This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json) Hash identifier: 5CDdz7i3nQR9lNTELgETrIR4LsqVzttziNILpsBnK0U= Subject key identifier: 9A:D4:87:08:9B:77:32:03:97:78:EA:8C:85:2E:DE:6B:3B:28:78:97 Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79 Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979 Certificate serial: 019B597737DECE0BDA296533E6787E2E8C09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft Manifest number: 0873 Signing time: Fri 26 Dec 2025 07:02:23 +0000 Manifest this update: Fri 26 Dec 2025 07:02:23 +0000 Manifest next update: Sat 27 Dec 2025 07:02:23 +0000 Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: OuPWCBOjl6sqeFulVcO3eFaWKdg533qiv7g/2A8oAMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:37:de:ce:0b:da:29:65:33:e6:78:7e:2e:8c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979 Validity Not Before: Dec 26 07:02:23 2025 GMT Not After : Dec 27 07:02:23 2025 GMT Subject: CN=9ad487089b7732039778ea8c852ede6b3b287897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:c2:89:ef:79:4f:ec:96:cd:7b:5c:54:05: 18:49:ce:32:ee:ca:52:63:26:45:a2:92:fa:e8:dc: 56:7e:3b:5e:86:fa:31:b1:5d:2a:a8:16:33:6f:71: 75:d1:e4:3a:a1:ee:cf:18:3f:60:7a:8d:b3:29:7d: f6:63:18:bb:e8:36:bd:c3:f8:e2:39:e6:c4:b8:e2: d3:cb:b2:f5:75:59:2c:d7:c4:e2:82:08:2b:da:02: e0:29:66:ef:31:40:1b:c1:79:17:69:12:eb:69:e1: f0:7e:d1:68:0d:c6:dc:af:3d:76:3a:9f:c9:94:f8: fc:7b:3f:89:6a:f3:e2:e2:c5:13:62:ff:2e:59:f3: bd:62:77:52:a4:e7:55:c4:64:fd:46:6a:c2:a2:08: 64:c9:06:a6:16:79:84:31:a6:50:63:71:6f:61:82: 06:a4:43:13:83:da:3a:7d:65:30:af:76:a6:b2:69: c4:11:ec:04:5e:a2:c2:f9:7d:86:3b:e9:b9:08:e0: 11:eb:f6:32:92:2c:b5:c1:d8:a4:29:86:5a:88:57: b3:86:95:31:d2:09:b8:c6:e9:35:e9:ce:2e:ea:a5: 58:b0:02:18:f1:bc:04:e2:e9:ac:66:e5:a9:e7:66: 52:22:73:65:68:65:c7:31:25:6a:7d:dd:ed:91:94: bd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D4:87:08:9B:77:32:03:97:78:EA:8C:85:2E:DE:6B:3B:28:78:97 X509v3 Authority Key Identifier: keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:33:44:fc:95:fe:ad:88:30:02:a3:81:73:20:04:20:43:d8: 22:6a:2e:03:e6:69:30:20:06:78:78:15:95:5c:2e:ff:ef:f0: 8c:f8:32:6e:39:b8:6d:0a:a2:28:14:dd:46:5d:4b:ee:0a:92: 52:15:37:67:3f:b9:7c:0f:49:7a:3a:7e:da:d3:d7:27:46:03: bf:47:f6:20:d2:b1:a9:27:10:67:d2:9e:b2:21:82:84:00:ff: dd:bb:64:05:a1:56:18:eb:43:96:7c:33:78:81:33:4a:01:45: 14:99:0f:5c:93:21:4a:39:6b:d8:70:d0:5c:77:7c:c0:0f:49: cd:18:4e:bf:fe:ce:21:01:0b:69:91:2d:7e:e3:3e:37:d7:71: 6e:d7:89:15:ec:ad:cd:f6:08:83:6d:5c:d9:f4:22:54:18:ce: d2:4e:06:b2:ad:a4:03:19:fd:f2:e3:aa:80:cb:e4:18:df:14: 93:9b:6d:54:b5:a0:05:2c:17:6a:97:19:7d:39:56:49:08:87: 8b:13:75:8c:f9:65:43:a3:29:d5:35:64:1a:c2:2f:e7:6b:bb: c9:bb:36:74:1e:15:4e:a2:0c:30:55:d1:79:33:b7:50:65:0b: 34:e7:50:15:f2:74:91:a6:66:c1:15:81:90:13:54:69:01:1a: a2:ff:ab:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdzfezgvaKWUz5nh+LowJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZDA3Y2ZjMjhhYzQ3MDNkZjZhYjI2ZmNkMmUzOTUzY2Uz OTA5NzkwHhcNMjUxMjI2MDcwMjIzWhcNMjUxMjI3MDcwMjIzWjAzMTEwLwYDVQQD Eyg5YWQ0ODcwODliNzczMjAzOTc3OGVhOGM4NTJlZGU2YjNiMjg3ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscvCie95T+yWzXtcVAUYSc4y7spS YyZFopL66NxWfjtehvoxsV0qqBYzb3F10eQ6oe7PGD9geo2zKX32Yxi76Da9w/ji OebEuOLTy7L1dVks18Tigggr2gLgKWbvMUAbwXkXaRLraeHwftFoDcbcrz12Op/J lPj8ez+JavPi4sUTYv8uWfO9YndSpOdVxGT9RmrCoghkyQamFnmEMaZQY3FvYYIG pEMTg9o6fWUwr3amsmnEEewEXqLC+X2GO+m5COAR6/Yykiy1wdikKYZaiFezhpUx 0gm4xuk16c4u6qVYsAIY8bwE4umsZuWp52ZSInNlaGXHMSVqfd3tkZS9QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrUhwibdzIDl3jqjIUu3ms7KHiXMB8GA1UdIwQY MBaAFADQfPworEcD32qyb80uOVPOOQl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83MzE1ZTAtNGUxYi00M2FiLTg1YjQt ODA1NDUyMDU0NTZjLzEvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy83MzE1ZTAtNGUxYi00M2FiLTg1YjQtODA1NDUyMDU0NTZj LzEvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojNE/JX+ rYgwAqOBcyAEIEPYImouA+ZpMCAGeHgVlVwu/+/wjPgybjm4bQqiKBTdRl1L7gqS UhU3Zz+5fA9Jejp+2tPXJ0YDv0f2INKxqScQZ9KesiGChAD/3btkBaFWGOtDlnwz eIEzSgFFFJkPXJMhSjlr2HDQXHd8wA9JzRhOv/7OIQELaZEtfuM+N9dxbteJFeyt zfYIg21c2fQiVBjO0k4Gsq2kAxn98uOqgMvkGN8Uk5ttVLWgBSwXapcZfTlWSQiH ixN1jPllQ6Mp1TVkGsIv52u7ybs2dB4VTqIMMFXReTO3UGULNOdQFfJ0kaZmwRWB kBNUaQEaov+r8A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:34 2025 by rpki-client