This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json) Hash identifier: mrGEU0Lb2CAkzX9alidVar18akr0mOuoLr6JN/HiEVo= Subject key identifier: 96:67:56:5A:B1:7D:53:D2:66:10:06:77:E2:F0:F2:50:F7:A1:BE:11 Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5 Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5 Certificate serial: 019AF19AF0DD04DEB8A436988D3AC30CA45A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft Manifest number: 1292 Signing time: Sat 06 Dec 2025 03:00:54 +0000 Manifest this update: Sat 06 Dec 2025 03:00:54 +0000 Manifest next update: Sun 07 Dec 2025 03:00:54 +0000 Files and hashes: 1: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: N3KAM88NZveRCD/CF3GvGt45e++JEfhK58+GqPQ09YQ=) 2: x-sFc0XuZWyC8mb5YkUAH-GfdII.roa (hash: SLT0QNLc8vBCO5UeVhbutYzbWFamBQrhqoa9wxuI2Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f0:dd:04:de:b8:a4:36:98:8d:3a:c3:0c:a4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5 Validity Not Before: Dec 6 03:00:54 2025 GMT Not After : Dec 7 03:00:54 2025 GMT Subject: CN=9667565ab17d53d266100677e2f0f250f7a1be11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0b:20:4a:2e:b2:ad:a1:d9:f7:db:60:e3:c2: 63:2f:15:2b:73:87:c3:0b:75:b7:9d:e6:66:d9:e6: 99:52:05:b6:3d:2e:79:74:e9:ad:45:85:2f:65:45: d0:d9:d7:d9:b8:7e:b4:9d:f4:4d:ae:83:96:94:51: af:03:4d:22:50:bb:6e:04:46:d9:4c:87:ac:10:16: 6a:ff:d5:80:66:0c:b6:2e:dd:51:a1:89:fa:90:6d: a2:2b:26:39:fb:86:fc:0d:7c:38:8b:3b:b8:f2:60: 91:93:70:ff:16:f6:2e:44:40:b5:ee:45:86:74:a6: aa:38:55:d4:25:be:e9:ce:27:d2:df:59:3d:af:4f: 9e:35:da:19:94:27:6b:50:db:d7:20:29:47:15:96: a1:8a:78:a0:e1:a0:ee:0f:6f:79:63:00:a5:bb:db: 61:41:a5:e5:da:47:e0:74:d1:54:07:e0:87:c7:d1: 04:bc:1c:df:6a:29:b1:89:f0:3c:db:11:bb:55:e2: 3d:61:69:37:41:42:da:fc:d6:83:b5:6c:a2:cf:e7: cb:94:b5:87:a7:0e:e0:49:c6:bb:b5:7b:85:c1:12: 2e:ef:b5:65:ce:eb:b8:71:c1:a9:d6:1c:1d:26:35: 4c:4a:44:fa:d6:e1:b1:bc:79:e5:08:a8:f1:38:e5: 64:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:67:56:5A:B1:7D:53:D2:66:10:06:77:E2:F0:F2:50:F7:A1:BE:11 X509v3 Authority Key Identifier: keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:35:6a:f5:a8:45:0b:bb:5e:24:be:97:b5:89:d8:45:46:e0: 9f:7d:45:a0:e9:9e:46:39:8e:b9:4f:f2:3e:48:55:4d:b8:6c: f4:77:3c:8d:c9:30:fe:73:91:ac:64:2b:0d:4f:37:38:e2:27: 7c:4c:9b:68:9d:3d:50:c5:89:97:fa:69:cf:56:bd:72:b5:e0: 18:5f:4a:d6:67:e8:dc:ad:78:f7:8d:29:b4:ca:60:ad:b7:35: 5c:46:b1:2f:26:15:19:b2:26:d7:91:df:8e:b9:7e:e4:80:03: 62:8a:19:af:ff:42:7d:9e:5b:b0:f2:b4:aa:5e:03:21:bf:ef: 8f:8f:05:9d:4e:5e:19:16:97:32:9c:3f:84:1b:e6:a4:6c:38: 3a:b7:ec:0f:50:52:ab:0d:f2:99:f2:bd:7a:a8:e8:4c:b3:6f: 9d:01:8f:b7:31:e4:e5:74:9c:e8:b7:cc:64:5e:3c:cf:1e:08: 12:1b:0e:90:d2:d8:76:2a:73:52:f6:65:f9:48:2a:a2:ae:09: 99:d7:26:9e:65:57:ae:42:52:4a:e9:15:b3:15:dd:24:cc:8b: ef:3b:f9:a3:75:b8:4a:8f:15:a5:37:4e:f7:45:ae:48:b5:8a: 6d:6e:6e:85:2e:fa:6b:9a:96:a9:62:f8:8b:f4:df:41:f4:d1: be:18:d8:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvDdBN64pDaYjTrDDKRaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzUwOWU3ZWM2OGZlMmQ5NDM0MDdkNWRkMTI2YTBmNTk2 ZjJhYjUwHhcNMjUxMjA2MDMwMDU0WhcNMjUxMjA3MDMwMDU0WjAzMTEwLwYDVQQD Eyg5NjY3NTY1YWIxN2Q1M2QyNjYxMDA2NzdlMmYwZjI1MGY3YTFiZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gsgSi6yraHZ99tg48JjLxUrc4fD C3W3neZm2eaZUgW2PS55dOmtRYUvZUXQ2dfZuH60nfRNroOWlFGvA00iULtuBEbZ TIesEBZq/9WAZgy2Lt1RoYn6kG2iKyY5+4b8DXw4izu48mCRk3D/FvYuREC17kWG dKaqOFXUJb7pzifS31k9r0+eNdoZlCdrUNvXIClHFZahinig4aDuD295YwClu9th QaXl2kfgdNFUB+CHx9EEvBzfaimxifA82xG7VeI9YWk3QULa/NaDtWyiz+fLlLWH pw7gSca7tXuFwRIu77Vlzuu4ccGp1hwdJjVMSkT61uGxvHnlCKjxOOVkRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZnVlqxfVPSZhAGd+Lw8lD3ob4RMB8GA1UdIwQY MBaAFAk1CefsaP4tlDQH1d0Sag9Zbyq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgt N2Q2OTczMzcxMzdiLzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgtN2Q2OTczMzcxMzdi LzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjVq9ahF C7teJL6XtYnYRUbgn31FoOmeRjmOuU/yPkhVTbhs9Hc8jckw/nORrGQrDU83OOIn fEybaJ09UMWJl/ppz1a9crXgGF9K1mfo3K14940ptMpgrbc1XEaxLyYVGbIm15Hf jrl+5IADYooZr/9CfZ5bsPK0ql4DIb/vj48FnU5eGRaXMpw/hBvmpGw4OrfsD1BS qw3ymfK9eqjoTLNvnQGPtzHk5XSc6LfMZF48zx4IEhsOkNLYdipzUvZl+Ugqoq4J mdcmnmVXrkJSSukVsxXdJMyL7zv5o3W4So8VpTdO90WuSLWKbW5uhS76a5qWqWL4 i/TfQfTRvhjYCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:27:04 2025 by rpki-client