This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft File: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json) Hash identifier: wusB92aA9x9Klwczz5GnZCb5rDyNCdzLp746vK1Vh9E= Subject key identifier: C6:62:5D:AE:60:CB:4B:12:FD:46:5B:29:EA:A7:14:C8:39:81:F3:C6 Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73 Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373 Certificate serial: 019B3D235372FDA8DA9A50C2B115474E503A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 19:01:23 +0000 Manifest this update: Sat 20 Dec 2025 19:01:23 +0000 Manifest next update: Sun 21 Dec 2025 19:01:23 +0000 Files and hashes: 1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: phHCoXo8ZRCtMJWO9Qoc1RCHx1/iMhe6KNN7roVTnUo=) 2: Jf9y1r-7U3oVE_0fSwlBWZfWEa0.roa (hash: GPOv3V78s13UPdmn9zsSWoQbLb5tsSshuu6xid5/0Es=) 3: Ovnkzgu3GObRw7FEQRBgXQjx5M4.roa (hash: nJnymsSFWBg9H1fUFjESgx2imNhbNeKcWoh7uta0L5c=) 4: UmI6d2m9R3iczzZVeRe1gk47NKM.roa (hash: RX415hlrT0LruVY1Id4UgU7KARGGjtNq2cWbFexDoVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:53:72:fd:a8:da:9a:50:c2:b1:15:47:4e:50:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373 Validity Not Before: Dec 20 19:01:23 2025 GMT Not After : Dec 21 19:01:23 2025 GMT Subject: CN=c6625dae60cb4b12fd465b29eaa714c83981f3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6b:54:fa:f3:4e:49:8a:00:93:fb:50:23:7d: 52:bd:1b:f4:2c:8c:43:c0:a5:07:f1:3d:8f:29:2b: 39:28:ea:5f:54:55:79:b9:e9:82:cd:82:5c:0d:10: e7:58:0e:ae:f0:66:30:c4:87:47:5f:6f:aa:e9:8c: 90:37:2d:d5:07:42:28:2b:46:af:6f:a9:6b:e6:cb: 06:62:28:f7:44:1e:b1:c7:d9:e4:c4:3a:9a:8d:75: 3b:68:14:f8:01:56:26:a2:73:4c:d5:61:36:99:f1: 80:f9:3d:c1:6c:bb:77:48:9f:41:38:b7:bc:54:55: b6:e6:d7:83:ab:a3:da:be:b1:fb:b0:8a:8c:15:df: eb:ca:6e:2b:99:da:29:6f:b4:35:c9:9a:5c:90:74: a6:87:be:5f:61:fa:ce:66:ab:52:e2:a3:56:bf:67: ea:0c:56:df:fd:ac:b3:27:24:1c:cc:f7:f7:ad:e8: b9:30:e1:85:25:b2:f9:10:c4:1e:ee:b8:2a:e7:34: 0a:ba:7f:26:90:2f:f0:4b:7c:64:2a:a6:f7:27:6b: 0e:f3:e7:45:fb:ec:25:b7:4e:93:65:94:ea:61:d5: 6a:39:91:2b:2d:74:4a:c6:5b:29:a3:14:7b:e7:a6: 5d:a7:de:05:97:77:3d:c5:09:ec:68:31:f1:a9:43: 07:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:62:5D:AE:60:CB:4B:12:FD:46:5B:29:EA:A7:14:C8:39:81:F3:C6 X509v3 Authority Key Identifier: keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ea:62:7b:b8:b5:42:c1:7d:bb:16:e1:15:3b:03:f6:29:8a: c6:b9:4f:a0:29:f9:ca:5e:cf:bd:38:69:05:fc:09:3a:70:cf: fb:2f:d9:fe:54:b8:60:7b:e7:77:f7:87:32:40:e5:39:6e:90: 52:c0:17:72:e2:67:b5:6a:ee:b1:18:b9:b1:77:8f:e1:eb:83: bb:32:bf:71:94:98:c4:f3:83:70:62:05:bf:4e:ae:ae:8b:cb: bf:79:21:42:b2:f6:dd:2c:82:d9:f4:3e:52:1e:62:9d:2f:ac: fa:bb:9f:de:80:58:94:7f:af:29:5e:97:61:d4:f8:80:c8:0f: a9:66:fb:e4:47:74:fd:45:b7:c3:30:e7:3c:3a:f6:60:91:9e: 62:87:48:1f:6c:3d:21:73:15:53:1b:3b:c5:03:d0:f3:9c:0d: cb:83:89:54:fa:b2:73:2f:6e:ba:19:d8:29:c1:b1:e4:15:b4: f7:35:33:d8:08:42:01:db:32:c4:16:f7:e0:5b:90:ad:32:a5: 9c:9a:b3:87:a9:18:74:70:5d:bf:d6:fd:95:04:6e:0c:c1:b6: d2:b0:9d:e0:52:c2:7d:5d:7d:11:6e:de:5f:53:19:f3:f4:e4: db:8f:15:49:43:0b:45:65:ce:2b:1b:5b:c2:d9:00:af:d8:21: a8:7c:36:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I1Ny/ajamlDCsRVHTlA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YjRiZjM3ZjM5ZWVjNjI5ODJjNGI2MzcwOWZhYjVkMTQ2 YzczNzMwHhcNMjUxMjIwMTkwMTIzWhcNMjUxMjIxMTkwMTIzWjAzMTEwLwYDVQQD EyhjNjYyNWRhZTYwY2I0YjEyZmQ0NjViMjllYWE3MTRjODM5ODFmM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2tU+vNOSYoAk/tQI31SvRv0LIxD wKUH8T2PKSs5KOpfVFV5uemCzYJcDRDnWA6u8GYwxIdHX2+q6YyQNy3VB0IoK0av b6lr5ssGYij3RB6xx9nkxDqajXU7aBT4AVYmonNM1WE2mfGA+T3BbLt3SJ9BOLe8 VFW25teDq6PavrH7sIqMFd/rym4rmdopb7Q1yZpckHSmh75fYfrOZqtS4qNWv2fq DFbf/ayzJyQczPf3rei5MOGFJbL5EMQe7rgq5zQKun8mkC/wS3xkKqb3J2sO8+dF ++wlt06TZZTqYdVqOZErLXRKxlspoxR756Zdp94Fl3c9xQnsaDHxqUMHoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZiXa5gy0sS/UZbKeqnFMg5gfPGMB8GA1UdIwQY MBaAFAm0vzfznuximCxLY3Cfq10UbHNzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMt MjRlNmMwZDRmYWQ3LzEvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMtMjRlNmMwZDRmYWQ3 LzEvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOpie7i1 QsF9uxbhFTsD9imKxrlPoCn5yl7PvThpBfwJOnDP+y/Z/lS4YHvnd/eHMkDlOW6Q UsAXcuJntWrusRi5sXeP4euDuzK/cZSYxPODcGIFv06urovLv3khQrL23SyC2fQ+ Uh5inS+s+ruf3oBYlH+vKV6XYdT4gMgPqWb75Ed0/UW3wzDnPDr2YJGeYodIH2w9 IXMVUxs7xQPQ85wNy4OJVPqycy9uuhnYKcGx5BW09zUz2AhCAdsyxBb34FuQrTKl nJqzh6kYdHBdv9b9lQRuDMG20rCd4FLCfV19EW7eX1MZ8/Tk248VSUMLRWXOKxtb wtkAr9ghqHw2Hw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:08:49 2025 by rpki-client