This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json) Hash identifier: dAbd4lDVzaD0DpLZdca5WIxy14h2x8sVu4ZJxhG9ovs= Subject key identifier: DA:EC:9A:32:29:37:04:83:91:4D:D2:76:76:10:36:AE:EA:A8:90:38 Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5 Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5 Certificate serial: 019B3D2367B1CD81E1FE327B91151D62F004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 19:01:29 +0000 Manifest this update: Sat 20 Dec 2025 19:01:29 +0000 Manifest next update: Sun 21 Dec 2025 19:01:29 +0000 Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: SD4a4MRfqvdEebSPUBnh3E8wpDymOWv7Xl5O6TaNb0c=) 2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:67:b1:cd:81:e1:fe:32:7b:91:15:1d:62:f0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5 Validity Not Before: Dec 20 19:01:29 2025 GMT Not After : Dec 21 19:01:29 2025 GMT Subject: CN=daec9a3229370483914dd276761036aeeaa89038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fb:e5:49:ed:f7:d8:07:97:92:7d:a5:98:93: a4:d7:43:99:d9:97:cb:20:dd:21:e7:45:87:57:47: 9f:93:f3:25:85:78:d0:a7:55:cf:c6:ec:72:f3:71: fe:dc:10:20:bc:97:57:ef:cf:ad:8a:ec:1a:14:36: 0c:3e:93:a2:51:fe:53:fc:92:8c:7d:8c:b5:ae:dd: 7a:8a:74:70:8a:5d:d7:6c:47:a0:c3:57:5e:5e:bb: f6:f0:38:31:f9:5e:6b:a1:31:14:e1:b5:e1:bf:7c: 88:15:01:d9:dd:21:39:25:36:e6:2a:d6:98:ed:5e: 79:c0:09:6e:f3:d0:9f:37:a8:b1:44:84:d5:93:8e: 8a:69:7e:70:7c:3d:f6:7e:44:50:0e:03:4e:1f:29: b6:61:42:95:f4:a3:35:a4:7f:b8:bd:c6:9a:fd:29: 4a:19:53:e0:2e:d0:db:18:d1:c9:53:da:b1:d1:5c: 5a:7d:b6:14:60:2a:24:5f:00:e3:42:23:fb:cf:ab: 95:f2:3d:ee:4b:1c:54:71:8f:68:56:03:ad:f7:7c: da:0b:5d:c8:50:b2:3f:f4:f8:6c:25:96:77:03:f5: 9e:b1:c0:e8:76:3b:dd:ca:46:cd:4f:ba:73:b2:1b: 43:d9:49:bb:e0:37:63:df:3e:fd:c3:df:fd:8d:20: cd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EC:9A:32:29:37:04:83:91:4D:D2:76:76:10:36:AE:EA:A8:90:38 X509v3 Authority Key Identifier: keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:4e:34:7d:b6:7e:c2:cc:28:f0:19:30:f3:09:28:cb:8f:1d: 1f:6c:23:c3:62:64:ff:0d:c9:60:c8:5f:16:99:67:92:14:b5: 4a:90:a9:cb:d0:9e:89:98:e7:be:51:10:47:f0:47:69:a4:7b: 73:eb:f6:5e:50:f5:27:f5:bb:a7:ec:12:e1:5a:29:6c:90:34: 76:8e:d5:4b:f4:ea:7a:28:a3:87:13:71:07:89:c1:6f:e1:93: f9:02:77:23:2e:d9:23:9c:fc:5c:50:e5:5a:ec:5b:22:62:75: 85:5c:ff:f0:43:38:e7:15:3c:01:88:c5:58:2a:5b:92:ac:98: e4:10:a1:5f:a1:15:21:12:d1:e4:f2:16:ad:fe:e5:65:0e:a2: 26:b3:a4:1c:87:fd:c4:1a:e5:94:38:1b:c5:9d:7b:d6:6b:27: 52:7d:d1:bb:8f:b6:e8:1e:f5:3d:bd:85:a5:74:c7:19:ef:63: 3f:23:cf:49:5b:8c:d5:b0:cd:50:95:2b:9b:4a:c6:d9:56:50: 5b:3b:05:4c:08:53:c6:cc:86:77:91:29:d2:b7:23:73:4e:91: e3:61:47:97:36:55:f8:16:78:f4:e1:7a:f2:90:17:4a:27:0b: 3c:1c:dd:ec:6f:ec:1b:1f:23:b9:ff:fb:d7:bf:31:5a:0e:25: 7f:cc:cf:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I2exzYHh/jJ7kRUdYvAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYjkwYzgzZDkwZjNkNGVmMjJkYjgyODUwMmU2MTUyYjZk NWJmZTUwHhcNMjUxMjIwMTkwMTI5WhcNMjUxMjIxMTkwMTI5WjAzMTEwLwYDVQQD EyhkYWVjOWEzMjI5MzcwNDgzOTE0ZGQyNzY3NjEwMzZhZWVhYTg5MDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/vlSe332AeXkn2lmJOk10OZ2ZfL IN0h50WHV0efk/MlhXjQp1XPxuxy83H+3BAgvJdX78+tiuwaFDYMPpOiUf5T/JKM fYy1rt16inRwil3XbEegw1deXrv28Dgx+V5roTEU4bXhv3yIFQHZ3SE5JTbmKtaY 7V55wAlu89CfN6ixRITVk46KaX5wfD32fkRQDgNOHym2YUKV9KM1pH+4vcaa/SlK GVPgLtDbGNHJU9qx0VxafbYUYCokXwDjQiP7z6uV8j3uSxxUcY9oVgOt93zaC13I ULI/9PhsJZZ3A/WescDodjvdykbNT7pzshtD2Um74Ddj3z79w9/9jSDNFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrsmjIpNwSDkU3SdnYQNq7qqJA4MB8GA1UdIwQY MBaAFHG5DIPZDz1O8i24KFAuYVK21b/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWIt N2NmYjliMDdmNDBmLzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWItN2NmYjliMDdmNDBm LzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1U40fbZ+ wswo8Bkw8wkoy48dH2wjw2Jk/w3JYMhfFplnkhS1SpCpy9CeiZjnvlEQR/BHaaR7 c+v2XlD1J/W7p+wS4VopbJA0do7VS/TqeiijhxNxB4nBb+GT+QJ3Iy7ZI5z8XFDl WuxbImJ1hVz/8EM45xU8AYjFWCpbkqyY5BChX6EVIRLR5PIWrf7lZQ6iJrOkHIf9 xBrllDgbxZ171msnUn3Ru4+26B71Pb2FpXTHGe9jPyPPSVuM1bDNUJUrm0rG2VZQ WzsFTAhTxsyGd5Ep0rcjc06R42FHlzZV+BZ49OF68pAXSicLPBzd7G/sGx8juf/7 178xWg4lf8zPqw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:06:24 2025 by rpki-client