This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json) Hash identifier: 9MxjsoeNPm/laseTsOnp+ErCBWdXJ99yWr0kslrqfOc= Subject key identifier: 8F:D0:8A:60:20:34:3A:7A:9D:59:7A:D0:52:BE:20:FF:9F:83:96:0F Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5 Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5 Certificate serial: 019B3CEC631F4BE46F30AA47036D08A704DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft Manifest number: 12B9 Signing time: Sat 20 Dec 2025 18:01:23 +0000 Manifest this update: Sat 20 Dec 2025 18:01:23 +0000 Manifest next update: Sun 21 Dec 2025 18:01:23 +0000 Files and hashes: 1: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: zMyjlbBpdy8e94SpRCA1/EW1dP+VVZx1n0ShjK40M1c=) 2: x-sFc0XuZWyC8mb5YkUAH-GfdII.roa (hash: SLT0QNLc8vBCO5UeVhbutYzbWFamBQrhqoa9wxuI2Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:63:1f:4b:e4:6f:30:aa:47:03:6d:08:a7:04:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5 Validity Not Before: Dec 20 18:01:23 2025 GMT Not After : Dec 21 18:01:23 2025 GMT Subject: CN=8fd08a6020343a7a9d597ad052be20ff9f83960f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f1:7d:df:59:4a:17:9e:d1:34:37:f1:d8:77: 98:2e:ba:fd:e5:00:13:d0:76:88:da:da:be:8a:f5: 14:b3:2c:fa:cc:db:a1:a7:6d:dd:58:65:52:f1:d4: 64:dc:3a:5f:38:24:53:7f:77:cf:dc:fb:e8:81:c1: 27:83:f2:37:f3:7d:dd:48:a2:b8:b9:c9:8a:60:43: 7d:f4:a6:4a:15:1c:9f:fb:b5:3c:51:35:28:0e:21: e1:55:d4:23:56:42:e0:71:f5:f7:cf:8d:dd:c5:91: 90:4f:67:ad:89:70:66:cc:b3:58:b4:c5:3c:31:58: ad:65:45:cf:86:61:3e:21:34:a7:85:63:27:b5:a3: e7:b0:e2:20:27:41:1a:56:d9:3e:13:71:d4:de:ec: 54:10:a8:8f:92:0c:7e:1b:27:4b:21:f1:fd:95:30: 7f:ce:0a:11:76:bd:f9:6b:d8:69:68:86:7b:80:fd: 4f:37:1e:39:16:dd:4f:13:01:cf:4a:a3:c8:92:c5: bf:3b:c6:a5:7f:f0:3b:51:8f:09:36:46:33:3a:37: 4d:16:75:0f:75:88:79:22:d9:c9:10:bf:ed:c1:cf: 5b:2b:7f:26:8d:1a:b4:2f:ef:ad:e5:da:96:5b:38: 51:70:e3:21:d1:dc:be:52:c2:b1:47:32:53:02:34: 09:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D0:8A:60:20:34:3A:7A:9D:59:7A:D0:52:BE:20:FF:9F:83:96:0F X509v3 Authority Key Identifier: keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:83:be:89:b4:a4:d5:1e:38:8e:e7:54:70:85:d4:a9:82:28: 7a:36:cf:d1:66:15:ce:43:4d:71:e7:40:49:27:cd:e2:16:55: e4:28:19:87:b1:be:fb:4a:0a:36:14:5b:a7:86:11:7b:0c:3c: a3:5b:d3:7e:9c:5b:f7:82:16:40:04:59:2c:51:1f:de:61:ed: 2d:45:29:ef:84:96:1a:4d:79:6a:d6:7b:a8:9c:25:86:0d:1c: 1b:0d:7b:1c:f5:61:f2:60:28:a6:f3:e3:dd:76:79:3e:ef:c1: a8:db:af:82:1d:58:ed:09:a7:d7:df:c1:25:be:ac:6a:70:bf: 9b:b4:8b:53:79:c5:af:56:13:7b:bc:69:35:c1:63:3d:cc:03: 91:2e:68:ed:76:64:00:c7:b7:c8:be:b5:8b:12:97:9b:42:33: 7a:c7:bd:a6:b2:73:00:5f:c2:6e:3d:32:5b:81:95:ab:c0:e5: 20:00:ee:f9:33:8b:f0:5e:1f:a8:05:16:ee:d6:df:fc:28:b9: 28:70:49:ac:59:39:d8:ba:b2:93:9d:b1:a2:6d:88:34:a1:cf: 63:7c:8d:d3:6e:32:5a:da:11:74:1c:45:78:2d:7b:74:4b:78: 13:3f:a2:a9:76:ff:94:59:1b:26:d9:e1:37:ab:de:2a:64:7e: 43:ad:51:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GMfS+RvMKpHA20IpwTaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzUwOWU3ZWM2OGZlMmQ5NDM0MDdkNWRkMTI2YTBmNTk2 ZjJhYjUwHhcNMjUxMjIwMTgwMTIzWhcNMjUxMjIxMTgwMTIzWjAzMTEwLwYDVQQD Eyg4ZmQwOGE2MDIwMzQzYTdhOWQ1OTdhZDA1MmJlMjBmZjlmODM5NjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fF931lKF57RNDfx2HeYLrr95QAT 0HaI2tq+ivUUsyz6zNuhp23dWGVS8dRk3DpfOCRTf3fP3PvogcEng/I3833dSKK4 ucmKYEN99KZKFRyf+7U8UTUoDiHhVdQjVkLgcfX3z43dxZGQT2etiXBmzLNYtMU8 MVitZUXPhmE+ITSnhWMntaPnsOIgJ0EaVtk+E3HU3uxUEKiPkgx+GydLIfH9lTB/ zgoRdr35a9hpaIZ7gP1PNx45Ft1PEwHPSqPIksW/O8alf/A7UY8JNkYzOjdNFnUP dYh5ItnJEL/twc9bK38mjRq0L++t5dqWWzhRcOMh0dy+UsKxRzJTAjQJjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/QimAgNDp6nVl60FK+IP+fg5YPMB8GA1UdIwQY MBaAFAk1CefsaP4tlDQH1d0Sag9Zbyq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgt N2Q2OTczMzcxMzdiLzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgtN2Q2OTczMzcxMzdi LzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYO+ibSk 1R44judUcIXUqYIoejbP0WYVzkNNcedASSfN4hZV5CgZh7G++0oKNhRbp4YReww8 o1vTfpxb94IWQARZLFEf3mHtLUUp74SWGk15atZ7qJwlhg0cGw17HPVh8mAopvPj 3XZ5Pu/BqNuvgh1Y7Qmn19/BJb6sanC/m7SLU3nFr1YTe7xpNcFjPcwDkS5o7XZk AMe3yL61ixKXm0Izese9prJzAF/Cbj0yW4GVq8DlIADu+TOL8F4fqAUW7tbf/Ci5 KHBJrFk52Lqyk52xom2INKHPY3yN024yWtoRdBxFeC17dEt4Ez+iqXb/lFkbJtnh N6veKmR+Q61Rjw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:05 2025 by rpki-client