This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json) Hash identifier: enyEuih+WkSBr4l1sI9YOVBOOFKmMx7akmc7zDBtcx0= Subject key identifier: 5C:C5:54:DC:3D:49:A3:76:C9:E0:BD:A9:64:BD:7C:F1:21:FD:43:7E Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92 Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392 Certificate serial: 019B40FF8CCFEC6518591048B0330EC11310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft Manifest number: 13E8 Signing time: Sun 21 Dec 2025 13:00:48 +0000 Manifest this update: Sun 21 Dec 2025 13:00:48 +0000 Manifest next update: Mon 22 Dec 2025 13:00:48 +0000 Files and hashes: 1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: CRX4jGgiNs/ahJ/tDF02CzQpNkFxJkaUy1rQX+e3BEc=) 2: DgOe6d2o2BQOj9Wt3sGLRcqwsJY.roa (hash: 4FSuJ9FPuzzlW3Hsq3b3yqhIsDO/q6s/Z+iendZviDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:8c:cf:ec:65:18:59:10:48:b0:33:0e:c1:13:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392 Validity Not Before: Dec 21 13:00:48 2025 GMT Not After : Dec 22 13:00:48 2025 GMT Subject: CN=5cc554dc3d49a376c9e0bda964bd7cf121fd437e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:77:5d:fe:59:be:18:5c:70:92:51:eb:26:b8: 3d:c2:9b:9e:13:a0:09:95:9e:02:a4:bc:df:b3:88: ae:6a:48:a8:40:85:b6:28:3a:31:e2:c3:07:79:cb: 2f:65:a4:c4:74:91:ae:86:f2:64:3a:fd:a9:8e:09: db:71:f1:98:a5:4d:cb:bb:c0:1a:a7:2f:f4:f3:69: 82:68:ca:32:c7:36:0d:6b:87:1c:20:06:54:86:d4: 22:1b:7a:42:35:8b:6a:6c:e2:b8:fa:0b:7b:43:fd: 59:b7:a3:fc:d5:60:94:1e:8e:95:d1:44:8e:81:03: 4b:6b:d2:a0:67:27:36:f6:97:05:aa:f0:70:54:ad: bb:a8:7a:df:72:75:b9:28:09:e7:11:9c:7c:b0:59: 85:fc:a8:2a:f4:e8:34:c4:06:ff:2e:84:18:13:6d: 37:3b:e0:e7:da:82:36:77:fb:35:b8:1f:8f:cc:4d: e4:74:6f:23:6e:f4:db:75:cd:68:f0:f9:7e:a5:a3: 4a:96:0b:16:45:d5:86:66:4f:c4:b2:9b:b1:66:10: 3a:d3:af:49:d0:c3:97:07:41:2f:29:59:6f:82:bd: e2:97:d1:1c:0f:bf:54:1f:27:97:40:3a:72:67:4d: 1a:ff:5d:27:d9:5a:b2:30:fc:4f:4a:b5:f4:ee:fb: 13:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C5:54:DC:3D:49:A3:76:C9:E0:BD:A9:64:BD:7C:F1:21:FD:43:7E X509v3 Authority Key Identifier: keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a4:1c:a8:f4:85:2b:09:d5:9b:5a:cc:0b:ed:85:ca:3d:10: 16:05:fe:9b:56:25:d1:78:12:1a:d4:6e:e3:67:2d:79:77:14: e9:a5:b3:db:2b:5e:23:9e:94:ff:f8:bb:59:9a:42:7d:50:54: bb:58:d8:c5:75:55:93:68:a2:3f:97:71:12:6c:1d:06:78:da: f6:24:31:57:37:15:b1:96:69:65:d0:e8:48:37:ef:c9:cb:12: aa:bd:87:ac:bb:cf:47:a4:4e:40:36:cd:6b:28:ec:6e:95:e5: 01:99:54:54:5c:d8:9a:bb:5b:6d:f1:c6:47:ee:47:0d:c2:52: ce:1c:f6:e3:7a:29:a2:64:c8:8b:d6:e0:dc:56:1e:78:13:33: b0:f3:37:83:5a:df:2f:ad:92:49:43:5a:07:85:fd:fb:a4:25: 51:74:c9:26:56:10:0a:2d:0f:1a:b6:3b:b4:ba:89:e5:1d:83: 0a:ed:4b:09:1c:29:92:5d:2e:75:05:6c:2f:9e:b9:85:97:c9: d1:30:34:db:45:1b:81:cc:11:74:1c:14:04:58:9e:32:ad:3d: a0:ca:fc:a6:2d:df:0b:ad:cd:3f:2b:5a:e9:f0:02:67:94:d6: 4c:55:5b:5b:77:73:2b:b3:f3:15:7e:e1:b5:66:8b:56:4c:6b: 81:da:18:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/4zP7GUYWRBIsDMOwRMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTQ5YWIzZjE4ZWMzZWQzNmZmMmE4MWQ0ODlhZjEwNjk5 Y2IzOTIwHhcNMjUxMjIxMTMwMDQ4WhcNMjUxMjIyMTMwMDQ4WjAzMTEwLwYDVQQD Eyg1Y2M1NTRkYzNkNDlhMzc2YzllMGJkYTk2NGJkN2NmMTIxZmQ0MzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hdd/lm+GFxwklHrJrg9wpueE6AJ lZ4CpLzfs4iuakioQIW2KDox4sMHecsvZaTEdJGuhvJkOv2pjgnbcfGYpU3Lu8Aa py/082mCaMoyxzYNa4ccIAZUhtQiG3pCNYtqbOK4+gt7Q/1Zt6P81WCUHo6V0USO gQNLa9KgZyc29pcFqvBwVK27qHrfcnW5KAnnEZx8sFmF/Kgq9Og0xAb/LoQYE203 O+Dn2oI2d/s1uB+PzE3kdG8jbvTbdc1o8Pl+paNKlgsWRdWGZk/EspuxZhA6069J 0MOXB0EvKVlvgr3il9EcD79UHyeXQDpyZ00a/10n2VqyMPxPSrX07vsTYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzFVNw9SaN2yeC9qWS9fPEh/UN+MB8GA1UdIwQY MBaAFAgUmrPxjsPtNv8qgdSJrxBpnLOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMt ZDg3MTEyY2E5OWFlLzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMtZDg3MTEyY2E5OWFl LzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6QcqPSF KwnVm1rMC+2Fyj0QFgX+m1Yl0XgSGtRu42cteXcU6aWz2yteI56U//i7WZpCfVBU u1jYxXVVk2iiP5dxEmwdBnja9iQxVzcVsZZpZdDoSDfvycsSqr2HrLvPR6ROQDbN ayjsbpXlAZlUVFzYmrtbbfHGR+5HDcJSzhz243opomTIi9bg3FYeeBMzsPM3g1rf L62SSUNaB4X9+6QlUXTJJlYQCi0PGrY7tLqJ5R2DCu1LCRwpkl0udQVsL565hZfJ 0TA020UbgcwRdBwUBFieMq09oMr8pi3fC63NPyta6fACZ5TWTFVbW3dzK7PzFX7h tWaLVkxrgdoYIA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:40 2025 by rpki-client