This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: b6k1iiwDdRxEsabSRjvZgTb9XMbppMvHvXmNIKTSw0Y= Subject key identifier: 4E:4F:62:57:6E:3C:2F:97:31:71:0F:35:86:8C:43:39:A3:5C:12:DF Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019B39468E58B5D8D70C334EA2042911CF35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 17BD Signing time: Sat 20 Dec 2025 01:01:23 +0000 Manifest this update: Sat 20 Dec 2025 01:01:23 +0000 Manifest next update: Sun 21 Dec 2025 01:01:23 +0000 Files and hashes: 1: 0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa (hash: H3HRfMwSGiaOC4hjRP3JPpolbe1iEtk1HgVt+tXcFJg=) 2: 1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa (hash: C3Etga/0CnN14pA6mDGityRvYUsO547YlA3aweNBuiE=) 3: 1oBdMA7e2Z8U2Zj6DKxZPs9Fxrk.roa (hash: j4/Gl/mQufV5n5quU+YzE8lGK989RzijTqRKBSqxgrU=) 4: 5HzzPzyXFWUltUFIxz7A1OHGi7o.roa (hash: KdXF+S8JaHRcZ3Ivt3Pqt/DXcq9oRCgLGhDICrSfT58=) 5: 9NRiEzWNWvOsqkkmj1H_nO4JtIA.roa (hash: M1EfpG0UAk+KXmH4YDb8gbqx8X4cMoL0D3M3L/57Gmk=) 6: AeaM2xm7nb7M-kWi1MeK6nJ2Esc.roa (hash: W3lr2rS1RVTUqcHqPE1AsG2t395rfWUnGztv53BJGsY=) 7: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: GbI/JDNhvI9naSJeFnapEjoZLj0ykr7akT4ReR/ZA3c=) 8: CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa (hash: zau8aloWL7mHqdY4KBJaLbm12+SMJIeq7unHMUAtkpg=) 9: GnVxDQNRy4lZ_6dGRtjVD3G4cHQ.roa (hash: uewNPszrVAmQ8TC2z53P69rsch1KQGC60dIp6JPFrsU=) 10: M4I4vx1xHRyGLzdFv0m3WqQ7kbc.roa (hash: 2EMSvLZ8cjOngMWy3qqLP47J5l90EJ/AMLuHP59YgVk=) 11: XDAdp99VnBF7cnnsQ12OybJrT8Y.roa (hash: RlZg9LpMx3Sn+N/ygBjqDdQQDqiZuazZKwQVgxx0FBg=) 12: tjV22hyfL6sKASeEJo6Ke2cIRMg.roa (hash: j+NWMjI7+Df8SVOaL0Iyl9IZZ4H1LL2E359iqV63je4=) 13: x2NZxp0LA5Hn4FBrQLtyHMLL1Ps.roa (hash: 5PwxgXuzDZkAYcHI2n6WOuKQDQFIo40oj3hRytWCw24=) 14: zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa (hash: xxcu2GFnZrIoRaIL254U2SP3O3E+qALgdaalLMmqYoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:8e:58:b5:d8:d7:0c:33:4e:a2:04:29:11:cf:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Dec 20 01:01:23 2025 GMT Not After : Dec 21 01:01:23 2025 GMT Subject: CN=4e4f62576e3c2f9731710f35868c4339a35c12df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:1f:fc:7f:93:f0:64:08:6a:80:13:c2:58: 0c:47:e9:ae:4f:71:2b:80:d7:ae:bb:4a:3e:f9:50: 53:fb:f4:34:91:7d:42:60:96:da:98:32:d8:46:5d: 2d:cf:42:f6:53:c6:23:ee:56:53:68:ad:94:8b:f5: 63:92:8f:33:b0:76:67:66:96:0d:12:14:c0:d5:76: 81:6e:da:1e:8f:df:de:49:74:ac:7c:f5:f5:62:36: f2:34:a4:51:6a:11:e4:1f:46:13:b2:29:ac:c0:3d: e4:da:00:98:62:86:d4:7e:2c:fb:7f:a4:7d:77:1d: 