE1WjAzMTEwLwYDVQQD EygwZWMzOWI4MjgwYzViZDg4YWEwZTBhYmEzZWI1NzAzZTI2MzkxOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk7gaBSqYR7n0XIfEHHulSj0SmK/ UHxCfc7n2UutX4goUlczK/M44JgyXN1GL2WujnSh5NubrrW9D/JdZnEW+SooFrY2 /S72VHBzfNDYqYbuUMjKdG7zELya687e298ytbX6CQjTyLeQ/x6QCSgYOrlCN6ix iKqKc/EM48ehTGI+RdjnjP+LHiqPCKTdYRMIIpptPOuVbh0CwzzxTvcFtjTitbTu P6NvqBEjC1tQPAe1pRTf8CiQ1oetHmyRnLyht93qWl1w2ynUAQfPlj4cEfr9Hlwe 5NK8ZkwqQSVbH+Ew1e2PT+ghJ8SW3L8nKHrQp/Yjn6dWX8MET0xrKmxjdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7Dm4KAxb2Iqg4Kuj61cD4mORkFMB8GA1UdIwQY MBaAFAm7YyfN+hZSTcfQM3E4rzJfteLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mZmZkZTEtOWQ4Ny00NDA4LWFjYzIt ZTczNjAzMjMzMDNjLzEvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9mZmZkZTEtOWQ4Ny00NDA4LWFjYzItZTczNjAzMjMzMDNj LzEvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASD7Mtkfi GUFDaUQRMSKZ6RP+aG4rM1jiDGA3HwF2ShTsisVIvjdJd+cPFbOSl7yIPBMppjLn bJm7/oXyn6adISTQMbqzRGr4pqhgs+erLQpnx0noI40pfkqNzilhOjPpk3IDOk+e tpN/6Hln1Yjk+pCJoJhAWdZGxD3i13S7vkX33gmeHNYqTAeLhdsB+03ZmIQeMkPk yKQVrB9qaHLWyhIaS/eSjsCQPXlUjgGU+2AVwDNrD6eagShkSIFPcnAZqAB7zZlJ lO9Np5evcd5qFPHrp07DHJ3aXjnGD2u9OMmRvOykt2eU7Aj1ZHMxcCs8LSsn92mb HaSvH0HPKqlSOw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:15 2025 by rpki-client