This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json) Hash identifier: cUkjlwXHQ0eHXWoIdv0MJ9Z3hf+4f/rR71mO9ulS6oU= Subject key identifier: 77:3D:FC:C6:A1:A0:E8:2C:43:DA:C8:7B:28:95:AB:F6:78:33:A3:38 Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Certificate serial: 019B3F48111FB2AFDE5F55FB662DC89CF27C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft Manifest number: 09B0 Signing time: Sun 21 Dec 2025 05:00:46 +0000 Manifest this update: Sun 21 Dec 2025 05:00:46 +0000 Manifest next update: Mon 22 Dec 2025 05:00:46 +0000 Files and hashes: 1: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: WCko8cT3KI6fJ3K/inxx+/AhGqcyMKBsjOav1qvpETI=) 2: d0b72ny8wPnM19_QwF_mbcUjDN0.roa (hash: SMFsSG0c6aEdE5nra06sYeY6XybcAZuUprO34jcJsEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:11:1f:b2:af:de:5f:55:fb:66:2d:c8:9c:f2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Validity Not Before: Dec 21 05:00:46 2025 GMT Not After : Dec 22 05:00:46 2025 GMT Subject: CN=773dfcc6a1a0e82c43dac87b2895abf67833a338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2d:70:db:dd:12:33:16:25:2b:6f:a2:ac:66: a2:e3:ae:fc:fd:36:fd:c2:00:0a:d6:d0:83:ce:d0: 3a:01:cb:ad:8e:24:b9:4c:86:55:ff:78:ad:dc:e6: 1b:42:2c:d9:2d:f7:4e:17:a4:1e:d9:0c:6e:10:30: 3b:1f:4a:f4:b1:7e:f6:83:94:1a:d1:3d:9d:75:74: 98:40:a7:bd:3e:c7:5b:ac:1d:6c:ea:2b:c1:0c:ce: 48:01:ef:3f:96:c9:2f:c4:c7:e5:d3:3c:59:61:c7: 26:85:ed:55:4d:d8:8d:1d:d4:cb:ea:e6:c1:77:9a: fe:1d:6c:cd:45:b2:b8:c6:4f:fd:28:a3:d5:db:a5: d1:d1:1d:22:55:2a:20:58:26:6e:94:2e:eb:a1:cb: ef:c1:00:d2:23:84:8b:4a:67:d2:ff:03:e4:98:a0: 31:01:18:ca:a2:29:22:66:1a:ab:e9:b7:94:51:2d: a1:67:7b:db:81:2e:5c:cb:ec:f0:f1:19:6f:42:e9: 0e:2b:ec:6a:47:3c:90:79:3d:f9:33:95:ae:8b:54: e4:ac:6f:7d:73:36:f8:f4:d3:51:db:28:75:ef:b3: 04:d6:fc:7c:09:ab:25:6d:ea:f6:36:e0:f4:b1:0c: 02:f9:de:b1:e9:1b:e9:94:f9:95:0e:2c:17:e9:e6: ec:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3D:FC:C6:A1:A0:E8:2C:43:DA:C8:7B:28:95:AB:F6:78:33:A3:38 X509v3 Authority Key Identifier: keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:cd:af:0c:95:6d:7e:9e:d2:35:32:5a:1c:af:2f:97:8f:54: 33:c3:32:42:57:c7:fe:44:2e:2d:e4:b3:96:31:de:48:02:3c: 8b:67:c4:07:cb:c8:af:76:cc:4a:7a:f3:d1:ce:36:64:57:20: ab:49:e5:5f:53:31:27:24:88:b5:3d:58:b4:c8:9e:bd:f6:26: ef:4c:76:c5:f1:83:7d:0c:5f:fc:1f:a2:09:0a:53:a4:5f:5d: 16:96:83:1d:5d:07:0d:bb:05:ac:2a:64:d2:aa:b0:bb:5e:88: 28:1f:49:26:c1:01:43:53:d1:ae:ed:d8:fa:f3:18:0e:43:da: cc:19:aa:d9:9b:ca:c2:77:31:92:71:0d:35:8d:b7:78:16:aa: c5:bb:fe:f1:30:49:5d:a5:4e:df:4c:cb:0c:69:c7:c0:f6:a6: 6d:29:b5:31:fc:48:a6:fd:52:2c:15:33:ef:be:13:fb:cb:8d: a5:0b:ee:ff:1c:e7:28:b6:0e:66:22:10:25:7b:ca:d2:6b:0c: 5d:93:09:40:d2:08:c5:f2:f7:ed:ce:0c:29:20:44:7d:6b:ee: 45:ee:ae:09:28:77:b9:6b:cb:f1:e5:10:dc:ac:ba:44:4b:61: 4a:08:67:30:78:8d:39:2e:3a:e4:fa:5d:d5:75:41:a5:cf:c3: b3:e0:f7:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SBEfsq/eX1X7Zi3InPJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTViNTdiYjM5OGQ1ZTE4MzlhM2ZlNDI1NGRmNzBkNzEy Y2UxNGEwHhcNMjUxMjIxMDUwMDQ2WhcNMjUxMjIyMDUwMDQ2WjAzMTEwLwYDVQQD Eyg3NzNkZmNjNmExYTBlODJjNDNkYWM4N2IyODk1YWJmNjc4MzNhMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi1w290SMxYlK2+irGai4678/Tb9 wgAK1tCDztA6AcutjiS5TIZV/3it3OYbQizZLfdOF6Qe2QxuEDA7H0r0sX72g5Qa 0T2ddXSYQKe9PsdbrB1s6ivBDM5IAe8/lskvxMfl0zxZYccmhe1VTdiNHdTL6ubB d5r+HWzNRbK4xk/9KKPV26XR0R0iVSogWCZulC7rocvvwQDSI4SLSmfS/wPkmKAx ARjKoikiZhqr6beUUS2hZ3vbgS5cy+zw8RlvQukOK+xqRzyQeT35M5Wui1TkrG99 czb49NNR2yh177ME1vx8Caslber2NuD0sQwC+d6x6RvplPmVDiwX6ebs6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc9/MahoOgsQ9rIeyiVq/Z4M6M4MB8GA1UdIwQY MBaAFHLltXuzmNXhg5o/5CVN9w1xLOFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDct OTY4ZDBjN2YyMmJiLzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDctOTY4ZDBjN2YyMmJi LzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ82vDJVt fp7SNTJaHK8vl49UM8MyQlfH/kQuLeSzljHeSAI8i2fEB8vIr3bMSnrz0c42ZFcg q0nlX1MxJySItT1YtMievfYm70x2xfGDfQxf/B+iCQpTpF9dFpaDHV0HDbsFrCpk 0qqwu16IKB9JJsEBQ1PRru3Y+vMYDkPazBmq2ZvKwncxknENNY23eBaqxbv+8TBJ XaVO30zLDGnHwPambSm1MfxIpv1SLBUz774T+8uNpQvu/xznKLYOZiIQJXvK0msM XZMJQNIIxfL37c4MKSBEfWvuRe6uCSh3uWvL8eUQ3Ky6REthSghnMHiNOS465Ppd 1XVBpc/Ds+D3Ow== -----END CERTIFICATE-----Generated at Sun Dec 21 09:04:17 2025 by rpki-client