This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json) Hash identifier: SbyA2FK1C7ieiiE5bceV9s7XZfODSr2W80RxmQV/2MQ= Subject key identifier: 00:81:D7:54:4C:1F:29:BD:79:28:DD:40:C9:12:C3:77:3B:4E:50:06 Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d Certificate serial: 019B3D91127110843AE7799ACD0E7D0AFC72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 21:01:16 +0000 Manifest this update: Sat 20 Dec 2025 21:01:16 +0000 Manifest next update: Sun 21 Dec 2025 21:01:16 +0000 Files and hashes: 1: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: m0ZBkHal1XUKk9MYFhkV5jqWUJ2M29ZbIxdCEWlznH4=) 2: daRkFVsWIwe8tAsklauoDwt6UpA.roa (hash: a6fXOEYxSdy4VfRiyyu63eijEDfNFxmj7t/XlgH/vhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:12:71:10:84:3a:e7:79:9a:cd:0e:7d:0a:fc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d Validity Not Before: Dec 20 21:01:16 2025 GMT Not After : Dec 21 21:01:16 2025 GMT Subject: CN=0081d7544c1f29bd7928dd40c912c3773b4e5006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:15:4b:7b:ac:a5:75:db:95:c6:1d:e7:6c:f5: 91:70:02:49:06:84:91:ba:d0:a5:9f:1d:af:e2:95: b6:2b:86:2d:1e:79:8d:a9:27:13:32:68:f7:23:8d: c0:a8:1f:d8:a0:ea:32:90:38:23:a2:d8:de:f0:e4: ef:d8:59:65:42:0d:8c:70:bc:b6:69:7c:b3:44:77: e6:63:c8:cf:cc:74:c9:a5:2e:87:e3:ce:77:32:b3: 20:f4:c9:fe:c3:bc:31:91:f0:b7:db:ea:2d:b0:ac: 16:07:18:0d:df:dd:2a:66:a1:5b:8f:5f:a4:2d:57: 45:43:ca:c1:84:3f:af:48:2b:f9:7b:23:c5:58:3c: 0a:3d:27:2c:8c:36:30:00:47:c2:31:8f:2b:d3:58: 29:f4:ee:be:90:d1:19:5b:cb:4c:ea:e1:7d:09:56: 2c:36:df:11:90:6d:ac:64:d1:6a:48:d5:5d:42:6a: 82:54:a9:a0:94:39:77:4a:28:21:c0:d7:af:b4:f5: fa:c4:72:00:76:c6:0a:03:a5:15:e7:0b:62:11:84: 5f:6a:17:f5:16:02:58:70:c6:b4:6e:4b:c5:0a:af: a8:40:08:18:a7:70:36:04:6f:46:6a:82:c0:41:7d: 19:d7:d3:56:1e:17:a0:3e:57:ad:e1:ea:bf:1c:14: 47:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:81:D7:54:4C:1F:29:BD:79:28:DD:40:C9:12:C3:77:3B:4E:50:06 X509v3 Authority Key Identifier: keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f7:85:f6:66:58:fa:52:f8:c8:2e:07:26:7a:91:24:a5:15: ec:91:af:c2:ae:d7:9d:ff:42:b5:5f:7f:28:5f:45:e2:f5:1e: 7a:f9:01:a5:f8:73:2f:3b:09:52:d6:6c:70:5b:45:e0:95:fe: 61:ce:ed:61:ac:7c:09:1f:d7:18:5f:3e:e5:18:00:fd:8e:16: 60:3a:83:51:42:a5:4e:c5:1b:c7:a4:ad:16:d8:2d:b0:5c:6e: 5e:7e:81:a7:8a:3e:54:9f:3d:a9:2a:ec:e8:2c:01:f4:f1:55: 15:9f:1e:c6:40:ba:96:93:87:94:9e:cf:9d:41:94:a7:be:9b: 67:8f:c4:03:53:0e:a5:40:bf:6d:dc:13:de:ad:fa:d3:ad:6c: 86:de:02:7c:43:27:40:76:25:27:17:1e:13:c3:c8:d5:65:3c: 30:ac:89:28:7d:2a:ee:34:e1:40:18:9a:bf:7f:6e:48:dd:ad: cd:25:6d:19:92:58:0a:6d:b0:4b:aa:9e:a2:42:93:72:8c:74: 97:fa:8f:bc:8d:4d:75:73:9b:2d:93:eb:e1:61:d9:f4:04:d1: 79:a5:ed:f3:73:89:f5:ec:78:44:ff:6b:2b:32:63:b2:11:40: 35:d0:f0:ac:8d:f9:06:cd:17:f1:38:88:f8:94:18:28:33:e0: 39:f7:4c:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRJxEIQ653mazQ59CvxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTEyYTM4NzZmZjdiZDAwZDlkOWViYjk3MmFiMWU2MjFl YTFlOGQwHhcNMjUxMjIwMjEwMTE2WhcNMjUxMjIxMjEwMTE2WjAzMTEwLwYDVQQD EygwMDgxZDc1NDRjMWYyOWJkNzkyOGRkNDBjOTEyYzM3NzNiNGU1MDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xVLe6yldduVxh3nbPWRcAJJBoSR utClnx2v4pW2K4YtHnmNqScTMmj3I43AqB/YoOoykDgjotje8OTv2FllQg2McLy2 aXyzRHfmY8jPzHTJpS6H4853MrMg9Mn+w7wxkfC32+otsKwWBxgN390qZqFbj1+k LVdFQ8rBhD+vSCv5eyPFWDwKPScsjDYwAEfCMY8r01gp9O6+kNEZW8tM6uF9CVYs Nt8RkG2sZNFqSNVdQmqCVKmglDl3SighwNevtPX6xHIAdsYKA6UV5wtiEYRfahf1 FgJYcMa0bkvFCq+oQAgYp3A2BG9GaoLAQX0Z19NWHhegPlet4eq/HBRHMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACB11RMHym9eSjdQMkSw3c7TlAGMB8GA1UdIwQY MBaAFHLhKjh2/3vQDZ2eu5cqseYh6h6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQt NDU1MjdlOGU0NGQyLzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQtNDU1MjdlOGU0NGQy LzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGveF9mZY +lL4yC4HJnqRJKUV7JGvwq7Xnf9CtV9/KF9F4vUeevkBpfhzLzsJUtZscFtF4JX+ Yc7tYax8CR/XGF8+5RgA/Y4WYDqDUUKlTsUbx6StFtgtsFxuXn6Bp4o+VJ89qSrs 6CwB9PFVFZ8exkC6lpOHlJ7PnUGUp76bZ4/EA1MOpUC/bdwT3q36061sht4CfEMn QHYlJxceE8PI1WU8MKyJKH0q7jThQBiav39uSN2tzSVtGZJYCm2wS6qeokKTcox0 l/qPvI1NdXObLZPr4WHZ9ATReaXt83OJ9ex4RP9rKzJjshFANdDwrI35Bs0X8TiI +JQYKDPgOfdMyQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:04 2025 by rpki-client