This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json) Hash identifier: rlPe5tnL2KnJrOHWwOCSZbQDR01XrQBd6uL4NA8uHvQ= Subject key identifier: 71:F9:5D:40:12:BC:E9:8F:75:AC:03:C1:08:E1:56:66:3C:EE:0A:92 Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed Certificate serial: 019AF31BA5C4E158EA7264D351454C985235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft Manifest number: 12A4 Signing time: Sat 06 Dec 2025 10:01:06 +0000 Manifest this update: Sat 06 Dec 2025 10:01:06 +0000 Manifest next update: Sun 07 Dec 2025 10:01:06 +0000 Files and hashes: 1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: mm4gm0ouDWoVZn21Q5Zq9a7nHcp+80+E+GfIq0ylH/E=) 2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a5:c4:e1:58:ea:72:64:d3:51:45:4c:98:52:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed Validity Not Before: Dec 6 10:01:06 2025 GMT Not After : Dec 7 10:01:06 2025 GMT Subject: CN=71f95d4012bce98f75ac03c108e156663cee0a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:c7:f9:7c:f7:a4:3c:bd:71:4a:39:16:a2: 14:62:33:37:07:a7:c1:e8:2c:5c:ad:a4:82:92:a6: c0:fc:96:18:72:dd:37:34:b5:4b:64:23:84:db:dd: 3f:7e:5d:16:6b:2f:14:f5:40:58:8b:58:e3:53:42: 81:a1:07:39:84:1e:63:56:ce:51:2e:0a:db:00:c8: 96:55:28:db:af:97:0b:4a:19:18:46:a8:2e:e3:50: 5e:7f:2c:26:50:4d:e6:dc:c1:7c:4a:4a:a2:71:6e: ef:44:6e:1d:66:01:b6:05:0d:00:57:40:09:bf:f6: 21:73:e3:67:18:26:8e:e8:e7:9c:ac:8d:ae:9f:25: 64:a0:da:88:2a:68:75:38:5c:42:71:4f:8f:e9:2a: 23:9a:41:49:78:de:a4:b9:68:ef:dc:3b:45:31:ce: 54:51:65:6a:15:09:35:6d:35:af:e4:a2:d2:7d:d2: 94:e7:17:e9:3c:6a:e2:17:24:40:f0:98:7f:19:fd: 40:fe:82:7b:58:e1:6d:5b:14:33:8b:64:26:6a:09: c6:84:7c:1e:e9:be:66:c1:e9:ab:a1:f6:2b:fb:a2: b7:54:3c:0a:4c:bd:36:09:1d:b1:58:99:ee:b6:8e: 87:e4:ec:cf:bc:ee:12:47:dd:f2:d2:89:7a:2a:85: a7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F9:5D:40:12:BC:E9:8F:75:AC:03:C1:08:E1:56:66:3C:EE:0A:92 X509v3 Authority Key Identifier: keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:0c:a3:8b:3e:df:c1:09:a8:0c:f8:a1:0b:91:e4:6c:b7:c6: ca:b9:36:4b:bb:f4:88:ba:3b:2e:f4:f4:90:c5:f4:cd:69:c7: cd:4a:83:6b:8d:29:58:33:f6:40:1f:cb:22:76:ce:95:82:38: dd:b3:77:a5:ef:eb:df:a3:35:7a:36:83:d8:12:0b:70:be:7b: 6c:da:1d:f0:ab:73:2c:c2:f3:5c:6d:37:84:00:c6:6b:e0:bc: b2:1e:4b:ec:9a:61:57:35:5b:99:6f:b9:54:dc:f3:64:2b:62: 54:55:7c:0f:11:b7:92:18:d1:31:45:60:10:82:cd:43:13:97: 2e:41:78:aa:d5:ff:b4:4b:79:b0:85:2b:bb:69:51:ee:bd:af: 7b:af:2a:f3:2d:65:05:e0:ad:8e:b8:ef:c4:23:45:7d:68:72: 67:35:a3:c0:8c:26:48:a1:1d:ab:9a:d2:4f:53:c3:a5:e1:e1: 68:d7:4b:87:f4:97:ef:b0:2a:57:ed:94:3c:a1:44:b0:3e:7b: f6:75:8f:23:55:64:ca:1c:fd:d8:ad:e4:08:b6:39:94:29:a0: 53:1f:db:3a:31:68:8e:0f:d3:34:31:1c:17:8f:05:3c:93:8d: b7:3d:81:38:2b:d5:51:b7:30:52:db:d1:39:33:c1:dd:cd:34: 5e:fb:57:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6XE4VjqcmTTUUVMmFI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2 ZjcxZWQwHhcNMjUxMjA2MTAwMTA2WhcNMjUxMjA3MTAwMTA2WjAzMTEwLwYDVQQD Eyg3MWY5NWQ0MDEyYmNlOThmNzVhYzAzYzEwOGUxNTY2NjNjZWUwYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDvH+Xz3pDy9cUo5FqIUYjM3B6fB 6CxcraSCkqbA/JYYct03NLVLZCOE290/fl0Way8U9UBYi1jjU0KBoQc5hB5jVs5R LgrbAMiWVSjbr5cLShkYRqgu41BefywmUE3m3MF8SkqicW7vRG4dZgG2BQ0AV0AJ v/Yhc+NnGCaO6OecrI2unyVkoNqIKmh1OFxCcU+P6SojmkFJeN6kuWjv3DtFMc5U UWVqFQk1bTWv5KLSfdKU5xfpPGriFyRA8Jh/Gf1A/oJ7WOFtWxQzi2QmagnGhHwe 6b5mwemrofYr+6K3VDwKTL02CR2xWJnuto6H5OzPvO4SR93y0ol6KoWnUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHH5XUASvOmPdawDwQjhVmY87gqSMB8GA1UdIwQY MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0gyjiz7f wQmoDPihC5HkbLfGyrk2S7v0iLo7LvT0kMX0zWnHzUqDa40pWDP2QB/LInbOlYI4 3bN3pe/r36M1ejaD2BILcL57bNod8KtzLMLzXG03hADGa+C8sh5L7JphVzVbmW+5 VNzzZCtiVFV8DxG3khjRMUVgEILNQxOXLkF4qtX/tEt5sIUru2lR7r2ve68q8y1l BeCtjrjvxCNFfWhyZzWjwIwmSKEdq5rST1PDpeHhaNdLh/SX77AqV+2UPKFEsD57 9nWPI1Vkyhz92K3kCLY5lCmgUx/bOjFojg/TNDEcF48FPJONtz2BOCvVUbcwUtvR OTPB3c00XvtXag== -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:06 2025 by rpki-client