This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json) Hash identifier: VOZXJGAzraIAKHI0lO/gsWP4Xy994V9iFTwLrmEhZnI= Subject key identifier: CF:A0:E2:90:A5:1A:D1:48:B5:49:31:7C:62:31:EB:96:CC:05:B0:08 Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92 Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392 Certificate serial: 019B4AA792C18E76CC441AA3C38315DC7AEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft Manifest number: 13ED Signing time: Tue 23 Dec 2025 10:00:54 +0000 Manifest this update: Tue 23 Dec 2025 10:00:54 +0000 Manifest next update: Wed 24 Dec 2025 10:00:54 +0000 Files and hashes: 1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: m/9XNTfuXALi5zwS2LM2jrbpnvNgNnOTzfWnwViTtwU=) 2: DgOe6d2o2BQOj9Wt3sGLRcqwsJY.roa (hash: 4FSuJ9FPuzzlW3Hsq3b3yqhIsDO/q6s/Z+iendZviDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:92:c1:8e:76:cc:44:1a:a3:c3:83:15:dc:7a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392 Validity Not Before: Dec 23 10:00:54 2025 GMT Not After : Dec 24 10:00:54 2025 GMT Subject: CN=cfa0e290a51ad148b549317c6231eb96cc05b008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:de:3c:9e:ec:28:26:fe:91:b4:6a:94:ae:4b: 4f:81:b0:e5:f8:d3:41:3b:2e:ab:8d:9f:be:f2:72: 84:9b:37:52:02:3b:48:0c:5e:f8:ba:97:e1:a3:23: 7d:4c:c3:49:cb:5e:8e:dc:2f:88:8b:94:40:ca:a3: 3f:c2:ef:13:32:4c:d3:d2:5a:7d:2a:be:9d:e2:33: c7:9e:2b:d8:93:94:49:50:d1:65:92:3e:29:c6:31: 2d:5b:80:1f:9c:83:72:9b:e2:b1:69:35:d4:56:e3: 2e:d5:d3:31:ce:c8:2a:cc:5b:80:a9:82:f7:bc:94: df:79:6e:d1:66:87:ec:f4:3c:eb:60:3c:70:82:83: 10:d9:54:ff:7a:aa:e5:6f:e3:bd:d0:c9:fa:30:c1: e2:37:ce:a8:b2:86:2e:26:99:52:b7:c3:c0:e6:2e: 70:d1:79:1d:71:e0:9b:8d:14:2d:20:86:3f:6b:a0: 36:7a:75:e2:fd:3d:95:1d:9e:c2:08:b3:22:14:0e: 34:72:4f:dc:e6:19:9f:3f:4f:33:76:fa:61:86:41: 0a:b6:f3:e8:a1:c7:11:fc:32:3a:6d:b5:c9:57:7e: f4:11:1b:07:dd:d6:0e:c0:3a:9a:3f:fb:17:bd:e5: 03:6e:c2:35:38:22:ed:1b:50:3e:a2:6e:67:25:1d: 1c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A0:E2:90:A5:1A:D1:48:B5:49:31:7C:62:31:EB:96:CC:05:B0:08 X509v3 Authority Key Identifier: keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:73:e2:5b:5a:0a:dd:5f:a1:f5:e1:9a:15:aa:73:5b:c8:ff: 21:38:87:6d:87:d0:94:d5:6b:47:ef:64:e2:33:57:cc:8f:70: 01:35:f3:05:e5:32:92:f9:68:81:e3:ad:73:c8:2b:ce:c0:c4: 93:b6:a6:e2:c9:f8:0d:83:86:14:89:94:85:a3:8f:46:6a:3e: 47:58:a1:be:00:e5:cf:24:13:a1:52:0a:44:07:2e:5b:c6:4a: 99:ba:9d:6c:7b:6a:90:30:39:51:42:1b:e5:91:f7:03:3a:1b: 9c:05:bc:ff:50:95:6e:48:ab:a8:37:0e:e5:aa:4b:21:fe:ea: cc:0a:64:fa:87:af:9c:84:1e:ae:43:81:da:ad:41:9d:44:5c: a9:3e:18:85:9d:17:6e:b3:69:05:1e:25:c8:b5:20:c2:33:0b: 62:10:49:4a:1f:6b:cf:13:d2:04:d5:a1:8e:11:97:86:d1:c0: ee:7c:18:ce:70:a4:69:cf:1f:cc:91:b0:08:ba:63:3b:5e:fe: 08:2c:d3:ac:ae:c5:4e:b7:5b:50:88:49:55:7d:d5:37:64:05: f4:d3:ee:e5:ae:b9:81:c1:dd:d7:d0:a5:4f:e1:8a:28:b1:88: 70:ec:6b:d9:dc:76:ee:47:d9:63:a2:6d:73:0a:78:52:b6:b0: 13:72:1a:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp5LBjnbMRBqjw4MV3HrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTQ5YWIzZjE4ZWMzZWQzNmZmMmE4MWQ0ODlhZjEwNjk5 Y2IzOTIwHhcNMjUxMjIzMTAwMDU0WhcNMjUxMjI0MTAwMDU0WjAzMTEwLwYDVQQD EyhjZmEwZTI5MGE1MWFkMTQ4YjU0OTMxN2M2MjMxZWI5NmNjMDViMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN48nuwoJv6RtGqUrktPgbDl+NNB Oy6rjZ++8nKEmzdSAjtIDF74upfhoyN9TMNJy16O3C+Ii5RAyqM/wu8TMkzT0lp9 Kr6d4jPHnivYk5RJUNFlkj4pxjEtW4AfnINym+KxaTXUVuMu1dMxzsgqzFuAqYL3 vJTfeW7RZofs9DzrYDxwgoMQ2VT/eqrlb+O90Mn6MMHiN86osoYuJplSt8PA5i5w 0XkdceCbjRQtIIY/a6A2enXi/T2VHZ7CCLMiFA40ck/c5hmfP08zdvphhkEKtvPo occR/DI6bbXJV370ERsH3dYOwDqaP/sXveUDbsI1OCLtG1A+om5nJR0cNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+g4pClGtFItUkxfGIx65bMBbAIMB8GA1UdIwQY MBaAFAgUmrPxjsPtNv8qgdSJrxBpnLOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMt ZDg3MTEyY2E5OWFlLzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMtZDg3MTEyY2E5OWFl LzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnPiW1oK 3V+h9eGaFapzW8j/ITiHbYfQlNVrR+9k4jNXzI9wATXzBeUykvlogeOtc8grzsDE k7am4sn4DYOGFImUhaOPRmo+R1ihvgDlzyQToVIKRAcuW8ZKmbqdbHtqkDA5UUIb 5ZH3AzobnAW8/1CVbkirqDcO5apLIf7qzApk+oevnIQerkOB2q1BnURcqT4YhZ0X brNpBR4lyLUgwjMLYhBJSh9rzxPSBNWhjhGXhtHA7nwYznCkac8fzJGwCLpjO17+ CCzTrK7FTrdbUIhJVX3VN2QF9NPu5a65gcHd19ClT+GKKLGIcOxr2dx27kfZY6Jt cwp4UrawE3IapQ== -----END CERTIFICATE-----Generated at Tue Dec 23 17:15:53 2025 by rpki-client