This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json) Hash identifier: 9Zze0NKx5LKQ2nbbUQQKzsPT+lq0ln/c7lX5rWXgCoA= Subject key identifier: BB:B2:14:73:E9:88:04:81:41:ED:B9:78:27:2F:B8:02:8F:6B:77:E4 Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe Certificate serial: 019AF12CDBB01ABE5A55E9ECFD486C1AF4DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft Manifest number: 1034 Signing time: Sat 06 Dec 2025 01:00:40 +0000 Manifest this update: Sat 06 Dec 2025 01:00:40 +0000 Manifest next update: Sun 07 Dec 2025 01:00:40 +0000 Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: 7DjmD9S1Gx1Lwmckr46K8xwifDPTKg8UCvw7XJ/KbKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:db:b0:1a:be:5a:55:e9:ec:fd:48:6c:1a:f4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe Validity Not Before: Dec 6 01:00:40 2025 GMT Not After : Dec 7 01:00:40 2025 GMT Subject: CN=bbb21473e988048141edb978272fb8028f6b77e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:ca:73:c6:f3:c1:f8:e8:e5:9a:af:6f:4d: eb:91:7b:de:13:48:6d:94:2a:f4:0a:9a:78:2f:3f: c0:37:0f:1a:5f:4c:26:81:d9:9b:26:89:c7:85:e1: 42:b4:c6:67:c7:43:b6:e4:99:cc:41:f3:29:c0:c8: 38:21:64:a3:49:7c:e9:11:5e:99:e4:23:79:6d:b8: e8:03:cc:8c:fc:e2:92:e4:d1:71:59:67:8d:b2:4a: 40:f6:d2:87:14:e3:c3:17:5f:42:4f:29:bb:79:13: 92:20:e2:0f:fc:cf:d8:f6:74:29:b4:4d:87:81:a9: 9c:18:35:c9:e5:c0:77:8b:17:5f:4f:a7:cc:f1:b9: a2:7d:cb:d6:24:81:21:d3:42:c0:43:f9:2b:57:74: a9:41:91:05:15:98:ff:6f:28:80:c2:1d:a3:db:a9: df:f1:ec:c0:55:e5:ea:9f:2c:62:f3:1e:0c:3f:9d: b0:cd:ba:0b:a1:00:9c:65:9d:a9:6e:ca:5f:fa:c8: 50:be:eb:dd:03:90:41:5a:85:26:ec:3e:3e:e6:a0: d8:95:65:b3:9f:f9:9f:ac:0c:04:50:af:c6:55:40: 5a:9d:3a:98:3b:74:60:63:21:88:0b:06:80:08:99: fa:1e:c6:3f:90:38:e0:9c:d3:f6:65:1b:a4:77:22: bd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B2:14:73:E9:88:04:81:41:ED:B9:78:27:2F:B8:02:8F:6B:77:E4 X509v3 Authority Key Identifier: keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:6e:93:60:2b:49:59:40:1e:42:65:a7:5a:49:ed:d3:3c:c2: 5c:85:b0:e5:c1:e8:7a:c4:0b:5c:0e:69:fc:e4:ef:08:4f:d0: 37:e8:d0:8f:86:58:40:8a:ce:93:b3:d2:00:d3:8c:8e:22:f7: 81:6f:eb:42:f1:b1:4f:80:50:32:15:77:9b:eb:7b:c5:21:0e: 1e:c1:72:f1:9c:04:89:d0:a8:47:8a:cb:2c:a8:72:61:78:c7: 81:5a:e2:88:f2:29:b0:7d:26:08:87:75:f8:99:da:7e:4e:40: be:b8:1c:0d:ef:01:4a:f6:9e:0a:56:2f:11:7b:7b:7e:bc:3c: aa:ce:08:ff:c3:6d:9e:3f:ad:64:48:ae:42:7e:73:58:d2:6d: 35:45:0a:96:30:ef:68:12:79:dd:3f:08:59:9b:3b:57:65:49: ff:5c:e6:63:45:ce:e0:c6:f5:1a:82:c9:cb:a0:bc:28:e6:b7: 6c:c9:90:3f:3b:5e:f8:ff:04:86:3e:97:71:4e:7c:b0:64:a7: a8:b4:24:cd:99:f6:e4:1a:86:d0:86:d9:db:f0:16:53:dc:65: c5:7e:2d:4a:20:8d:d1:9f:f4:53:e8:a4:3a:b2:f2:c8:89:9b: da:22:ab:cf:bc:51:87:3b:b9:bc:d6:b9:e1:b4:1a:2c:6f:81: 81:e9:09:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNuwGr5aVens/UhsGvTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNDI4MzBlZWVkMjhiMDRiY2RkMDNmYTNmZGE0OGM1NDg1 YWZjZmUwHhcNMjUxMjA2MDEwMDQwWhcNMjUxMjA3MDEwMDQwWjAzMTEwLwYDVQQD EyhiYmIyMTQ3M2U5ODgwNDgxNDFlZGI5NzgyNzJmYjgwMjhmNmI3N2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB7Kc8bzwfjo5Zqvb03rkXveE0ht lCr0Cpp4Lz/ANw8aX0wmgdmbJonHheFCtMZnx0O25JnMQfMpwMg4IWSjSXzpEV6Z 5CN5bbjoA8yM/OKS5NFxWWeNskpA9tKHFOPDF19CTym7eROSIOIP/M/Y9nQptE2H gamcGDXJ5cB3ixdfT6fM8bmifcvWJIEh00LAQ/krV3SpQZEFFZj/byiAwh2j26nf 8ezAVeXqnyxi8x4MP52wzboLoQCcZZ2pbspf+shQvuvdA5BBWoUm7D4+5qDYlWWz n/mfrAwEUK/GVUBanTqYO3RgYyGICwaACJn6HsY/kDjgnNP2ZRukdyK9ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuyFHPpiASBQe25eCcvuAKPa3fkMB8GA1UdIwQY MBaAFHFCgw7u0osEvN0D+j/aSMVIWvz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1VLRER1N1Npd1M4M1FQNlA5cEl4VWhhX1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hZmQxMTgtZThhNS00ZWE0LTk4OTUt ZWIxMzNhMGFmNWZjLzEvY1VLRER1N1Npd1M4M1FQNlA5cEl4VWhhX1A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hZmQxMTgtZThhNS00ZWE0LTk4OTUtZWIxMzNhMGFmNWZj LzEvY1VLRER1N1Npd1M4M1FQNlA5cEl4VWhhX1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ26TYCtJ WUAeQmWnWknt0zzCXIWw5cHoesQLXA5p/OTvCE/QN+jQj4ZYQIrOk7PSANOMjiL3 gW/rQvGxT4BQMhV3m+t7xSEOHsFy8ZwEidCoR4rLLKhyYXjHgVriiPIpsH0mCId1 +Jnafk5AvrgcDe8BSvaeClYvEXt7frw8qs4I/8Ntnj+tZEiuQn5zWNJtNUUKljDv aBJ53T8IWZs7V2VJ/1zmY0XO4Mb1GoLJy6C8KOa3bMmQPzte+P8Ehj6XcU58sGSn qLQkzZn25BqG0IbZ2/AWU9xlxX4tSiCN0Z/0U+ikOrLyyImb2iKrz7xRhzu5vNa5 4bQaLG+BgekJSA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:29 2025 by rpki-client