This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft File: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft (raw, json) Hash identifier: BewJPBYdV7ZeexvXDHrwTu5b+JUrB21N4nHm4fEOE1c= Subject key identifier: 37:2C:DB:EE:F3:C9:14:C2:FB:BD:5A:49:5C:5F:FC:A5:9B:02:A6:13 Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C Certificate issuer: /CN=72e6826c8628489db041fe78c09ef28b5421e45c Certificate serial: 019AF19BB107C3BB82BA6D839E3A210A5499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:43 +0000 Manifest this update: Sat 06 Dec 2025 03:01:43 +0000 Manifest next update: Sun 07 Dec 2025 03:01:43 +0000 Files and hashes: 1: 7Zrn_XBWju-Og5hlhKowGwl2kf8.roa (hash: CHg97u7b8WBMpcTvfGndNn9XQr55QZ9IWb+Xsbuljto=) 2: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl (hash: 94dcDFhEoEiBhjsg9xNBqIBvG5hN+iPy5dV+Qr6XIwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b1:07:c3:bb:82:ba:6d:83:9e:3a:21:0a:54:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c Validity Not Before: Dec 6 03:01:43 2025 GMT Not After : Dec 7 03:01:43 2025 GMT Subject: CN=372cdbeef3c914c2fbbd5a495c5ffca59b02a613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d5:d0:21:2e:92:53:19:e6:b3:71:c2:b7:f7: ee:94:57:d2:5e:58:c2:04:5e:95:bb:20:f3:40:1c: c8:62:f8:f6:4b:02:41:32:92:86:73:d6:a5:e1:69: 62:9c:06:a9:8d:b6:1f:e2:38:b3:0f:cf:ad:3f:1e: c4:c1:fd:27:97:55:23:08:f9:09:8e:09:7a:65:e2: 2a:62:5a:33:7e:64:fd:4b:c8:ca:9c:18:74:bd:04: 71:23:c1:3c:dc:de:bc:f1:14:3c:79:db:e9:52:33: 7e:c1:8d:a4:94:6c:c5:e4:ca:8f:61:86:2a:d6:41: 18:a4:94:95:db:83:d8:78:7e:16:51:4e:f4:cb:92: 3d:e7:cc:82:e7:10:58:ea:e0:d8:18:9b:d5:36:78: 4b:bb:84:70:72:92:5c:1f:4a:c2:de:c4:17:94:de: 41:91:f9:73:28:15:59:da:30:21:f0:19:09:bc:d6: e1:80:99:e1:d6:8e:c8:d3:79:b8:32:71:75:32:96: 60:9b:b1:71:1b:dc:e9:48:65:8a:9e:e3:32:a5:be: f2:dc:98:45:20:8b:e4:c7:36:54:ad:51:fe:b1:76: e7:74:59:e7:32:b0:7d:81:0a:48:68:3b:1c:77:c1: 6c:3f:03:d9:b0:2c:c5:1c:42:87:13:ac:bc:db:9b: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2C:DB:EE:F3:C9:14:C2:FB:BD:5A:49:5C:5F:FC:A5:9B:02:A6:13 X509v3 Authority Key Identifier: keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:78:5e:02:54:eb:77:fe:fc:cd:a9:e0:74:d2:d6:55:4e:36: 1c:05:8e:d3:4d:87:af:8e:a0:d9:c9:24:33:47:3e:11:c2:ef: 39:12:58:8e:28:0a:87:47:57:f5:f7:a9:cd:09:25:e5:f7:9a: cd:42:71:d8:c8:b9:b1:5b:41:c3:fe:2c:fa:df:ed:ac:62:06: d2:4d:e6:da:35:40:41:78:17:18:10:44:de:ea:9a:9b:7e:0b: de:96:78:df:ae:b3:ab:ee:9b:08:72:e5:c9:6d:28:ec:ec:68: 95:04:58:2a:43:f5:7d:05:d1:c0:21:80:87:a4:fd:b4:54:f9: 92:be:58:87:e8:a9:b9:be:1d:f3:ff:16:19:10:bc:36:10:59: 26:39:80:87:f8:48:eb:16:89:fc:9e:46:f7:db:e5:ad:51:64: 3b:e1:a6:83:48:24:90:e4:03:49:5b:17:36:b7:87:66:51:9c: a3:06:34:38:56:b4:e8:6c:f2:ce:64:bb:a0:89:26:b0:08:59: 9f:26:13:58:21:05:a0:fe:68:63:bd:73:20:18:91:72:ff:21: 35:db:40:b2:4d:f4:14:49:4a:27:28:3c:09:6c:ef:93:16:4b: 1b:ba:6e:da:cf:8c:3a:62:16:f5:0f:88:c6:82:f2:82:6a:75: 38:eb:da:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7EHw7uCum2DnjohClSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTY4MjZjODYyODQ4OWRiMDQxZmU3OGMwOWVmMjhiNTQy MWU0NWMwHhcNMjUxMjA2MDMwMTQzWhcNMjUxMjA3MDMwMTQzWjAzMTEwLwYDVQQD EygzNzJjZGJlZWYzYzkxNGMyZmJiZDVhNDk1YzVmZmNhNTliMDJhNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dXQIS6SUxnms3HCt/fulFfSXljC BF6VuyDzQBzIYvj2SwJBMpKGc9al4WlinAapjbYf4jizD8+tPx7Ewf0nl1UjCPkJ jgl6ZeIqYlozfmT9S8jKnBh0vQRxI8E83N688RQ8edvpUjN+wY2klGzF5MqPYYYq 1kEYpJSV24PYeH4WUU70y5I958yC5xBY6uDYGJvVNnhLu4RwcpJcH0rC3sQXlN5B kflzKBVZ2jAh8BkJvNbhgJnh1o7I03m4MnF1MpZgm7FxG9zpSGWKnuMypb7y3JhF IIvkxzZUrVH+sXbndFnnMrB9gQpIaDscd8FsPwPZsCzFHEKHE6y825tkJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcs2+7zyRTC+71aSVxf/KWbAqYTMB8GA1UdIwQY MBaAFHLmgmyGKEidsEH+eMCe8otUIeRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEt OTc1YWQwM2Q4OGU2LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEtOTc1YWQwM2Q4OGU2 LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3heAlTr d/78zangdNLWVU42HAWO002Hr46g2ckkM0c+EcLvORJYjigKh0dX9fepzQkl5fea zUJx2Mi5sVtBw/4s+t/trGIG0k3m2jVAQXgXGBBE3uqam34L3pZ4366zq+6bCHLl yW0o7OxolQRYKkP1fQXRwCGAh6T9tFT5kr5Yh+ipub4d8/8WGRC8NhBZJjmAh/hI 6xaJ/J5G99vlrVFkO+Gmg0gkkOQDSVsXNreHZlGcowY0OFa06GzyzmS7oIkmsAhZ nyYTWCEFoP5oY71zIBiRcv8hNdtAsk30FElKJyg8CWzvkxZLG7pu2s+MOmIW9Q+I xoLygmp1OOvajg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:22 2025 by rpki-client