This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json) Hash identifier: BKk+2uCRoHAhXs7Ciu0rGsAxqGCfOBSUgsOykqEnicw= Subject key identifier: 6B:9C:FE:10:91:D0:0B:F4:D8:2B:80:F2:C3:DD:C6:E4:8D:15:7D:76 Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Certificate serial: 019AF20912667F1D6421A3415105C197C1C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft Manifest number: 0988 Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: Ys/5P/S8vqGx5/TUw7KifJIoQOmy8kE4WQvGFFuMf5w=) 2: d0b72ny8wPnM19_QwF_mbcUjDN0.roa (hash: SMFsSG0c6aEdE5nra06sYeY6XybcAZuUprO34jcJsEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:12:66:7f:1d:64:21:a3:41:51:05:c1:97:c1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=6b9cfe1091d00bf4d82b80f2c3ddc6e48d157d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:7b:62:ee:4d:73:12:4a:d2:08:f7:ca:95: e8:c0:69:df:3c:f1:16:45:0d:43:15:15:a6:84:fd: ea:ad:ce:ca:36:0b:4c:79:91:64:07:2b:17:fa:90: ea:09:d1:12:b0:eb:27:23:82:70:58:c1:ca:39:e0: 04:28:3c:03:93:d9:7c:d3:04:66:ef:61:45:a6:90: fd:41:99:ef:66:29:80:cc:a0:28:a0:5d:00:9e:23: f8:0e:40:b7:82:c0:22:b2:ca:3e:b7:d9:67:85:de: 24:f1:87:8a:cb:9f:2a:57:48:83:5d:38:1e:1f:93: cb:d4:28:4c:15:53:0d:7c:c5:b8:a8:4d:f8:30:80: 1e:4e:94:27:ba:04:37:f0:49:77:36:48:3a:76:b7: 32:f4:4e:e3:f3:4a:a5:ad:19:0e:36:72:e3:b6:26: e4:76:00:d6:9c:49:df:c4:ed:a8:85:46:0b:10:2a: 99:d1:1b:1e:18:00:07:29:50:c7:ba:ef:a7:5f:ba: d0:62:76:14:2c:bd:6f:39:e5:9e:77:4b:4f:f5:51: 99:97:35:96:41:c4:fe:a0:9a:03:72:10:bf:2d:e8: 0d:6e:d3:e5:4b:15:91:96:fc:54:e5:17:64:69:08: d3:2c:30:21:48:81:a7:e3:8d:c2:2f:6a:50:d1:14: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9C:FE:10:91:D0:0B:F4:D8:2B:80:F2:C3:DD:C6:E4:8D:15:7D:76 X509v3 Authority Key Identifier: keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:58:5a:1e:62:f8:e0:dd:c8:75:e5:f3:76:91:d5:61:ab:9e: fb:58:6e:70:6c:e0:4c:c5:d0:f3:51:d9:91:0c:fe:53:2b:27: e9:d9:4c:ba:fb:28:35:38:16:80:57:9d:c5:3c:96:ea:27:10: 8c:8a:8b:12:81:b7:ec:44:51:df:82:6c:48:9a:35:ee:77:53: 04:40:97:15:98:eb:45:14:0d:a5:64:21:95:a7:8e:13:11:3a: 61:45:ea:07:fd:b2:8d:1c:00:5c:ac:26:03:af:db:cf:ef:5b: 98:ad:09:a1:9c:98:d1:6f:e0:d0:63:40:c9:e5:10:ac:84:a3: ae:e4:94:b1:fc:c3:88:0d:9a:40:39:b4:ae:04:c3:e9:ff:be: 5d:09:2a:02:cf:82:6c:f7:77:cf:c5:a2:30:99:17:be:3c:c0: 96:c6:11:ee:fa:4a:d6:02:73:f2:ea:44:90:18:6c:c0:7b:84: 6f:4b:d8:04:db:3c:fa:88:52:1f:89:0f:6e:32:33:09:9a:48: 51:50:da:de:97:a5:90:10:f6:e5:fa:87:42:cf:d0:5c:41:2a: 20:ae:75:c9:e5:c1:73:00:44:bc:b1:03:5f:67:8d:c2:5a:93: fe:f8:89:6c:01:ad:24:4c:a5:cc:d9:e2:4e:e1:ca:50:b0:ab: ca:ff:4f:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRJmfx1kIaNBUQXBl8HFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTViNTdiYjM5OGQ1ZTE4MzlhM2ZlNDI1NGRmNzBkNzEy Y2UxNGEwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD Eyg2YjljZmUxMDkxZDAwYmY0ZDgyYjgwZjJjM2RkYzZlNDhkMTU3ZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJN7Yu5NcxJK0gj3ypXowGnfPPEW RQ1DFRWmhP3qrc7KNgtMeZFkBysX+pDqCdESsOsnI4JwWMHKOeAEKDwDk9l80wRm 72FFppD9QZnvZimAzKAooF0AniP4DkC3gsAisso+t9lnhd4k8YeKy58qV0iDXTge H5PL1ChMFVMNfMW4qE34MIAeTpQnugQ38El3Nkg6drcy9E7j80qlrRkONnLjtibk dgDWnEnfxO2ohUYLECqZ0RseGAAHKVDHuu+nX7rQYnYULL1vOeWed0tP9VGZlzWW QcT+oJoDchC/LegNbtPlSxWRlvxU5RdkaQjTLDAhSIGn443CL2pQ0RTnwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuc/hCR0Av02CuA8sPdxuSNFX12MB8GA1UdIwQY MBaAFHLltXuzmNXhg5o/5CVN9w1xLOFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDct OTY4ZDBjN2YyMmJiLzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDctOTY4ZDBjN2YyMmJi LzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFhaHmL4 4N3IdeXzdpHVYaue+1hucGzgTMXQ81HZkQz+Uysn6dlMuvsoNTgWgFedxTyW6icQ jIqLEoG37ERR34JsSJo17ndTBECXFZjrRRQNpWQhlaeOExE6YUXqB/2yjRwAXKwm A6/bz+9bmK0JoZyY0W/g0GNAyeUQrISjruSUsfzDiA2aQDm0rgTD6f++XQkqAs+C bPd3z8WiMJkXvjzAlsYR7vpK1gJz8upEkBhswHuEb0vYBNs8+ohSH4kPbjIzCZpI UVDa3pelkBD25fqHQs/QXEEqIK51yeXBcwBEvLEDX2eNwlqT/viJbAGtJEylzNni TuHKULCryv9PLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:45 2025 by rpki-client