This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json)
Hash identifier: yBycRKh6NDK1UoQ+SxGszGQnMjmmZ/3LXbS/OD+HK/Q=
Subject key identifier: 13:6A:11:A9:D4:06:82:28:8A:73:00:8E:8B:D4:40:AA:BB:58:80:63
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019AF3F744BBEA563423789B390C760C15C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
Manifest number: 1768
Signing time: Sat 06 Dec 2025 14:00:59 +0000
Manifest this update: Sat 06 Dec 2025 14:00:59 +0000
Manifest next update: Sun 07 Dec 2025 14:00:59 +0000
Files and hashes: 1: 6QFd9IdVpCQmItNCPxRFCrp9nKQ.roa (hash: bGmgyU+MRUomnlmMA4u5BiNJcGHkzxHgj+I3pHeo+G0=)
2: 7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa (hash: /UJ2jaPIsh9LABzhutyiOz6tqO3pebNJplX7fsJ15q4=)
3: 9x0cjGr7YULmSfzI3dcYG9w_06I.roa (hash: nZkDj/8oM/37FYrz8May17dhFjnT3DNeVQBgn2oaZf0=)
4: EBjZlhPdImN_fmswrc4n1qFbaJc.roa (hash: tUvTqcEJd5jRcaH6HCXAi4EQUm+eSxMyHWyd2ocWiV8=)
5: GNcbaUuI19-wbs7GLcE1lajDv-k.roa (hash: JkYHzX+XVOiUvpRyMV+wrBz6xce9nKA7hPNlot5aQZ4=)
6: PX0DpkBl9yg1gQzNf2fXaFsswv8.roa (hash: fegY3SzHduBrH8eO5Wo9IcX0cjRfR9p14sX7mhpiZ8U=)
7: SHXtPV4kgZiSMLrfaQNfttE3YEg.roa (hash: vCULHOU0pm0NUpWsnrVNz86sxtEUOZpw65hpej3MIxs=)
8: TEHPMPoZisl9vOiLWV_tB3SmWaI.roa (hash: /q8DB82i9XChVszHx+lvwBEwJCoXbxAKUBSDji6t9Ek=)
9: VAwOmXBu3_hb-94kaLmxAE_i7pI.roa (hash: IZvIAsZ3NFMGzz4y4fdnumBCA9Bj3yp20yIaQmXg3Fo=)
10: YTPIeKA6vN8bBsCmmqzk6w3bpmU.roa (hash: Mo6Tf23Yod2O05O4042OzPfIL4jXB8/HVLdp8MJUwtk=)
11: YrZdH5pglRx66b5p9JGRz_SyZts.roa (hash: mhtrEJveZQw15THeEWaXosd9inWt6asg5tmlg7bP8KA=)
12: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: B1DDb/5fVo2BjK9rvcSjhOXH1qhHHWwJ6yFASUhJ+Ko=)
13: k34T0BOxtuolFGK7D9gfPSVqjyg.roa (hash: zRGBGpZvNTWiV1L4FpZxoKUzkhe3V2xnMgLC1QF7Yns=)
14: p9yFoBCMLxcx2kyLnzIglbUZt8Q.roa (hash: fbxtSkZt340A9KV6V1MZj2gG37RK0K88NQoLtoEEGa0=)
15: rm3UHUFplAChrToLa297UrTCIuo.roa (hash: HHiyje/4Xaq3L0LGhP0VYLYtVuy3S8HWVlC7cJ7pBgA=)
16: yKPpEfXuR3hgVnHrW-SosrWvchI.roa (hash: JRlziFyrSVh96Xmb3+ZOE6HFj6jm/zMUIwmBAAhdoq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:f7:44:bb:ea:56:34:23:78:9b:39:0c:76:0c:15:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Dec 6 14:00:59 2025 GMT
Not After : Dec 7 14:00:59 2025 GMT
Subject: CN=136a11a9d40682288a73008e8bd440aabb588063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:e3:07:8b:10:82:35:63:e1:e0:44:4f:ee:
51:93:8f:a5:36:b6:20:58:22:e2:31:14:17:84:4d:
3f:e7:67:e5:b1:cb:04:8c:a0:75:db:83:e0:e8:f9:
96:25:50:c7:0c:eb:86:36:c2:a8:6a:45:ee:49:8b:
29:33:0f:d2:4f:2f:14:f5:8c:48:93:95:32:48:4b:
52:99:cd:8b:da:09:5d:c9:31:6d:e3:fb:87:36:ae:
e8:5e:07:99:78:e8:88:d7:8f:dd:e5:23:2f:52:7b:
9b:b9:af:82:0c:45:3f:76:e3:c2:ae:ec:1e:01:57:
7d:e2:57:58:db:52:a5:df:f6:72:f8:83:56:3e:4a:
0c:04:98:85:5f:4b:67:4f:1a:ba:10:49:8c:44:01:
68:54:3f:ad:c6:7a:0b:78:ca:9b:ee:06:f6:02:b4:
a9:2c:83:5d:f7:c7:01:ed:d3:e8:c8:b5:e8:cb:97:
24:1f:1c:17:e7:8b:99:91:67:42:85:a5:6d:89:cb:
ef:74:fa:68:b2:8d:14:dc:d3:a6:93:d4:6f:d0:cb:
9c:6d:f0:b2:17:98:c4:22:cd:fd:2a:34:7c:66:62:
17:cd:d1:b7:0f:d5:58:14:64:3a:b7:73:d8:0d:10:
55:b4:38:d5:ad:83:c5:08:86:6c:74:de:3a:d7:74:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:11:A9:D4:06:82:28:8A:73:00:8E:8B:D4:40:AA:BB:58:80:63
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c3:5e:4b:51:65:ba:15:03:4f:4d:af:fa:64:7b:2c:af:ef:
ee:fa:27:dd:1b:c3:86:3e:40:04:f1:c3:05:67:f1:56:a7:21:
a9:60:fb:ae:74:73:05:47:64:62:3f:59:e5:52:ab:42:e5:1c:
26:4b:23:0c:4a:ba:94:d8:24:3d:5b:d4:bf:a0:46:c5:0f:40:
ec:2f:01:b9:35:02:32:a5:d4:33:1f:c9:10:fa:83:d4:b1:9a:
ce:ca:29:7e:35:a8:25:aa:6e:56:04:d4:f2:44:2a:50:4a:1a:
25:73:b4:91:1e:00:c5:e9:03:ae:f1:ff:45:e5:e6:ec:bc:6d:
76:fe:5d:dc:b5:22:ab:5e:01:e4:82:eb:d0:81:d5:9c:42:a6:
4f:64:8f:c7:ec:bf:e3:0d:fe:40:d5:a8:71:1e:16:fa:91:75:
2c:f4:ed:6a:31:24:14:ab:95:c9:88:0a:20:b3:e8:5e:0a:3d:
a9:31:8f:e4:81:18:92:44:99:4c:e5:16:9b:a3:61:77:40:55:
ab:8c:ef:ef:54:d1:0a:87:58:7d:f0:95:51:8e:50:85:0c:9e:
bb:45:b6:47:9d:f3:6d:3e:28:85:3f:9f:6a:1f:4c:99:3d:e1:
30:d1:7d:17:3c:4d:bc:3c:4e:9c:88:e0:74:48:ff:e9:94:c9:
aa:84:82:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:34:59 2025 by rpki-client