This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json) Hash identifier: 5kStVQdYNiyED2mlQgwi6TBTrsrWfmEWCbP9x/SClvc= Subject key identifier: E5:74:95:E6:37:CF:E7:89:EE:ED:C6:53:C9:96:ED:78:86:3C:D1:CB Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3 Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3 Certificate serial: 019B33B262DE3EE7F37C84B0D85651F70E15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 23:01:27 +0000 Manifest this update: Thu 18 Dec 2025 23:01:27 +0000 Manifest next update: Fri 19 Dec 2025 23:01:27 +0000 Files and hashes: 1: ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa (hash: 3c+azDmhzkHSEBi1SBo0t88glQEIBlV01Qc6ZBYXFN8=) 2: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: 1qRJpLnfQbX5745ewZ280keszWkauhygrxjOA6a5m0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:62:de:3e:e7:f3:7c:84:b0:d8:56:51:f7:0e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3 Validity Not Before: Dec 18 23:01:27 2025 GMT Not After : Dec 19 23:01:27 2025 GMT Subject: CN=e57495e637cfe789eeedc653c996ed78863cd1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:44:d6:bf:e9:1c:e5:2a:ac:53:4e:6d:84:ee: 19:fd:60:ba:d4:6f:11:53:22:bb:31:73:b3:1b:2d: 4e:a7:03:09:d7:cc:71:14:6d:94:15:32:14:dd:70: 95:0a:a2:f7:42:d1:a6:8b:59:34:bc:67:a8:90:11: f5:af:cd:4c:a2:fa:f2:24:7c:e5:4e:52:c2:cf:d9: 15:83:13:4e:e0:dc:cc:8c:d9:6f:fc:7a:2f:c9:31: 54:8d:d3:07:cc:db:14:bc:5d:9a:e4:63:87:c8:13: 70:94:5e:ac:c8:9d:14:31:ce:d2:83:83:7a:6d:ea: ec:86:aa:84:11:4d:d2:82:34:8f:c2:17:56:48:2a: ab:c4:cd:5d:c0:a1:43:b2:0f:a3:2c:c3:e9:f4:c1: 24:c0:65:d0:d2:63:03:2b:f0:2d:21:25:4f:4a:fe: 0f:b7:07:70:af:92:d8:3d:f0:a4:e3:7e:97:73:87: 1d:96:61:ad:15:59:1b:ea:5b:16:f4:2b:4e:3e:20: 30:d6:40:93:43:9c:9e:3e:e1:3b:9f:4b:de:05:56: 0b:66:bd:e8:67:92:a6:3c:5f:65:f2:46:ae:04:b4: 62:85:27:71:4b:cb:dd:55:42:8c:c5:70:11:e1:3b: cb:12:07:d3:df:61:76:cc:15:b8:b1:05:71:cd:44: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:74:95:E6:37:CF:E7:89:EE:ED:C6:53:C9:96:ED:78:86:3C:D1:CB X509v3 Authority Key Identifier: keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:bb:7a:a6:63:99:fd:b0:d4:36:fa:b4:b6:c6:5c:2d:a6:e1: ab:7e:a2:c2:92:0b:58:31:8d:88:ac:e8:fa:a2:4f:64:00:88: 60:55:ba:ac:85:96:c6:59:c1:31:ff:dd:7e:de:e7:55:9b:55: 1f:47:ad:a8:34:dc:18:65:87:ea:a2:42:df:c6:40:12:64:a4: ae:0b:b7:8b:e8:b3:8f:65:cd:d1:48:cb:2c:b3:be:9f:56:18: 7a:d3:fd:35:db:c6:24:aa:c2:ed:d1:cd:3b:8c:6c:ca:1a:d0: 03:df:46:4d:3b:29:90:19:6b:45:35:0c:8d:34:d8:e2:89:4c: 8e:79:f1:73:1e:ac:b7:4b:e5:bf:db:4a:8e:9d:c1:fe:fd:66: aa:30:7d:fd:44:11:df:6e:86:e2:a3:68:93:90:28:50:6d:4b: 2a:ad:a9:93:12:af:17:66:c4:29:2b:ed:b0:06:84:2f:48:a7: eb:29:89:cb:3a:63:12:ee:8f:94:aa:15:67:38:2a:6c:a1:4d: f0:98:64:8a:06:4b:42:15:96:a0:80:62:17:fe:79:38:c5:6d: 95:30:ac:e1:6d:bf:f9:8e:98:af:08:e2:23:e6:7e:4d:ff:f2: a6:4f:91:94:a3:99:df:57:b7:12:91:74:71:89:15:32:94:97: e9:74:7c:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsmLePufzfISw2FZR9w4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk ODhmZTMwHhcNMjUxMjE4MjMwMTI3WhcNMjUxMjE5MjMwMTI3WjAzMTEwLwYDVQQD EyhlNTc0OTVlNjM3Y2ZlNzg5ZWVlZGM2NTNjOTk2ZWQ3ODg2M2NkMWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApETWv+kc5SqsU05thO4Z/WC61G8R UyK7MXOzGy1OpwMJ18xxFG2UFTIU3XCVCqL3QtGmi1k0vGeokBH1r81MovryJHzl TlLCz9kVgxNO4NzMjNlv/HovyTFUjdMHzNsUvF2a5GOHyBNwlF6syJ0UMc7Sg4N6 bershqqEEU3SgjSPwhdWSCqrxM1dwKFDsg+jLMPp9MEkwGXQ0mMDK/AtISVPSv4P twdwr5LYPfCk436Xc4cdlmGtFVkb6lsW9CtOPiAw1kCTQ5yePuE7n0veBVYLZr3o Z5KmPF9l8kauBLRihSdxS8vdVUKMxXAR4TvLEgfT32F2zBW4sQVxzUTr1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOV0leY3z+eJ7u3GU8mW7XiGPNHLMB8GA1UdIwQY MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbt6pmOZ /bDUNvq0tsZcLabhq36iwpILWDGNiKzo+qJPZACIYFW6rIWWxlnBMf/dft7nVZtV H0etqDTcGGWH6qJC38ZAEmSkrgu3i+izj2XN0UjLLLO+n1YYetP9NdvGJKrC7dHN O4xsyhrQA99GTTspkBlrRTUMjTTY4olMjnnxcx6st0vlv9tKjp3B/v1mqjB9/UQR 326G4qNok5AoUG1LKq2pkxKvF2bEKSvtsAaEL0in6ymJyzpjEu6PlKoVZzgqbKFN 8JhkigZLQhWWoIBiF/55OMVtlTCs4W2/+Y6YrwjiI+Z+Tf/ypk+RlKOZ31e3EpF0 cYkVMpSX6XR83A== -----END CERTIFICATE-----Generated at Fri Dec 19 08:11:56 2025 by rpki-client