This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft File: CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json) Hash identifier: NZbAiAiOJn4NgSyqgNm3qZSlRj2xwytmWLqexa1kHBw= Subject key identifier: 0A:6D:C6:28:15:DE:58:4A:99:CA:D8:2C:0C:6F:88:7A:AE:09:60:D6 Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47 Certificate issuer: /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047 Certificate serial: 019B6D336CE2353C9EDC3DD576E201E1F294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft Manifest number: 0926 Signing time: Tue 30 Dec 2025 03:00:45 +0000 Manifest this update: Tue 30 Dec 2025 03:00:45 +0000 Manifest next update: Wed 31 Dec 2025 03:00:45 +0000 Files and hashes: 1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: XuMsOTmkI2fQhbWPcti8KY0jTEwioKh6TpVguSnwWR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:6c:e2:35:3c:9e:dc:3d:d5:76:e2:01:e1:f2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047 Validity Not Before: Dec 30 03:00:45 2025 GMT Not After : Dec 31 03:00:45 2025 GMT Subject: CN=0a6dc62815de584a99cad82c0c6f887aae0960d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:03:46:24:2b:88:b8:32:9a:d0:d4:3a:a4: 76:04:6d:3d:64:c3:24:92:4f:af:00:24:99:53:47: 58:83:f8:bb:b3:61:25:19:92:dc:6a:92:31:72:c3: f2:03:99:15:f4:81:f3:08:0d:55:83:d1:29:5d:13: de:8d:22:34:09:24:98:cd:7a:29:de:79:a0:e7:b7: d3:be:f2:65:83:ea:75:5e:1b:89:74:05:2f:38:9b: 82:40:4c:d3:d0:2b:0c:24:bc:3a:21:59:32:4d:f9: 5f:68:21:5c:e4:5e:8d:5d:bf:c3:27:f4:75:be:8e: 79:74:46:e7:97:77:c4:6b:3f:ae:17:4a:51:a3:5a: 8a:d2:cc:c3:7a:c0:02:0b:f1:d5:91:8a:c0:12:67: 8d:16:bb:7a:4e:ee:e1:02:a5:3b:00:43:79:c3:a5: 9e:db:54:81:50:e8:dc:93:56:00:c9:18:44:9b:73: 29:3c:a5:78:44:37:10:78:12:08:ed:86:db:66:90: dc:41:8a:bb:52:17:65:0d:cc:5a:72:57:4c:25:04: 13:3a:e4:18:e8:e9:cb:e5:cb:36:a8:e9:66:54:e5: 1c:52:76:39:d8:54:ee:7f:0c:70:8b:e9:ee:40:10: 20:19:5b:cb:f1:29:93:b7:08:36:99:1e:d4:87:e6: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6D:C6:28:15:DE:58:4A:99:CA:D8:2C:0C:6F:88:7A:AE:09:60:D6 X509v3 Authority Key Identifier: keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0b:14:af:d9:c0:d2:0c:26:de:87:73:7c:54:31:b7:09:c2: e3:47:99:94:03:a4:0f:8d:72:4b:5d:6a:eb:4a:9f:1d:67:ba: 47:44:d2:95:c9:28:bf:8c:a4:dd:93:bf:84:a5:4a:b8:b5:35: be:f4:93:23:f9:65:1f:d9:b7:c8:4a:f6:2f:36:64:af:93:6c: 92:01:e4:64:18:6b:67:79:b9:2c:e3:11:1c:af:a4:79:e9:1a: 7f:04:c8:41:93:56:18:49:2e:ce:87:39:c2:c7:20:b6:f5:cc: 0d:c5:ed:3c:0c:5c:1b:29:e8:83:0e:e1:23:d3:dd:48:d1:57: eb:08:3e:c8:ae:83:64:5f:73:60:16:ac:cf:29:ab:32:62:98: 8a:ad:16:00:7a:1c:3b:88:46:1d:6f:ec:2e:33:6b:98:11:da: f5:84:39:cf:1a:2f:92:77:ac:fc:a5:3b:02:0d:f2:9e:61:59: ac:33:92:fb:52:9a:5a:a8:3f:f5:a1:ce:34:49:ad:94:b8:4f: 5d:5d:bd:4e:3e:94:63:47:4c:a3:27:db:a6:cd:4c:dd:54:88: 3a:78:17:a6:85:84:40:3b:09:6d:b5:53:39:6d:c1:b9:0a:01: ed:78:e8:82:43:d4:ac:65:01:23:31:b2:0b:f5:b7:b6:90:b5: 25:99:96:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM2ziNTye3D3VduIB4fKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTdhNzhkNmMwZjdhOTgwMTM5N2JiOWQ1MjlhODcxNTk1 YzgwNDcwHhcNMjUxMjMwMDMwMDQ1WhcNMjUxMjMxMDMwMDQ1WjAzMTEwLwYDVQQD EygwYTZkYzYyODE1ZGU1ODRhOTljYWQ4MmMwYzZmODg3YWFlMDk2MGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd4DRiQriLgymtDUOqR2BG09ZMMk kk+vACSZU0dYg/i7s2ElGZLcapIxcsPyA5kV9IHzCA1Vg9EpXRPejSI0CSSYzXop 3nmg57fTvvJlg+p1XhuJdAUvOJuCQEzT0CsMJLw6IVkyTflfaCFc5F6NXb/DJ/R1 vo55dEbnl3fEaz+uF0pRo1qK0szDesACC/HVkYrAEmeNFrt6Tu7hAqU7AEN5w6We 21SBUOjck1YAyRhEm3MpPKV4RDcQeBII7YbbZpDcQYq7UhdlDcxacldMJQQTOuQY 6OnL5cs2qOlmVOUcUnY52FTufwxwi+nuQBAgGVvL8SmTtwg2mR7Uh+ardQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAptxigV3lhKmcrYLAxviHquCWDWMB8GA1UdIwQY MBaAFArnp41sD3qYATl7udUpqHFZXIBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85Yzc2OTUtOTBlMi00ODI1LTlkODUt YWMwZjk1ZDhlZjIwLzEvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85Yzc2OTUtOTBlMi00ODI1LTlkODUtYWMwZjk1ZDhlZjIw LzEvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAsUr9nA 0gwm3odzfFQxtwnC40eZlAOkD41yS11q60qfHWe6R0TSlckov4yk3ZO/hKVKuLU1 vvSTI/llH9m3yEr2LzZkr5NskgHkZBhrZ3m5LOMRHK+keekafwTIQZNWGEkuzoc5 wscgtvXMDcXtPAxcGynogw7hI9PdSNFX6wg+yK6DZF9zYBaszymrMmKYiq0WAHoc O4hGHW/sLjNrmBHa9YQ5zxovknes/KU7Ag3ynmFZrDOS+1KaWqg/9aHONEmtlLhP XV29Tj6UY0dMoyfbps1M3VSIOngXpoWEQDsJbbVTOW3BuQoB7XjogkPUrGUBIzGy C/W3tpC1JZmWCg== -----END CERTIFICATE-----Generated at Tue Dec 30 07:14:34 2025 by rpki-client