This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json) Hash identifier: OmaTmE2d7Ni23pVcodXYWc61Re9ExHojkccL2uSQf/4= Subject key identifier: AA:2A:B1:AD:4E:5C:0F:41:07:AB:93:8A:E8:3E:72:BF:66:80:3E:91 Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9 Certificate issuer: /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9 Certificate serial: 019B337AF154CCD6B5E3A6F155B979001BDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft Manifest number: 0854 Signing time: Thu 18 Dec 2025 22:00:53 +0000 Manifest this update: Thu 18 Dec 2025 22:00:53 +0000 Manifest next update: Fri 19 Dec 2025 22:00:53 +0000 Files and hashes: 1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: IDJEt7Oh5R25dEi9xmLkl0kH9jpJyo/PoYuQ5PplFXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:f1:54:cc:d6:b5:e3:a6:f1:55:b9:79:00:1b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9 Validity Not Before: Dec 18 22:00:53 2025 GMT Not After : Dec 19 22:00:53 2025 GMT Subject: CN=aa2ab1ad4e5c0f4107ab938ae83e72bf66803e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9c:35:d9:c9:9f:94:29:26:c7:ba:c8:93:ce: a4:c8:f1:cd:9d:22:6a:91:20:c6:3a:9a:f3:48:65: 40:10:a1:14:a2:58:fa:22:9d:ec:32:6a:17:77:23: c8:31:1b:4b:c1:6f:d3:50:ca:40:f1:1f:d2:f0:f9: 35:ad:3f:e2:c3:0b:78:a8:ea:aa:52:7d:72:7e:69: 63:8e:9d:3a:03:65:cc:e3:0c:96:75:7e:85:97:73: d0:b9:65:9b:3c:99:4b:d0:6b:42:24:0b:34:c5:a9: 09:3b:bb:dc:fa:0c:ae:3f:9a:2c:03:6e:77:8d:40: 62:2b:53:22:1b:79:de:fd:30:13:d2:30:80:a9:d5: 04:60:65:25:a6:6c:25:85:24:b7:7f:18:c4:95:57: 15:1a:ea:f8:f1:fe:71:dd:6a:69:57:de:8c:fb:77: c6:bc:df:a4:76:df:ec:a5:2a:c9:3c:20:36:0f:fa: 5b:40:3a:2f:23:e1:53:77:48:02:31:13:63:ba:57: d8:31:39:f7:1b:b4:d3:34:b3:f2:c8:4c:06:91:35: 36:a6:b8:d4:15:56:c6:34:17:a3:19:10:6e:ad:c1: 9c:a3:05:26:3c:45:35:90:00:c5:a1:d2:53:d2:4c: 94:01:7d:20:f4:be:c0:eb:a8:7e:79:8b:f1:8c:fd: bd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2A:B1:AD:4E:5C:0F:41:07:AB:93:8A:E8:3E:72:BF:66:80:3E:91 X509v3 Authority Key Identifier: keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4d:8d:68:e3:d7:e2:86:10:40:0a:73:8f:82:14:6a:46:c3: 69:e8:55:90:8b:47:51:a4:ea:64:e8:b2:48:5e:e1:cb:7b:e2: b6:e1:a5:e4:a6:69:1f:73:1e:5b:bc:3d:0c:a2:bf:e1:0b:3d: 52:f7:49:b9:08:2f:31:4a:83:d9:4a:ed:0d:bd:fb:f5:d8:d5: f8:0e:36:d2:b4:25:b9:ab:49:0d:ec:5a:7e:94:58:36:cd:6a: de:b1:a2:ed:ee:c3:d8:f7:91:3b:8f:ff:d1:d8:a3:e4:dc:83: 90:70:db:ff:95:c7:6d:ec:46:ad:01:b8:0a:db:e8:de:2d:da: b8:15:ae:39:6b:54:63:bc:dd:62:f9:9f:07:73:c7:32:61:8b: 9b:1c:d2:d7:0b:f6:5d:17:95:5c:2f:63:bb:83:c5:30:7f:7b: 41:92:e6:a1:c2:47:1c:d9:cf:75:b2:f9:53:d0:bf:e1:0f:cf: 3d:dc:00:ee:0f:ba:c2:19:27:33:26:d9:73:0b:56:6c:0f:20: ba:d4:30:2a:06:db:47:36:81:9a:b0:40:c4:d6:0e:58:77:b0: 26:b7:93:54:20:aa:fe:93:19:fa:48:58:fd:ce:bd:99:26:88: 3c:30:98:c7:a1:d9:ed:f9:41:a1:30:a6:ba:36:5d:4d:b6:6c: b7:fd:64:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszevFUzNa146bxVbl5ABvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTU4OGRhNGE2Y2YwNDEzZmZiMzAxNmJlNDY3OGVjOTlh OThkZjkwHhcNMjUxMjE4MjIwMDUzWhcNMjUxMjE5MjIwMDUzWjAzMTEwLwYDVQQD EyhhYTJhYjFhZDRlNWMwZjQxMDdhYjkzOGFlODNlNzJiZjY2ODAzZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Jw12cmflCkmx7rIk86kyPHNnSJq kSDGOprzSGVAEKEUolj6Ip3sMmoXdyPIMRtLwW/TUMpA8R/S8Pk1rT/iwwt4qOqq Un1yfmljjp06A2XM4wyWdX6Fl3PQuWWbPJlL0GtCJAs0xakJO7vc+gyuP5osA253 jUBiK1MiG3ne/TAT0jCAqdUEYGUlpmwlhSS3fxjElVcVGur48f5x3WppV96M+3fG vN+kdt/spSrJPCA2D/pbQDovI+FTd0gCMRNjulfYMTn3G7TTNLPyyEwGkTU2prjU FVbGNBejGRBurcGcowUmPEU1kADFodJT0kyUAX0g9L7A66h+eYvxjP29HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoqsa1OXA9BB6uTiug+cr9mgD6RMB8GA1UdIwQY MBaAFHLliNpKbPBBP/swFr5GeOyZqY35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAt ZjZjMmNkNjdmODU5LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAtZjZjMmNkNjdmODU5 LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAik2NaOPX 4oYQQApzj4IUakbDaehVkItHUaTqZOiySF7hy3vituGl5KZpH3MeW7w9DKK/4Qs9 UvdJuQgvMUqD2UrtDb379djV+A420rQluatJDexafpRYNs1q3rGi7e7D2PeRO4// 0dij5NyDkHDb/5XHbexGrQG4Ctvo3i3auBWuOWtUY7zdYvmfB3PHMmGLmxzS1wv2 XReVXC9ju4PFMH97QZLmocJHHNnPdbL5U9C/4Q/PPdwA7g+6whknMybZcwtWbA8g utQwKgbbRzaBmrBAxNYOWHewJreTVCCq/pMZ+khY/c69mSaIPDCYx6HZ7flBoTCm ujZdTbZst/1kIA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:57 2025 by rpki-client