This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json) Hash identifier: RoMY8PAiURHE7ql4L/tsdUAR//MIDT1+Qo0RB9lKRXg= Subject key identifier: D0:2A:55:7F:56:FD:C9:94:9E:08:2B:1D:BC:14:73:B4:0E:D7:E0:3E Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3 Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3 Certificate serial: 019B52986C07AFFFBFDD2CFA82A482BA40C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 23:01:19 +0000 Manifest this update: Wed 24 Dec 2025 23:01:19 +0000 Manifest next update: Thu 25 Dec 2025 23:01:19 +0000 Files and hashes: 1: ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa (hash: 3c+azDmhzkHSEBi1SBo0t88glQEIBlV01Qc6ZBYXFN8=) 2: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: oimEtoKGmgiygq3WBEJYPIQnG0RdvPBudjVtTqf54KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:6c:07:af:ff:bf:dd:2c:fa:82:a4:82:ba:40:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3 Validity Not Before: Dec 24 23:01:19 2025 GMT Not After : Dec 25 23:01:19 2025 GMT Subject: CN=d02a557f56fdc9949e082b1dbc1473b40ed7e03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:3f:25:27:2e:c3:62:21:71:35:ba:0d:40: a9:3c:db:5f:0f:92:2c:4f:b1:54:83:8b:ce:7d:52: 5e:2e:2b:9f:ff:8b:82:87:59:c4:8c:5b:6e:e0:cb: 77:d1:af:f2:27:a1:2b:7d:48:a7:64:75:70:17:c0: c7:ec:df:7d:09:29:50:57:59:70:43:07:41:fd:3e: 19:b5:af:1f:b4:a9:d7:ef:d0:a9:0f:0f:45:ed:5c: e8:b2:51:c5:89:d2:8f:ca:3c:f2:25:8f:41:20:0a: 59:85:b2:d5:1a:7e:dc:92:4a:eb:de:c4:c6:83:87: 2f:ec:5d:a0:9a:bb:2c:db:8a:94:cf:e8:7f:5e:34: 47:25:a2:70:74:df:1c:1b:a5:6a:a3:7c:31:52:d0: 2e:eb:33:43:6c:35:41:10:8e:a2:1e:d4:b1:b3:ad: 67:2e:ce:64:56:83:b9:68:c0:c4:c6:8f:7d:db:ad: e8:8b:db:08:5f:61:66:f2:8d:55:82:2d:f8:6b:d3: 46:eb:b3:82:de:33:f0:4f:f0:05:3b:34:60:67:44: 67:01:bb:ba:6b:3e:88:17:f3:32:ac:9c:72:32:3b: 42:2f:23:19:be:d4:70:07:d4:de:a8:fd:aa:22:f2: 11:1b:37:57:bc:ae:05:42:a5:d9:1f:5c:2a:b4:74: d1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2A:55:7F:56:FD:C9:94:9E:08:2B:1D:BC:14:73:B4:0E:D7:E0:3E X509v3 Authority Key Identifier: keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:1e:80:e6:d8:14:55:d9:1c:ea:3e:fa:2c:3e:3b:5f:77:2c: 5a:8c:65:4c:eb:2d:c8:c4:5b:0d:28:50:01:bf:38:eb:bd:f8: d0:c6:58:cc:88:3d:35:86:32:90:53:49:3f:e0:ed:83:50:cd: 7f:59:2a:a1:66:67:d3:9d:60:5b:f0:88:8a:f7:7e:59:91:5b: f6:bc:77:35:55:73:d1:96:46:c9:ac:c6:73:14:a0:74:03:41: 0d:9e:fb:76:9d:28:ac:4f:27:60:80:50:82:fd:ac:78:ce:a4: 84:3c:f0:b6:0a:13:ba:4c:4a:31:57:b0:76:0e:0b:e2:34:c4: 38:de:12:81:09:0d:87:f2:8c:e4:9d:fd:b2:79:a5:95:ea:88: b2:97:16:cd:26:2b:18:7b:e5:b3:16:0a:2b:fc:f6:41:9b:a9: 22:7f:95:1c:52:11:63:30:5a:21:44:49:f2:2b:d4:d8:8a:0f: d6:b4:0f:86:c9:62:5a:f9:46:c6:96:3f:1d:eb:9f:02:32:51: 58:89:51:d5:57:c3:04:eb:f8:3e:27:4a:cd:43:3c:69:32:93: 63:a7:3f:e5:0c:9c:9b:43:ec:4d:93:d8:da:5f:15:a4:e9:b8: c0:03:ab:69:13:15:8c:54:b5:b1:7a:bb:3e:29:1e:30:ce:d1: 97:2a:cd:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmGwHr/+/3Sz6gqSCukDEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk ODhmZTMwHhcNMjUxMjI0MjMwMTE5WhcNMjUxMjI1MjMwMTE5WjAzMTEwLwYDVQQD EyhkMDJhNTU3ZjU2ZmRjOTk0OWUwODJiMWRiYzE0NzNiNDBlZDdlMDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOQ/JScuw2IhcTW6DUCpPNtfD5Is T7FUg4vOfVJeLiuf/4uCh1nEjFtu4Mt30a/yJ6ErfUinZHVwF8DH7N99CSlQV1lw QwdB/T4Zta8ftKnX79CpDw9F7VzoslHFidKPyjzyJY9BIApZhbLVGn7ckkrr3sTG g4cv7F2gmrss24qUz+h/XjRHJaJwdN8cG6Vqo3wxUtAu6zNDbDVBEI6iHtSxs61n Ls5kVoO5aMDExo99263oi9sIX2Fm8o1Vgi34a9NG67OC3jPwT/AFOzRgZ0RnAbu6 az6IF/MyrJxyMjtCLyMZvtRwB9TeqP2qIvIRGzdXvK4FQqXZH1wqtHTR7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAqVX9W/cmUnggrHbwUc7QO1+A+MB8GA1UdIwQY MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYx6A5tgU Vdkc6j76LD47X3csWoxlTOstyMRbDShQAb8467340MZYzIg9NYYykFNJP+Dtg1DN f1kqoWZn051gW/CIivd+WZFb9rx3NVVz0ZZGyazGcxSgdANBDZ77dp0orE8nYIBQ gv2seM6khDzwtgoTukxKMVewdg4L4jTEON4SgQkNh/KM5J39snmlleqIspcWzSYr GHvlsxYKK/z2QZupIn+VHFIRYzBaIURJ8ivU2IoP1rQPhsliWvlGxpY/HeufAjJR WIlR1VfDBOv4PidKzUM8aTKTY6c/5Qycm0PsTZPY2l8VpOm4wAOraRMVjFS1sXq7 PikeMM7RlyrNzQ== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:25 2025 by rpki-client