This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json) Hash identifier: bYOfe8U1TLMZPQ/6ewohCZ5vOycdiCDevuJ9rCUn9KM= Subject key identifier: 35:10:C5:14:6E:A4:65:A7:C6:04:4C:76:08:6A:F7:5B:EE:78:99:3D Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54 Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54 Certificate serial: 019AF3524B1718FA0855C6793232A22CC8C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft Manifest number: 0180 Signing time: Sat 06 Dec 2025 11:00:47 +0000 Manifest this update: Sat 06 Dec 2025 11:00:47 +0000 Manifest next update: Sun 07 Dec 2025 11:00:47 +0000 Files and hashes: 1: B6o2wE6gWawQ2uIluRfTifNoqUE.roa (hash: lR7hCY7gYNPQXdb9GPeTgExNM9M4E71Exsz4LaS2qQc=) 2: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: N/40q0tCZM9MN8e3HFPGNJ2og5RqEp7y858EmHL46HM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:4b:17:18:fa:08:55:c6:79:32:32:a2:2c:c8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d51cae877df40a5d39412605070841bd102c54 Validity Not Before: Dec 6 11:00:47 2025 GMT Not After : Dec 7 11:00:47 2025 GMT Subject: CN=3510c5146ea465a7c6044c76086af75bee78993d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8f:f0:5f:4f:88:5c:40:60:9e:10:4a:ad:de: 03:d0:6e:88:16:be:9e:12:cb:b2:31:a8:9d:15:d6: 2e:27:ac:9d:ca:d1:fa:a2:fa:1f:22:b4:e3:03:4d: 04:20:f3:42:99:2b:37:1f:45:b6:64:32:d5:55:16: 6f:3d:cb:e0:92:07:86:18:5f:21:44:db:01:db:a0: 4e:54:76:3b:60:06:f9:54:8f:f2:ce:35:94:76:6d: 6c:27:09:24:48:58:3d:9e:42:7d:c4:ec:e6:b7:70: 6b:13:0b:5d:d9:b5:7f:96:96:ca:1d:36:ef:e7:54: 3f:d1:9b:50:71:f1:3b:fc:a8:33:6f:0a:a9:de:c4: 24:c1:18:70:0d:ab:80:74:82:07:f5:04:c1:62:a1: db:e0:6d:67:56:13:17:b4:d6:38:cb:58:18:04:e7: 1c:8b:5a:97:36:f7:db:19:13:a9:84:7c:87:64:e6: 6f:c1:c5:74:5a:60:79:94:a6:4e:84:f5:69:cf:62: 44:e3:6b:78:af:0e:2d:c6:4f:c7:bd:6a:03:12:e1: 3d:ee:96:8a:ec:b9:93:27:62:c8:41:68:3d:f6:45: c5:55:10:6d:0b:c3:a5:4e:74:dc:29:8c:e9:35:47: 88:fb:08:00:fd:70:fe:85:fc:fc:a1:dc:b7:31:08: 87:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:10:C5:14:6E:A4:65:A7:C6:04:4C:76:08:6A:F7:5B:EE:78:99:3D X509v3 Authority Key Identifier: keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b1:0f:d6:41:13:91:ce:b7:23:62:9d:94:5f:5a:4f:e1:99: 36:61:20:dc:00:de:15:f7:74:ee:b9:10:d9:ad:b2:ee:ac:47: d6:3f:d3:52:a4:ab:75:0d:41:1e:b1:5c:0d:4e:d0:08:bb:b6: a9:09:da:64:32:d6:d8:dc:71:bc:c2:7f:73:24:13:bb:68:63: 0f:52:54:f3:f0:d4:7f:14:7c:ec:9b:05:80:7a:17:73:2f:8e: c5:2e:c8:90:2a:ac:a2:1c:10:98:5a:6f:45:82:72:af:72:93: 9b:30:51:45:3e:6f:d5:a0:3a:35:a9:17:a2:9b:88:83:90:12: b3:62:13:95:2e:96:c0:b8:a1:c5:74:86:cb:49:d4:d5:4b:03: 45:c6:09:74:a3:d6:78:ff:d2:35:0a:d0:40:ae:55:c9:ad:49: c3:1a:2a:7d:45:a0:42:0b:dc:e5:e1:d4:53:21:74:de:44:e3: e2:33:ab:54:c8:8b:35:cb:9d:e7:da:ac:f9:d3:14:46:bc:6c: 4a:70:fe:13:67:27:b1:34:d1:f3:25:02:4c:9b:6c:d5:3d:db: d4:f5:c7:30:0e:d5:42:84:fd:25:f8:a1:f7:12:c9:82:fd:5f: 93:ea:fb:be:c9:84:1f:da:e2:6c:d8:49:3e:04:11:c7:9b:96: b4:24:5e:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUksXGPoIVcZ5MjKiLMjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDUxY2FlODc3ZGY0MGE1ZDM5NDEyNjA1MDcwODQxYmQx MDJjNTQwHhcNMjUxMjA2MTEwMDQ3WhcNMjUxMjA3MTEwMDQ3WjAzMTEwLwYDVQQD EygzNTEwYzUxNDZlYTQ2NWE3YzYwNDRjNzYwODZhZjc1YmVlNzg5OTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74/wX0+IXEBgnhBKrd4D0G6IFr6e EsuyMaidFdYuJ6ydytH6ovofIrTjA00EIPNCmSs3H0W2ZDLVVRZvPcvgkgeGGF8h RNsB26BOVHY7YAb5VI/yzjWUdm1sJwkkSFg9nkJ9xOzmt3BrEwtd2bV/lpbKHTbv 51Q/0ZtQcfE7/Kgzbwqp3sQkwRhwDauAdIIH9QTBYqHb4G1nVhMXtNY4y1gYBOcc i1qXNvfbGROphHyHZOZvwcV0WmB5lKZOhPVpz2JE42t4rw4txk/HvWoDEuE97paK 7LmTJ2LIQWg99kXFVRBtC8OlTnTcKYzpNUeI+wgA/XD+hfz8ody3MQiH5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUQxRRupGWnxgRMdghq91vueJk9MB8GA1UdIwQY MBaAFAjVHK6HffQKXTlBJgUHCEG9ECxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hNmIwMDktMmQwYi00OGRkLTgyNWUt NGI0ZDFhZDk2YzBlLzEvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hNmIwMDktMmQwYi00OGRkLTgyNWUtNGI0ZDFhZDk2YzBl LzEvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrEP1kET kc63I2KdlF9aT+GZNmEg3ADeFfd07rkQ2a2y7qxH1j/TUqSrdQ1BHrFcDU7QCLu2 qQnaZDLW2NxxvMJ/cyQTu2hjD1JU8/DUfxR87JsFgHoXcy+OxS7IkCqsohwQmFpv RYJyr3KTmzBRRT5v1aA6NakXopuIg5ASs2ITlS6WwLihxXSGy0nU1UsDRcYJdKPW eP/SNQrQQK5Vya1JwxoqfUWgQgvc5eHUUyF03kTj4jOrVMiLNcud59qs+dMURrxs SnD+E2cnsTTR8yUCTJts1T3b1PXHMA7VQoT9Jfih9xLJgv1fk+r7vsmEH9ribNhJ PgQRx5uWtCRe6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:24 2025 by rpki-client