This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json) Hash identifier: 9qJPgS45obtbRDy1BI8JgNUYUHHiExDkzlpG1fqBtZQ= Subject key identifier: EA:57:7E:DD:90:38:B0:BE:57:7A:A8:1E:11:0A:8B:5E:A6:15:6A:6E Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78 Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578 Certificate serial: 019B3C0FF30BBF2F2604F33C2AAC5087F7A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft Manifest number: 0A55 Signing time: Sat 20 Dec 2025 14:00:36 +0000 Manifest this update: Sat 20 Dec 2025 14:00:36 +0000 Manifest next update: Sun 21 Dec 2025 14:00:36 +0000 Files and hashes: 1: B-j6lkFyqvjbC_PQncwIGbX8TJo.roa (hash: UphQUvnVM6eEU6Z6D8ssHUSQvyAzogcc5pnYk33x3jA=) 2: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: fFu070BRvp3789TUV8ntU4C+m7cTuLKN33A1N8M6XuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:f3:0b:bf:2f:26:04:f3:3c:2a:ac:50:87:f7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0818344a520a3999279bb8247e179e88406e3578 Validity Not Before: Dec 20 14:00:36 2025 GMT Not After : Dec 21 14:00:36 2025 GMT Subject: CN=ea577edd9038b0be577aa81e110a8b5ea6156a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d2:74:c6:0e:0d:dd:cf:6f:c4:65:1b:cc:af: ce:3f:69:67:48:82:77:9b:3b:57:f0:d9:f9:7e:cc: 9a:1a:11:d2:e3:b8:70:bf:45:91:70:c1:4e:dd:2c: e0:cf:fa:c1:fc:a2:e9:4f:73:a1:05:e1:e9:af:55: f5:34:7e:24:cc:03:0b:30:49:66:de:b2:21:e1:07: c3:51:a9:38:60:69:ae:fe:63:5f:bf:f2:bb:28:be: 8c:e8:e1:b8:d8:bb:cd:3e:67:a0:fb:7a:f9:d0:98: 48:93:58:5e:b4:cc:66:dc:b1:b6:e0:7a:f4:9f:ff: 66:aa:be:ee:28:bc:43:2e:d5:3a:b6:c7:7c:a4:f3: e8:1b:44:91:6b:2b:6a:0b:66:ef:4f:7c:a0:c7:70: 05:b2:28:68:a4:9d:df:6a:86:c4:e5:40:f2:11:43: 7d:b4:b2:17:62:32:e3:03:ce:ce:39:f0:97:36:a0: b9:f5:19:47:2a:eb:59:32:96:2e:56:6f:68:38:91: cd:37:0c:35:cc:a7:13:e6:56:ec:99:5e:d8:dc:e2: d7:22:3c:be:86:a5:33:84:33:c7:46:db:15:e9:1f: d5:19:4a:3e:2f:d9:50:25:9c:da:3c:77:0e:65:90: 7f:61:81:44:35:31:c5:c0:ed:ff:5b:1d:28:97:21: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:57:7E:DD:90:38:B0:BE:57:7A:A8:1E:11:0A:8B:5E:A6:15:6A:6E X509v3 Authority Key Identifier: keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e9:23:d2:71:f9:97:0a:1b:8d:3e:84:8f:22:77:4a:15:32: 86:95:da:cc:06:2a:83:eb:17:f2:df:1f:1e:b4:cc:47:9f:59: 42:e9:df:51:ab:e7:08:d9:8d:05:42:8c:c3:96:d4:61:3f:3e: 36:f9:72:f3:e7:00:b2:22:e2:76:c6:50:4f:8d:24:2c:0f:7c: 51:17:e6:8c:32:0b:14:7c:1d:c7:47:a0:32:91:38:a0:c5:62: 05:5d:1b:ea:4d:ab:a3:52:17:ba:3a:7e:6a:c9:a4:0b:a1:c2: d2:0e:64:00:ea:3e:ce:1d:79:9b:cc:68:6b:5e:70:89:8d:c2: 63:2b:d2:a2:c8:96:d7:50:f6:86:66:8d:0f:73:b9:03:38:8a: 9a:0f:dd:24:bd:60:09:63:c1:40:01:05:d2:05:28:ac:e5:ed: 29:f2:ef:b8:93:85:8b:05:c3:ee:0d:5b:02:f2:61:65:8f:8d: e7:7d:68:75:b4:a8:52:c4:bd:7b:21:f1:3f:3f:76:1e:90:b5: 64:27:1e:0d:9e:da:e5:b5:aa:26:b3:3b:64:69:ea:99:ad:74: 07:7b:d8:c7:1d:ea:44:b7:99:a9:b2:73:7a:37:6f:d9:89:58: a8:eb:a7:f7:d9:10:e3:be:09:13:c6:ad:6a:12:4f:c9:67:8e: 20:9b:16:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/MLvy8mBPM8KqxQh/eoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTgzNDRhNTIwYTM5OTkyNzliYjgyNDdlMTc5ZTg4NDA2 ZTM1NzgwHhcNMjUxMjIwMTQwMDM2WhcNMjUxMjIxMTQwMDM2WjAzMTEwLwYDVQQD EyhlYTU3N2VkZDkwMzhiMGJlNTc3YWE4MWUxMTBhOGI1ZWE2MTU2YTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dJ0xg4N3c9vxGUbzK/OP2lnSIJ3 mztX8Nn5fsyaGhHS47hwv0WRcMFO3Szgz/rB/KLpT3OhBeHpr1X1NH4kzAMLMElm 3rIh4QfDUak4YGmu/mNfv/K7KL6M6OG42LvNPmeg+3r50JhIk1hetMxm3LG24Hr0 n/9mqr7uKLxDLtU6tsd8pPPoG0SRaytqC2bvT3ygx3AFsihopJ3faobE5UDyEUN9 tLIXYjLjA87OOfCXNqC59RlHKutZMpYuVm9oOJHNNww1zKcT5lbsmV7Y3OLXIjy+ hqUzhDPHRtsV6R/VGUo+L9lQJZzaPHcOZZB/YYFENTHFwO3/Wx0olyHgiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpXft2QOLC+V3qoHhEKi16mFWpuMB8GA1UdIwQY MBaAFAgYNEpSCjmZJ5u4JH4XnohAbjV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMt ODUxZWE2NWNiOThiLzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMtODUxZWE2NWNiOThi LzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnekj0nH5 lwobjT6EjyJ3ShUyhpXazAYqg+sX8t8fHrTMR59ZQunfUavnCNmNBUKMw5bUYT8+ Nvly8+cAsiLidsZQT40kLA98URfmjDILFHwdx0egMpE4oMViBV0b6k2ro1IXujp+ asmkC6HC0g5kAOo+zh15m8xoa15wiY3CYyvSosiW11D2hmaND3O5AziKmg/dJL1g CWPBQAEF0gUorOXtKfLvuJOFiwXD7g1bAvJhZY+N531odbSoUsS9eyHxPz92HpC1 ZCceDZ7a5bWqJrM7ZGnqma10B3vYxx3qRLeZqbJzejdv2YlYqOun99kQ474JE8at ahJPyWeOIJsWBw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:27:22 2025 by rpki-client