This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft File: CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json) Hash identifier: F2+Z8Rd6CQOSDz/Q8uZ0UzB5TI+Nde9QklmMLw4xdy0= Subject key identifier: 9E:C8:66:F6:2B:50:3C:E1:96:2E:F1:89:DB:9A:62:C9:D1:D2:C8:EA Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47 Certificate issuer: /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047 Certificate serial: 019B5BD29E8722761DC9FCBB0B82DA13C638 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft Manifest number: 091D Signing time: Fri 26 Dec 2025 18:01:28 +0000 Manifest this update: Fri 26 Dec 2025 18:01:28 +0000 Manifest next update: Sat 27 Dec 2025 18:01:28 +0000 Files and hashes: 1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: DAxkNo5tAdogT9Wf/zG7CD1zdFKXovFzwxDUzV+hA/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:9e:87:22:76:1d:c9:fc:bb:0b:82:da:13:c6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047 Validity Not Before: Dec 26 18:01:28 2025 GMT Not After : Dec 27 18:01:28 2025 GMT Subject: CN=9ec866f62b503ce1962ef189db9a62c9d1d2c8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:75:0e:7c:97:4b:69:a5:42:2b:a9:46:32: ad:68:73:43:ae:0a:49:0c:1d:a9:71:9d:e9:2f:43: d2:67:b4:55:33:1c:ef:b3:0c:34:07:19:53:7d:2f: 54:e1:b1:44:33:0e:fa:48:7a:0a:d9:09:9e:aa:ea: 1e:29:4f:fe:89:2e:a0:76:c5:e7:12:57:12:c0:74: 18:7f:5a:af:40:b5:73:9d:52:f4:a5:93:75:14:70: 3a:c8:1d:e3:a3:d1:66:1c:cd:1f:ac:a4:4e:a3:d0: d9:fc:dc:08:5d:15:4a:5f:02:4c:c4:98:5f:fd:27: 5d:58:1c:a5:48:32:4a:26:3c:3b:be:7b:52:fa:5a: fb:3e:92:28:8f:4c:4d:f7:55:bd:e7:30:7d:8c:19: 4b:44:a5:89:23:49:2c:d9:eb:f0:da:4d:48:42:0b: 89:d8:57:10:c2:eb:90:c6:18:cf:2c:f0:4d:dd:4d: 0c:b2:97:66:de:b1:b9:e4:a6:55:77:14:3c:b2:3d: 31:0c:2d:62:cd:4e:e2:27:0a:1a:e3:f3:6c:db:82: 43:63:39:2d:cc:2e:8a:71:e0:ca:2d:15:5c:be:58: ee:6d:bd:8f:dd:c7:3c:dc:08:ec:a9:c0:14:9f:51: e5:41:0b:02:d8:1d:47:43:94:85:45:82:5e:59:1a: e5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C8:66:F6:2B:50:3C:E1:96:2E:F1:89:DB:9A:62:C9:D1:D2:C8:EA X509v3 Authority Key Identifier: keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e5:cf:c9:ee:56:9a:63:1d:60:c6:4e:98:0c:9d:72:dd:5f: 5d:3b:c3:78:92:a0:1b:89:5e:1d:8d:4a:6f:65:f7:c0:5b:5d: 42:29:ca:0b:e4:3f:10:72:a5:f9:7d:b6:ea:af:ad:63:c2:e1: ee:a9:3c:ed:67:20:95:77:ec:fe:5d:cb:d9:ca:c6:47:1d:ab: 0b:83:6f:b7:9c:5a:6c:fc:b2:db:14:a4:2e:d0:ff:69:89:7c: 12:5d:61:34:a3:dd:b4:d4:f4:b4:74:aa:6e:18:61:6c:ab:a9: ed:c3:7c:ae:fb:ce:f9:6f:27:4d:66:99:32:dc:bf:89:a8:ef: 39:4d:98:1a:06:e8:0e:97:a1:98:01:7f:04:c1:6e:ec:2b:0e: 5a:94:ea:c5:86:46:37:91:f3:a0:f7:44:f0:ea:21:98:11:1d: cb:39:22:d8:cf:37:d7:39:6f:c1:fe:58:ef:76:a1:a9:2c:cb: 89:cf:e1:d2:ca:be:3c:b3:db:47:1f:9c:33:c6:ad:4d:b0:87: 45:42:28:a6:a1:87:83:6c:b2:53:ac:d4:49:15:f9:f8:10:95: f4:70:85:1d:bc:5d:17:4e:5c:1b:00:b2:86:6b:9f:da:95:b6: 3c:5b:a4:84:32:0f:26:27:a0:ce:eb:b9:23:f5:bd:09:da:77: 6b:81:8e:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0p6HInYdyfy7C4LaE8Y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTdhNzhkNmMwZjdhOTgwMTM5N2JiOWQ1MjlhODcxNTk1 YzgwNDcwHhcNMjUxMjI2MTgwMTI4WhcNMjUxMjI3MTgwMTI4WjAzMTEwLwYDVQQD Eyg5ZWM4NjZmNjJiNTAzY2UxOTYyZWYxODlkYjlhNjJjOWQxZDJjOGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qB1DnyXS2mlQiupRjKtaHNDrgpJ DB2pcZ3pL0PSZ7RVMxzvsww0BxlTfS9U4bFEMw76SHoK2QmequoeKU/+iS6gdsXn ElcSwHQYf1qvQLVznVL0pZN1FHA6yB3jo9FmHM0frKROo9DZ/NwIXRVKXwJMxJhf /SddWBylSDJKJjw7vntS+lr7PpIoj0xN91W95zB9jBlLRKWJI0ks2evw2k1IQguJ 2FcQwuuQxhjPLPBN3U0Mspdm3rG55KZVdxQ8sj0xDC1izU7iJwoa4/Ns24JDYzkt zC6KceDKLRVcvljubb2P3cc83AjsqcAUn1HlQQsC2B1HQ5SFRYJeWRrlKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7IZvYrUDzhli7xiduaYsnR0sjqMB8GA1UdIwQY MBaAFArnp41sD3qYATl7udUpqHFZXIBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85Yzc2OTUtOTBlMi00ODI1LTlkODUt YWMwZjk1ZDhlZjIwLzEvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85Yzc2OTUtOTBlMi00ODI1LTlkODUtYWMwZjk1ZDhlZjIw LzEvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuXPye5W mmMdYMZOmAydct1fXTvDeJKgG4leHY1Kb2X3wFtdQinKC+Q/EHKl+X226q+tY8Lh 7qk87WcglXfs/l3L2crGRx2rC4Nvt5xabPyy2xSkLtD/aYl8El1hNKPdtNT0tHSq bhhhbKup7cN8rvvO+W8nTWaZMty/iajvOU2YGgboDpehmAF/BMFu7CsOWpTqxYZG N5HzoPdE8OohmBEdyzki2M831zlvwf5Y73ahqSzLic/h0sq+PLPbRx+cM8atTbCH RUIopqGHg2yyU6zUSRX5+BCV9HCFHbxdF05cGwCyhmuf2pW2PFukhDIPJiegzuu5 I/W9Cdp3a4GO8w== -----END CERTIFICATE-----Generated at Fri Dec 26 23:12:09 2025 by rpki-client