This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json) Hash identifier: nyKIMbcjQZu8FFps8TnFXeBJTkkHgKdNJkPWQKC356I= Subject key identifier: 12:F5:C7:E8:EC:C6:03:0F:2D:7B:AA:49:C9:5F:37:3B:88:BA:BC:CE Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5 Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5 Certificate serial: 019B5A1ABF4ABB182A6E6B5A2172AFDCC5BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft Manifest number: 1729 Signing time: Fri 26 Dec 2025 10:01:00 +0000 Manifest this update: Fri 26 Dec 2025 10:01:00 +0000 Manifest next update: Sat 27 Dec 2025 10:01:00 +0000 Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: 8J5T8NZQS/5HO7aKH+dvGSQw5mRCTnmh8Koxnl6Rwtw=) 2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:bf:4a:bb:18:2a:6e:6b:5a:21:72:af:dc:c5:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5 Validity Not Before: Dec 26 10:01:00 2025 GMT Not After : Dec 27 10:01:00 2025 GMT Subject: CN=12f5c7e8ecc6030f2d7baa49c95f373b88babcce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:35:0e:29:9f:3e:4b:4c:c2:e1:90:e1:2d:b6: 76:f4:c6:5b:e7:c6:25:c8:d9:38:62:bc:be:03:a7: 18:cf:13:57:9b:b1:97:6e:2b:44:f0:b7:bd:58:43: de:fe:94:fe:bf:69:91:83:f5:97:ea:40:37:95:03: f1:0c:77:19:6e:aa:31:33:39:d1:21:09:01:e6:b5: 89:46:36:c1:2a:b5:1c:56:e7:db:13:bd:11:0d:63: af:ff:72:2a:d1:7e:0e:c8:d1:57:59:64:bb:9d:d0: 38:01:db:e6:82:06:96:e5:2b:f5:8c:fa:48:d7:fd: e7:4e:c0:1f:56:b3:40:6a:59:a6:37:29:b2:77:74: c1:ca:a1:84:59:d9:52:1c:36:22:af:41:9d:b5:f6: f3:f5:c0:3f:35:0e:8f:9c:b7:e9:91:45:5d:08:1e: 75:6a:f7:28:14:48:c3:20:02:c7:30:18:c2:11:ba: 08:70:bd:7d:1b:dd:b1:e0:f5:33:96:c3:d1:7b:62: f5:0a:de:c0:de:69:b8:a6:d0:e3:0c:5e:30:87:33: 14:8c:20:32:02:f6:31:b4:36:96:b5:26:ab:48:45: f1:22:41:aa:ff:23:6a:12:e0:a1:4a:e7:0a:a1:25: 24:db:30:3b:06:6d:52:0c:08:45:bd:23:eb:17:b0: 77:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F5:C7:E8:EC:C6:03:0F:2D:7B:AA:49:C9:5F:37:3B:88:BA:BC:CE X509v3 Authority Key Identifier: keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:02:06:bb:25:81:42:9f:8e:e8:68:05:f9:f3:f0:bf:0f:25: f1:72:e9:ec:2c:41:60:79:36:ac:9f:a6:6a:1d:8e:0e:ae:d5: 98:36:40:1d:59:46:9b:29:75:5c:3f:13:5e:70:20:19:44:6c: 73:37:2f:ec:ad:3d:4c:da:e9:e7:90:cf:91:e8:7b:56:66:33: d1:12:3a:d6:d1:7a:a7:f0:e5:79:14:85:7e:e4:b7:11:b8:ab: b2:2a:0c:36:85:73:89:5f:dc:89:3c:68:97:79:32:9e:ca:8e: 57:ab:4b:e4:0b:f4:3e:99:55:b6:ac:26:a8:ae:45:35:79:6c: 40:75:d8:70:a1:07:07:9e:35:ef:2f:97:41:79:45:8d:95:6e: 97:85:09:0d:04:78:1b:2f:aa:b5:ef:67:de:cc:01:80:b0:17: 9a:ec:29:84:30:c6:43:a8:76:71:a8:1d:ae:86:7d:bd:91:47: f6:37:a7:2d:4c:2a:14:e6:b7:ae:ed:36:9d:61:13:c9:a0:69: cc:f7:29:7a:24:0d:11:de:20:98:05:b1:c4:5c:72:4b:9a:22: 2e:1c:f7:97:fb:16:69:79:45:df:03:46:5f:d9:2d:7b:9a:6b: b4:b9:d9:cd:04:c0:cf:4d:ce:86:57:97:83:24:54:ec:04:f4: e4:b8:3b:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGr9KuxgqbmtaIXKv3MW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYjkwYzgzZDkwZjNkNGVmMjJkYjgyODUwMmU2MTUyYjZk NWJmZTUwHhcNMjUxMjI2MTAwMTAwWhcNMjUxMjI3MTAwMTAwWjAzMTEwLwYDVQQD EygxMmY1YzdlOGVjYzYwMzBmMmQ3YmFhNDljOTVmMzczYjg4YmFiY2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jUOKZ8+S0zC4ZDhLbZ29MZb58Yl yNk4Yry+A6cYzxNXm7GXbitE8Le9WEPe/pT+v2mRg/WX6kA3lQPxDHcZbqoxMznR IQkB5rWJRjbBKrUcVufbE70RDWOv/3Iq0X4OyNFXWWS7ndA4AdvmggaW5Sv1jPpI 1/3nTsAfVrNAalmmNymyd3TByqGEWdlSHDYir0Gdtfbz9cA/NQ6PnLfpkUVdCB51 avcoFEjDIALHMBjCEboIcL19G92x4PUzlsPRe2L1Ct7A3mm4ptDjDF4whzMUjCAy AvYxtDaWtSarSEXxIkGq/yNqEuChSucKoSUk2zA7Bm1SDAhFvSPrF7B3WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL1x+jsxgMPLXuqSclfNzuIurzOMB8GA1UdIwQY MBaAFHG5DIPZDz1O8i24KFAuYVK21b/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWIt N2NmYjliMDdmNDBmLzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWItN2NmYjliMDdmNDBm LzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwIGuyWB Qp+O6GgF+fPwvw8l8XLp7CxBYHk2rJ+mah2ODq7VmDZAHVlGmyl1XD8TXnAgGURs czcv7K09TNrp55DPkeh7VmYz0RI61tF6p/DleRSFfuS3EbirsioMNoVziV/ciTxo l3kynsqOV6tL5Av0PplVtqwmqK5FNXlsQHXYcKEHB5417y+XQXlFjZVul4UJDQR4 Gy+qte9n3swBgLAXmuwphDDGQ6h2cagdroZ9vZFH9jenLUwqFOa3ru02nWETyaBp zPcpeiQNEd4gmAWxxFxyS5oiLhz3l/sWaXlF3wNGX9kte5prtLnZzQTAz03OhleX gyRU7AT05Lg7iA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:34 2025 by rpki-client