This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: t5TyY19OG35bydzML7guOm1DVJvme/yryBnn+sZJ00c=
Subject key identifier: 01:FF:0A:A0:9C:84:D6:0A:5E:9B:75:89:C8:38:D0:B5:CC:9B:DF:8D
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 019B3E6CBEB12C4F452527F59B333B6AD0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 047E
Signing time: Sun 21 Dec 2025 01:01:12 +0000
Manifest this update: Sun 21 Dec 2025 01:01:12 +0000
Manifest next update: Mon 22 Dec 2025 01:01:12 +0000
Files and hashes: 1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: lARgm+Mxzy94dgq/N2ct2WlvPFuSassVaFs3+37JptM=)
2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:6c:be:b1:2c:4f:45:25:27:f5:9b:33:3b:6a:d0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Dec 21 01:01:12 2025 GMT
Not After : Dec 22 01:01:12 2025 GMT
Subject: CN=01ff0aa09c84d60a5e9b7589c838d0b5cc9bdf8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:82:f7:44:c6:f1:5a:fd:87:a2:9f:3a:89:02:
5b:ad:7d:3b:a1:57:38:a3:09:45:e9:f6:53:41:84:
06:29:7b:b4:4a:c6:ef:7a:65:fb:5d:8f:33:20:f2:
e6:06:cb:c5:55:b5:f3:62:f0:fb:a6:2c:ba:1f:81:
74:56:81:fd:96:c3:cb:c7:e0:d0:13:c4:2e:85:e1:
23:7b:d5:34:9b:48:d9:5d:82:68:62:fa:98:1f:4d:
bf:76:60:5a:26:6c:84:aa:28:30:07:7a:bf:16:88:
2b:f7:cf:8e:00:8b:29:93:7b:77:0d:a5:d2:91:0f:
e1:b6:62:b9:99:35:7d:e7:32:fe:10:e7:2c:4b:2e:
4c:71:e5:fc:84:d4:df:06:ac:a2:20:b6:07:69:45:
a5:77:ff:83:7e:ba:9f:41:1f:91:96:01:7e:f8:f5:
5b:62:d4:94:06:a2:17:26:21:88:0a:5c:54:f4:d1:
02:78:8c:b7:e8:70:ab:8e:1c:01:79:0e:0c:08:7d:
16:4b:0c:b4:a5:c2:b8:90:4c:38:5b:3b:73:55:12:
11:05:5d:f2:5c:a4:82:ee:1f:b9:52:03:c3:74:97:
1b:4b:5b:26:74:6d:6d:e7:38:38:57:d9:18:68:37:
6f:ec:3c:16:3a:fb:73:84:83:2e:31:b3:a5:57:da:
54:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FF:0A:A0:9C:84:D6:0A:5E:9B:75:89:C8:38:D0:B5:CC:9B:DF:8D
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f4:98:17:55:1a:54:71:c2:20:5e:53:44:00:fb:0e:90:b7:
ff:4a:2a:c3:6e:b9:d6:7b:1f:b3:ba:1c:aa:9b:67:0c:5c:d4:
a0:ba:d5:d6:a0:c0:b8:0e:6c:65:0a:b9:ad:62:30:a3:4a:84:
a5:5d:38:f6:fd:cf:f0:25:a0:dd:b8:cd:6d:ea:8b:30:d7:fd:
33:4c:ca:06:55:7f:7a:64:62:27:d0:75:ce:5e:83:4c:ef:7d:
2d:5e:e0:04:eb:e0:a5:f0:86:b1:3a:b8:eb:48:ce:5c:b3:48:
79:8e:b6:76:69:c2:29:9c:c6:02:4b:9c:d9:e3:38:1b:66:53:
c1:96:1e:48:e1:ff:b0:31:07:ae:f8:d9:c0:eb:24:0d:7e:1c:
a0:4b:2a:6a:88:0d:17:e5:fc:ad:ee:53:c4:1a:2e:5e:7a:31:
7e:0b:96:cf:b3:5e:bb:79:72:f8:b6:7f:ec:d7:a7:37:74:42:
76:c4:57:29:e8:f7:2f:a4:1e:47:ef:4a:47:dd:9d:3b:65:53:
72:63:4e:f6:ca:a2:aa:c1:b9:11:70:39:29:eb:3f:08:a8:72:
6a:90:0d:9e:ad:7c:5b:65:56:78:fc:82:2a:02:9a:b2:9e:22:
28:6c:d0:b3:5e:07:08:9f:0f:27:87:eb:ce:bb:bf:4c:31:6d:
17:f4:54:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+bL6xLE9FJSf1mzM7atDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YjhmYjkyMjgwYWIwNWI0NDMyZTQzYjk1NDUwZTczYjI3
NzNkNWIwHhcNMjUxMjIxMDEwMTEyWhcNMjUxMjIyMDEwMTEyWjAzMTEwLwYDVQQD
EygwMWZmMGFhMDljODRkNjBhNWU5Yjc1ODljODM4ZDBiNWNjOWJkZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oL3RMbxWv2Hop86iQJbrX07oVc4
owlF6fZTQYQGKXu0SsbvemX7XY8zIPLmBsvFVbXzYvD7piy6H4F0VoH9lsPLx+DQ
E8QuheEje9U0m0jZXYJoYvqYH02/dmBaJmyEqigwB3q/Fogr98+OAIspk3t3DaXS
kQ/htmK5mTV95zL+EOcsSy5MceX8hNTfBqyiILYHaUWld/+DfrqfQR+RlgF++PVb
YtSUBqIXJiGIClxU9NECeIy36HCrjhwBeQ4MCH0WSwy0pcK4kEw4WztzVRIRBV3y
XKSC7h+5UgPDdJcbS1smdG1t5zg4V9kYaDdv7DwWOvtzhIMuMbOlV9pU7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH/CqCchNYKXpt1icg40LXMm9+NMB8GA1UdIwQY
MBaAFAm4+5IoCrBbRDLkO5VFDnOydz1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83MjZkMTUtNWMxOS00ZTg1LWJjNTkt
ZGE3Mzk4NTZjZmI4LzEvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS83MjZkMTUtNWMxOS00ZTg1LWJjNTktZGE3Mzk4NTZjZmI4
LzEvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvSYF1Ua
VHHCIF5TRAD7DpC3/0oqw2651nsfs7ocqptnDFzUoLrV1qDAuA5sZQq5rWIwo0qE
pV049v3P8CWg3bjNbeqLMNf9M0zKBlV/emRiJ9B1zl6DTO99LV7gBOvgpfCGsTq4
60jOXLNIeY62dmnCKZzGAkuc2eM4G2ZTwZYeSOH/sDEHrvjZwOskDX4coEsqaogN
F+X8re5TxBouXnoxfguWz7Neu3ly+LZ/7NenN3RCdsRXKej3L6QeR+9KR92dO2VT
cmNO9sqiqsG5EXA5Kes/CKhyapANnq18W2VWePyCKgKasp4iKGzQs14HCJ8PJ4fr
zru/TDFtF/RUJQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 08:35:37 2025 by rpki-client