This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
File: cuv4F-GpLzzX9J32oxwmX_5HgAg.mft (raw, json)
Hash identifier: bLG/poYBB5arV+E4ytDm04oOxgBBHY4qvQ6LRZUyHjM=
Subject key identifier: 9A:5C:32:C0:06:9F:7F:E4:65:95:08:09:46:0E:08:9A:55:3A:E4:D6
Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08
Certificate issuer: /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
Certificate serial: 019AF12D111132D01003020CFDB15B52524D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
Manifest number: 41
Signing time: Sat 06 Dec 2025 01:00:53 +0000
Manifest this update: Sat 06 Dec 2025 01:00:53 +0000
Manifest next update: Sun 07 Dec 2025 01:00:53 +0000
Files and hashes: 1: 1-in9rMNyyFGgYRLDlxHKtg4FB1E.roa (hash: XTsB6+izcSpkaZrV+QFady1SXFl4xfVW0Bsqwj4eQCg=)
2: cofCNEYRacANYAxSTZL4SPw_KX8.roa (hash: xwSJwljg2CxEqSDGPniocZpQ+W81lV+qFtetG3DGsxM=)
3: cuv4F-GpLzzX9J32oxwmX_5HgAg.crl (hash: wm9siJLRamh4obGiw4a5HWe9hGtiFnc4pRl4v2030Pk=)
4: rPOXAe8XWSJTapFNZZ9XZ_7GfpE.roa (hash: r8Jur4EJ7hn/7uLzBKDScLJ8L342U+l/tsyZx+LNM6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:11:11:32:d0:10:03:02:0c:fd:b1:5b:52:52:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
Validity
Not Before: Dec 6 01:00:53 2025 GMT
Not After : Dec 7 01:00:53 2025 GMT
Subject: CN=9a5c32c0069f7fe465950809460e089a553ae4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:64:9a:74:9c:3f:5b:de:e4:eb:dc:0e:a6:
ac:5f:aa:4a:79:0c:89:6c:a4:0d:f3:8f:75:c3:3a:
e3:0a:fd:79:33:9c:c5:d9:e6:b6:bc:87:f1:85:e3:
23:51:d8:4b:3c:32:7b:0c:ac:43:66:71:fe:f7:f6:
dc:e0:2e:c1:4e:20:00:7b:54:e5:85:5e:b1:c6:89:
f3:6b:2e:18:e0:a3:1d:8e:46:6f:07:44:95:b3:6b:
c8:e6:45:84:03:a4:e7:8e:5a:54:3a:bc:84:fb:38:
2f:88:b1:f8:a1:30:56:09:b3:73:ca:ee:6d:62:cc:
7d:7f:41:0a:b9:d3:48:03:0a:f0:c5:fe:8d:78:dd:
b8:cc:27:8d:f3:56:2f:b9:9f:0a:d9:de:43:e8:f5:
d4:b4:53:01:a8:22:cd:93:dd:16:09:3b:8b:b3:d6:
2a:a9:4c:8c:e6:e8:d8:67:8e:42:58:fe:23:38:e0:
af:f8:a9:5f:f8:a9:ef:89:4e:d3:94:ec:c2:2b:cf:
49:7a:30:ef:6b:62:a0:d8:3f:b0:52:cd:3f:76:4e:
e5:4b:08:3b:43:fa:55:5d:b4:1e:1c:c4:bb:2a:7b:
27:42:5f:2e:a9:24:10:a3:5d:bb:1b:4a:22:94:70:
2b:70:04:c2:cb:3d:5a:f6:9d:57:c1:0c:c0:8d:7a:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5C:32:C0:06:9F:7F:E4:65:95:08:09:46:0E:08:9A:55:3A:E4:D6
X509v3 Authority Key Identifier:
keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:14:b7:5b:27:4e:b3:e9:64:92:57:bc:e9:53:49:be:10:09:
d3:a4:21:6d:69:c7:76:b0:ca:de:95:bf:8b:0c:95:76:7f:e8:
0e:e6:9c:c5:af:43:0b:fb:20:2f:8a:a5:fd:65:49:9e:49:b0:
7d:27:68:d3:f4:7f:df:7c:89:11:81:ec:bd:23:b6:bf:77:ce:
1c:d3:ec:38:84:c4:d9:0e:f2:9e:16:c6:9c:a0:02:9f:63:d9:
c5:75:15:1e:46:6a:a6:84:0e:a1:a2:80:64:87:aa:cd:fc:69:
4d:ce:53:8f:51:d4:99:c2:5c:ac:8d:46:58:9b:9d:df:64:9c:
3f:c5:ef:9e:1c:6a:a9:9c:d8:14:ec:1f:bb:f4:96:6b:51:17:
bd:09:35:31:d5:c5:5f:74:04:f1:99:65:0a:c4:f0:96:dc:66:
db:80:73:6b:80:31:9a:c3:c2:49:ba:e4:b9:5d:0d:13:97:7c:
e5:a3:08:0d:a8:8d:57:c6:6c:fa:64:a6:6f:e0:82:e6:9b:40:
70:f4:77:96:51:1a:b1:6d:32:a0:51:d4:eb:d3:8f:71:2b:4a:
00:80:f0:80:48:5e:80:da:31:5a:47:82:f9:c4:55:90:92:26:
5c:20:8e:e7:48:f9:be:28:03:bc:cc:fc:18:bd:89:af:7c:78:
d2:6e:74:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:41:36 2025 by rpki-client