This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json) Hash identifier: skH7bCYge4nBTZMSlr3c3GDZWO98oD6S4K17ZXgzhhc= Subject key identifier: 1B:1B:71:94:92:2F:E4:99:57:A3:F8:6C:21:75:6F:89:ED:0C:E6:4C Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7 Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7 Certificate serial: 019AF276B7C832F108B5561CCAF057136A8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft Manifest number: 150C Signing time: Sat 06 Dec 2025 07:00:57 +0000 Manifest this update: Sat 06 Dec 2025 07:00:57 +0000 Manifest next update: Sun 07 Dec 2025 07:00:57 +0000 Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: Lo1xRzKKdw2bajEDL8tXOTdsgTmgU3Dkp1HozCFTyew=) 2: fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa (hash: qTbDhlkyoNs8mOWo2CnjkxjvNByWkkbKi24V6XgdMB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b7:c8:32:f1:08:b5:56:1c:ca:f0:57:13:6a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7 Validity Not Before: Dec 6 07:00:57 2025 GMT Not After : Dec 7 07:00:57 2025 GMT Subject: CN=1b1b7194922fe49957a3f86c21756f89ed0ce64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:0d:3b:dc:50:67:7b:02:fe:80:44:a0:7a: 41:fa:a2:0b:a4:70:10:2e:27:64:2e:89:97:c6:c0: 91:ca:42:30:eb:31:de:90:33:36:a4:fb:47:09:30: cb:b7:33:96:33:d5:04:9c:ac:d0:f0:63:25:39:99: fc:56:9f:6f:38:95:9a:47:80:84:37:f0:f8:03:4b: 28:f1:e1:c1:00:64:d3:0b:6c:1f:6e:62:c7:24:a5: 67:8c:2e:ca:31:2f:79:b3:44:96:b2:ec:67:f1:d6: 59:c8:64:25:34:96:65:ef:b3:69:35:db:6a:1e:47: f4:f7:30:b2:09:e0:45:e2:ad:cd:08:db:54:02:c7: d6:c7:84:d0:72:39:e5:ca:dd:48:03:de:7e:5f:2a: 4d:a2:ea:5e:40:45:73:b6:fa:5b:78:14:fa:a9:05: a7:2f:00:c2:46:02:c3:d7:46:f0:56:6b:1f:77:69: 2c:22:c4:88:7e:aa:13:1c:d0:02:21:75:4f:69:b3: 22:01:45:fd:b8:f6:46:8a:dc:8f:66:cc:b5:81:85: 90:6a:f5:0e:56:4c:33:59:b9:39:29:2a:15:f1:4f: 73:7f:5d:be:61:a8:2b:f5:cf:b4:f4:9b:14:d0:84: ec:56:86:17:d3:16:40:d1:c1:24:3c:b0:89:1e:99: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1B:71:94:92:2F:E4:99:57:A3:F8:6C:21:75:6F:89:ED:0C:E6:4C X509v3 Authority Key Identifier: keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:06:04:32:58:82:e7:10:cc:19:ce:d2:ec:b0:84:7d:13:78: cf:2f:02:db:d1:2e:5c:89:f1:56:a7:7f:82:ac:8c:ce:32:3b: f9:78:88:4d:c3:e7:07:02:55:1c:aa:22:71:60:22:29:27:c4: 64:b3:e9:31:60:9f:36:7d:45:d5:b1:38:a9:51:dc:ee:fc:9d: 81:0e:a9:38:83:f0:61:ce:9a:f6:8b:7e:31:9a:a3:41:77:5f: e3:d3:0b:62:7d:87:4b:19:a7:8e:1f:32:3e:61:ec:02:5f:eb: f9:a4:1c:dc:b7:b7:85:db:6f:8f:2f:a9:26:24:42:1a:8d:cb: 80:8c:8a:91:ed:81:4d:ed:9c:da:98:f1:f7:93:ff:33:cd:ed: fe:cc:8b:a0:2d:3a:86:d7:7a:fd:4b:83:85:bb:86:25:9c:df: 29:f2:f1:64:7f:98:5b:74:5c:64:b3:e3:a6:88:44:46:45:5a: dd:fc:51:c6:7c:d5:59:1b:ef:bb:f3:ee:e8:b4:f4:a3:dd:c8: 8f:b4:47:01:2d:77:34:6a:eb:64:e6:9c:2b:87:d3:40:ad:07: ce:28:77:6e:7d:5f:e3:1e:ea:31:fa:0e:2f:e1:16:45:e0:1f: a7:b0:c3:70:4f:b2:eb:e0:f8:c4:0c:7a:fe:10:9e:52:87:ba: cd:3f:0d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrfIMvEItVYcyvBXE2qMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTFhNWI2OGVjYTc2OGYyMTFhNDhlODU2ZDdmNTgzZjkw ZTc1ZTcwHhcNMjUxMjA2MDcwMDU3WhcNMjUxMjA3MDcwMDU3WjAzMTEwLwYDVQQD EygxYjFiNzE5NDkyMmZlNDk5NTdhM2Y4NmMyMTc1NmY4OWVkMGNlNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7ANO9xQZ3sC/oBEoHpB+qILpHAQ LidkLomXxsCRykIw6zHekDM2pPtHCTDLtzOWM9UEnKzQ8GMlOZn8Vp9vOJWaR4CE N/D4A0so8eHBAGTTC2wfbmLHJKVnjC7KMS95s0SWsuxn8dZZyGQlNJZl77NpNdtq Hkf09zCyCeBF4q3NCNtUAsfWx4TQcjnlyt1IA95+XypNoupeQEVztvpbeBT6qQWn LwDCRgLD10bwVmsfd2ksIsSIfqoTHNACIXVPabMiAUX9uPZGityPZsy1gYWQavUO VkwzWbk5KSoV8U9zf12+Yagr9c+09JsU0ITsVoYX0xZA0cEkPLCJHpmHgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsbcZSSL+SZV6P4bCF1b4ntDOZMMB8GA1UdIwQY MBaAFArhpbaOynaPIRpI6FbX9YP5DnXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYt YjljODliOWIxZjY1LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYtYjljODliOWIxZjY1 LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQYEMliC 5xDMGc7S7LCEfRN4zy8C29EuXInxVqd/gqyMzjI7+XiITcPnBwJVHKoicWAiKSfE ZLPpMWCfNn1F1bE4qVHc7vydgQ6pOIPwYc6a9ot+MZqjQXdf49MLYn2HSxmnjh8y PmHsAl/r+aQc3Le3hdtvjy+pJiRCGo3LgIyKke2BTe2c2pjx95P/M83t/syLoC06 htd6/UuDhbuGJZzfKfLxZH+YW3RcZLPjpohERkVa3fxRxnzVWRvvu/Pu6LT0o93I j7RHAS13NGrrZOacK4fTQK0Hzih3bn1f4x7qMfoOL+EWReAfp7DDcE+y6+D4xAx6 /hCeUoe6zT8N5A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:36 2025 by rpki-client