This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json) Hash identifier: 88SJCbesMVfS+qvTWjmUVF/uwKOQQ/zjQvmFaEy74tQ= Subject key identifier: 41:85:CD:2B:83:65:1A:76:FF:5D:F3:9F:E6:F7:70:00:C4:D3:53:AB Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d Certificate serial: 019AF2400F7B3287F6FAE90D3E80C5F89158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 06:01:15 +0000 Manifest this update: Sat 06 Dec 2025 06:01:15 +0000 Manifest next update: Sun 07 Dec 2025 06:01:15 +0000 Files and hashes: 1: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: qhH3r4pb2a/t2L8fKor0jVGFgzbe4fjC0AXLYeEvZxc=) 2: daRkFVsWIwe8tAsklauoDwt6UpA.roa (hash: a6fXOEYxSdy4VfRiyyu63eijEDfNFxmj7t/XlgH/vhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0f:7b:32:87:f6:fa:e9:0d:3e:80:c5:f8:91:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d Validity Not Before: Dec 6 06:01:15 2025 GMT Not After : Dec 7 06:01:15 2025 GMT Subject: CN=4185cd2b83651a76ff5df39fe6f77000c4d353ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:9b:b9:e0:8f:89:59:de:5a:d4:d8:b5:e9: 4f:14:ab:e9:09:03:ff:6d:a2:e7:4a:9d:a7:07:29: 49:04:bf:94:e2:a2:f5:7e:b9:de:1e:43:30:88:6a: ef:bb:20:77:d5:2b:09:c8:6e:bd:45:b2:08:dc:3d: 2d:69:37:f4:f6:7f:76:f3:c6:29:89:50:4a:86:9a: fc:f3:14:81:bb:1d:a8:bf:15:9b:5b:06:98:cf:52: 9d:7c:3a:38:94:88:05:d7:c9:26:ac:e8:21:4b:2b: 2a:2d:22:7a:cf:0c:74:b2:09:a4:24:cf:fc:cf:67: 3d:b2:80:d7:3f:79:09:a4:23:9d:a1:96:3e:16:9e: 66:2e:57:2b:2d:2d:f8:d8:b8:66:86:d3:40:81:ee: bf:4b:79:ef:cd:40:41:64:40:c2:67:a7:d5:4a:73: 12:1d:0f:b2:f9:df:67:a0:59:3a:e6:01:f7:82:8f: 15:f0:b8:c7:ca:48:bb:ec:7f:fe:59:82:aa:1d:dc: ea:fb:6d:8f:78:9b:cf:fd:98:70:8f:01:69:7e:b0: be:69:8f:0e:13:41:d2:df:f4:df:e5:4f:50:15:bf: 20:30:6a:e4:3b:4a:d2:78:a1:68:f8:e4:72:8d:03: 05:d9:4b:e8:3d:b2:ef:0f:c8:ca:fe:f4:d0:67:87: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:85:CD:2B:83:65:1A:76:FF:5D:F3:9F:E6:F7:70:00:C4:D3:53:AB X509v3 Authority Key Identifier: keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:66:54:00:05:b9:de:71:13:94:cd:a4:22:6c:48:f2:21:6b: 37:ec:4b:f2:ad:da:60:76:c2:24:bc:90:43:96:9d:76:80:5a: 0d:d3:1d:ce:ae:bc:70:82:49:56:61:f8:c7:34:d0:f5:8a:ea: 35:6a:95:70:0d:94:48:b6:8b:16:ff:de:3e:59:dd:b6:76:e9: d6:d6:64:91:e2:1f:0d:63:14:fc:bd:ea:08:b9:49:b2:10:09: f8:cb:bc:97:94:e3:88:27:7d:87:c4:a2:13:a5:bb:ed:08:58: 05:26:35:a3:36:36:19:6c:be:ba:6f:1a:60:45:15:e8:aa:26: e7:34:e5:b5:ce:6f:c0:bb:76:36:2c:9d:87:e8:0c:de:6a:ff: 0e:d0:9a:e0:02:df:de:70:d6:91:04:59:20:a3:29:b3:3b:47: 52:d4:5b:3b:f5:28:1c:da:e4:eb:0f:a1:63:a6:1e:b6:79:c5: 31:6f:14:d3:48:8a:30:fa:4b:f4:48:32:a8:d2:67:76:c9:5c: ca:63:eb:7a:5a:92:96:3a:5f:9a:32:53:c4:0f:c0:93:ac:7d: f7:41:83:9f:4e:54:d6:1b:a8:57:ba:d4:8f:fc:0c:f9:0d:71: 8e:00:88:05:c9:48:13:a8:ce:d2:82:a9:b2:15:94:7c:c7:26: 41:da:d6:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQA97Mof2+ukNPoDF+JFYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTEyYTM4NzZmZjdiZDAwZDlkOWViYjk3MmFiMWU2MjFl YTFlOGQwHhcNMjUxMjA2MDYwMTE1WhcNMjUxMjA3MDYwMTE1WjAzMTEwLwYDVQQD Eyg0MTg1Y2QyYjgzNjUxYTc2ZmY1ZGYzOWZlNmY3NzAwMGM0ZDM1M2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ybueCPiVneWtTYtelPFKvpCQP/ baLnSp2nBylJBL+U4qL1frneHkMwiGrvuyB31SsJyG69RbII3D0taTf09n9288Yp iVBKhpr88xSBux2ovxWbWwaYz1KdfDo4lIgF18kmrOghSysqLSJ6zwx0sgmkJM/8 z2c9soDXP3kJpCOdoZY+Fp5mLlcrLS342LhmhtNAge6/S3nvzUBBZEDCZ6fVSnMS HQ+y+d9noFk65gH3go8V8LjHyki77H/+WYKqHdzq+22PeJvP/ZhwjwFpfrC+aY8O E0HS3/Tf5U9QFb8gMGrkO0rSeKFo+ORyjQMF2UvoPbLvD8jK/vTQZ4dwmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGFzSuDZRp2/13zn+b3cADE01OrMB8GA1UdIwQY MBaAFHLhKjh2/3vQDZ2eu5cqseYh6h6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQt NDU1MjdlOGU0NGQyLzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQtNDU1MjdlOGU0NGQy LzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWZUAAW5 3nETlM2kImxI8iFrN+xL8q3aYHbCJLyQQ5addoBaDdMdzq68cIJJVmH4xzTQ9Yrq NWqVcA2USLaLFv/ePlndtnbp1tZkkeIfDWMU/L3qCLlJshAJ+Mu8l5TjiCd9h8Si E6W77QhYBSY1ozY2GWy+um8aYEUV6Kom5zTltc5vwLt2Niydh+gM3mr/DtCa4ALf 3nDWkQRZIKMpsztHUtRbO/UoHNrk6w+hY6YetnnFMW8U00iKMPpL9EgyqNJndslc ymPrelqSljpfmjJTxA/Ak6x990GDn05U1huoV7rUj/wM+Q1xjgCIBclIE6jO0oKp shWUfMcmQdrWig== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:02 2025 by rpki-client