This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json) Hash identifier: V/NrQElDNF/nkxpKM9w/n89OBWde/+E3actBL4L30pY= Subject key identifier: 5D:56:A1:45:D6:3B:71:A6:FF:DE:D7:78:CC:47:F0:BA:66:81:97:6A Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a Certificate serial: 019B307A00BBFADBF6CA7C66786FD4AC64F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 08:01:00 +0000 Manifest this update: Thu 18 Dec 2025 08:01:00 +0000 Manifest next update: Fri 19 Dec 2025 08:01:00 +0000 Files and hashes: 1: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: odzRoqskIFfPLPKMSRayLPgjpYtD/NkcW/PuDOLQGFM=) 2: jWNgVTvc3owe3kF91r8d7uRQV_o.roa (hash: uQLZ/d2z4o+33Z42D6wrDoH9q/yv6pAWgOV+vjfJeYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7a:00:bb:fa:db:f6:ca:7c:66:78:6f:d4:ac:64:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a Validity Not Before: Dec 18 08:01:00 2025 GMT Not After : Dec 19 08:01:00 2025 GMT Subject: CN=5d56a145d63b71a6ffded778cc47f0ba6681976a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:43:84:50:63:40:c9:1f:f2:23:f1:df:db:8a: 55:5a:15:37:a6:ca:ed:31:21:eb:19:ff:a8:31:70: 34:ce:e7:70:3a:d0:7a:e9:19:cc:97:3a:2e:a2:da: 0b:73:e7:72:10:85:3a:40:a8:54:4d:73:fb:8b:d5: e7:65:b4:44:7d:89:fd:ee:db:5d:90:9f:e4:c1:ed: ce:fc:16:51:dd:fa:a3:66:04:6d:77:b0:eb:7c:22: 07:29:f2:ed:27:3e:55:5e:61:6d:c1:38:ea:84:ce: 93:4b:dc:ec:1f:f8:a5:20:09:12:00:67:f7:4a:53: 7b:fb:e7:c8:75:38:41:d6:c0:70:bd:b6:33:9e:ae: 61:d8:cb:e9:47:cc:f0:1e:8e:3f:b5:09:42:00:81: 07:6b:16:8a:69:2d:a2:fb:1d:f5:4a:15:a4:94:80: fe:84:37:5e:15:44:4c:14:52:8e:03:ec:32:4a:2b: 73:03:d7:c2:1b:16:99:bc:e3:34:b2:59:e8:54:23: 63:c7:11:23:f4:94:8b:03:76:06:b6:7d:1e:f0:a6: b1:58:f0:8a:d4:db:80:c0:b6:bb:11:35:29:17:3f: fa:9d:99:9d:bd:ff:de:f9:09:f2:f8:84:9e:48:cd: 14:79:82:a1:9a:27:20:70:6d:61:00:1c:2a:67:a7: 92:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:56:A1:45:D6:3B:71:A6:FF:DE:D7:78:CC:47:F0:BA:66:81:97:6A X509v3 Authority Key Identifier: keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b4:0f:f2:33:ae:40:69:ec:32:93:c6:1c:0c:b3:a1:5a:df: 0f:fe:af:7d:c9:37:91:28:f8:5a:8c:41:55:9d:e3:15:63:09: b9:39:95:7a:7d:be:7d:d6:0d:25:fa:23:ec:e8:76:8e:c6:88: 3a:eb:2e:a6:13:85:68:5c:5e:27:d1:87:a0:f8:b3:28:29:cf: bb:ab:f5:a1:33:d8:fb:e3:8d:f1:7d:69:2e:75:04:89:8e:a5: 27:7f:13:53:0e:f9:ba:18:3d:be:f9:2d:4a:dc:6b:da:41:12: 44:6d:eb:dc:09:3f:44:1f:cc:1a:c0:53:0e:9a:cd:c4:62:0e: 19:2c:c9:92:f7:79:11:6a:c9:46:da:e8:5e:90:e0:52:c1:2a: c0:04:f4:7f:69:45:3e:9e:27:05:6d:3f:92:88:49:cd:04:e6: ed:90:7a:09:e8:09:79:fa:ab:95:bc:ee:82:84:db:26:1b:45: c7:6c:0a:64:d5:a4:6a:6f:c9:34:c1:78:d4:37:57:30:33:19: f5:f2:7c:17:85:cc:dd:c2:d3:7e:5f:fc:50:65:54:dd:8b:23: e0:21:bb:74:2e:16:fa:79:c5:62:41:d0:c8:75:dc:c5:41:6b: 43:04:48:31:bd:06:28:1c:df:a4:ae:23:05:7e:64:90:5d:c8: 83:ea:e2:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswegC7+tv2ynxmeG/UrGT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkY2I5NzZiYjYwMjkyMTZmN2EyYWQwNWI3OTMyZjRhNTVl MGNmOGEwHhcNMjUxMjE4MDgwMTAwWhcNMjUxMjE5MDgwMTAwWjAzMTEwLwYDVQQD Eyg1ZDU2YTE0NWQ2M2I3MWE2ZmZkZWQ3NzhjYzQ3ZjBiYTY2ODE5NzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUOEUGNAyR/yI/Hf24pVWhU3psrt MSHrGf+oMXA0zudwOtB66RnMlzouotoLc+dyEIU6QKhUTXP7i9XnZbREfYn97ttd kJ/kwe3O/BZR3fqjZgRtd7DrfCIHKfLtJz5VXmFtwTjqhM6TS9zsH/ilIAkSAGf3 SlN7++fIdThB1sBwvbYznq5h2MvpR8zwHo4/tQlCAIEHaxaKaS2i+x31ShWklID+ hDdeFURMFFKOA+wySitzA9fCGxaZvOM0slnoVCNjxxEj9JSLA3YGtn0e8KaxWPCK 1NuAwLa7ETUpFz/6nZmdvf/e+Qny+ISeSM0UeYKhmicgcG1hABwqZ6eSlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1WoUXWO3Gm/97XeMxH8LpmgZdqMB8GA1UdIwQY MBaAFP3Ll2u2ApIW96KtBbeTL0pV4M+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWIt ZDg4OGEwNjg5YzE5LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWItZDg4OGEwNjg5YzE5 LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7QP8jOu QGnsMpPGHAyzoVrfD/6vfck3kSj4WoxBVZ3jFWMJuTmVen2+fdYNJfoj7Oh2jsaI OusuphOFaFxeJ9GHoPizKCnPu6v1oTPY++ON8X1pLnUEiY6lJ38TUw75uhg9vvkt Stxr2kESRG3r3Ak/RB/MGsBTDprNxGIOGSzJkvd5EWrJRtroXpDgUsEqwAT0f2lF Pp4nBW0/kohJzQTm7ZB6CegJefqrlbzugoTbJhtFx2wKZNWkam/JNMF41DdXMDMZ 9fJ8F4XM3cLTfl/8UGVU3Ysj4CG7dC4W+nnFYkHQyHXcxUFrQwRIMb0GKBzfpK4j BX5kkF3Ig+riTg== -----END CERTIFICATE-----Generated at Thu Dec 18 10:30:24 2025 by rpki-client