This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json) Hash identifier: aXVTKXLcszFtTya/v1LT7GVH4opBSsryLi/3LnRPV/Q= Subject key identifier: 80:08:B4:54:DF:70:AC:95:89:F2:01:73:46:62:1F:1E:DF:60:9D:5C Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed Certificate serial: 019B2EF9CCB594FC575BFAD374F35C90283B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft Manifest number: 12C3 Signing time: Thu 18 Dec 2025 01:01:21 +0000 Manifest this update: Thu 18 Dec 2025 01:01:21 +0000 Manifest next update: Fri 19 Dec 2025 01:01:21 +0000 Files and hashes: 1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: TYqpcWe4/tKUaP4HJcgEG2PvOCLEkZvDl2vc4IYEBpA=) 2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:cc:b5:94:fc:57:5b:fa:d3:74:f3:5c:90:28:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed Validity Not Before: Dec 18 01:01:21 2025 GMT Not After : Dec 19 01:01:21 2025 GMT Subject: CN=8008b454df70ac9589f2017346621f1edf609d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a8:6c:ae:b5:9f:ca:a2:1c:39:e7:8a:e9:7b: 65:e8:4b:9c:4c:6d:c8:24:03:20:9e:0f:8e:ca:fd: 2b:a8:e6:59:a8:31:93:c3:e3:d0:b8:7b:bd:e1:ea: 92:2d:07:d3:18:b2:8d:75:e1:c3:73:1f:09:eb:af: e6:53:06:e6:d5:27:21:1c:0e:81:9a:92:f8:d0:e2: cd:db:ee:c5:5c:76:9d:d0:08:b6:d8:4e:ce:06:6b: 8b:f2:4b:a1:79:ce:cf:4d:2f:15:d9:b4:6d:c0:c2: 3e:f0:93:29:eb:f6:ba:86:4e:b5:3f:a3:02:00:54: 11:1b:67:55:b5:d0:90:9e:d3:0e:15:cb:7c:83:97: 5d:8a:71:f7:2a:f6:8c:d9:56:31:97:23:f7:86:b8: 67:2c:76:2b:9f:b9:d6:21:f1:a4:30:39:57:50:cb: 19:e9:93:fa:ff:8d:ff:2b:4f:d2:1b:26:25:a1:1a: 2c:ec:9d:c0:df:5e:57:75:7c:11:0d:ee:cb:ec:55: 37:56:39:2d:48:12:ae:04:dc:8d:59:4f:87:0c:4b: d3:4f:56:19:4f:44:bb:95:48:f1:a2:4b:ff:f0:3f: 8b:37:dd:cd:8e:39:5f:4b:85:97:a6:6c:b1:aa:9f: f6:ea:3d:e4:ac:f2:f7:2b:fe:2c:50:66:aa:0d:70: 7d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:08:B4:54:DF:70:AC:95:89:F2:01:73:46:62:1F:1E:DF:60:9D:5C X509v3 Authority Key Identifier: keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:07:bb:c3:90:27:80:c6:60:43:77:e9:df:10:5b:81:c4:19: e2:35:82:c0:d5:6f:af:20:45:f0:08:9f:34:db:9f:bc:ac:0f: 1a:cd:15:b3:30:2e:cc:72:c2:00:9b:de:86:6d:60:56:50:68: 3f:23:ee:ca:e6:0f:98:91:e2:c7:76:51:1d:b1:e9:ee:c4:ad: 9e:b8:6b:86:3c:34:fe:06:86:79:8a:e0:3d:48:9e:ca:a1:be: bc:5c:2f:9c:6f:99:5f:0b:a1:7f:ff:7f:40:1b:f3:65:3a:3e: 7d:3c:f1:88:d1:89:13:fe:98:49:20:99:9c:61:97:76:d5:f9: 7a:4d:ff:6d:a6:7b:f1:fb:c2:72:3f:a4:f1:a7:de:bc:ec:c9: 46:ad:cf:9e:26:fc:57:e9:13:86:ef:31:b4:d6:dc:8c:7d:b9: 1b:e8:23:4e:eb:23:de:07:41:88:a0:01:56:69:34:b7:cd:82: 09:5f:af:5c:b1:f7:df:f1:56:a7:5b:ba:e5:8c:59:ed:19:f4: a6:ee:6b:ea:ab:ab:1f:13:b0:ad:a2:2a:9d:ab:dc:c5:1b:fa: dc:8d:4c:8b:ca:cc:44:4d:90:41:f1:be:e9:81:b0:99:eb:00: 42:94:53:b0:6a:e9:e7:43:52:66:5d:19:95:24:8e:72:6a:8e: c8:f9:31:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+cy1lPxXW/rTdPNckCg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2 ZjcxZWQwHhcNMjUxMjE4MDEwMTIxWhcNMjUxMjE5MDEwMTIxWjAzMTEwLwYDVQQD Eyg4MDA4YjQ1NGRmNzBhYzk1ODlmMjAxNzM0NjYyMWYxZWRmNjA5ZDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ahsrrWfyqIcOeeK6Xtl6EucTG3I JAMgng+Oyv0rqOZZqDGTw+PQuHu94eqSLQfTGLKNdeHDcx8J66/mUwbm1SchHA6B mpL40OLN2+7FXHad0Ai22E7OBmuL8kuhec7PTS8V2bRtwMI+8JMp6/a6hk61P6MC AFQRG2dVtdCQntMOFct8g5ddinH3KvaM2VYxlyP3hrhnLHYrn7nWIfGkMDlXUMsZ 6ZP6/43/K0/SGyYloRos7J3A315XdXwRDe7L7FU3VjktSBKuBNyNWU+HDEvTT1YZ T0S7lUjxokv/8D+LN93NjjlfS4WXpmyxqp/26j3krPL3K/4sUGaqDXB91QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAItFTfcKyVifIBc0ZiHx7fYJ1cMB8GA1UdIwQY MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwe7w5An gMZgQ3fp3xBbgcQZ4jWCwNVvryBF8AifNNufvKwPGs0VszAuzHLCAJvehm1gVlBo PyPuyuYPmJHix3ZRHbHp7sStnrhrhjw0/gaGeYrgPUieyqG+vFwvnG+ZXwuhf/9/ QBvzZTo+fTzxiNGJE/6YSSCZnGGXdtX5ek3/baZ78fvCcj+k8afevOzJRq3Pnib8 V+kThu8xtNbcjH25G+gjTusj3gdBiKABVmk0t82CCV+vXLH33/FWp1u65YxZ7Rn0 pu5r6qurHxOwraIqnavcxRv63I1Mi8rMRE2QQfG+6YGwmesAQpRTsGrp50NSZl0Z lSSOcmqOyPkxKw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:51:55 2025 by rpki-client