This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json) Hash identifier: ss8dxfKapSP+gbekkc6gtOWSUM1HtQWCPEbbAcrUL34= Subject key identifier: E2:E6:96:46:39:C4:A5:9A:20:1C:55:83:FA:46:EB:CA:59:3E:4E:05 Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb Certificate serial: 019B3EDA4962E650146739E0D38FFBD7B090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 03:00:51 +0000 Manifest this update: Sun 21 Dec 2025 03:00:51 +0000 Manifest next update: Mon 22 Dec 2025 03:00:51 +0000 Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: 5xwn22QcjvqPvIKCFxzR+1DFvwuOXVDTAC6NEmtBsA8=) 2: ZnV_8X8pYoAVKjZWPYlTDet39Po.roa (hash: AQ2CtHZNHtcjULxTw0rAIotVl7Ai3G/vKLwZOUyWiLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:49:62:e6:50:14:67:39:e0:d3:8f:fb:d7:b0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb Validity Not Before: Dec 21 03:00:51 2025 GMT Not After : Dec 22 03:00:51 2025 GMT Subject: CN=e2e6964639c4a59a201c5583fa46ebca593e4e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:af:14:a7:b9:a4:10:c5:88:fd:ac:47:6c:c3: e1:ac:c0:02:99:8d:2b:56:0b:e1:4c:3b:9c:69:7a: 62:59:f6:c7:a0:85:64:4d:b7:8b:a4:68:c1:e8:35: 9d:dc:46:fe:c0:94:0d:0e:3d:d4:8e:0f:48:74:4a: 4b:4e:f5:e2:e1:36:1d:e4:3d:1b:97:9f:3a:dd:8c: 9a:04:e0:7f:42:fd:2d:4d:24:87:65:96:16:30:8c: 2f:3f:01:3e:6e:9f:1b:5d:bc:5d:90:f9:e0:bf:b5: 90:e3:95:1d:dc:4b:2d:fc:65:ce:62:f4:7b:fb:70: 23:6e:f4:00:70:82:b9:38:a0:7c:42:01:90:fc:1f: 32:04:b8:7b:d1:62:6f:49:ad:46:a0:80:87:43:85: fa:c4:ff:22:4b:bd:19:1d:98:47:8d:4d:ad:cf:6a: a8:a9:4d:45:1f:40:98:8c:d6:5a:b2:8d:75:e6:ad: 6b:7d:9e:3b:5b:56:b2:9a:e1:f1:cd:c7:5d:6d:d8: 0d:a4:24:8c:e0:64:26:23:6d:75:c7:ae:ff:cc:71: c1:5c:6d:ac:a4:33:48:fe:4d:15:e1:a9:e7:47:3e: 83:fa:62:0c:c5:ce:6e:4f:39:34:81:a7:3a:c4:68: bf:6b:ab:5c:08:6f:91:83:f2:f0:79:58:30:9e:ce: 67:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E6:96:46:39:C4:A5:9A:20:1C:55:83:FA:46:EB:CA:59:3E:4E:05 X509v3 Authority Key Identifier: keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a9:ed:6b:6c:42:00:f9:40:d3:85:aa:08:8d:51:d0:a5:fb: 29:00:1c:e9:2c:2c:22:b8:a0:1f:ca:1d:c6:98:3f:c7:61:65: 2f:37:46:58:a9:49:54:6d:72:e7:4b:12:26:07:4a:b2:31:72: df:a6:a8:15:7c:85:fb:0f:4c:06:94:fd:75:3d:09:e0:0c:9d: 81:d1:cb:99:a5:99:f9:a2:5c:af:be:04:dd:e2:be:f0:be:42: 8a:f8:e9:01:06:8c:f2:52:35:03:19:2f:8b:d7:69:18:5b:1c: c3:2d:38:e4:b0:87:dc:3c:bb:7d:b4:da:50:fb:19:74:42:00: c5:3d:d8:57:a2:97:5e:90:00:a5:93:91:f9:1d:60:44:49:a6: 93:e0:10:66:28:92:bf:dc:8b:ce:14:69:08:70:13:71:5b:9d: 27:79:88:7a:72:cd:63:1a:1a:81:46:8f:9a:0c:72:e3:a0:2f: 79:7d:7c:bd:62:54:e3:34:8d:10:60:18:35:65:99:75:b9:04: fa:2d:24:91:a0:f0:57:d9:56:a8:9c:44:70:e5:d6:25:9c:e6: 35:3b:08:30:70:ee:ec:bb:88:9e:8d:51:6c:2c:d7:e0:25:49: e0:05:c8:94:4e:5c:04:6f:b3:55:15:6f:6d:9a:45:fb:fa:73: 36:e4:3d:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2kli5lAUZzng04/717CQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWNhNjBlMDQ4NDdiZDJmN2M0NWM4Njg3ZTVmNWFhZDFm ZWU4ZmIwHhcNMjUxMjIxMDMwMDUxWhcNMjUxMjIyMDMwMDUxWjAzMTEwLwYDVQQD EyhlMmU2OTY0NjM5YzRhNTlhMjAxYzU1ODNmYTQ2ZWJjYTU5M2U0ZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm68Up7mkEMWI/axHbMPhrMACmY0r VgvhTDucaXpiWfbHoIVkTbeLpGjB6DWd3Eb+wJQNDj3Ujg9IdEpLTvXi4TYd5D0b l5863YyaBOB/Qv0tTSSHZZYWMIwvPwE+bp8bXbxdkPngv7WQ45Ud3Est/GXOYvR7 +3AjbvQAcIK5OKB8QgGQ/B8yBLh70WJvSa1GoICHQ4X6xP8iS70ZHZhHjU2tz2qo qU1FH0CYjNZaso115q1rfZ47W1aymuHxzcddbdgNpCSM4GQmI211x67/zHHBXG2s pDNI/k0V4annRz6D+mIMxc5uTzk0gac6xGi/a6tcCG+Rg/LweVgwns5n3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLmlkY5xKWaIBxVg/pG68pZPk4FMB8GA1UdIwQY MBaAFAgcpg4EhHvS98Rchofl9arR/uj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMt YjdhYjY4NmMwNzZlLzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMtYjdhYjY4NmMwNzZl LzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKnta2xC APlA04WqCI1R0KX7KQAc6SwsIrigH8odxpg/x2FlLzdGWKlJVG1y50sSJgdKsjFy 36aoFXyF+w9MBpT9dT0J4AydgdHLmaWZ+aJcr74E3eK+8L5CivjpAQaM8lI1Axkv i9dpGFscwy045LCH3Dy7fbTaUPsZdEIAxT3YV6KXXpAApZOR+R1gREmmk+AQZiiS v9yLzhRpCHATcVudJ3mIenLNYxoagUaPmgxy46AveX18vWJU4zSNEGAYNWWZdbkE +i0kkaDwV9lWqJxEcOXWJZzmNTsIMHDu7LuIno1RbCzX4CVJ4AXIlE5cBG+zVRVv bZpF+/pzNuQ9jQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:56:16 2025 by rpki-client