This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft File: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json) Hash identifier: Zd2B6uDC+tME3QRHRYfLRPrLGwqAI/eMN+6jo/vos9s= Subject key identifier: 65:34:F8:77:7B:58:4D:DB:D7:AA:93:5F:53:87:23:00:41:E3:D5:F0 Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24 Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24 Certificate serial: 019B1FF4A870545F20C403022BCCCAE4C414 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 03:01:26 +0000 Manifest this update: Mon 15 Dec 2025 03:01:26 +0000 Manifest next update: Tue 16 Dec 2025 03:01:26 +0000 Files and hashes: 1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=) 2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: fdUaBM4vJKEUbLiKDX60D9ff64urgBEqrPYb8spxcZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:a8:70:54:5f:20:c4:03:02:2b:cc:ca:e4:c4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24 Validity Not Before: Dec 15 03:01:26 2025 GMT Not After : Dec 16 03:01:26 2025 GMT Subject: CN=6534f8777b584ddbd7aa935f5387230041e3d5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:f2:e9:44:8b:5b:d4:07:df:57:77:e3:2b: 83:ca:ca:f3:10:ee:03:1d:80:84:26:b6:c1:02:d6: f8:98:97:28:73:68:7d:5c:72:f5:2e:18:92:1b:70: 30:2b:ab:65:5b:48:6d:c5:76:ab:6b:94:33:79:85: b9:68:5a:bb:75:51:a4:93:6c:f4:ff:14:09:83:c1: 2a:dc:42:9d:05:f5:2e:b9:d0:85:a7:6b:0b:db:0f: 35:93:da:3c:1f:fa:f4:bb:e0:7e:a9:08:af:ff:93: 92:c2:79:69:a7:5e:33:3c:7a:bd:37:39:28:e8:65: 75:2f:2d:47:93:73:0d:2a:eb:84:6d:28:d9:d7:cc: ea:4e:76:d6:eb:2a:c1:b9:d8:b7:40:f8:0e:41:d6: b2:b9:ea:d9:26:0d:a2:ed:5c:e0:34:70:d6:5f:11: 65:3f:3b:07:d4:67:dd:52:4e:97:b3:a6:1f:29:b5: 29:fd:b5:cc:4e:f5:c6:89:73:54:d2:b7:d7:a5:dc: 45:e1:58:e2:d2:34:70:4a:b6:2d:03:d5:d6:0d:55: 07:d2:90:1f:91:b2:6b:5e:88:e8:16:30:03:b2:31: ec:ef:a4:9d:1a:0c:b5:17:37:91:d9:14:e7:63:b8: 8d:90:1e:d7:d5:24:ec:da:0f:40:cf:4f:ae:bf:6e: 6d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:34:F8:77:7B:58:4D:DB:D7:AA:93:5F:53:87:23:00:41:E3:D5:F0 X509v3 Authority Key Identifier: keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:75:19:79:11:42:b9:21:70:0c:e9:91:42:2f:c2:cf:43:62: f6:9b:7f:5a:3e:9b:67:60:e9:8c:73:f0:76:a7:c2:a1:c0:02: 98:48:e3:29:4d:ea:7a:79:e9:89:70:09:3a:06:d4:22:48:0c: 26:38:97:2f:ca:56:bb:3e:b7:3f:03:14:68:55:da:cb:44:ea: 55:37:e7:06:3e:4e:56:77:f4:c8:6d:fb:a0:5a:f4:20:79:b3: 29:4e:04:e2:82:76:ac:e5:74:63:4b:be:02:7c:58:f9:a1:b4: 1c:65:5a:e1:9d:cf:8b:45:b1:f4:96:8c:2d:ba:29:0a:4c:c4: a2:d6:8c:48:3a:5b:6c:2d:29:82:a0:cf:2a:b5:dd:80:ac:24: a1:61:21:34:18:45:fa:4d:32:4f:80:bf:d1:01:7a:02:d3:73: 49:40:e4:4d:99:15:b7:85:a2:96:78:37:ea:cc:e2:fe:9e:e7: f4:5d:e5:b9:49:14:e1:76:99:b8:7c:ef:86:2f:db:cc:8d:21: 59:fd:5a:c3:e6:17:de:77:ca:aa:0c:fb:00:a4:cf:0c:6f:7e: b0:f7:76:a7:51:e6:2c:98:34:f7:51:8c:35:21:20:f9:50:98: 61:90:98:12:e9:76:9d:a6:de:b4:28:83:8d:6a:00:c9:c6:f9: 61:f0:6c:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9KhwVF8gxAMCK8zK5MQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMTYyNGZmYzU3MjFjMTU4ZTRjYzliYjA3MWViNGZiODdk ODhjMjQwHhcNMjUxMjE1MDMwMTI2WhcNMjUxMjE2MDMwMTI2WjAzMTEwLwYDVQQD Eyg2NTM0Zjg3NzdiNTg0ZGRiZDdhYTkzNWY1Mzg3MjMwMDQxZTNkNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLzy6USLW9QH31d34yuDysrzEO4D HYCEJrbBAtb4mJcoc2h9XHL1LhiSG3AwK6tlW0htxXara5QzeYW5aFq7dVGkk2z0 /xQJg8Eq3EKdBfUuudCFp2sL2w81k9o8H/r0u+B+qQiv/5OSwnlpp14zPHq9Nzko 6GV1Ly1Hk3MNKuuEbSjZ18zqTnbW6yrBudi3QPgOQdayuerZJg2i7VzgNHDWXxFl PzsH1GfdUk6Xs6YfKbUp/bXMTvXGiXNU0rfXpdxF4Vji0jRwSrYtA9XWDVUH0pAf kbJrXojoFjADsjHs76SdGgy1FzeR2RTnY7iNkB7X1STs2g9Az0+uv25tHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGU0+Hd7WE3b16qTX1OHIwBB49XwMB8GA1UdIwQY MBaAFHAWJP/FchwVjkzJuwcetPuH2IwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEt NjNlNzVlOTUzYTkzLzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEtNjNlNzVlOTUzYTkz LzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXUZeRFC uSFwDOmRQi/Cz0Ni9pt/Wj6bZ2DpjHPwdqfCocACmEjjKU3qennpiXAJOgbUIkgM JjiXL8pWuz63PwMUaFXay0TqVTfnBj5OVnf0yG37oFr0IHmzKU4E4oJ2rOV0Y0u+ AnxY+aG0HGVa4Z3Pi0Wx9JaMLbopCkzEotaMSDpbbC0pgqDPKrXdgKwkoWEhNBhF +k0yT4C/0QF6AtNzSUDkTZkVt4Wilng36szi/p7n9F3luUkU4XaZuHzvhi/bzI0h Wf1aw+YX3nfKqgz7AKTPDG9+sPd2p1HmLJg091GMNSEg+VCYYZCYEul2nabetCiD jWoAycb5YfBsAg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:05:13 2025 by rpki-client