This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json) Hash identifier: Jli5IY20Cejjr1e30YxWNz9Y1GQ2A9+DN3Lt/nzuuWw= Subject key identifier: AB:05:94:5D:D8:6C:BF:7B:26:D7:62:3F:F3:F2:A3:09:12:0E:EA:80 Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1 Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1 Certificate serial: 019B5A513939F674EDB1DD19F2E1611C00C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft Manifest number: 08DB Signing time: Fri 26 Dec 2025 11:00:31 +0000 Manifest this update: Fri 26 Dec 2025 11:00:31 +0000 Manifest next update: Sat 27 Dec 2025 11:00:31 +0000 Files and hashes: 1: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: nJ6k9C5P2vF77BQ9rxzOvIign4vRruvgJqfl0wQGsuc=) 2: nA6xks4oQE9N25Xp7uQGkNyo-7Y.roa (hash: F+E2ylwyKz3DO5lKloF7/MKQO4W4GhOJOnJmcBpu/7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:39:39:f6:74:ed:b1:dd:19:f2:e1:61:1c:00:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1 Validity Not Before: Dec 26 11:00:31 2025 GMT Not After : Dec 27 11:00:31 2025 GMT Subject: CN=ab05945dd86cbf7b26d7623ff3f2a309120eea80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:86:d5:25:97:35:ea:08:3b:1d:35:25:94:65: e6:31:bc:0a:8f:b5:99:00:af:40:b7:a4:41:d5:07: 8e:37:3f:84:6c:fc:8d:cf:84:3d:b3:0f:2b:c0:82: 5e:9a:d1:23:96:e4:7c:96:de:cb:f8:3d:37:f9:57: 9a:2d:31:7d:f9:90:0e:01:06:db:07:11:07:a6:5b: 65:96:7b:22:e2:a3:6e:a2:00:1e:1d:20:45:51:11: 70:bc:96:d0:83:01:06:6c:37:38:ea:39:38:5b:25: 69:b8:8b:95:13:05:5d:99:3a:e2:5a:1d:a1:0f:6d: 50:22:2a:ed:ab:db:c3:f6:61:19:e4:56:11:6a:3e: 9b:1c:3d:40:3e:7e:4c:a0:99:0f:d0:4e:89:42:b5: 0f:12:67:71:df:be:fb:5d:86:b7:3c:34:69:dd:fa: 3f:b5:c7:0b:e2:db:44:df:3c:48:d4:89:a6:93:e6: bd:f2:09:6d:40:2c:16:b3:58:76:41:5b:aa:9d:c6: 83:ac:99:9e:d0:3b:61:ef:59:26:d8:24:6b:03:cc: 0f:62:7e:5f:da:85:08:c1:62:3c:9e:7b:1e:04:aa: a2:4f:83:02:b7:2a:2b:b7:06:e3:c4:f0:da:0f:2c: e6:42:44:cf:52:02:05:fa:4a:b6:e5:a5:01:5f:b8: 84:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:05:94:5D:D8:6C:BF:7B:26:D7:62:3F:F3:F2:A3:09:12:0E:EA:80 X509v3 Authority Key Identifier: keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:33:f4:02:ea:41:84:b5:e2:2a:b4:18:b2:1a:d5:3a:2a:9b: 33:b6:0c:12:4a:38:61:59:fe:18:a0:e3:db:4a:f6:a6:90:2d: a4:e9:ec:36:e0:a4:23:32:64:b3:6f:0f:71:11:eb:e4:4e:b0: 77:51:ec:36:58:2c:a6:c4:4a:ec:c6:18:6d:cc:39:08:8f:4d: 0d:d0:1f:2e:f6:22:ec:c1:7b:25:e5:1e:b5:bd:6d:2d:d9:11: ac:0e:72:05:70:89:6c:b6:3f:a3:c6:0f:7d:05:2c:77:ed:6e: 7d:fa:a5:74:dd:c6:6a:16:90:9b:df:10:5a:d1:e5:e6:1e:b9: 86:9d:dd:88:51:94:8b:9d:90:d1:91:9d:37:d1:79:d6:63:05: f6:ae:bf:46:fc:43:c6:15:f7:5e:8d:ce:fd:54:75:a4:db:ae: 27:79:91:07:db:33:11:a4:11:12:c6:67:bd:87:f7:84:ff:d9: 20:7d:1c:aa:cd:d2:74:0d:1f:a2:69:14:4d:9c:a6:f2:9b:73: 1f:e1:59:7b:c1:83:8d:25:87:7e:11:1c:9d:fa:16:e8:0d:8c: 53:0f:59:a3:a2:f8:b5:5d:97:bb:5e:50:64:ce:66:ea:24:96: 4e:ac:a0:d8:42:8c:ed:e8:99:96:72:d4:02:53:dd:a1:1d:2f: 7f:d2:e7:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUTk59nTtsd0Z8uFhHADGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYjJiMDRmZjliNzJlYmZiZWI5MTgzODUyMzNlMDI4Yzhm M2ZkZjEwHhcNMjUxMjI2MTEwMDMxWhcNMjUxMjI3MTEwMDMxWjAzMTEwLwYDVQQD EyhhYjA1OTQ1ZGQ4NmNiZjdiMjZkNzYyM2ZmM2YyYTMwOTEyMGVlYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1obVJZc16gg7HTUllGXmMbwKj7WZ AK9At6RB1QeONz+EbPyNz4Q9sw8rwIJemtEjluR8lt7L+D03+VeaLTF9+ZAOAQbb BxEHpltllnsi4qNuogAeHSBFURFwvJbQgwEGbDc46jk4WyVpuIuVEwVdmTriWh2h D21QIirtq9vD9mEZ5FYRaj6bHD1APn5MoJkP0E6JQrUPEmdx3777XYa3PDRp3fo/ tccL4ttE3zxI1Immk+a98gltQCwWs1h2QVuqncaDrJme0Dth71km2CRrA8wPYn5f 2oUIwWI8nnseBKqiT4MCtyortwbjxPDaDyzmQkTPUgIF+kq25aUBX7iEHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsFlF3YbL97JtdiP/PyowkSDuqAMB8GA1UdIwQY MBaAFHGysE/5ty6/vrkYOFIz4CjI8/3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQt OTU5NTU5Yjk2Zjg3LzEvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQtOTU5NTU5Yjk2Zjg3 LzEvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDP0AupB hLXiKrQYshrVOiqbM7YMEko4YVn+GKDj20r2ppAtpOnsNuCkIzJks28PcRHr5E6w d1HsNlgspsRK7MYYbcw5CI9NDdAfLvYi7MF7JeUetb1tLdkRrA5yBXCJbLY/o8YP fQUsd+1uffqldN3GahaQm98QWtHl5h65hp3diFGUi52Q0ZGdN9F51mMF9q6/RvxD xhX3Xo3O/VR1pNuuJ3mRB9szEaQREsZnvYf3hP/ZIH0cqs3SdA0fomkUTZym8ptz H+FZe8GDjSWHfhEcnfoW6A2MUw9Zo6L4tV2Xu15QZM5m6iSWTqyg2EKM7eiZlnLU AlPdoR0vf9LnQw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:18 2025 by rpki-client