This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json) Hash identifier: j0DXsRmxA8AIKvQcsG9JrVZNE5z31KBN4dUAr4PfT8I= Subject key identifier: 31:F7:A8:E8:2F:44:62:DA:0F:A1:A5:E0:AB:AB:F9:6A:46:EA:14:3B Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76 Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276 Certificate serial: 019B40C90F397091A3151BF217C7579F410E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft Manifest number: 080F Signing time: Sun 21 Dec 2025 12:01:17 +0000 Manifest this update: Sun 21 Dec 2025 12:01:17 +0000 Manifest next update: Mon 22 Dec 2025 12:01:17 +0000 Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: COPsjdsWw2+Zx8O+1jNHvTn29O/q/3fqkgy8Ez5jP3w=) 2: m3oyez4opl0YbbQ1CR2fl2aO7F8.roa (hash: FqYvVOjK/elvRD3q2xJweF4ZvocMCS6cmWVMXbFh3Mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:0f:39:70:91:a3:15:1b:f2:17:c7:57:9f:41:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276 Validity Not Before: Dec 21 12:01:17 2025 GMT Not After : Dec 22 12:01:17 2025 GMT Subject: CN=31f7a8e82f4462da0fa1a5e0ababf96a46ea143b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:37:54:a7:28:2f:6a:9f:03:2b:9e:1d:e7: c5:8b:b4:95:43:99:9e:bd:b9:de:20:18:fa:98:72: b0:95:09:5a:76:08:bb:78:59:3c:ab:0b:32:fe:05: 55:4c:d1:18:0b:44:14:a9:17:93:9c:12:64:aa:b7: 9b:e2:51:e5:e2:60:c0:94:92:76:5e:3f:94:4c:46: c0:7d:79:d7:d0:ee:06:58:a2:41:25:a4:36:5e:c1: 2b:e4:b5:ac:c5:5f:b2:57:b3:03:8d:79:58:32:d5: 39:84:a1:6c:5b:1b:72:cc:a2:14:91:a1:f2:55:23: 7b:9c:f1:36:61:20:c7:c7:34:2d:a3:c9:12:0f:eb: a5:ef:a4:f7:30:13:aa:6d:c8:4b:40:e4:9a:35:35: 36:bc:83:50:a6:73:67:97:04:88:ac:14:c7:6d:55: 4a:ab:83:80:58:bd:51:a9:82:d1:4b:60:4e:68:4c: 00:75:bc:b7:d7:72:88:a2:96:05:5d:67:f3:96:9b: 8c:fb:ca:ca:49:b9:16:79:40:23:19:bf:3e:fd:c5: 0a:ec:75:9e:02:d1:38:9f:78:df:43:bd:f2:c6:3b: ee:53:17:60:88:7b:3d:c6:6a:71:23:e4:b6:9d:98: 08:05:43:94:9e:4b:0b:2d:ab:fb:f4:c3:17:43:a1: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F7:A8:E8:2F:44:62:DA:0F:A1:A5:E0:AB:AB:F9:6A:46:EA:14:3B X509v3 Authority Key Identifier: keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:33:58:e2:52:1e:cc:0d:99:7f:d6:4a:90:0e:5c:cb:e0:1a: be:a6:ff:96:5e:f3:4a:64:38:a5:3a:7c:ad:ed:a2:ed:5c:f5: b5:a0:09:19:9d:ac:6e:60:fb:b5:70:70:45:83:40:a1:ff:e2: 5e:32:b0:f2:ab:00:4a:78:29:57:a6:ad:24:f9:42:29:63:43: e4:a6:df:ef:d3:65:37:9f:0b:e4:e8:1e:70:c5:84:4c:98:68: de:8f:aa:6b:11:b0:b2:99:b0:2c:a9:2c:c6:cf:65:b3:11:05: 1b:f3:7b:a4:13:b9:3a:c3:61:ca:66:af:e8:03:b5:01:79:77: 90:f4:46:be:74:ef:2b:d0:29:0b:4c:aa:1c:81:d4:49:8c:c3: dd:5d:0c:fb:6f:e5:7f:8c:6c:26:3f:48:36:17:2c:e7:47:5a: ae:12:c9:b2:28:5d:6e:2c:73:97:08:0c:a5:56:81:96:ff:87: f4:60:2f:34:12:fb:4f:9c:26:c9:07:78:8a:1f:8e:20:4e:74: d3:9b:e5:83:c8:62:a7:4d:81:93:de:ce:eb:81:1c:5a:03:f4: ab:52:78:c6:15:3e:26:ec:ae:b5:01:00:17:a7:f2:78:90:25: fb:5e:d6:62:68:e2:20:be:78:b8:01:81:0a:db:ec:68:57:b2: f4:48:21:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyQ85cJGjFRvyF8dXn0EOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYjZkMGUwMDcyZDBjYWIyOWJmYTg3MzdkZTJhNTNlNTE0 MTgyNzYwHhcNMjUxMjIxMTIwMTE3WhcNMjUxMjIyMTIwMTE3WjAzMTEwLwYDVQQD EygzMWY3YThlODJmNDQ2MmRhMGZhMWE1ZTBhYmFiZjk2YTQ2ZWExNDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzck3VKcoL2qfAyueHefFi7SVQ5me vbneIBj6mHKwlQladgi7eFk8qwsy/gVVTNEYC0QUqReTnBJkqreb4lHl4mDAlJJ2 Xj+UTEbAfXnX0O4GWKJBJaQ2XsEr5LWsxV+yV7MDjXlYMtU5hKFsWxtyzKIUkaHy VSN7nPE2YSDHxzQto8kSD+ul76T3MBOqbchLQOSaNTU2vINQpnNnlwSIrBTHbVVK q4OAWL1RqYLRS2BOaEwAdby313KIopYFXWfzlpuM+8rKSbkWeUAjGb8+/cUK7HWe AtE4n3jfQ73yxjvuUxdgiHs9xmpxI+S2nZgIBUOUnksLLav79MMXQ6EtBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDH3qOgvRGLaD6Gl4Kur+WpG6hQ7MB8GA1UdIwQY MBaAFHG20OAHLQyrKb+oc33ipT5RQYJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wYzM1NTQtY2NhZC00Njk4LWJmOWYt YjFmY2YzODk2OTk5LzEvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8wYzM1NTQtY2NhZC00Njk4LWJmOWYtYjFmY2YzODk2OTk5 LzEvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzNY4lIe zA2Zf9ZKkA5cy+Aavqb/ll7zSmQ4pTp8re2i7Vz1taAJGZ2sbmD7tXBwRYNAof/i XjKw8qsASngpV6atJPlCKWND5Kbf79NlN58L5OgecMWETJho3o+qaxGwspmwLKks xs9lsxEFG/N7pBO5OsNhymav6AO1AXl3kPRGvnTvK9ApC0yqHIHUSYzD3V0M+2/l f4xsJj9INhcs50darhLJsihdbixzlwgMpVaBlv+H9GAvNBL7T5wmyQd4ih+OIE50 05vlg8hip02Bk97O64EcWgP0q1J4xhU+JuyutQEAF6fyeJAl+17WYmjiIL54uAGB CtvsaFey9Egh9w== -----END CERTIFICATE-----Generated at Sun Dec 21 19:19:54 2025 by rpki-client