This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft File: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json) Hash identifier: QgoDrqX+SG12bc7BsCyQIRGC+tj9PXsaaOdcR4Q0E+I= Subject key identifier: 9F:8A:01:90:82:4B:12:DD:19:4A:AB:E2:4B:85:58:BA:17:AD:2C:14 Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73 Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373 Certificate serial: 019B2219E8C4BD91A39922A2DAB2941D6015 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 13:01:21 +0000 Manifest this update: Mon 15 Dec 2025 13:01:21 +0000 Manifest next update: Tue 16 Dec 2025 13:01:21 +0000 Files and hashes: 1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: y/ZV0/T/1EJACCorkBfUjLu49ps/VPPEpGe2uaXymvc=) 2: Jf9y1r-7U3oVE_0fSwlBWZfWEa0.roa (hash: GPOv3V78s13UPdmn9zsSWoQbLb5tsSshuu6xid5/0Es=) 3: Ovnkzgu3GObRw7FEQRBgXQjx5M4.roa (hash: nJnymsSFWBg9H1fUFjESgx2imNhbNeKcWoh7uta0L5c=) 4: UmI6d2m9R3iczzZVeRe1gk47NKM.roa (hash: RX415hlrT0LruVY1Id4UgU7KARGGjtNq2cWbFexDoVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:e8:c4:bd:91:a3:99:22:a2:da:b2:94:1d:60:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373 Validity Not Before: Dec 15 13:01:21 2025 GMT Not After : Dec 16 13:01:21 2025 GMT Subject: CN=9f8a0190824b12dd194aabe24b8558ba17ad2c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:48:25:70:be:de:74:fa:28:2b:62:2c:c4: f3:50:8e:c2:5a:c2:7c:d4:8a:9d:d2:d2:26:63:30: 9c:fa:b0:37:50:6e:a1:69:14:78:88:eb:da:33:31: 93:26:45:0e:f9:dd:84:19:21:7a:81:56:a7:48:ca: 57:68:a8:71:7c:68:06:e6:4d:75:2c:b9:65:7e:d3: 9c:ac:79:ca:46:bf:72:10:b8:90:0c:f2:b2:72:c6: ab:20:5b:1b:f6:24:ea:f6:1f:22:cb:46:0d:71:5b: 11:ad:d0:4d:55:fd:cb:63:ec:fa:d8:9f:31:61:7a: 3d:80:0a:df:c5:fc:67:50:f8:53:c8:8c:fa:70:e5: d2:3f:db:9d:d0:7b:18:67:76:fd:aa:d9:53:8f:3b: 4c:6b:fb:b3:8f:73:f0:20:44:44:a5:21:95:23:bb: c0:10:6a:74:49:42:00:63:a9:02:20:04:86:df:9f: 96:2d:b3:02:25:1f:a4:27:10:f1:8f:f8:c7:40:4b: b6:d1:a2:49:24:c1:01:9a:28:59:45:d8:04:2c:46: 86:14:02:15:f9:8d:28:59:fc:1e:60:ce:13:15:ef: 8b:d7:76:33:b4:b5:9f:67:d7:54:99:eb:d6:91:ad: 8c:e7:9c:b5:0b:80:82:e2:96:0a:99:09:76:e7:eb: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8A:01:90:82:4B:12:DD:19:4A:AB:E2:4B:85:58:BA:17:AD:2C:14 X509v3 Authority Key Identifier: keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:da:eb:1e:1f:03:89:57:0a:34:42:41:d9:31:89:f1:d2:b8: 5e:6d:bb:f1:fb:e5:f3:8d:05:bf:7d:49:c5:a0:9c:11:1b:aa: da:54:2d:bc:38:26:90:7f:10:cd:0d:0c:18:54:56:e9:aa:01: 27:44:3f:33:58:43:1d:84:dd:16:35:39:7b:a2:39:63:0e:42: fb:56:a7:8b:38:3a:46:73:05:8c:47:34:81:f3:11:d6:0c:d0: db:dd:81:c5:d2:72:db:67:5f:91:40:0b:64:cd:99:d2:05:46: 8d:76:a8:8a:c8:ce:80:43:13:8f:6d:14:fe:16:5e:2f:36:f5: 5b:d8:d3:af:20:e8:ae:89:66:4f:92:83:ed:2e:9b:8d:26:ef: 47:29:b0:4c:3b:8c:56:16:b9:41:36:55:b9:f5:64:23:51:66: 0e:41:ae:c6:69:f5:e1:72:6e:1c:1d:5b:af:69:9d:9c:c1:65: f3:50:17:22:a3:14:86:cd:83:c8:1b:bd:6d:57:27:55:e7:dc: 4a:d6:94:dc:99:25:4b:be:a8:c8:8a:29:d8:7c:0a:c1:63:7f: 62:fc:62:6f:6d:4c:fd:a4:9e:01:85:b1:d2:28:09:68:30:4b: f5:69:e0:e3:dd:3a:73:c7:c2:d2:a4:48:41:45:e5:90:40:43: d2:6a:1f:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGejEvZGjmSKi2rKUHWAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YjRiZjM3ZjM5ZWVjNjI5ODJjNGI2MzcwOWZhYjVkMTQ2 YzczNzMwHhcNMjUxMjE1MTMwMTIxWhcNMjUxMjE2MTMwMTIxWjAzMTEwLwYDVQQD Eyg5ZjhhMDE5MDgyNGIxMmRkMTk0YWFiZTI0Yjg1NThiYTE3YWQyYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI9IJXC+3nT6KCtiLMTzUI7CWsJ8 1Iqd0tImYzCc+rA3UG6haRR4iOvaMzGTJkUO+d2EGSF6gVanSMpXaKhxfGgG5k11 LLllftOcrHnKRr9yELiQDPKycsarIFsb9iTq9h8iy0YNcVsRrdBNVf3LY+z62J8x YXo9gArfxfxnUPhTyIz6cOXSP9ud0HsYZ3b9qtlTjztMa/uzj3PwIEREpSGVI7vA EGp0SUIAY6kCIASG35+WLbMCJR+kJxDxj/jHQEu20aJJJMEBmihZRdgELEaGFAIV +Y0oWfweYM4TFe+L13YztLWfZ9dUmevWka2M55y1C4CC4pYKmQl25+vKZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+KAZCCSxLdGUqr4kuFWLoXrSwUMB8GA1UdIwQY MBaAFAm0vzfznuximCxLY3Cfq10UbHNzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMt MjRlNmMwZDRmYWQ3LzEvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMtMjRlNmMwZDRmYWQ3 LzEvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9rrHh8D iVcKNEJB2TGJ8dK4Xm278fvl840Fv31JxaCcERuq2lQtvDgmkH8QzQ0MGFRW6aoB J0Q/M1hDHYTdFjU5e6I5Yw5C+1anizg6RnMFjEc0gfMR1gzQ292BxdJy22dfkUAL ZM2Z0gVGjXaoisjOgEMTj20U/hZeLzb1W9jTryDorolmT5KD7S6bjSbvRymwTDuM Vha5QTZVufVkI1FmDkGuxmn14XJuHB1br2mdnMFl81AXIqMUhs2DyBu9bVcnVefc StaU3JklS76oyIop2HwKwWN/Yvxib21M/aSeAYWx0igJaDBL9Wng4906c8fC0qRI QUXlkEBD0mofGA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:54:55 2025 by rpki-client