This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json) Hash identifier: B55tyyLsa9XqM26iH6C/kKDg19cWDIKidTEyXQ+wf4A= Subject key identifier: D6:BD:23:18:E8:E3:8E:AD:11:07:08:2F:6D:00:88:B8:78:02:42:10 Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5 Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5 Certificate serial: 019B44DCD89DE19B5406DC9A31F0BBCD05A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft Manifest number: 171E Signing time: Mon 22 Dec 2025 07:01:22 +0000 Manifest this update: Mon 22 Dec 2025 07:01:22 +0000 Manifest next update: Tue 23 Dec 2025 07:01:22 +0000 Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: rhRYwgPz1DJR+j6+1CIm222SEGnsqCwQ4MmYGl56SDQ=) 2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:d8:9d:e1:9b:54:06:dc:9a:31:f0:bb:cd:05:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5 Validity Not Before: Dec 22 07:01:22 2025 GMT Not After : Dec 23 07:01:22 2025 GMT Subject: CN=d6bd2318e8e38ead1107082f6d0088b878024210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:5f:f0:92:dc:f6:bb:de:ee:b7:ba:4d:10: 2f:e3:d8:05:f4:2d:59:6b:06:c9:be:42:90:0e:e8: 99:14:dd:0d:dd:ee:9e:d6:7f:05:16:bf:e6:a6:24: fe:bf:59:69:6b:32:ad:14:86:90:82:9c:4d:c6:f1: 17:8e:73:f9:35:ad:0e:ab:fb:ab:4a:af:8a:59:1e: 74:80:7c:23:47:4b:bc:d3:17:08:b1:64:84:0b:e6: 25:37:e8:c1:0d:50:aa:14:fc:0e:ea:7e:08:f5:82: 60:f8:f3:b2:5f:c5:85:06:b9:25:a0:6c:cc:9c:6f: 0b:a7:35:4e:7b:ca:21:f5:78:ca:19:87:29:18:f8: 51:29:76:ca:9c:31:ff:08:5e:25:11:e9:88:16:45: 9b:57:01:c2:67:74:d4:a3:d3:d5:e7:bc:ef:8c:1d: 06:11:ba:6f:20:50:56:83:55:06:66:6d:75:cf:83: 69:75:b1:b7:6b:d6:3c:72:eb:7a:34:db:b0:07:a1: af:03:d4:d7:85:a0:28:e1:17:62:f7:b2:13:06:8f: ea:bf:67:7d:35:8c:05:6d:62:45:50:8b:79:d8:36: 0c:c1:ac:c6:05:93:7b:d4:90:26:22:e7:80:3a:6d: 15:fc:b0:0d:64:fa:39:5b:e3:20:8d:01:0a:97:32: f7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BD:23:18:E8:E3:8E:AD:11:07:08:2F:6D:00:88:B8:78:02:42:10 X509v3 Authority Key Identifier: keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:78:57:29:ca:1f:ce:7e:78:5f:8f:15:a8:00:dc:04:94:4f: 87:84:f7:96:b4:e3:fa:37:5b:bb:38:af:57:4a:d1:79:fd:f2: 81:ba:75:db:b1:c4:68:9a:29:d1:24:31:77:ef:2f:a2:19:55: 50:42:2c:11:84:d8:bd:56:f1:5f:20:16:95:b1:67:be:40:39: c4:95:3a:8f:9f:5a:33:af:58:65:f5:05:1a:31:7b:42:56:bd: bb:44:fa:5b:d2:ed:0f:af:c6:9a:e0:22:d3:21:d1:a8:e5:b1: 9a:bb:a3:58:54:d0:b5:ad:71:2c:8d:32:61:aa:03:02:f6:14: 06:7b:70:46:92:47:7c:7a:3b:f1:f3:26:2f:56:73:5f:c5:08: c5:c1:58:80:21:64:1b:45:a3:8e:81:82:77:e0:18:f5:39:87: 5c:8b:78:49:22:2f:ea:4a:dc:48:f0:23:ac:20:21:46:a6:13: 4a:24:e1:5b:84:83:85:ad:08:79:a9:20:8f:83:2a:ac:84:e9: a4:62:d6:3a:3d:da:50:45:e7:57:4e:e8:a3:06:84:20:fa:e1: 7d:f9:e2:62:3c:a9:c7:fd:6c:5b:b3:c2:e1:1b:f8:d9:1a:66: 77:59:37:94:6d:7d:7b:2f:dc:1f:7d:7c:f5:ac:b6:a7:c9:e1: 1e:1d:50:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3Nid4ZtUBtyaMfC7zQWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYjkwYzgzZDkwZjNkNGVmMjJkYjgyODUwMmU2MTUyYjZk NWJmZTUwHhcNMjUxMjIyMDcwMTIyWhcNMjUxMjIzMDcwMTIyWjAzMTEwLwYDVQQD EyhkNmJkMjMxOGU4ZTM4ZWFkMTEwNzA4MmY2ZDAwODhiODc4MDI0MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Vf8JLc9rve7re6TRAv49gF9C1Z awbJvkKQDuiZFN0N3e6e1n8FFr/mpiT+v1lpazKtFIaQgpxNxvEXjnP5Na0Oq/ur Sq+KWR50gHwjR0u80xcIsWSEC+YlN+jBDVCqFPwO6n4I9YJg+POyX8WFBrkloGzM nG8LpzVOe8oh9XjKGYcpGPhRKXbKnDH/CF4lEemIFkWbVwHCZ3TUo9PV57zvjB0G EbpvIFBWg1UGZm11z4NpdbG3a9Y8cut6NNuwB6GvA9TXhaAo4Rdi97ITBo/qv2d9 NYwFbWJFUIt52DYMwazGBZN71JAmIueAOm0V/LANZPo5W+MgjQEKlzL3CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNa9Ixjo446tEQcIL20AiLh4AkIQMB8GA1UdIwQY MBaAFHG5DIPZDz1O8i24KFAuYVK21b/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWIt N2NmYjliMDdmNDBmLzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWItN2NmYjliMDdmNDBm LzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXhXKcof zn54X48VqADcBJRPh4T3lrTj+jdbuzivV0rRef3ygbp127HEaJop0SQxd+8vohlV UEIsEYTYvVbxXyAWlbFnvkA5xJU6j59aM69YZfUFGjF7Qla9u0T6W9LtD6/GmuAi 0yHRqOWxmrujWFTQta1xLI0yYaoDAvYUBntwRpJHfHo78fMmL1ZzX8UIxcFYgCFk G0WjjoGCd+AY9TmHXIt4SSIv6krcSPAjrCAhRqYTSiThW4SDha0Ieakgj4MqrITp pGLWOj3aUEXnV07oowaEIPrhffniYjypx/1sW7PC4Rv42Rpmd1k3lG19ey/cH318 9ay2p8nhHh1Qnw== -----END CERTIFICATE-----Generated at Mon Dec 22 11:28:51 2025 by rpki-client