This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json) Hash identifier: 5CL3uTXq8OE4Y8On1RSPS0RjmJmC/FixYZFBF5+pqlM= Subject key identifier: 0D:00:70:E2:86:22:A9:AB:0F:BB:E0:0E:A9:7F:96:D6:50:1E:FC:F5 Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98 Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098 Certificate serial: 019AF31CE9069DF38954F354F08683D9CB11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:02:29 +0000 Manifest this update: Sat 06 Dec 2025 10:02:29 +0000 Manifest next update: Sun 07 Dec 2025 10:02:29 +0000 Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: JJeHKi2+5p986gJA3PIXpARrMr2hasovIYRlxu3s0yw=) 2: tsQCK0at0tvh2TQxSMohTv0qJJo.roa (hash: 6ge8utmi5hP9DNzFySVDCcGypw9lo+O2IamCCwk3yDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e9:06:9d:f3:89:54:f3:54:f0:86:83:d9:cb:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098 Validity Not Before: Dec 6 10:02:29 2025 GMT Not After : Dec 7 10:02:29 2025 GMT Subject: CN=0d0070e28622a9ab0fbbe00ea97f96d6501efcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7c:03:89:fe:fb:5f:14:dc:94:f6:74:65:51: c8:0c:8b:09:6f:53:64:9b:ff:3d:e0:e1:60:07:ea: 68:93:3c:ae:e5:8e:1f:27:4a:5a:84:80:e3:16:49: c9:05:4e:ee:b5:0b:3c:a8:25:87:9f:9f:f9:6f:87: e0:9c:72:0c:7d:a9:71:a4:ec:ad:d3:22:e7:94:4b: f0:1f:4f:84:be:49:a2:7d:e3:bd:ac:10:13:62:7c: cf:3b:e7:5b:29:a0:8b:b1:eb:89:e2:dd:0c:bc:57: 9c:ce:56:a2:db:26:b4:d3:24:99:a4:f9:64:a7:9c: 1b:45:84:cf:de:a9:8e:dd:21:cc:67:4d:cf:14:34: 19:86:cb:8d:96:e1:9c:ff:12:b9:ed:3e:74:62:0f: c6:bc:9e:6a:e2:69:95:8b:4d:6c:e2:e5:91:17:cf: a1:8f:af:44:47:f4:57:cd:d6:56:c4:25:58:68:04: 7a:ea:1c:7e:14:27:95:68:7b:58:8d:d9:31:46:d5: fe:47:17:2f:70:66:d8:1d:20:65:de:71:fc:c3:de: bd:a5:af:80:49:f5:2c:d4:ee:64:38:60:8d:bb:58: 2c:b9:71:2a:5e:24:93:6c:bd:3d:d5:f1:2c:c9:16: ed:97:69:46:c8:79:c3:50:d3:ee:60:96:c8:43:31: 44:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:00:70:E2:86:22:A9:AB:0F:BB:E0:0E:A9:7F:96:D6:50:1E:FC:F5 X509v3 Authority Key Identifier: keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:24:a2:3d:95:68:a7:a7:56:b0:37:21:9f:96:f3:b2:7a:86: 2d:53:66:7f:78:c1:be:2f:9a:b8:ec:4a:01:6f:40:6e:68:85: 30:89:b7:b1:93:63:cb:30:71:49:30:fc:68:c5:66:c6:b0:f8: 1d:f7:14:fb:9e:8c:69:a6:e1:6a:f3:e9:1e:dd:76:8d:01:8b: aa:ba:56:31:54:88:6e:06:ec:13:20:36:ec:a2:7e:69:52:2b: e7:1f:e4:92:9b:8d:83:ff:36:d4:ea:ca:8f:c6:59:72:37:36: af:44:d5:13:6b:8e:ce:dc:01:77:9d:0c:c1:0e:e5:58:c3:1a: 7b:23:76:45:ac:d5:55:02:dd:b4:a6:73:0b:43:d3:c0:62:15: 1a:ba:dd:75:bb:15:0c:fd:b6:c2:c9:37:98:e6:45:de:7a:a3: 68:c0:54:bc:95:df:17:aa:f3:de:ad:2f:c4:61:46:7a:13:ad: 87:78:f4:92:03:76:41:6b:27:56:ee:75:57:48:88:db:7c:63: af:63:a5:2f:9e:e3:13:64:3e:b8:8c:a2:94:4a:a2:ee:24:1b: e5:4f:57:dd:3a:5c:4a:21:6d:00:7f:2d:d1:cb:dc:ec:47:22: 2b:a2:61:4b:1b:57:b9:2d:d4:ae:72:06:ec:96:d9:92:26:f5: 46:bd:a1:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOkGnfOJVPNU8IaD2csRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NGVhMWNmNGZkYzM0NzVjMWYyOGQ2MTFjMWYxOGZlMDI3 YzEwOTgwHhcNMjUxMjA2MTAwMjI5WhcNMjUxMjA3MTAwMjI5WjAzMTEwLwYDVQQD EygwZDAwNzBlMjg2MjJhOWFiMGZiYmUwMGVhOTdmOTZkNjUwMWVmY2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnwDif77XxTclPZ0ZVHIDIsJb1Nk m/894OFgB+pokzyu5Y4fJ0pahIDjFknJBU7utQs8qCWHn5/5b4fgnHIMfalxpOyt 0yLnlEvwH0+EvkmifeO9rBATYnzPO+dbKaCLseuJ4t0MvFeczlai2ya00ySZpPlk p5wbRYTP3qmO3SHMZ03PFDQZhsuNluGc/xK57T50Yg/GvJ5q4mmVi01s4uWRF8+h j69ER/RXzdZWxCVYaAR66hx+FCeVaHtYjdkxRtX+RxcvcGbYHSBl3nH8w969pa+A SfUs1O5kOGCNu1gsuXEqXiSTbL091fEsyRbtl2lGyHnDUNPuYJbIQzFEKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0AcOKGIqmrD7vgDql/ltZQHvz1MB8GA1UdIwQY MBaAFAlOoc9P3DR1wfKNYRwfGP4CfBCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDkt OTgyY2NlODY4ZmZhLzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDktOTgyY2NlODY4ZmZh LzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCSiPZVo p6dWsDchn5bzsnqGLVNmf3jBvi+auOxKAW9AbmiFMIm3sZNjyzBxSTD8aMVmxrD4 HfcU+56MaabhavPpHt12jQGLqrpWMVSIbgbsEyA27KJ+aVIr5x/kkpuNg/821OrK j8ZZcjc2r0TVE2uOztwBd50MwQ7lWMMaeyN2RazVVQLdtKZzC0PTwGIVGrrddbsV DP22wsk3mOZF3nqjaMBUvJXfF6rz3q0vxGFGehOth3j0kgN2QWsnVu51V0iI23xj r2OlL57jE2Q+uIyilEqi7iQb5U9X3TpcSiFtAH8t0cvc7EciK6JhSxtXuS3UrnIG 7JbZkib1Rr2hdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:33 2025 by rpki-client