This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: rBq2Njba5eRPwis3gvK7z0KOQgg93uNNtBIL2pDcrfI= Subject key identifier: FF:5A:45:67:74:24:65:10:CA:BC:E1:1B:3F:CA:FF:6C:B0:B4:9F:16 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019B3AC70F95CC7BD448F4852ACEE3D3B2F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0D8A Signing time: Sat 20 Dec 2025 08:01:22 +0000 Manifest this update: Sat 20 Dec 2025 08:01:22 +0000 Manifest next update: Sun 21 Dec 2025 08:01:22 +0000 Files and hashes: 1: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 2: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 3: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (hash: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=) 4: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 5: Vw7opLTGJ7meoIjP73G2m5jJNxM.roa (hash: XiNVkm1WPALBICMNh3T3KE5041D5HP4IFNLB/PzL5cE=) 6: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 7: cHxFGRMAoDhujIVPqex6UpYerSk.roa (hash: nZJDNb9YsAXZ6YCYxmWtUk5NYEQ2e2DtDUO7vnLQQxk=) 8: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: 3VClpSElyMiqqQkZabTe/zwTjwDiZzd4RS/dVD2AZsA=) 9: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 10: qTTergxDeV9PAn74EwkjtHgbn2o.roa (hash: LFYDt+uYMND5224RZAEk1RWxDOCG+EkRnKKIkEZ5Cic=) 11: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 12: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c7:0f:95:cc:7b:d4:48:f4:85:2a:ce:e3:d3:b2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Dec 20 08:01:22 2025 GMT Not After : Dec 21 08:01:22 2025 GMT Subject: CN=ff5a456774246510cabce11b3fcaff6cb0b49f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:be:98:5b:0e:ff:d8:86:f8:de:ae:51:5c:4d: 8c:2f:f5:2b:f7:c3:5f:9b:57:da:1e:a5:73:76:45: 5a:fc:98:48:9c:5c:30:73:04:61:5b:66:02:a3:10: ed:83:09:63:7f:8d:26:5a:42:7a:60:5d:c9:81:9d: 69:45:bf:8d:8f:0b:47:5e:8f:cb:96:ce:de:e7:55: ee:21:42:c4:86:44:70:32:62:91:1c:53:08:c2:03: 53:68:f3:9e:2b:14:72:4e:9e:fa:ee:16:5a:82:c0: e9:0b:8f:7d:44:ca:07:99:cb:59:95:0f:34:2f:3b: 87:2b:bf:89:2c:da:ed:52:1d:c3:8b:26:ec:6a:a9: be:e4:0d:22:65:f3:b6:54:3a:d2:7a:b6:ff:56:32: 7f:ba:c0:f8:64:d8:d7:30:60:84:85:c7:f8:20:9b: 0c:57:18:e5:02:02:3c:38:25:48:7c:22:f2:a5:ac: 32:46:99:ab:f4:b2:64:fa:19:52:cc:19:b1:b5:51: 68:03:7f:02:11:f9:6c:c2:4c:80:7f:21:46:4b:9d: 78:3d:09:4c:dc:4f:93:7c:99:dc:b9:f9:22:2b:b5: b9:0f:7f:31:31:d6:f6:1d:fd:eb:80:68:44:83:52: cf:0d:f3:83:a9:3c:b9:99:0f:fe:eb:2f:a5:2d:76: eb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5A:45:67:74:24:65:10:CA:BC:E1:1B:3F:CA:FF:6C:B0:B4:9F:16 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7c:fe:68:34:26:a5:92:2a:6f:29:40:0a:97:b9:f5:16:01: 6c:38:27:9d:ff:09:62:c9:78:1c:e3:70:1c:a0:5d:62:4e:53: 20:47:9a:36:f3:11:91:f9:ad:ff:90:48:0b:07:fa:58:1a:34: c0:34:6e:c4:99:f0:46:24:a0:c0:2f:2a:a2:d7:5d:38:d7:e2: 7c:15:a1:e4:ac:c0:c4:ef:b5:32:44:27:8f:05:b8:d8:0e:84: 09:a8:93:f5:fb:68:dc:a7:cb:83:77:01:ca:29:b4:56:f7:39: f9:ea:06:3d:c5:a6:8d:75:6e:6b:5b:d4:bd:fe:43:e8:e9:e4: 08:87:22:e7:42:d1:e0:c9:1e:50:4b:05:ac:43:f2:fe:f7:17: 30:7b:a8:89:aa:36:d2:f4:1d:74:c1:1b:71:62:e8:13:40:e0: 33:5b:ff:7d:87:f9:58:21:b6:68:af:ed:06:9a:4b:e2:64:86: 6b:ff:c1:be:e4:5e:cb:79:50:08:0f:a0:f3:c5:80:53:44:49: c8:f5:85:d8:df:ea:74:22:54:a5:84:5c:85:7d:a7:91:46:17: 22:0a:b2:c9:89:e3:b5:4b:5c:91:60:b0:1e:bf:cf:c1:00:57: 6d:5c:5c:e8:be:bb:d6:00:5a:d4:bb:ef:0c:8b:ce:1c:ba:ce: 27:57:8d:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xw+VzHvUSPSFKs7j07L3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUxMjIwMDgwMTIyWhcNMjUxMjIxMDgwMTIyWjAzMTEwLwYDVQQD EyhmZjVhNDU2Nzc0MjQ2NTEwY2FiY2UxMWIzZmNhZmY2Y2IwYjQ5ZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi76YWw7/2Ib43q5RXE2ML/Ur98Nf m1faHqVzdkVa/JhInFwwcwRhW2YCoxDtgwljf40mWkJ6YF3JgZ1pRb+NjwtHXo/L ls7e51XuIULEhkRwMmKRHFMIwgNTaPOeKxRyTp767hZagsDpC499RMoHmctZlQ80 LzuHK7+JLNrtUh3Diybsaqm+5A0iZfO2VDrSerb/VjJ/usD4ZNjXMGCEhcf4IJsM VxjlAgI8OCVIfCLypawyRpmr9LJk+hlSzBmxtVFoA38CEflswkyAfyFGS514PQlM 3E+TfJncufkiK7W5D38xMdb2Hf3rgGhEg1LPDfODqTy5mQ/+6y+lLXbrHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9aRWd0JGUQyrzhGz/K/2ywtJ8WMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXz+aDQm pZIqbylACpe59RYBbDgnnf8JYsl4HONwHKBdYk5TIEeaNvMRkfmt/5BICwf6WBo0 wDRuxJnwRiSgwC8qotddONfifBWh5KzAxO+1MkQnjwW42A6ECaiT9fto3KfLg3cB yim0Vvc5+eoGPcWmjXVua1vUvf5D6OnkCIci50LR4MkeUEsFrEPy/vcXMHuoiao2 0vQddMEbcWLoE0DgM1v/fYf5WCG2aK/tBppL4mSGa//BvuRey3lQCA+g88WAU0RJ yPWF2N/qdCJUpYRchX2nkUYXIgqyyYnjtUtckWCwHr/PwQBXbVxc6L671gBa1Lvv DIvOHLrOJ1eNFg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:10:06 2025 by rpki-client