This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json) Hash identifier: ilvI3MEXusHp86Vv7yba8dgrmDVR0hwnKinIik/aw5A= Subject key identifier: D4:EB:B9:8F:0A:2B:62:3A:1E:12:EE:2D:B7:77:B6:A8:26:05:CE:F4 Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98 Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098 Certificate serial: 019B51BC1423B55E4181FE995CC788911CBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 19:00:38 +0000 Manifest this update: Wed 24 Dec 2025 19:00:38 +0000 Manifest next update: Thu 25 Dec 2025 19:00:38 +0000 Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: XcBAQyBemmfuPJ/pbqAIUwt5zTbeNW5qemo6j3vq7R4=) 2: tsQCK0at0tvh2TQxSMohTv0qJJo.roa (hash: 6ge8utmi5hP9DNzFySVDCcGypw9lo+O2IamCCwk3yDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:14:23:b5:5e:41:81:fe:99:5c:c7:88:91:1c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098 Validity Not Before: Dec 24 19:00:38 2025 GMT Not After : Dec 25 19:00:38 2025 GMT Subject: CN=d4ebb98f0a2b623a1e12ee2db777b6a82605cef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:38:88:ed:2d:33:11:fa:55:43:af:ee:5e: 70:54:fb:65:02:e6:5c:85:b2:1a:8c:6b:c5:0f:bd: 8f:11:df:02:38:31:d1:fe:0d:42:2a:d0:cd:fd:ca: a2:1d:92:31:e6:49:a4:25:fc:81:06:7a:e4:3b:33: df:4d:11:ac:87:12:fd:18:36:9b:40:2a:ac:e1:b0: de:43:f3:7d:13:69:f3:47:b9:5f:16:1d:60:e8:d2: 98:60:c7:ac:cc:05:72:3a:dc:5f:6d:27:45:c3:1a: dc:b9:2f:78:98:8e:10:d3:98:ed:71:e2:3b:33:be: 44:34:0c:1f:ab:9f:cb:7e:2a:a7:ca:cc:a1:01:f3: 95:db:b1:82:f1:b8:cc:17:11:47:c3:84:59:37:1a: c5:ec:db:35:42:d7:09:aa:0c:69:70:8b:ea:fe:19: a5:47:0a:64:60:2e:bd:91:90:e5:11:a1:d3:ff:d3: 8f:49:44:e3:7d:dc:23:30:54:47:8c:db:32:03:b8: 39:cf:e0:d9:9a:e3:04:50:3f:27:de:51:95:fd:0e: 66:7e:18:24:20:93:ef:48:fd:bf:07:3b:4f:9a:9e: 7e:1d:a2:0f:72:9f:83:d9:77:d6:21:bf:e4:c8:35: 45:e2:f5:36:27:70:c9:1b:5d:6c:9a:a8:98:23:d6: 13:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EB:B9:8F:0A:2B:62:3A:1E:12:EE:2D:B7:77:B6:A8:26:05:CE:F4 X509v3 Authority Key Identifier: keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:df:7f:08:1d:e7:52:4f:75:3c:eb:8f:0e:d8:3e:44:34:8b: e9:01:eb:db:fe:90:81:7f:2c:4d:6a:d9:84:4a:47:9b:ea:9c: 10:78:6d:1f:87:38:7f:f8:d4:fb:00:b2:78:6a:bd:de:99:fa: 6b:de:d3:54:3a:f3:62:b1:75:2e:e6:e6:52:ea:a1:b1:b4:c1: da:64:79:0f:7e:3b:11:e3:03:1d:ab:a2:33:05:09:31:a3:24: 44:8d:4a:e3:3e:0d:74:25:0a:f0:4d:86:d0:d8:e3:f0:ff:7b: bc:7c:d3:c0:ab:f2:37:b8:62:e8:d9:a7:f1:e0:fc:5d:57:d6: 7e:16:46:b3:04:a7:c7:25:1e:32:ea:f8:14:1f:71:49:0e:0b: b2:73:90:d5:d1:fb:ba:5c:50:50:d4:de:e0:15:0a:4e:6c:b2: d0:2d:37:e5:f1:8e:3c:f3:88:56:fd:8a:65:e7:25:27:0c:19: 0c:74:0f:5f:2f:53:42:c0:9d:f5:56:7d:6f:8e:b4:1a:67:a7: 14:73:0e:86:07:80:72:1f:92:98:d6:6d:b2:b3:98:fe:2a:de: 56:a0:1d:29:5c:ea:00:aa:5a:40:cb:35:08:cc:a4:e3:2b:d8: b2:92:70:34:6f:51:6e:48:24:34:ed:48:6a:a5:2f:92:1d:17: 81:01:3e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvBQjtV5Bgf6ZXMeIkRy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NGVhMWNmNGZkYzM0NzVjMWYyOGQ2MTFjMWYxOGZlMDI3 YzEwOTgwHhcNMjUxMjI0MTkwMDM4WhcNMjUxMjI1MTkwMDM4WjAzMTEwLwYDVQQD EyhkNGViYjk4ZjBhMmI2MjNhMWUxMmVlMmRiNzc3YjZhODI2MDVjZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIU4iO0tMxH6VUOv7l5wVPtlAuZc hbIajGvFD72PEd8CODHR/g1CKtDN/cqiHZIx5kmkJfyBBnrkOzPfTRGshxL9GDab QCqs4bDeQ/N9E2nzR7lfFh1g6NKYYMeszAVyOtxfbSdFwxrcuS94mI4Q05jtceI7 M75ENAwfq5/LfiqnysyhAfOV27GC8bjMFxFHw4RZNxrF7Ns1QtcJqgxpcIvq/hml RwpkYC69kZDlEaHT/9OPSUTjfdwjMFRHjNsyA7g5z+DZmuMEUD8n3lGV/Q5mfhgk IJPvSP2/BztPmp5+HaIPcp+D2XfWIb/kyDVF4vU2J3DJG11smqiYI9YTzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTruY8KK2I6HhLuLbd3tqgmBc70MB8GA1UdIwQY MBaAFAlOoc9P3DR1wfKNYRwfGP4CfBCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDkt OTgyY2NlODY4ZmZhLzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDktOTgyY2NlODY4ZmZh LzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvd9/CB3n Uk91POuPDtg+RDSL6QHr2/6QgX8sTWrZhEpHm+qcEHhtH4c4f/jU+wCyeGq93pn6 a97TVDrzYrF1LubmUuqhsbTB2mR5D347EeMDHauiMwUJMaMkRI1K4z4NdCUK8E2G 0Njj8P97vHzTwKvyN7hi6Nmn8eD8XVfWfhZGswSnxyUeMur4FB9xSQ4LsnOQ1dH7 ulxQUNTe4BUKTmyy0C035fGOPPOIVv2KZeclJwwZDHQPXy9TQsCd9VZ9b460Gmen FHMOhgeAch+SmNZtsrOY/ireVqAdKVzqAKpaQMs1CMyk4yvYspJwNG9RbkgkNO1I aqUvkh0XgQE+bA== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:13 2025 by rpki-client