This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json) Hash identifier: gbt1K3cB/8NAFpT5A1akyZRo6dLgt20oYxSR43EPD/w= Subject key identifier: 6D:D6:C4:32:C4:5C:5A:E4:B2:2E:82:ED:29:34:EB:13:44:08:C8:39 Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60 Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260 Certificate serial: 019B0EC96EAB99F20D00809447DEF1D7DB0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 19:00:40 +0000 Manifest this update: Thu 11 Dec 2025 19:00:40 +0000 Manifest next update: Fri 12 Dec 2025 19:00:40 +0000 Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: bNPwM+KCEbA8SrSF/hj+Ru2yH/Re4SyAhKNs+I8p47s=) 2: mWwPnP2S4g9JhxWYKKryZjEy1Ao.roa (hash: HyXUe+PYjqIKyOZOZZRdFXR1ckNBvzFOngXjiDgbrBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:6e:ab:99:f2:0d:00:80:94:47:de:f1:d7:db:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260 Validity Not Before: Dec 11 19:00:40 2025 GMT Not After : Dec 12 19:00:40 2025 GMT Subject: CN=6dd6c432c45c5ae4b22e82ed2934eb134408c839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:97:26:3c:d9:7e:84:ec:94:a9:4d:9f:7f: 38:af:91:b6:6c:eb:d0:97:5d:ef:a1:be:e5:4d:81: 29:11:88:2d:73:28:f8:c7:96:69:f7:5a:ec:4e:76: 46:1b:1e:1e:00:29:8e:42:74:4e:72:b5:0b:61:4a: 3a:68:93:7e:f9:17:7b:05:99:fa:3d:91:6c:72:27: f6:b1:1c:1e:07:dc:69:78:46:1f:01:0d:14:b2:08: e8:39:9e:ec:01:ca:d4:de:a3:d0:73:dd:d6:f9:bb: 38:cc:75:68:29:48:ba:ed:19:7c:0a:5e:1a:8c:16: e3:c3:b5:b5:6e:e6:8e:72:8d:db:86:40:01:4e:08: bd:97:f7:12:b3:40:71:ba:6b:97:ac:ae:7c:dc:ac: 60:b8:11:69:2e:43:c9:af:58:2f:7c:16:69:5e:f3: 21:00:09:4b:6b:47:ab:72:45:5f:6f:4e:5d:c4:00: ea:7d:aa:0a:8a:43:9d:e6:f4:87:76:35:5f:88:88: ce:a4:6c:0b:ff:3e:37:28:cb:f2:3d:c8:ca:23:c1: 7f:8a:60:92:bf:a7:0b:0e:67:d2:68:66:a6:c8:8e: 15:90:54:a4:94:26:dd:25:b8:77:87:8f:b7:cc:74: 8f:5d:15:0f:61:60:d7:12:5c:7b:2c:6a:d4:fd:53: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D6:C4:32:C4:5C:5A:E4:B2:2E:82:ED:29:34:EB:13:44:08:C8:39 X509v3 Authority Key Identifier: keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ad:ee:83:17:13:60:6c:62:71:1b:d6:71:1d:f4:76:81:87: 85:d8:23:d9:ae:02:1c:2e:ee:b4:ea:d1:af:d5:a0:3f:df:d5: ab:45:bd:f1:d3:69:de:8b:e1:e4:18:7f:40:50:eb:77:93:58: e6:f8:1e:0a:e8:76:c6:5f:60:36:fd:38:b0:3f:d2:6e:92:87: 06:78:37:72:d5:17:f0:98:89:b9:10:bb:de:d4:fb:eb:bf:cd: 63:58:6e:10:8b:ce:d2:2a:ae:93:b0:cc:05:97:48:85:57:a9: 19:d9:b6:0e:f8:fc:f8:cb:be:fe:e4:16:a7:60:38:bb:de:a1: 80:cc:ef:b5:5e:32:af:bb:af:a3:4d:ca:69:cf:a0:4d:ca:33: c7:cb:1a:e8:a8:a7:b2:3a:59:ee:20:d1:26:1b:08:82:3a:a9: 3b:f0:f1:33:45:3d:bc:5c:2a:e2:4e:50:4b:4c:08:8e:c4:23: 58:3e:4e:9f:7b:c7:4a:70:cb:78:de:46:c0:8c:70:51:2c:49: 6a:bb:2b:fa:3d:0b:71:99:56:85:0e:70:ba:a6:12:84:75:b1: 63:cd:89:cf:47:fe:87:23:ee:ae:5f:5d:a9:22:63:6a:d7:4b: 80:7f:d1:e1:39:f6:15:c4:b4:7e:49:1b:7d:df:17:3f:92:b7: c3:d1:90:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyW6rmfINAICUR97x19sLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTFiYzUwY2ZlZDlkMDJlNTgxOTZhMmM4MWM5ODhlMzBi YTEyNjAwHhcNMjUxMjExMTkwMDQwWhcNMjUxMjEyMTkwMDQwWjAzMTEwLwYDVQQD Eyg2ZGQ2YzQzMmM0NWM1YWU0YjIyZTgyZWQyOTM0ZWIxMzQ0MDhjODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOmXJjzZfoTslKlNn384r5G2bOvQ l13vob7lTYEpEYgtcyj4x5Zp91rsTnZGGx4eACmOQnROcrULYUo6aJN++Rd7BZn6 PZFscif2sRweB9xpeEYfAQ0UsgjoOZ7sAcrU3qPQc93W+bs4zHVoKUi67Rl8Cl4a jBbjw7W1buaOco3bhkABTgi9l/cSs0BxumuXrK583KxguBFpLkPJr1gvfBZpXvMh AAlLa0erckVfb05dxADqfaoKikOd5vSHdjVfiIjOpGwL/z43KMvyPcjKI8F/imCS v6cLDmfSaGamyI4VkFSklCbdJbh3h4+3zHSPXRUPYWDXElx7LGrU/VNirwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3WxDLEXFrksi6C7Sk06xNECMg5MB8GA1UdIwQY MBaAFAgRvFDP7Z0C5YGWosgcmI4wuhJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYt ZWU1YTY3NDNiZTU2LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYtZWU1YTY3NDNiZTU2 LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALK3ugxcT YGxicRvWcR30doGHhdgj2a4CHC7utOrRr9WgP9/Vq0W98dNp3ovh5Bh/QFDrd5NY 5vgeCuh2xl9gNv04sD/SbpKHBng3ctUX8JiJuRC73tT767/NY1huEIvO0iquk7DM BZdIhVepGdm2Dvj8+Mu+/uQWp2A4u96hgMzvtV4yr7uvo03Kac+gTcozx8sa6Kin sjpZ7iDRJhsIgjqpO/DxM0U9vFwq4k5QS0wIjsQjWD5On3vHSnDLeN5GwIxwUSxJ arsr+j0LcZlWhQ5wuqYShHWxY82Jz0f+hyPurl9dqSJjatdLgH/R4Tn2FcS0fkkb fd8XP5K3w9GQ2g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:52 2025 by rpki-client