8b:a1:da:aa:33:fe:ea:c6:6b:33:6a:72:69:ef:4e: c4:ff:dc:c5:8d:44:86:5b:7c:66:38:c6:3a:0f:11: 87:f2:ac:a6:25:62:d4:ee:a1:ac:26:63:7f:4e:e6: c1:18:6f:33:b6:41:4a:6c:ae:99:79:90:9c:fb:97: b5:af:d0:7b:60:63:60:a7:7c:2e:e1:1a:82:79:76: 0e:6a:2d:66:18:de:a5:6f:d3:16:f7:c7:c4:b0:ee: a2:86:61:d2:e7:13:42:0f:c7:d6:3b:61:d0:c4:a3: 26:0f:8f:dc:96:80:79:ae:6b:4f:27:c1:5a:1b:75: 60:85:55:34:47:6e:ab:fc:0a:b8:e5:01:b1:55:72: 09:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4F:62:57:6E:3C:2F:97:31:71:0F:35:86:8C:43:39:A3:5C:12:DF X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:74:e9:05:60:52:c4:64:0f:30:09:82:5b:a8:4a:23:32:9b: fb:dd:f6:f4:8a:65:fc:c4:7e:3d:50:47:d6:11:14:bd:b8:32: db:d7:49:7e:3e:9f:85:99:02:5e:bd:ba:80:e7:29:ee:83:ed: c7:fe:60:5d:ed:b7:f9:b1:12:bc:0e:60:3f:b7:06:14:32:0f: 19:08:fb:f7:95:2e:5f:9e:32:04:96:7e:f3:15:5c:6b:80:93: d2:e7:b7:a4:5a:86:34:24:bf:66:ac:62:bb:15:3f:84:7b:18: e5:01:58:20:58:40:c3:7b:34:32:9f:9d:40:65:a0:fd:50:77: 08:53:48:8b:1a:b9:11:48:11:1d:5c:86:ec:02:5b:36:fa:a7: 6d:ec:95:50:e3:45:8d:01:f8:67:a4:cd:b9:f7:d1:b8:6e:42: a7:4c:3a:65:a2:33:fd:8d:32:23:e2:08:41:6d:d0:e3:04:e1: c5:65:ca:55:2a:d5:d8:d9:28:00:40:04:c0:79:07:19:df:b5: 50:da:0c:15:2a:75:cd:90:76:6a:05:ca:d6:c3:d9:bd:13:ef: 08:f8:5b:b9:2f:08:6e:dd:0e:23:0b:ea:57:a6:5f:ee:d2:05: 1a:27:e5:ae:e2:24:fc:b6:f8:f7:68:39:35:45:e4:c2:65:4a: 9c:eb:d5:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Ro5YtdjXDDNOogQpEc81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUxMjIwMDEwMTIzWhcNMjUxMjIxMDEwMTIzWjAzMTEwLwYDVQQD Eyg0ZTRmNjI1NzZlM2MyZjk3MzE3MTBmMzU4NjhjNDMzOWEzNWMxMmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX0f/H+T8GQIaoATwlgMR+muT3Er gNeuu0o++VBT+/Q0kX1CYJbamDLYRl0tz0L2U8Yj7lZTaK2Ui/Vjko8zsHZnZpYN EhTA1XaBbtoej9/eSXSsfPX1YjbyNKRRahHkH0YTsimswD3k2gCYYobUfiz7f6R9 dx2LodqqM/7qxmszanJp707E/9zFjUSGW3xmOMY6DxGH8qymJWLU7qGsJmN/TubB GG8ztkFKbK6ZeZCc+5e1r9B7YGNgp3wu4RqCeXYOai1mGN6lb9MW98fEsO6ihmHS 5xNCD8fWO2HQxKMmD4/cloB5rmtPJ8FaG3VghVU0R26r/Aq45QGxVXIJewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5PYlduPC+XMXEPNYaMQzmjXBLfMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHTpBWBS xGQPMAmCW6hKIzKb+9329Ipl/MR+PVBH1hEUvbgy29dJfj6fhZkCXr26gOcp7oPt x/5gXe23+bESvA5gP7cGFDIPGQj795UuX54yBJZ+8xVca4CT0ue3pFqGNCS/Zqxi uxU/hHsY5QFYIFhAw3s0Mp+dQGWg/VB3CFNIixq5EUgRHVyG7AJbNvqnbeyVUONF jQH4Z6TNuffRuG5Cp0w6ZaIz/Y0yI+IIQW3Q4wThxWXKVSrV2NkoAEAEwHkHGd+1 UNoMFSp1zZB2agXK1sPZvRPvCPhbuS8Ibt0OIwvqV6Zf7tIFGiflruIk/Lb492g5 NUXkwmVKnOvV6w== -----END CERTIFICATE-----Generated at Sat Dec 20 09:08:04 2025 by rpki-client