This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft File: CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json) Hash identifier: 3tMj03tASI//YTVznuqkVlE3RUjqcl9OVcn63Hpy23g= Subject key identifier: AF:13:8E:D5:E9:74:E8:89:6F:F6:99:65:F6:BD:6F:2E:10:CD:40:CF Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B Certificate issuer: /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b Certificate serial: 019B22F4F4192018138CBEF57718AD09F9BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 17:00:37 +0000 Manifest this update: Mon 15 Dec 2025 17:00:37 +0000 Manifest next update: Tue 16 Dec 2025 17:00:37 +0000 Files and hashes: 1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: qw5+tA3zT7EX9uT9yOXJh52zAwxWhV8WlbQdZQjSfog=) 2: zyLhO2pA8EoiaCGmhzCvFXO3PZQ.roa (hash: zOCqTwjJOxNebqI94cAaf6aPymCO5NPJ+zXjaPobnkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f4:f4:19:20:18:13:8c:be:f5:77:18:ad:09:f9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b Validity Not Before: Dec 15 17:00:37 2025 GMT Not After : Dec 16 17:00:37 2025 GMT Subject: CN=af138ed5e974e8896ff69965f6bd6f2e10cd40cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:9e:6d:ad:11:79:90:51:4c:24:9b:76:f1: dc:c1:4b:92:c9:52:47:25:81:3f:d6:87:18:bd:92: 80:62:12:90:8b:cd:8e:ab:83:3d:f1:3b:0a:28:d1: b6:d4:8f:d9:12:8c:b9:79:af:d9:0c:e9:3d:1e:77: 2a:a0:db:d6:83:24:19:04:dd:a4:0d:1a:04:fc:b3: 88:11:6a:72:53:e0:e2:b9:61:ba:9a:c6:3f:9f:55: 05:c1:47:5c:fe:cd:a6:cb:f1:57:38:cf:75:83:0b: c2:44:02:2b:21:4c:fb:db:f9:72:aa:7f:c8:31:7c: 05:1a:1b:a4:6e:f8:21:e3:24:9c:1a:35:02:77:85: 96:dd:d1:28:6b:af:52:36:22:eb:44:a4:3e:36:df: c7:ad:6c:08:0e:c8:e4:17:ff:fe:bb:42:dc:ee:84: 07:d7:e9:b8:9e:42:24:06:29:d0:31:a9:47:71:32: d6:cd:c0:61:1b:8c:e3:03:c0:4b:62:52:eb:0c:a2: ad:4c:37:d5:53:64:e8:ed:75:ad:03:64:fd:e0:b9: b9:87:1c:05:4d:05:07:54:e9:fa:10:4f:7f:7d:2d: fe:00:33:28:f0:cc:1b:1b:67:4e:98:fa:e4:23:0e: cf:13:b9:4c:a6:63:07:41:8a:21:d3:ea:fb:3d:c8: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:13:8E:D5:E9:74:E8:89:6F:F6:99:65:F6:BD:6F:2E:10:CD:40:CF X509v3 Authority Key Identifier: keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a7:46:7c:6e:1c:43:7a:9e:3c:4f:91:3e:6b:b0:d8:e4:10: 0b:b3:17:3c:01:a4:b9:2f:2d:d0:54:18:c6:eb:4b:b3:eb:d2: 38:89:89:e2:25:e3:4d:cb:e3:60:c3:1d:65:e7:fe:c0:18:55: 52:ce:14:cb:55:35:26:ef:71:2e:e3:b4:26:14:74:28:07:a2: e9:86:cb:e7:77:08:44:40:20:15:2e:ca:bb:b1:4d:48:de:d3: 01:af:31:2a:92:46:cb:87:6c:44:85:e9:c0:1d:02:c2:57:d5: f3:f7:63:0c:2a:77:e2:ec:9a:c3:90:f2:9f:af:0b:cc:ee:8f: 62:a6:72:a8:e9:49:46:a5:bb:ee:43:82:98:c9:7e:76:70:3e: e5:09:c6:07:cd:66:00:1d:ed:96:aa:a3:04:14:01:8f:46:2b: 68:6c:96:07:5d:af:b1:66:71:3e:5b:46:62:78:4d:bc:21:09: aa:a0:4b:6d:3d:4d:5a:15:e1:4c:8b:db:dc:96:44:34:f9:b2: a6:8a:e7:cc:d0:07:55:53:17:31:67:e3:36:cc:08:71:d1:41: 19:4f:30:3a:8c:6d:3b:71:50:ee:78:92:72:47:16:04:2d:61: d3:3f:32:e7:f9:c1:98:97:6a:69:2c:61:00:20:11:de:c1:45: 00:71:d2:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9PQZIBgTjL71dxitCfm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YjAxMTBhZTRiODE3OTRhNTA4ODMxZmNiNWVkY2M4ZDVm ZDJmMWIwHhcNMjUxMjE1MTcwMDM3WhcNMjUxMjE2MTcwMDM3WjAzMTEwLwYDVQQD EyhhZjEzOGVkNWU5NzRlODg5NmZmNjk5NjVmNmJkNmYyZTEwY2Q0MGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOieba0ReZBRTCSbdvHcwUuSyVJH JYE/1ocYvZKAYhKQi82Oq4M98TsKKNG21I/ZEoy5ea/ZDOk9HncqoNvWgyQZBN2k DRoE/LOIEWpyU+DiuWG6msY/n1UFwUdc/s2my/FXOM91gwvCRAIrIUz72/lyqn/I MXwFGhukbvgh4yScGjUCd4WW3dEoa69SNiLrRKQ+Nt/HrWwIDsjkF//+u0Lc7oQH 1+m4nkIkBinQMalHcTLWzcBhG4zjA8BLYlLrDKKtTDfVU2To7XWtA2T94Lm5hxwF TQUHVOn6EE9/fS3+ADMo8MwbG2dOmPrkIw7PE7lMpmMHQYoh0+r7Pch/DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8TjtXpdOiJb/aZZfa9by4QzUDPMB8GA1UdIwQY MBaAFAmwEQrkuBeUpQiDH8te3MjV/S8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAt NmQyMGY1YzE5N2Y2LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAtNmQyMGY1YzE5N2Y2 LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqdGfG4c Q3qePE+RPmuw2OQQC7MXPAGkuS8t0FQYxutLs+vSOImJ4iXjTcvjYMMdZef+wBhV Us4Uy1U1Ju9xLuO0JhR0KAei6YbL53cIREAgFS7Ku7FNSN7TAa8xKpJGy4dsRIXp wB0CwlfV8/djDCp34uyaw5Dyn68LzO6PYqZyqOlJRqW77kOCmMl+dnA+5QnGB81m AB3tlqqjBBQBj0YraGyWB12vsWZxPltGYnhNvCEJqqBLbT1NWhXhTIvb3JZENPmy pornzNAHVVMXMWfjNswIcdFBGU8wOoxtO3FQ7niSckcWBC1h0z8y5/nBmJdqaSxh ACAR3sFFAHHSgw== -----END CERTIFICATE-----Generated at Mon Dec 15 19:57:01 2025 by rpki-client