This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json) Hash identifier: POdzF9YhRFvZKGC3EGF7cBHiT3obEktIB8NnHhgvGQg= Subject key identifier: 59:94:55:22:7D:39:42:BC:4D:04:C6:F5:87:00:81:F4:E3:C7:84:2E Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92 Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392 Certificate serial: 019B2407A46421E10F9D0D83CC0AAFAE73CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft Manifest number: 13D9 Signing time: Mon 15 Dec 2025 22:00:39 +0000 Manifest this update: Mon 15 Dec 2025 22:00:39 +0000 Manifest next update: Tue 16 Dec 2025 22:00:39 +0000 Files and hashes: 1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: TW85vriHgluWGVh+SBXiDZDlNUywexJ4c2Acr4+1qSg=) 2: DgOe6d2o2BQOj9Wt3sGLRcqwsJY.roa (hash: 4FSuJ9FPuzzlW3Hsq3b3yqhIsDO/q6s/Z+iendZviDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:a4:64:21:e1:0f:9d:0d:83:cc:0a:af:ae:73:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392 Validity Not Before: Dec 15 22:00:39 2025 GMT Not After : Dec 16 22:00:39 2025 GMT Subject: CN=599455227d3942bc4d04c6f5870081f4e3c7842e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:72:29:90:21:76:12:b2:c2:9b:df:ae:01: 87:97:32:0b:71:10:64:f6:7f:6c:54:57:ec:33:cf: ac:86:2e:96:a1:bb:cf:2a:7e:5a:a9:92:f0:b0:51: 3a:0b:6c:28:6b:dd:ca:2e:14:c6:d7:03:0f:e8:c4: d4:08:9f:92:a8:b9:86:fe:dd:28:34:7e:48:32:8c: 3e:e3:81:e0:9d:4e:04:46:d5:dc:94:5e:31:09:dd: 3e:e7:00:71:e1:3f:70:97:03:1f:45:12:bb:1c:f0: a0:2d:1f:c2:7e:c9:d3:f2:6d:9d:42:60:e6:42:31: a4:81:24:a9:e6:39:b6:08:ed:59:29:90:4f:dc:e1: 36:21:69:0a:0d:24:98:df:b8:e6:90:ad:b9:46:b5: 38:54:bc:64:7c:58:80:8b:75:4c:c7:fe:0f:79:6e: 53:67:71:68:82:71:87:b1:16:6c:cb:11:f3:d1:f1: 2e:2e:8b:61:e8:6c:14:05:5b:66:55:f9:c4:24:26: 28:7b:f8:2e:92:70:00:52:b5:39:ae:3a:cd:ee:ca: 71:ab:42:4f:1c:80:b6:5e:07:1c:90:2c:e9:7e:d0: 65:82:62:35:eb:18:8c:c8:2b:5e:bb:34:79:16:1d: 7c:24:72:ed:85:b3:1d:a4:59:f4:81:9d:4d:e6:84: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:94:55:22:7D:39:42:BC:4D:04:C6:F5:87:00:81:F4:E3:C7:84:2E X509v3 Authority Key Identifier: keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:71:4b:98:e6:43:7f:23:e9:99:63:ac:ff:5b:0a:0b:57:87: 0e:3c:1b:60:d9:ef:01:ab:72:de:24:3c:a2:39:7d:b7:d4:59: c1:f1:80:6c:c9:5d:f6:c6:ec:11:6b:f4:a9:cc:ca:d9:8f:ec: c3:6b:54:7f:ab:a9:d1:38:ec:9b:0a:75:56:31:15:de:97:af: 54:03:c2:1f:5c:3d:14:2b:37:c5:22:1d:c9:ae:7e:57:5c:38: 54:d7:02:f1:6c:35:82:95:a6:71:98:8a:f0:5a:b4:ec:81:84: 50:70:3c:cd:be:92:19:14:96:5c:e0:be:af:94:fe:af:b7:f6: 56:9a:ab:59:1a:9d:2b:d2:32:82:03:be:ed:b7:c0:ef:01:9b: 36:42:28:a2:a3:20:7c:59:94:1d:08:95:e5:52:e9:42:d2:33: b3:28:7f:55:8e:bb:60:a2:ef:d6:3e:19:88:98:74:94:01:99: ab:51:70:1d:af:31:71:79:be:87:49:b4:f7:31:ba:19:a4:ad: 7e:10:8d:c2:4a:47:6b:3d:df:7b:b1:91:47:46:ab:53:8e:bb: b9:c7:81:df:0f:7c:23:0f:bc:62:b4:b9:5e:9f:fc:be:77:fc: ae:98:87:45:b4:db:af:df:26:3e:46:45:8a:57:c2:3f:95:d4: 29:47:a4:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB6RkIeEPnQ2DzAqvrnPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTQ5YWIzZjE4ZWMzZWQzNmZmMmE4MWQ0ODlhZjEwNjk5 Y2IzOTIwHhcNMjUxMjE1MjIwMDM5WhcNMjUxMjE2MjIwMDM5WjAzMTEwLwYDVQQD Eyg1OTk0NTUyMjdkMzk0MmJjNGQwNGM2ZjU4NzAwODFmNGUzYzc4NDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+pyKZAhdhKywpvfrgGHlzILcRBk 9n9sVFfsM8+shi6WobvPKn5aqZLwsFE6C2woa93KLhTG1wMP6MTUCJ+SqLmG/t0o NH5IMow+44HgnU4ERtXclF4xCd0+5wBx4T9wlwMfRRK7HPCgLR/CfsnT8m2dQmDm QjGkgSSp5jm2CO1ZKZBP3OE2IWkKDSSY37jmkK25RrU4VLxkfFiAi3VMx/4PeW5T Z3FognGHsRZsyxHz0fEuLoth6GwUBVtmVfnEJCYoe/guknAAUrU5rjrN7spxq0JP HIC2XgcckCzpftBlgmI16xiMyCteuzR5Fh18JHLthbMdpFn0gZ1N5oTGVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmUVSJ9OUK8TQTG9YcAgfTjx4QuMB8GA1UdIwQY MBaAFAgUmrPxjsPtNv8qgdSJrxBpnLOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMt ZDg3MTEyY2E5OWFlLzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMtZDg3MTEyY2E5OWFl LzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXFLmOZD fyPpmWOs/1sKC1eHDjwbYNnvAaty3iQ8ojl9t9RZwfGAbMld9sbsEWv0qczK2Y/s w2tUf6up0Tjsmwp1VjEV3pevVAPCH1w9FCs3xSIdya5+V1w4VNcC8Ww1gpWmcZiK 8Fq07IGEUHA8zb6SGRSWXOC+r5T+r7f2VpqrWRqdK9IyggO+7bfA7wGbNkIooqMg fFmUHQiV5VLpQtIzsyh/VY67YKLv1j4ZiJh0lAGZq1FwHa8xcXm+h0m09zG6GaSt fhCNwkpHaz3fe7GRR0arU467uceB3w98Iw+8YrS5Xp/8vnf8rpiHRbTbr98mPkZF ilfCP5XUKUekWA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:28:20 2025 by rpki-client