This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft File: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json) Hash identifier: q4CkXGRjuAiREv0NY1Ztp25JgfXEBLn+HVjcZKZTYwQ= Subject key identifier: 39:3E:1E:ED:97:82:14:49:69:41:18:79:1E:1F:FA:41:E5:1B:F1:56 Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24 Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24 Certificate serial: 019B40C8F9A38D3F3D255715FA9380466E66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 12:01:11 +0000 Manifest this update: Sun 21 Dec 2025 12:01:11 +0000 Manifest next update: Mon 22 Dec 2025 12:01:11 +0000 Files and hashes: 1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=) 2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: 3wqrq6XOP5QB7MHJX9RdPsLJ4CxyEmOSxgLnS6TmI8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:f9:a3:8d:3f:3d:25:57:15:fa:93:80:46:6e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24 Validity Not Before: Dec 21 12:01:11 2025 GMT Not After : Dec 22 12:01:11 2025 GMT Subject: CN=393e1eed97821449694118791e1ffa41e51bf156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:08:95:25:68:b8:cf:15:34:28:35:33:05: 9f:8f:4f:bd:01:67:63:cd:4e:d1:0e:d6:c4:6f:7a: 63:37:28:8d:95:a1:35:c9:8f:47:53:b5:d1:07:e1: 22:36:26:da:b2:0d:cf:8e:55:67:9d:8b:f4:d7:50: 0a:8b:01:44:de:a4:19:7d:2f:25:a3:17:73:07:04: 92:d4:c4:e2:fc:a2:aa:e9:69:f1:cc:4a:52:80:7a: 2b:8b:10:40:65:9b:2c:1e:f5:5d:6d:1d:02:3d:29: 23:7f:c2:33:52:66:b3:83:43:27:4d:32:c7:39:90: 2b:a6:cc:3b:15:3b:14:10:35:62:fb:76:b0:7c:2c: 37:2b:28:eb:cb:4d:ed:20:f9:cb:60:d2:48:9a:93: 15:28:4c:02:7e:17:93:1f:07:52:b5:a8:bf:53:49: 95:40:51:f8:83:da:0e:23:9e:a2:71:b2:2b:8c:1c: 63:48:a5:41:60:62:06:c1:d4:60:54:d1:66:67:f8: 81:9d:6d:9f:1f:3b:81:90:7f:6c:24:63:56:42:dc: 91:62:69:3b:61:14:de:8c:0b:16:fc:fd:c8:28:5b: 39:d9:1d:89:e0:09:e5:c1:d2:45:54:4a:33:de:12: 30:62:64:c0:23:fd:13:f6:59:e4:29:c4:0c:12:02: 79:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3E:1E:ED:97:82:14:49:69:41:18:79:1E:1F:FA:41:E5:1B:F1:56 X509v3 Authority Key Identifier: keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a1:97:6d:b7:07:26:0e:9a:df:7f:17:a5:c1:da:52:0b:98: 94:a1:71:8e:12:86:05:aa:64:8a:3f:57:3a:86:f5:32:50:41: c3:2f:fc:ad:81:1b:99:16:09:b3:6d:a5:7e:f1:04:1c:8c:3f: f1:7e:da:08:3a:53:67:9e:dd:2b:f5:fc:da:22:74:65:37:fb: 6d:7d:b0:05:77:c6:71:66:e7:be:a0:61:d8:84:85:80:90:eb: 62:bf:6c:82:1c:31:c2:90:50:ae:e7:0a:b2:0c:4d:d6:38:8f: f7:2c:d4:b9:e8:33:d2:30:c1:db:9d:64:37:1b:dd:6a:3d:47: 23:63:b0:5e:4d:39:5f:d0:ce:52:4d:bf:d4:72:4a:2a:94:10: 2b:32:ee:ca:e2:39:87:d2:8a:fa:da:83:6d:ac:66:be:83:b6: 5b:76:0a:fb:c8:52:ef:50:e9:62:88:44:0d:40:85:b1:b7:c4: f6:ac:49:fb:4b:24:9a:2f:72:06:9c:37:d1:64:0a:ec:6e:de: 90:80:81:7b:ca:c6:4e:a0:1c:1e:a1:b2:a6:20:a7:9f:27:48: ae:0b:42:1f:2f:90:38:16:17:37:71:de:2c:f1:ca:c9:ee:aa: 72:34:8f:33:1d:b8:02:2d:94:c6:9a:9d:d3:ca:78:43:90:49: 64:cf:42:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyPmjjT89JVcV+pOARm5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMTYyNGZmYzU3MjFjMTU4ZTRjYzliYjA3MWViNGZiODdk ODhjMjQwHhcNMjUxMjIxMTIwMTExWhcNMjUxMjIyMTIwMTExWjAzMTEwLwYDVQQD EygzOTNlMWVlZDk3ODIxNDQ5Njk0MTE4NzkxZTFmZmE0MWU1MWJmMTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIwIlSVouM8VNCg1MwWfj0+9AWdj zU7RDtbEb3pjNyiNlaE1yY9HU7XRB+EiNibasg3PjlVnnYv011AKiwFE3qQZfS8l oxdzBwSS1MTi/KKq6WnxzEpSgHorixBAZZssHvVdbR0CPSkjf8IzUmazg0MnTTLH OZArpsw7FTsUEDVi+3awfCw3Kyjry03tIPnLYNJImpMVKEwCfheTHwdStai/U0mV QFH4g9oOI56icbIrjBxjSKVBYGIGwdRgVNFmZ/iBnW2fHzuBkH9sJGNWQtyRYmk7 YRTejAsW/P3IKFs52R2J4AnlwdJFVEoz3hIwYmTAI/0T9lnkKcQMEgJ53QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDk+Hu2XghRJaUEYeR4f+kHlG/FWMB8GA1UdIwQY MBaAFHAWJP/FchwVjkzJuwcetPuH2IwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEt NjNlNzVlOTUzYTkzLzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEtNjNlNzVlOTUzYTkz LzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaGXbbcH Jg6a338XpcHaUguYlKFxjhKGBapkij9XOob1MlBBwy/8rYEbmRYJs22lfvEEHIw/ 8X7aCDpTZ57dK/X82iJ0ZTf7bX2wBXfGcWbnvqBh2ISFgJDrYr9sghwxwpBQrucK sgxN1jiP9yzUuegz0jDB251kNxvdaj1HI2OwXk05X9DOUk2/1HJKKpQQKzLuyuI5 h9KK+tqDbaxmvoO2W3YK+8hS71DpYohEDUCFsbfE9qxJ+0skmi9yBpw30WQK7G7e kICBe8rGTqAcHqGypiCnnydIrgtCHy+QOBYXN3HeLPHKye6qcjSPMx24Ai2Uxpqd 08p4Q5BJZM9CPg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:49:35 2025 by rpki-client