This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json) Hash identifier: us17eroZExMvTtw3lNwbz9/scAGGGXJQgdEUfK0794M= Subject key identifier: 0C:F6:3C:0C:9A:FA:E7:94:65:B8:8C:70:6D:3D:0B:7C:B9:03:5E:BD Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c Certificate serial: 019B3F117887A54B0F39EF6D6E07B1A461DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 04:01:08 +0000 Manifest this update: Sun 21 Dec 2025 04:01:08 +0000 Manifest next update: Mon 22 Dec 2025 04:01:08 +0000 Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: M5LaaohNoH5juBateOT3HE9iTXJiQ1E/V4/U5mC/ZDM=) 2: NtH1vO7ll_U5_pqKHtqzA0Hc2jg.roa (hash: HhdnUZonzxIQju7AN7jqFbyBFzlOs+8aln7of8ZODwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:78:87:a5:4b:0f:39:ef:6d:6e:07:b1:a4:61:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c Validity Not Before: Dec 21 04:01:08 2025 GMT Not After : Dec 22 04:01:08 2025 GMT Subject: CN=0cf63c0c9afae79465b88c706d3d0b7cb9035ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:81:c5:a2:ec:28:e8:5c:da:c9:34:10:34: 7c:92:ad:a5:1d:64:20:85:36:54:a1:ef:8f:d2:35: ee:59:93:68:bb:0e:46:d5:b5:41:56:02:b6:07:12: 61:22:61:a7:82:dd:f3:ea:43:17:34:c7:16:6e:d7: e3:c4:b8:3c:21:13:85:c6:63:04:d8:a0:7f:43:d7: dc:08:6a:51:1b:b2:02:dc:a9:bc:92:85:4a:f5:59: 3e:81:df:9f:5d:f9:a8:2a:b7:93:f9:0a:9f:79:12: 22:35:8b:a0:58:d3:04:ed:7f:9b:38:9b:ef:37:7f: 37:2e:cf:09:a1:e5:1d:42:61:3f:87:39:8b:a4:47: bb:4b:26:f9:df:5c:ff:b8:92:18:9a:36:86:f6:77: c0:02:5c:11:6c:61:6d:70:62:98:db:0e:38:54:59: ca:ae:98:15:23:86:f4:51:9e:6c:9d:ab:cd:0a:2b: de:1d:ce:8a:0d:27:9a:2c:0b:d3:07:01:dc:9f:d0: 61:51:9f:fe:04:2d:4a:67:0f:96:65:d4:7a:8d:1c: 4b:f5:a3:e4:09:0b:4f:11:45:a7:d3:f4:b5:2b:86: e8:12:4e:8c:38:96:d8:b2:46:ee:2c:5d:06:71:02: e8:8c:0a:1a:16:94:8f:e6:9f:33:de:28:e1:9d:e2: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F6:3C:0C:9A:FA:E7:94:65:B8:8C:70:6D:3D:0B:7C:B9:03:5E:BD X509v3 Authority Key Identifier: keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:01:ac:ce:61:b4:2c:d3:d8:0b:4c:37:0e:ad:00:e9:1c:08: d1:2c:26:e4:53:89:4b:a4:a0:64:25:ac:62:65:ca:05:bd:cd: 95:e6:4d:a0:43:57:ab:b7:ad:5c:8b:2d:d7:88:13:02:85:d3: 02:03:5a:8d:97:a1:ee:3c:8c:86:f0:4d:16:66:f0:7a:24:52: 0a:d9:61:61:7d:14:fb:f0:ef:2c:20:9e:e9:92:20:e7:82:50: 0e:05:79:08:0c:e7:2a:91:32:dd:33:f3:3b:8d:ca:b2:92:4d: f1:79:9b:c7:fe:af:80:20:40:24:6e:59:b1:00:64:d2:95:7f: ac:ea:8a:97:77:35:2d:3d:14:91:65:be:ff:24:a2:46:2c:fd: eb:75:96:fd:49:96:8f:83:b8:c3:4d:e2:aa:ad:36:f8:34:12: 59:1a:a2:e4:d1:2c:c1:19:b5:8f:95:7b:69:25:a0:54:cf:15: 64:60:12:42:c0:81:e5:4c:94:24:bd:89:a4:bd:32:36:c7:92: 19:99:e5:a4:96:0c:70:3e:f0:88:77:f2:c7:83:38:e1:43:3b: 0c:34:71:5c:49:89:71:2c:66:1e:2d:53:f4:fd:86:41:da:09: 19:4d:f6:61:0a:9f:7e:02:e7:32:ba:2c:2c:e0:9e:d1:a3:c2: 05:fa:36:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EXiHpUsPOe9tbgexpGHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWNiMzMzOTEzY2Y0MTNiYmFmZDkyNzc5MzdiMzA2MWE2 MTgxN2MwHhcNMjUxMjIxMDQwMTA4WhcNMjUxMjIyMDQwMTA4WjAzMTEwLwYDVQQD EygwY2Y2M2MwYzlhZmFlNzk0NjViODhjNzA2ZDNkMGI3Y2I5MDM1ZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmKBxaLsKOhc2sk0EDR8kq2lHWQg hTZUoe+P0jXuWZNouw5G1bVBVgK2BxJhImGngt3z6kMXNMcWbtfjxLg8IROFxmME 2KB/Q9fcCGpRG7IC3Km8koVK9Vk+gd+fXfmoKreT+QqfeRIiNYugWNME7X+bOJvv N383Ls8JoeUdQmE/hzmLpEe7Syb531z/uJIYmjaG9nfAAlwRbGFtcGKY2w44VFnK rpgVI4b0UZ5snavNCiveHc6KDSeaLAvTBwHcn9BhUZ/+BC1KZw+WZdR6jRxL9aPk CQtPEUWn0/S1K4boEk6MOJbYskbuLF0GcQLojAoaFpSP5p8z3ijhneIj/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAz2PAya+ueUZbiMcG09C3y5A169MB8GA1UdIwQY MBaAFAgcszORPPQTu6/ZJ3k3swYaYYF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMt MzI0NzFjNTkwOGEyLzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMtMzI0NzFjNTkwOGEy LzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwGszmG0 LNPYC0w3Dq0A6RwI0Swm5FOJS6SgZCWsYmXKBb3NleZNoENXq7etXIst14gTAoXT AgNajZeh7jyMhvBNFmbweiRSCtlhYX0U+/DvLCCe6ZIg54JQDgV5CAznKpEy3TPz O43KspJN8Xmbx/6vgCBAJG5ZsQBk0pV/rOqKl3c1LT0UkWW+/ySiRiz963WW/UmW j4O4w03iqq02+DQSWRqi5NEswRm1j5V7aSWgVM8VZGASQsCB5UyUJL2JpL0yNseS GZnlpJYMcD7wiHfyx4M44UM7DDRxXEmJcSxmHi1T9P2GQdoJGU32YQqffgLnMros LOCe0aPCBfo2Kg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:45:48 2025 by rpki-client