This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json) Hash identifier: WkB/fukE7MH1NQ2wBUI8s+GSiykjdGe7l4sjxTzU9qQ= Subject key identifier: 57:67:AC:2D:3B:B3:8C:7C:C8:78:AC:1F:5C:9C:C6:FB:B0:9B:4D:7A Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c Certificate serial: 019AF3C04D13DC08B80510E18F33C12EBA17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 13:00:57 +0000 Manifest this update: Sat 06 Dec 2025 13:00:57 +0000 Manifest next update: Sun 07 Dec 2025 13:00:57 +0000 Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: pphrsz0eOGZhy9SRgUtmtG1Ce77EFA9kEyG7/bL5SgI=) 2: NtH1vO7ll_U5_pqKHtqzA0Hc2jg.roa (hash: HhdnUZonzxIQju7AN7jqFbyBFzlOs+8aln7of8ZODwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:4d:13:dc:08:b8:05:10:e1:8f:33:c1:2e:ba:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c Validity Not Before: Dec 6 13:00:57 2025 GMT Not After : Dec 7 13:00:57 2025 GMT Subject: CN=5767ac2d3bb38c7cc878ac1f5c9cc6fbb09b4d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:09:ad:1a:d0:a5:05:2c:3c:da:c7:20:4c:73: b5:24:56:6e:81:7f:37:6c:5a:e4:98:ab:7c:b3:2a: 5b:cd:2d:32:10:21:83:5a:75:8a:53:91:b9:a4:52: 86:da:7b:0d:e8:c2:5e:41:06:a3:54:26:82:af:7f: b6:f8:e5:ba:c1:24:83:50:61:86:f9:41:b7:3e:1e: 13:75:97:68:08:98:47:13:bc:66:80:39:63:69:ef: 4a:ec:b9:88:9d:4d:85:55:12:29:dd:15:a2:7f:5a: c6:63:cd:e7:b0:06:b4:0c:62:22:29:e5:a1:5a:49: eb:91:1b:ac:a4:aa:6a:98:67:88:31:a4:90:ca:9d: 75:7f:fd:3e:86:36:20:b9:02:8d:3c:b3:8e:60:22: 9f:52:e0:4b:f7:fe:0b:0e:f0:d4:85:4d:0c:56:c3: 60:a6:f0:87:3f:4e:bc:51:68:1b:30:3a:e0:27:4f: 92:e7:98:96:50:aa:1b:da:5f:ac:db:ce:2c:f1:1f: 4c:5d:89:76:b3:aa:1e:0d:19:2c:2b:88:bb:c9:f3: 59:13:35:69:7e:d8:87:45:8f:bc:25:e0:fa:fc:c7: d8:09:69:c3:dd:69:2d:5a:a2:69:0b:48:36:b7:d4: 8a:c8:86:ae:32:d6:61:6e:63:c6:3d:d6:77:83:ab: 2b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:67:AC:2D:3B:B3:8C:7C:C8:78:AC:1F:5C:9C:C6:FB:B0:9B:4D:7A X509v3 Authority Key Identifier: keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8c:c3:2a:69:3e:96:bc:e1:71:56:16:57:82:38:86:86:53: 77:e7:82:c6:38:fe:4a:d3:05:8e:94:39:f1:58:bb:08:7c:6b: c8:00:fa:80:82:48:4d:9d:d4:ba:4c:16:6b:1e:72:af:f4:35: 54:ab:91:f7:a8:d5:5e:23:71:43:9f:bd:1f:e5:85:2f:d5:8c: cb:21:93:c5:ee:20:87:2b:f8:37:aa:db:2c:a5:f8:a1:8f:d9: 08:e5:f7:dd:61:4b:3a:13:40:d2:a1:b1:75:ed:9f:0f:a4:65: d8:b6:65:95:c1:ba:3a:1c:5b:08:ab:46:be:85:23:51:4e:90: ae:ae:3e:3a:0c:ad:09:0a:7c:8d:72:61:5a:5c:2e:df:24:38: cd:e2:61:10:9b:c7:16:a6:45:13:8e:86:ae:47:78:da:d5:2a: 5c:5c:08:9e:95:b6:b2:15:d3:01:29:65:0f:f9:0c:fe:3b:11: b5:3d:4a:85:51:f7:58:d2:a1:0d:65:8c:86:34:91:83:a9:b6: 86:63:a0:1b:0f:fb:61:a0:46:a5:0d:62:ee:1a:c0:d6:ca:3a: 61:d2:3d:e1:7f:a8:d5:01:3d:48:bf:ae:7d:52:37:1d:b3:29: cf:0f:ec:e3:15:08:de:ec:2a:92:0a:a5:0c:3b:f8:a4:e4:59: 28:98:1e:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwE0T3Ai4BRDhjzPBLroXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWNiMzMzOTEzY2Y0MTNiYmFmZDkyNzc5MzdiMzA2MWE2 MTgxN2MwHhcNMjUxMjA2MTMwMDU3WhcNMjUxMjA3MTMwMDU3WjAzMTEwLwYDVQQD Eyg1NzY3YWMyZDNiYjM4YzdjYzg3OGFjMWY1YzljYzZmYmIwOWI0ZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gmtGtClBSw82scgTHO1JFZugX83 bFrkmKt8sypbzS0yECGDWnWKU5G5pFKG2nsN6MJeQQajVCaCr3+2+OW6wSSDUGGG +UG3Ph4TdZdoCJhHE7xmgDljae9K7LmInU2FVRIp3RWif1rGY83nsAa0DGIiKeWh WknrkRuspKpqmGeIMaSQyp11f/0+hjYguQKNPLOOYCKfUuBL9/4LDvDUhU0MVsNg pvCHP068UWgbMDrgJ0+S55iWUKob2l+s284s8R9MXYl2s6oeDRksK4i7yfNZEzVp ftiHRY+8JeD6/MfYCWnD3WktWqJpC0g2t9SKyIauMtZhbmPGPdZ3g6srWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdnrC07s4x8yHisH1ycxvuwm016MB8GA1UdIwQY MBaAFAgcszORPPQTu6/ZJ3k3swYaYYF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMt MzI0NzFjNTkwOGEyLzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMtMzI0NzFjNTkwOGEy LzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4zDKmk+ lrzhcVYWV4I4hoZTd+eCxjj+StMFjpQ58Vi7CHxryAD6gIJITZ3UukwWax5yr/Q1 VKuR96jVXiNxQ5+9H+WFL9WMyyGTxe4ghyv4N6rbLKX4oY/ZCOX33WFLOhNA0qGx de2fD6Rl2LZllcG6OhxbCKtGvoUjUU6Qrq4+OgytCQp8jXJhWlwu3yQ4zeJhEJvH FqZFE46Grkd42tUqXFwInpW2shXTASllD/kM/jsRtT1KhVH3WNKhDWWMhjSRg6m2 hmOgGw/7YaBGpQ1i7hrA1so6YdI94X+o1QE9SL+ufVI3HbMpzw/s4xUI3uwqkgql DDv4pORZKJgeLA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:26 2025 by rpki-client