This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json) Hash identifier: u1r9vGLiGPjnIUkr+mgdnDDiVIWXoBTtvoDNk8L7SLI= Subject key identifier: B4:9F:67:DD:56:9B:58:01:7F:4B:3E:29:10:F7:B8:64:45:A2:A3:B6 Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b Certificate serial: 019B424A118FF2BA6BA6E2215DC172643BC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 19:01:48 +0000 Manifest this update: Sun 21 Dec 2025 19:01:48 +0000 Manifest next update: Mon 22 Dec 2025 19:01:48 +0000 Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: bvSe/NVy4rlgswECdPY2yzUbpNspeXhmwbF6JTgo8jY=) 2: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:11:8f:f2:ba:6b:a6:e2:21:5d:c1:72:64:3b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b Validity Not Before: Dec 21 19:01:48 2025 GMT Not After : Dec 22 19:01:48 2025 GMT Subject: CN=b49f67dd569b58017f4b3e2910f7b86445a2a3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:db:5d:31:ca:a2:9e:84:44:9e:5d:f8:d1: a1:61:89:7b:90:09:5f:20:80:b0:c7:67:35:a4:8c: 05:05:f2:88:95:4a:d6:e4:42:46:d8:31:f8:d1:e9: 6c:5a:02:c2:4d:27:81:83:2b:ea:72:ed:a1:27:61: 6d:51:73:6b:17:b5:9f:d3:e6:4c:c3:9a:f2:e3:72: 4c:50:ad:26:a6:04:c4:12:1d:d0:d0:7c:25:d2:28: 40:08:5a:ab:d9:c2:45:98:cb:94:f5:90:96:39:23: e7:04:1c:77:eb:c5:03:6a:06:62:08:94:55:bb:3a: 55:ac:3a:38:67:1e:ad:d9:80:07:25:bc:c0:95:d7: 0c:ad:db:29:ef:b5:4c:2a:9d:6f:65:34:33:4b:41: 60:37:11:a2:a5:b7:62:08:ed:68:c2:c1:df:2e:1a: f3:64:99:6f:f0:28:b8:52:1a:bf:87:57:2b:14:61: 6d:45:19:3b:e3:cb:9e:a1:ea:ca:2a:d9:83:c5:dd: eb:9d:24:6d:bd:d5:b8:97:ab:b8:51:fa:29:2f:3d: ef:30:49:57:21:3d:f9:ca:0c:c3:b2:f9:34:9c:df: d5:7f:82:7c:00:6f:ec:f9:4c:d1:5f:c4:b9:2f:87: bb:17:11:7a:94:7b:b4:63:c2:f7:5f:d7:65:9a:2d: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9F:67:DD:56:9B:58:01:7F:4B:3E:29:10:F7:B8:64:45:A2:A3:B6 X509v3 Authority Key Identifier: keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b3:02:76:0b:1a:55:5c:4a:ee:a9:5f:30:4a:49:91:fc:a6: 66:d9:c9:1d:11:16:6b:e1:2f:bd:e1:05:51:b9:26:93:ce:e6: 75:d2:33:c9:9f:b5:9b:13:46:91:ca:9a:f3:5a:30:98:f0:a6: 82:25:8b:9d:ac:ee:3c:93:91:71:83:2a:d7:ea:dc:86:91:06: 25:61:f0:78:b8:d2:4c:79:85:94:82:6c:4f:35:44:3e:94:1a: 31:73:34:49:fb:a4:ac:07:d1:c2:04:7a:ad:f1:02:8f:cc:db: 9f:3a:91:78:4d:e8:f5:db:dc:30:73:c5:eb:cd:90:c7:c5:9e: ac:db:55:42:75:22:35:a1:9a:df:fa:eb:4e:85:d6:f8:7a:6f: 34:13:b2:01:4c:6e:aa:b9:bb:96:3f:d4:24:50:c4:93:92:0b: d7:7d:e1:ef:fe:54:2a:14:13:8d:74:15:30:6c:6a:70:7f:a3: ba:3a:41:e8:4f:79:cd:ff:d4:02:b1:8a:22:57:c6:09:af:bd: be:a9:b5:53:4f:77:ec:42:5a:f9:79:6c:2b:f4:9a:01:db:f8: 88:45:07:83:70:8d:a7:bb:49:2f:89:12:8c:81:8f:d6:09:72: 77:4e:fa:56:59:dd:b8:3e:b4:66:b4:3f:f3:e5:bd:72:a6:d7: 51:86:59:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCShGP8rprpuIhXcFyZDvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTc1ZTBhMzZjNzg5ZDMxNDIwYjMzMzAzZmJjNzMyNGM3 YzU3NGIwHhcNMjUxMjIxMTkwMTQ4WhcNMjUxMjIyMTkwMTQ4WjAzMTEwLwYDVQQD EyhiNDlmNjdkZDU2OWI1ODAxN2Y0YjNlMjkxMGY3Yjg2NDQ1YTJhM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryjbXTHKop6ERJ5d+NGhYYl7kAlf IICwx2c1pIwFBfKIlUrW5EJG2DH40elsWgLCTSeBgyvqcu2hJ2FtUXNrF7Wf0+ZM w5ry43JMUK0mpgTEEh3Q0Hwl0ihACFqr2cJFmMuU9ZCWOSPnBBx368UDagZiCJRV uzpVrDo4Zx6t2YAHJbzAldcMrdsp77VMKp1vZTQzS0FgNxGipbdiCO1owsHfLhrz ZJlv8Ci4Uhq/h1crFGFtRRk748ueoerKKtmDxd3rnSRtvdW4l6u4UfopLz3vMElX IT35ygzDsvk0nN/Vf4J8AG/s+UzRX8S5L4e7FxF6lHu0Y8L3X9dlmi0BRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSfZ91Wm1gBf0s+KRD3uGRFoqO2MB8GA1UdIwQY MBaAFAgXXgo2x4nTFCCzMwP7xzJMfFdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JkZUNqYkhpZE1VSUxNekFfdkhNa3g4VjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8yOGU5Y2ItOGVmMy00ODJhLThlZDEt MmY1MDcwOGFjNTdmLzEvQ0JkZUNqYkhpZE1VSUxNekFfdkhNa3g4VjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8yOGU5Y2ItOGVmMy00ODJhLThlZDEtMmY1MDcwOGFjNTdm LzEvQ0JkZUNqYkhpZE1VSUxNekFfdkhNa3g4VjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7MCdgsa VVxK7qlfMEpJkfymZtnJHREWa+EvveEFUbkmk87mddIzyZ+1mxNGkcqa81owmPCm giWLnazuPJORcYMq1+rchpEGJWHweLjSTHmFlIJsTzVEPpQaMXM0SfukrAfRwgR6 rfECj8zbnzqReE3o9dvcMHPF682Qx8WerNtVQnUiNaGa3/rrToXW+HpvNBOyAUxu qrm7lj/UJFDEk5IL133h7/5UKhQTjXQVMGxqcH+jujpB6E95zf/UArGKIlfGCa+9 vqm1U0937EJa+XlsK/SaAdv4iEUHg3CNp7tJL4kSjIGP1glyd076VlnduD60ZrQ/ 8+W9cqbXUYZZyg== -----END CERTIFICATE-----Generated at Mon Dec 22 03:29:08 2025 by rpki-client