This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json) Hash identifier: 7jn8qypwgkpfYafGDmAsiD8L5/C0t3nGu1gwAkIW2hQ= Subject key identifier: BF:99:88:A1:08:42:94:CB:1C:AF:AC:BE:9E:37:8D:56:49:8B:B8:16 Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78 Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78 Certificate serial: 019B2F66EF7606170AA3E9EC0D67E3D56507 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 03:00:33 +0000 Manifest this update: Thu 18 Dec 2025 03:00:33 +0000 Manifest next update: Fri 19 Dec 2025 03:00:33 +0000 Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: TdxTSLYYBtLrL57H2DFq9gY50YiG1XTTpuJEWMXHLJc=) 2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:66:ef:76:06:17:0a:a3:e9:ec:0d:67:e3:d5:65:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78 Validity Not Before: Dec 18 03:00:33 2025 GMT Not After : Dec 19 03:00:33 2025 GMT Subject: CN=bf9988a1084294cb1cafacbe9e378d56498bb816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:b1:a0:aa:82:c6:8f:ab:0c:08:2f:d4:4c: 2c:a8:38:86:ae:ec:e8:48:60:64:0c:2c:b3:7a:04: 6a:5d:10:c2:99:46:37:66:bd:bb:ac:20:71:07:63: 6f:eb:fc:7f:b1:ad:95:9b:1c:35:95:15:82:9a:26: 46:cf:c1:7f:cd:b0:b3:3d:bf:d8:56:d0:7b:99:c2: 59:56:de:72:66:68:ad:e4:68:a9:58:b7:ec:81:99: 94:45:88:dd:b1:65:23:84:74:ef:ef:5b:3b:a4:f6: fd:8f:f0:72:4d:bc:53:9f:0d:ff:82:d7:54:1f:29: f5:1a:3a:3a:9d:ae:94:05:48:34:1c:3c:56:a1:69: fc:52:4c:74:13:e6:59:ad:59:6b:2b:4f:d9:26:d5: 8c:cc:e2:50:c5:b3:d7:29:c1:77:ed:78:85:13:85: c9:c5:36:7c:76:70:22:86:61:2f:21:6b:74:13:d0: 0d:f1:39:52:ac:7f:32:63:43:dd:fa:1f:6f:ea:f8: a0:a3:64:7c:51:45:00:04:4e:cd:b2:59:d6:b2:77: a4:91:dd:94:6f:dc:df:d4:7e:2a:01:4e:38:1e:e0: 93:99:6d:98:2a:5b:a7:c6:9b:45:d0:88:bf:b1:d5: c1:6c:e0:d3:bb:72:f9:52:a0:c3:c6:ca:20:6d:8a: 49:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:99:88:A1:08:42:94:CB:1C:AF:AC:BE:9E:37:8D:56:49:8B:B8:16 X509v3 Authority Key Identifier: keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b6:cc:52:fa:3d:d3:2e:c8:f7:0c:ca:f5:5a:f0:1c:88:da: 18:f1:62:2e:49:1e:38:19:a6:03:80:11:12:ac:e1:4e:48:c0: d5:09:e4:35:3e:e8:48:b0:f3:0f:37:13:b0:a9:47:93:5f:11: b5:c6:a7:fb:50:66:08:e4:92:bf:09:bc:5c:26:bc:ac:1d:18: fd:a7:33:8a:11:ce:6f:35:21:cc:73:0e:d3:90:cb:f0:49:ef: a8:c3:11:f7:51:bb:41:b1:af:81:4e:99:4d:7f:c9:d1:a9:5d: 6f:98:b8:4a:e8:ca:e3:0a:c3:7f:49:f4:6a:22:56:18:0d:a7: 69:96:69:f2:81:7e:e6:fd:04:fc:99:5e:f3:bb:40:4a:5b:7e: dc:f1:88:07:d4:06:f7:de:29:60:1e:c4:84:91:14:d3:6f:f8: e7:5b:5e:3a:4f:48:43:d1:2e:fa:f9:45:a7:f7:a0:98:e0:67: 22:a7:40:53:a5:c4:a0:e6:83:3c:85:30:9e:91:6c:a3:05:6b: 12:e3:be:3c:6b:c6:97:6a:53:8c:7d:ad:be:94:1c:4d:04:f3: 7f:0a:a9:83:e6:be:cc:62:32:22:fa:3a:10:26:99:c4:8b:a0: a9:4a:80:c8:c3:19:d1:cd:00:a2:43:46:e4:c7:dd:88:30:e4: e8:10:20:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZu92BhcKo+nsDWfj1WUHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NGZhNTY3YzA3YTVhMmUxZjJjOGNiMjYxMWYxNzM2OTc4 NzFmNzgwHhcNMjUxMjE4MDMwMDMzWhcNMjUxMjE5MDMwMDMzWjAzMTEwLwYDVQQD EyhiZjk5ODhhMTA4NDI5NGNiMWNhZmFjYmU5ZTM3OGQ1NjQ5OGJiODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH6xoKqCxo+rDAgv1EwsqDiGruzo SGBkDCyzegRqXRDCmUY3Zr27rCBxB2Nv6/x/sa2Vmxw1lRWCmiZGz8F/zbCzPb/Y VtB7mcJZVt5yZmit5GipWLfsgZmURYjdsWUjhHTv71s7pPb9j/ByTbxTnw3/gtdU Hyn1Gjo6na6UBUg0HDxWoWn8Ukx0E+ZZrVlrK0/ZJtWMzOJQxbPXKcF37XiFE4XJ xTZ8dnAihmEvIWt0E9AN8TlSrH8yY0Pd+h9v6vigo2R8UUUABE7NslnWsnekkd2U b9zf1H4qAU44HuCTmW2YKlunxptF0Ii/sdXBbODTu3L5UqDDxsogbYpJMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+ZiKEIQpTLHK+svp43jVZJi7gWMB8GA1UdIwQY MBaAFAlPpWfAelouHyyMsmEfFzaXhx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGIt YWVhMjUyZGM2M2IzLzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGItYWVhMjUyZGM2M2Iz LzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrbMUvo9 0y7I9wzK9VrwHIjaGPFiLkkeOBmmA4AREqzhTkjA1QnkNT7oSLDzDzcTsKlHk18R tcan+1BmCOSSvwm8XCa8rB0Y/aczihHObzUhzHMO05DL8EnvqMMR91G7QbGvgU6Z TX/J0aldb5i4SujK4wrDf0n0aiJWGA2naZZp8oF+5v0E/Jle87tASlt+3PGIB9QG 994pYB7EhJEU02/451teOk9IQ9Eu+vlFp/egmOBnIqdAU6XEoOaDPIUwnpFsowVr EuO+PGvGl2pTjH2tvpQcTQTzfwqpg+a+zGIyIvo6ECaZxIugqUqAyMMZ0c0AokNG 5MfdiDDk6BAg9w== -----END CERTIFICATE-----Generated at Thu Dec 18 11:10:58 2025 by rpki-client