This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json) Hash identifier: 5WUQZEFZqOm2FPaIYyNlD8vOmX6eP9LsGBMHFivYmHk= Subject key identifier: B8:38:C0:CB:9B:C5:43:B8:07:7A:32:A0:95:C3:15:C8:5D:25:E7:67 Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4 Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4 Certificate serial: 019B39EAD7828EF6D1BF51F09998B6C4813E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft Manifest number: 179E Signing time: Sat 20 Dec 2025 04:00:50 +0000 Manifest this update: Sat 20 Dec 2025 04:00:50 +0000 Manifest next update: Sun 21 Dec 2025 04:00:50 +0000 Files and hashes: 1: ELVDoYmFaTCtnTMhAqZufMc8mXg.roa (hash: GX/uRjpcUEeVnkiAfonTZ3Q7zJlqdixXVsuNiqh4BrE=) 2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: qSSlXSa+yy/L6COvXs2E79uRgFsWTNG8b8FXGUX3wa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:d7:82:8e:f6:d1:bf:51:f0:99:98:b6:c4:81:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4 Validity Not Before: Dec 20 04:00:50 2025 GMT Not After : Dec 21 04:00:50 2025 GMT Subject: CN=b838c0cb9bc543b8077a32a095c315c85d25e767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:1a:36:19:4c:34:8c:2f:6a:dc:26:ab:b2: ab:ab:96:e3:33:32:d9:7c:22:dc:a4:d7:c5:e3:f1: 59:93:2e:8e:92:fc:36:ab:f4:b6:fb:58:48:a6:a5: 63:09:75:30:24:2b:cd:58:7a:76:5c:d7:39:66:4c: c0:02:1e:1f:c8:8b:7c:bc:70:d4:03:22:c6:14:6e: e2:39:c8:55:44:5d:4e:f8:13:e5:7f:5f:0c:75:4a: 8f:e6:ed:33:71:f2:bb:12:bf:e7:dd:c2:e4:66:66: 5a:c3:b0:0c:8d:60:b2:af:35:fa:8a:61:27:b5:80: de:1d:49:d6:25:d1:8a:6e:2c:9b:44:ca:03:17:02: f9:ae:2e:72:53:33:cc:90:b8:92:95:ed:60:36:60: 78:a7:8b:fb:e6:4a:ec:72:58:60:82:4d:43:5a:dc: 90:2c:74:85:20:f8:40:cd:2e:57:89:d3:c8:3e:d3: 82:91:c6:7d:42:56:37:39:63:77:c4:db:63:35:fe: 31:05:83:c5:af:d2:dd:bc:06:5f:99:89:de:93:cd: 66:5a:31:7d:a0:79:dc:2e:69:93:e8:a7:87:32:ec: d0:9b:92:3d:cf:17:2e:15:c8:32:d7:7a:03:9b:41: be:2d:97:fc:d9:be:ae:d0:5c:04:0d:d3:dd:30:e5: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:38:C0:CB:9B:C5:43:B8:07:7A:32:A0:95:C3:15:C8:5D:25:E7:67 X509v3 Authority Key Identifier: keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:61:4e:da:6b:fc:38:ba:f0:a4:5e:ba:df:69:58:3c:2f:c0: 19:f3:b1:21:35:42:f5:9e:2e:f2:95:c1:4e:62:52:c2:2d:21: 75:76:0c:b4:79:01:cd:4e:9f:24:7a:bd:83:53:c5:03:64:01: 21:cd:1e:c8:d0:2b:c8:44:50:8b:cc:e5:6b:96:0f:3d:cd:95: 39:d6:84:bb:58:66:d2:b3:c2:8e:38:f0:38:df:64:83:f6:4d: d4:96:73:36:fa:35:e2:ca:7a:4b:54:b1:53:21:09:55:b7:22: 76:3a:42:b9:7d:3b:7f:83:92:89:5c:9e:df:39:c7:95:ef:20: 64:02:1a:8a:19:1d:a8:19:4e:8d:bf:29:8b:42:5f:10:c7:e6: 5e:3f:96:ca:43:fb:21:65:56:86:bb:12:a0:2e:80:d2:8c:68: c8:3b:5b:25:85:c5:1c:c6:1b:2c:33:33:41:5a:3d:b7:dd:d5: ec:58:97:b8:0b:7a:f4:b9:b5:5a:89:bb:ca:55:42:cc:ea:53: d4:39:f9:2d:db:e2:e7:20:9e:c9:a0:9a:c9:7b:d9:ad:8b:57: ec:45:d2:e8:1c:7d:31:1c:94:04:21:f3:43:1f:3d:f4:7a:00: 31:e3:e7:cf:5d:57:21:15:2b:0a:89:99:40:b3:48:96:16:91: 16:1b:6c:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56teCjvbRv1HwmZi2xIE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTgxZmI1Y2YwZmIzMmM0NTc1Zjg0MTNhY2JkNDFhYTg0 YjgyZjQwHhcNMjUxMjIwMDQwMDUwWhcNMjUxMjIxMDQwMDUwWjAzMTEwLwYDVQQD EyhiODM4YzBjYjliYzU0M2I4MDc3YTMyYTA5NWMzMTVjODVkMjVlNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAkaNhlMNIwvatwmq7Krq5bjMzLZ fCLcpNfF4/FZky6Okvw2q/S2+1hIpqVjCXUwJCvNWHp2XNc5ZkzAAh4fyIt8vHDU AyLGFG7iOchVRF1O+BPlf18MdUqP5u0zcfK7Er/n3cLkZmZaw7AMjWCyrzX6imEn tYDeHUnWJdGKbiybRMoDFwL5ri5yUzPMkLiSle1gNmB4p4v75krsclhggk1DWtyQ LHSFIPhAzS5XidPIPtOCkcZ9QlY3OWN3xNtjNf4xBYPFr9LdvAZfmYnek81mWjF9 oHncLmmT6KeHMuzQm5I9zxcuFcgy13oDm0G+LZf82b6u0FwEDdPdMOUzbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLg4wMubxUO4B3oyoJXDFchdJednMB8GA1UdIwQY MBaAFHLoH7XPD7MsRXX4QTrL1BqoS4L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQt Y2RhNmUxOWZmYjg4LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQtY2RhNmUxOWZmYjg4 LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGFO2mv8 OLrwpF6632lYPC/AGfOxITVC9Z4u8pXBTmJSwi0hdXYMtHkBzU6fJHq9g1PFA2QB Ic0eyNAryERQi8zla5YPPc2VOdaEu1hm0rPCjjjwON9kg/ZN1JZzNvo14sp6S1Sx UyEJVbcidjpCuX07f4OSiVye3znHle8gZAIaihkdqBlOjb8pi0JfEMfmXj+WykP7 IWVWhrsSoC6A0oxoyDtbJYXFHMYbLDMzQVo9t93V7FiXuAt69Lm1Wom7ylVCzOpT 1Dn5Ldvi5yCeyaCayXvZrYtX7EXS6Bx9MRyUBCHzQx899HoAMePnz11XIRUrComZ QLNIlhaRFhtscg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:32:36 2025 by rpki-client