This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json) Hash identifier: /0MdZeCF2T4b276gR+7zTUDeM3u7fv4Vjh1MGffDIdE= Subject key identifier: 4A:B7:60:17:CD:37:FB:9B:C8:91:AE:A0:F9:97:50:1E:05:F9:98:9A Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92 Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392 Certificate serial: 019C420F896F4B327C69105A41D69F8D121E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft Manifest number: 146E Signing time: Mon 09 Feb 2026 11:00:40 +0000 Manifest this update: Mon 09 Feb 2026 11:00:40 +0000 Manifest next update: Tue 10 Feb 2026 11:00:40 +0000 Files and hashes: 1: 209WTz4Iyf5mBbhRaw9rNSf_IWM.roa (hash: XbgVIWscTO3gpnz3WAJ8jpEdO+EMP4cUN9LESvxcf1Q=) 2: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: kS4STLYiaYVhHeqFcVHQdA5XCiod88Zwz5FnZMGu0Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:89:6f:4b:32:7c:69:10:5a:41:d6:9f:8d:12:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392 Validity Not Before: Feb 9 11:00:40 2026 GMT Not After : Feb 10 11:00:40 2026 GMT Subject: CN=4ab76017cd37fb9bc891aea0f997501e05f9989a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:f3:77:4e:a5:a6:b9:36:28:0d:c0:f2:37: bb:f4:d3:89:d2:32:c8:e0:b0:61:ff:1d:7a:b2:78: be:06:7b:c2:e6:35:96:49:29:f5:a5:d0:fe:6b:64: 54:e4:0a:e3:2d:68:87:b4:08:95:10:34:60:a4:1b: 0d:ca:e0:a1:eb:de:3f:2b:af:15:78:ff:c4:9e:9f: f7:52:1c:f5:46:fe:c6:cb:d4:77:cd:1d:ba:70:49: 77:6b:ef:8f:52:89:1d:1d:0b:57:4e:cd:c6:f7:06: 50:57:8a:70:1e:0b:52:31:80:3c:87:93:7a:47:cc: cf:45:0f:03:b5:13:0f:d8:5e:77:37:e0:ab:9b:90: 9e:e0:83:67:3f:a5:70:af:f4:10:c5:3a:22:ca:bd: ba:de:a7:44:34:8f:d7:f4:34:a3:be:aa:a5:33:d5: db:66:5a:a0:95:f5:ba:d2:38:29:f7:fd:28:1e:35: 5b:b8:d6:29:52:5b:85:29:8f:13:74:46:65:b2:7b: 9e:63:64:16:28:4d:4b:46:97:5b:83:5e:a3:bf:dd: e5:5d:30:65:1b:9c:53:5f:ce:ae:fe:75:ff:76:da: 5c:b2:53:3f:17:c4:32:b1:07:f6:2e:8c:0d:70:a7: ca:df:8a:29:1c:a6:a3:a5:01:67:ab:b9:dc:6b:e5: 8b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B7:60:17:CD:37:FB:9B:C8:91:AE:A0:F9:97:50:1E:05:F9:98:9A X509v3 Authority Key Identifier: keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ff:ac:59:e3:3a:7b:77:3d:a8:df:5e:10:04:c3:c1:37:95: ee:1f:6f:79:18:e8:f8:8c:d5:e5:90:3c:79:1e:45:54:8d:8d: f1:a3:3d:25:c0:21:a7:15:6f:89:61:67:6b:de:e7:ce:91:26: 6d:1f:03:36:2e:75:d0:69:44:62:e9:6e:07:a1:d0:09:66:be: ec:7b:63:9f:28:4f:41:94:35:0a:5a:a4:f5:9a:73:9e:fe:e9: fb:66:34:45:76:d1:6d:d7:a4:5e:00:3a:38:c8:ac:a2:47:02: e4:49:05:b9:41:09:f2:6c:f0:cb:be:46:3f:fc:d7:c0:bd:4e: 23:9e:87:e6:03:60:f6:d5:70:e7:a7:ff:eb:7b:83:33:5e:c0: 86:20:e5:25:ed:1f:f1:d2:12:6e:a6:7d:f7:46:4b:7d:47:6c: 10:e6:c2:34:59:17:d9:7b:5b:7a:b8:96:9a:c8:51:f1:60:b5: 46:89:55:c3:63:2c:66:80:9f:ad:c3:73:8d:9b:2c:b8:bf:a4: a9:10:92:63:e8:5b:ae:c4:c3:88:45:86:34:b4:c3:79:c4:06: 9c:04:1b:2e:c8:9b:1a:e9:6b:03:dd:db:9b:64:e3:cc:76:76: ad:d1:fa:2e:93:7d:0f:0e:a7:6c:a6:90:78:30:ce:78:42:24: 1e:fc:6a:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD4lvSzJ8aRBaQdafjRIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTQ5YWIzZjE4ZWMzZWQzNmZmMmE4MWQ0ODlhZjEwNjk5 Y2IzOTIwHhcNMjYwMjA5MTEwMDQwWhcNMjYwMjEwMTEwMDQwWjAzMTEwLwYDVQQD Eyg0YWI3NjAxN2NkMzdmYjliYzg5MWFlYTBmOTk3NTAxZTA1Zjk5ODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxjzd06lprk2KA3A8je79NOJ0jLI 4LBh/x16sni+BnvC5jWWSSn1pdD+a2RU5ArjLWiHtAiVEDRgpBsNyuCh694/K68V eP/Enp/3Uhz1Rv7Gy9R3zR26cEl3a++PUokdHQtXTs3G9wZQV4pwHgtSMYA8h5N6 R8zPRQ8DtRMP2F53N+Crm5Ce4INnP6Vwr/QQxToiyr263qdENI/X9DSjvqqlM9Xb ZlqglfW60jgp9/0oHjVbuNYpUluFKY8TdEZlsnueY2QWKE1LRpdbg16jv93lXTBl G5xTX86u/nX/dtpcslM/F8QysQf2LowNcKfK34opHKajpQFnq7nca+WL1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEq3YBfNN/ubyJGuoPmXUB4F+ZiaMB8GA1UdIwQY MBaAFAgUmrPxjsPtNv8qgdSJrxBpnLOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMt ZDg3MTEyY2E5OWFlLzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMtZDg3MTEyY2E5OWFl LzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/+sWeM6 e3c9qN9eEATDwTeV7h9veRjo+IzV5ZA8eR5FVI2N8aM9JcAhpxVviWFna97nzpEm bR8DNi510GlEYuluB6HQCWa+7HtjnyhPQZQ1Clqk9Zpznv7p+2Y0RXbRbdekXgA6 OMisokcC5EkFuUEJ8mzwy75GP/zXwL1OI56H5gNg9tVw56f/63uDM17AhiDlJe0f 8dISbqZ990ZLfUdsEObCNFkX2XtberiWmshR8WC1RolVw2MsZoCfrcNzjZssuL+k qRCSY+hbrsTDiEWGNLTDecQGnAQbLsibGulrA93bm2TjzHZ2rdH6LpN9Dw6nbKaQ eDDOeEIkHvxq6Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:32 2026 by rpki-client