This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json) Hash identifier: QHkXR7ILNoz3271iWeNT8aHlE/JbgehJWAA2XMgBtOc= Subject key identifier: 9B:1B:F6:12:8C:CD:64:3C:E8:6B:3B:41:68:65:67:9E:60:AE:F4:85 Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79 Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979 Certificate serial: 019AF31C65BE342130EB6FF4CDFC1BF88CCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft Manifest number: 083E Signing time: Sat 06 Dec 2025 10:01:55 +0000 Manifest this update: Sat 06 Dec 2025 10:01:55 +0000 Manifest next update: Sun 07 Dec 2025 10:01:55 +0000 Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: zoXMglyTFrTqC2jRMo8ONGFLo9jBvR6X7tor0Ag7nrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:65:be:34:21:30:eb:6f:f4:cd:fc:1b:f8:8c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979 Validity Not Before: Dec 6 10:01:55 2025 GMT Not After : Dec 7 10:01:55 2025 GMT Subject: CN=9b1bf6128ccd643ce86b3b416865679e60aef485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:77:50:d3:0b:e0:85:78:65:7a:ba:06:b5:65: 1e:25:3d:e5:a0:1a:1b:2c:09:de:a0:17:5a:90:9a: ff:30:17:c4:99:29:3c:1f:97:ed:ed:19:2a:e1:24: d9:a2:6f:a7:6b:84:41:7c:ca:11:06:90:df:6a:09: 73:0e:f4:5e:22:1e:a0:f4:be:0c:41:1b:63:82:70: 61:e8:90:c7:fe:a3:24:14:a9:31:6e:cd:49:03:f1: fc:7b:c4:e2:79:78:06:ad:53:d5:26:02:33:76:9a: f7:c8:a7:a6:4c:29:22:95:ea:96:8d:cc:90:47:08: be:18:6c:25:2e:6b:f3:01:07:c2:57:38:cc:6d:36: f8:2f:72:b3:07:19:97:84:57:28:57:e6:6d:fd:89: c7:03:83:a0:4b:9b:9c:07:f7:18:32:a1:fd:6d:7a: d6:46:2b:01:e2:c0:a9:93:a1:47:1d:f2:e7:11:a3: 27:01:cf:69:89:44:d2:45:62:f1:5e:4b:70:bd:d5: 75:f5:89:fd:3e:5c:e3:49:d2:18:b9:da:37:a8:58: 91:02:51:00:9e:27:77:7f:30:74:b0:7f:f3:2b:87: 2f:21:29:c0:cd:ae:70:48:28:66:59:34:75:ce:31: af:9f:aa:f4:d4:9c:79:f4:e1:b0:53:63:19:2f:55: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1B:F6:12:8C:CD:64:3C:E8:6B:3B:41:68:65:67:9E:60:AE:F4:85 X509v3 Authority Key Identifier: keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:48:81:15:e6:ab:75:65:a3:36:53:67:ed:8a:f2:eb:1d:54: 07:76:d5:8e:1c:c9:7f:d9:3b:f9:d2:06:6b:1a:8c:1e:91:80: 52:70:1a:94:00:f5:a1:8a:6b:3d:4e:a6:0d:04:fb:f1:86:5a: 33:eb:ff:e4:44:1f:ba:25:9b:f2:7e:51:62:92:e2:bc:f1:7f: a3:e2:36:f8:25:4d:56:5a:4c:32:88:83:a2:b4:94:38:a6:09: 79:45:af:87:6d:7d:6f:05:d9:c0:14:49:1e:be:46:74:14:4d: 39:be:8b:3b:cf:4d:2a:27:47:8e:88:ae:a8:ed:33:76:10:b2: 22:da:51:e8:00:c9:f8:d8:c9:1c:b5:5a:bd:d4:86:3f:66:4a: 9c:8c:ec:b4:94:67:04:ab:ce:c0:a5:64:6f:9d:ff:74:56:17: 1a:95:45:fe:62:23:ab:c9:8a:5b:6d:59:a6:20:65:f5:c5:c7: f8:3a:15:d6:a9:ac:f8:de:21:5a:a0:e2:23:1b:a7:e0:fe:bd: 3b:13:8e:39:fa:54:a5:0a:d2:29:9c:46:db:56:66:55:9c:d0: 37:f3:ad:9f:08:8c:ab:ec:23:ff:92:5e:5e:1c:3a:8f:0c:9c: 7a:f6:97:f0:a5:f0:52:3a:af:03:9e:54:3f:7b:30:1f:47:a1: d9:a8:3b:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGW+NCEw62/0zfwb+IzKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZDA3Y2ZjMjhhYzQ3MDNkZjZhYjI2ZmNkMmUzOTUzY2Uz OTA5NzkwHhcNMjUxMjA2MTAwMTU1WhcNMjUxMjA3MTAwMTU1WjAzMTEwLwYDVQQD Eyg5YjFiZjYxMjhjY2Q2NDNjZTg2YjNiNDE2ODY1Njc5ZTYwYWVmNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXdQ0wvghXhleroGtWUeJT3loBob LAneoBdakJr/MBfEmSk8H5ft7Rkq4STZom+na4RBfMoRBpDfaglzDvReIh6g9L4M QRtjgnBh6JDH/qMkFKkxbs1JA/H8e8TieXgGrVPVJgIzdpr3yKemTCkileqWjcyQ Rwi+GGwlLmvzAQfCVzjMbTb4L3KzBxmXhFcoV+Zt/YnHA4OgS5ucB/cYMqH9bXrW RisB4sCpk6FHHfLnEaMnAc9piUTSRWLxXktwvdV19Yn9PlzjSdIYudo3qFiRAlEA nid3fzB0sH/zK4cvISnAza5wSChmWTR1zjGvn6r01Jx59OGwU2MZL1XwBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsb9hKMzWQ86Gs7QWhlZ55grvSFMB8GA1UdIwQY MBaAFADQfPworEcD32qyb80uOVPOOQl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83MzE1ZTAtNGUxYi00M2FiLTg1YjQt ODA1NDUyMDU0NTZjLzEvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy83MzE1ZTAtNGUxYi00M2FiLTg1YjQtODA1NDUyMDU0NTZj LzEvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUiBFear dWWjNlNn7Yry6x1UB3bVjhzJf9k7+dIGaxqMHpGAUnAalAD1oYprPU6mDQT78YZa M+v/5EQfuiWb8n5RYpLivPF/o+I2+CVNVlpMMoiDorSUOKYJeUWvh219bwXZwBRJ Hr5GdBRNOb6LO89NKidHjoiuqO0zdhCyItpR6ADJ+NjJHLVavdSGP2ZKnIzstJRn BKvOwKVkb53/dFYXGpVF/mIjq8mKW21ZpiBl9cXH+DoV1qms+N4hWqDiIxun4P69 OxOOOfpUpQrSKZxG21ZmVZzQN/OtnwiMq+wj/5JeXhw6jwycevaX8KXwUjqvA55U P3swH0eh2ag7YA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:59 2025 by rpki-client