This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft File: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json) Hash identifier: ZLEnWU8RnU6bFb2BqUxCOFxMqCVrSMuv3ZCAITUlkb4= Subject key identifier: F8:55:74:4A:64:DE:73:56:F9:76:88:58:0B:10:EE:39:33:B2:90:CA Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24 Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24 Certificate serial: 019B3CEBF206C9FA1D9C6942782B0FC56812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:00:54 +0000 Manifest this update: Sat 20 Dec 2025 18:00:54 +0000 Manifest next update: Sun 21 Dec 2025 18:00:54 +0000 Files and hashes: 1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=) 2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: /Pw8qNSmNaadkNmkjkfbKbq5NcuXSzd6JRY1rTkxHUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f2:06:c9:fa:1d:9c:69:42:78:2b:0f:c5:68:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24 Validity Not Before: Dec 20 18:00:54 2025 GMT Not After : Dec 21 18:00:54 2025 GMT Subject: CN=f855744a64de7356f97688580b10ee3933b290ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:d9:d1:c2:1f:b2:79:8e:1b:87:9e:2b:7b: 5f:83:e2:dc:c1:78:0e:74:85:96:e1:33:c6:32:e6: 3d:59:11:9a:df:1a:38:68:9b:f3:c2:69:aa:3e:3f: e1:ac:4b:3f:be:41:bd:0d:87:d0:35:7e:7b:1f:9a: 4d:53:95:2d:bd:16:68:e6:05:f4:72:ea:6c:7d:f5: 69:49:47:72:5a:ea:f4:3a:c1:3d:53:75:76:b6:20: 1e:55:0c:bf:c7:4d:7a:f1:a0:27:8f:a7:7b:97:bd: 48:fe:48:da:72:8e:b3:31:85:86:d1:f4:32:bf:79: 40:e3:47:bb:1c:54:5f:0b:07:4f:23:0d:eb:35:76: 37:64:7e:6b:4d:f3:15:09:a7:2b:a7:4d:98:5c:62: f4:20:c6:13:3f:58:d1:fa:d2:6f:0e:bd:7a:9e:a8: 58:5a:5b:e8:af:b1:76:52:b3:6f:45:5d:4a:be:51: e4:31:ec:1d:e3:00:38:9d:c5:fe:f1:02:2b:2a:76: 89:b5:71:00:d5:3f:95:5c:bd:d1:bb:bc:fa:1d:08: d8:8f:95:41:9a:b6:63:dc:ca:a1:64:bf:d4:6e:58: 7e:0f:23:31:1a:9a:bb:44:c5:81:02:ea:8f:69:cd: d6:54:a5:33:24:2f:ea:46:c8:cb:44:32:b3:9b:b4: b2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:55:74:4A:64:DE:73:56:F9:76:88:58:0B:10:EE:39:33:B2:90:CA X509v3 Authority Key Identifier: keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f2:d6:f8:7b:5c:5f:ec:76:85:98:b4:c1:c9:7f:b0:f3:90: 01:17:a5:81:7d:45:10:5a:0e:38:6a:74:a1:c5:99:9d:14:3d: da:27:5d:ee:4d:2f:44:22:96:12:64:f5:0e:39:cd:14:2a:f7: 70:9f:39:45:0f:7f:06:86:3f:2f:97:bc:50:72:d1:d7:ec:c2: 61:7c:9d:7e:61:7c:41:7d:a1:e2:ac:99:25:38:4a:42:1c:51: f0:f6:b6:26:ff:7c:58:af:2c:e2:1c:b9:e3:e5:4e:13:fb:b5: f5:b7:07:b9:0d:48:ed:d5:9d:41:0f:e6:ff:a2:62:c8:2c:ee: 56:9b:36:4d:5b:88:e8:7c:b7:9d:d3:e3:a2:19:97:94:a0:85: 7e:05:94:2d:53:f9:d9:7f:c0:40:18:ba:b1:bf:43:8b:37:16: fc:d6:79:bb:4c:0c:32:bc:d2:1b:d9:14:00:77:72:0f:c4:10: 0e:cf:0a:3c:da:a8:2e:68:4c:61:1a:3f:3d:76:88:22:05:ce: 1e:7b:50:ef:ee:19:5e:75:88:d7:13:22:ef:3e:3c:54:ce:14: f3:c0:33:9e:20:ca:59:be:35:fc:60:27:df:27:e3:3f:de:97: ca:bc:a0:d0:8a:8f:e0:ac:0d:b8:10:1e:17:35:4d:c0:af:ed: da:23:6c:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/IGyfodnGlCeCsPxWgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMTYyNGZmYzU3MjFjMTU4ZTRjYzliYjA3MWViNGZiODdk ODhjMjQwHhcNMjUxMjIwMTgwMDU0WhcNMjUxMjIxMTgwMDU0WjAzMTEwLwYDVQQD EyhmODU1NzQ0YTY0ZGU3MzU2Zjk3Njg4NTgwYjEwZWUzOTMzYjI5MGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxULZ0cIfsnmOG4eeK3tfg+LcwXgO dIWW4TPGMuY9WRGa3xo4aJvzwmmqPj/hrEs/vkG9DYfQNX57H5pNU5UtvRZo5gX0 cupsffVpSUdyWur0OsE9U3V2tiAeVQy/x0168aAnj6d7l71I/kjaco6zMYWG0fQy v3lA40e7HFRfCwdPIw3rNXY3ZH5rTfMVCacrp02YXGL0IMYTP1jR+tJvDr16nqhY Wlvor7F2UrNvRV1KvlHkMewd4wA4ncX+8QIrKnaJtXEA1T+VXL3Ru7z6HQjYj5VB mrZj3MqhZL/Ublh+DyMxGpq7RMWBAuqPac3WVKUzJC/qRsjLRDKzm7SyzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhVdEpk3nNW+XaIWAsQ7jkzspDKMB8GA1UdIwQY MBaAFHAWJP/FchwVjkzJuwcetPuH2IwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEt NjNlNzVlOTUzYTkzLzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEtNjNlNzVlOTUzYTkz LzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPLW+Htc X+x2hZi0wcl/sPOQARelgX1FEFoOOGp0ocWZnRQ92idd7k0vRCKWEmT1DjnNFCr3 cJ85RQ9/BoY/L5e8UHLR1+zCYXydfmF8QX2h4qyZJThKQhxR8Pa2Jv98WK8s4hy5 4+VOE/u19bcHuQ1I7dWdQQ/m/6JiyCzuVps2TVuI6Hy3ndPjohmXlKCFfgWULVP5 2X/AQBi6sb9DizcW/NZ5u0wMMrzSG9kUAHdyD8QQDs8KPNqoLmhMYRo/PXaIIgXO HntQ7+4ZXnWI1xMi7z48VM4U88AzniDKWb41/GAn3yfjP96Xyryg0IqP4KwNuBAe FzVNwK/t2iNswg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:35:30 2025 by rpki-client