This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: 3+e7bsSqQHn4JJdbfhOLGoBLrWLqQFWdZ9RM3oWBlq0= Subject key identifier: 37:CD:37:96:AF:63:D7:4E:23:18:93:95:0B:C1:BE:49:F1:6D:C6:4D Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019B239A6CCCB8BE10CC5C6479830C384129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0D7E Signing time: Mon 15 Dec 2025 20:01:21 +0000 Manifest this update: Mon 15 Dec 2025 20:01:21 +0000 Manifest next update: Tue 16 Dec 2025 20:01:21 +0000 Files and hashes: 1: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 2: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 3: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (hash: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=) 4: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 5: Vw7opLTGJ7meoIjP73G2m5jJNxM.roa (hash: XiNVkm1WPALBICMNh3T3KE5041D5HP4IFNLB/PzL5cE=) 6: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 7: cHxFGRMAoDhujIVPqex6UpYerSk.roa (hash: nZJDNb9YsAXZ6YCYxmWtUk5NYEQ2e2DtDUO7vnLQQxk=) 8: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: 70XoR5p2YT0eXLUwcEf9FoGY/3U31DrTdjazRHZHQ3Q=) 9: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 10: qTTergxDeV9PAn74EwkjtHgbn2o.roa (hash: LFYDt+uYMND5224RZAEk1RWxDOCG+EkRnKKIkEZ5Cic=) 11: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 12: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:9a:6c:cc:b8:be:10:cc:5c:64:79:83:0c:38:41:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Dec 15 20:01:21 2025 GMT Not After : Dec 16 20:01:21 2025 GMT Subject: CN=37cd3796af63d74e231893950bc1be49f16dc64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:ee:0e:64:dd:34:09:c7:b7:bf:28:90:e6: a3:56:c0:38:02:4c:36:b9:dc:92:c2:d7:82:06:6c: b8:ea:06:88:55:98:d5:8a:cd:7d:e2:37:be:3e:5e: 9f:33:6e:11:54:2c:5c:07:80:e0:cc:14:aa:d5:22: fd:d7:e7:ea:73:9b:d7:76:ea:99:ed:0c:8a:f6:a1: 53:fd:76:b8:63:8e:5f:dc:b4:c0:ff:35:bf:72:ad: 9f:f9:86:32:c3:32:00:16:18:a5:23:66:f7:a4:f6: 2f:04:b6:d2:e1:f1:c0:9f:95:0f:c4:b9:2f:61:74: 09:1d:2e:7e:93:d6:f3:4b:99:dc:fe:7d:f2:5d:33: 27:ef:06:94:e2:47:64:b6:b1:bf:66:b0:40:ed:50: 29:e2:fc:f1:cc:23:3a:2f:1b:9e:bb:49:b5:26:86: c9:14:98:57:67:bc:09:41:31:ac:8f:76:f5:c8:84: 76:16:7a:ff:09:2a:16:6d:e0:d0:b6:08:5f:f6:ce: 87:7c:3b:38:68:76:cd:22:79:66:78:4d:43:90:3e: 6f:c5:20:0e:2f:03:0a:9e:8d:c0:2b:b9:46:02:99: 18:5d:10:cf:33:f9:02:29:a8:07:38:ad:8c:80:45: 02:76:b1:b2:ea:fd:84:6f:f4:03:4a:a3:66:e9:87: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CD:37:96:AF:63:D7:4E:23:18:93:95:0B:C1:BE:49:F1:6D:C6:4D X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2c:10:61:4f:56:77:00:f5:3b:03:57:28:c3:18:93:13:85: 87:40:1b:64:2c:09:7c:21:1b:6c:12:c4:b3:9e:16:a2:f0:b1: 8c:51:ea:45:6d:b9:55:5e:32:15:2c:aa:a9:6f:c8:af:50:30: 4f:ea:f5:51:26:40:f5:dd:a1:26:ef:ee:5b:ed:58:52:6d:be: 03:75:e0:14:46:0a:dc:06:a7:6c:16:14:8c:f9:35:04:42:fb: 83:49:d9:1a:1d:0c:cb:95:c2:ed:b0:49:80:38:b6:a4:38:da: 33:e5:37:0e:44:53:a5:ab:99:f9:e9:06:6d:81:13:45:c6:80: 66:9f:82:cf:10:9b:d2:5c:8f:61:99:dc:66:08:82:fd:2f:94: 3f:f1:6c:db:f6:e0:1d:b9:ac:21:c8:69:3d:29:6c:f1:91:83: 53:d9:fe:92:78:84:33:8b:a1:07:49:48:29:ac:97:de:d3:92: 91:58:02:17:b6:ab:64:91:bd:3b:25:76:71:60:f4:a8:dd:b0: 42:3f:0e:c2:6f:8c:6e:b3:e6:88:62:90:81:09:d4:d4:1b:31: 36:21:d7:85:dc:dc:3e:9b:06:12:98:ce:7c:02:cd:55:9a:5d: b3:d1:7d:d1:0a:a1:d2:70:f2:25:7a:0e:05:c9:a3:15:6f:bd: a7:fb:0a:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmmzMuL4QzFxkeYMMOEEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUxMjE1MjAwMTIxWhcNMjUxMjE2MjAwMTIxWjAzMTEwLwYDVQQD EygzN2NkMzc5NmFmNjNkNzRlMjMxODkzOTUwYmMxYmU0OWYxNmRjNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlTuDmTdNAnHt78okOajVsA4Akw2 udySwteCBmy46gaIVZjVis194je+Pl6fM24RVCxcB4DgzBSq1SL91+fqc5vXduqZ 7QyK9qFT/Xa4Y45f3LTA/zW/cq2f+YYywzIAFhilI2b3pPYvBLbS4fHAn5UPxLkv YXQJHS5+k9bzS5nc/n3yXTMn7waU4kdktrG/ZrBA7VAp4vzxzCM6Lxueu0m1JobJ FJhXZ7wJQTGsj3b1yIR2Fnr/CSoWbeDQtghf9s6HfDs4aHbNInlmeE1DkD5vxSAO LwMKno3AK7lGApkYXRDPM/kCKagHOK2MgEUCdrGy6v2Eb/QDSqNm6YdqOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfNN5avY9dOIxiTlQvBvknxbcZNMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiwQYU9W dwD1OwNXKMMYkxOFh0AbZCwJfCEbbBLEs54WovCxjFHqRW25VV4yFSyqqW/Ir1Aw T+r1USZA9d2hJu/uW+1YUm2+A3XgFEYK3AanbBYUjPk1BEL7g0nZGh0My5XC7bBJ gDi2pDjaM+U3DkRTpauZ+ekGbYETRcaAZp+CzxCb0lyPYZncZgiC/S+UP/Fs2/bg HbmsIchpPSls8ZGDU9n+kniEM4uhB0lIKayX3tOSkVgCF7arZJG9OyV2cWD0qN2w Qj8Owm+MbrPmiGKQgQnU1BsxNiHXhdzcPpsGEpjOfALNVZpds9F90Qqh0nDyJXoO BcmjFW+9p/sK7A== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:17 2025 by rpki-client