This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json) Hash identifier: TUBmm9WovseuAO0MNc3gxZheHX25rAou5gp997AEWog= Subject key identifier: EE:85:D1:21:4A:3A:A9:04:CE:6B:83:E2:F3:EB:DF:52:2A:09:4C:0B Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Certificate serial: 019B35A012E431A1576FBCECAE8783539128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft Manifest number: 09AB Signing time: Fri 19 Dec 2025 08:00:41 +0000 Manifest this update: Fri 19 Dec 2025 08:00:41 +0000 Manifest next update: Sat 20 Dec 2025 08:00:41 +0000 Files and hashes: 1: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: 4k56B5tzN5zix70NmGEe1NdYnDJwXGkkONEoGe2BG8Q=) 2: d0b72ny8wPnM19_QwF_mbcUjDN0.roa (hash: SMFsSG0c6aEdE5nra06sYeY6XybcAZuUprO34jcJsEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:12:e4:31:a1:57:6f:bc:ec:ae:87:83:53:91:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Validity Not Before: Dec 19 08:00:41 2025 GMT Not After : Dec 20 08:00:41 2025 GMT Subject: CN=ee85d1214a3aa904ce6b83e2f3ebdf522a094c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:b7:e4:c9:cb:20:af:40:4e:18:73:fe:a0: e5:cd:01:45:e8:c9:0a:05:94:3c:15:b0:79:f5:7c: 9e:34:00:7d:51:93:36:17:e8:0c:38:e7:ee:b4:37: 60:60:53:46:4f:27:e0:ea:03:55:18:b7:e5:be:80: 77:fa:46:12:61:c3:f7:67:b1:09:e5:33:b0:d7:1d: 87:7d:72:95:c3:36:ec:34:91:e7:b0:33:8c:d5:2b: 54:ef:15:39:c9:59:6e:58:8c:58:a8:40:29:2d:11: 45:69:84:90:64:31:29:be:27:03:8c:1c:e6:40:ca: 0a:26:99:2c:1b:77:84:8a:ed:40:73:3d:20:99:a2: b6:1f:b3:df:01:41:44:91:13:b7:0b:d5:fa:0e:f2: 80:38:23:fb:ae:ba:44:4b:7e:c2:fe:74:e8:e4:3e: 8f:f7:96:bb:cc:af:64:df:e5:3f:3b:73:24:7b:a7: 78:d8:71:e7:7e:52:04:31:cb:5d:04:01:d2:15:7f: 65:0a:1d:0d:c5:fc:60:1f:d7:3a:ac:84:15:5b:c2: 63:78:e9:e7:d1:78:79:98:9b:8e:c3:5f:d5:52:5f: e3:36:2c:fb:f3:fe:a7:30:e6:01:ea:dc:8f:0a:3d: 11:f9:10:88:66:e0:8e:fa:60:2a:10:c7:03:9e:f2: d4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:85:D1:21:4A:3A:A9:04:CE:6B:83:E2:F3:EB:DF:52:2A:09:4C:0B X509v3 Authority Key Identifier: keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:65:76:3a:42:7f:c2:51:04:63:9c:84:38:81:fe:58:5b:c3: 3e:98:03:8c:9e:e7:fb:32:23:33:a2:c2:ca:62:47:9d:e7:f3: e4:3a:39:cd:93:35:eb:89:2a:1e:16:c3:bd:7c:60:97:8b:f7: f7:8d:9d:0e:57:30:d1:cb:0b:cb:75:55:90:10:b5:aa:a4:75: 56:e9:98:c2:df:1d:b1:97:07:1a:d1:d3:4e:d8:b7:ec:e0:70: 92:e4:ec:3b:40:93:28:23:e3:b3:ec:8e:7e:73:8c:7b:bf:c5: 36:58:93:1d:86:9d:ef:14:58:e5:af:58:e7:25:40:27:a4:ae: d2:1d:d2:ef:7d:19:13:c8:fe:e6:97:c6:08:a1:39:00:0e:7b: bd:4e:17:26:27:de:b7:00:73:48:cf:4e:85:f6:a1:fa:c6:3a: f3:9d:75:c7:62:ba:f1:8a:ca:6b:0f:e8:4a:b0:b5:89:f6:cb: e9:d8:3f:b2:b6:dc:d0:d6:30:9d:e3:05:e3:ac:05:10:a8:8c: 3c:16:fe:db:a4:ad:37:ba:ce:bd:5b:c2:f3:a2:66:b4:e0:86: 0f:6a:50:94:d0:8b:fa:bd:83:0b:09:d9:a4:dc:3c:1f:a9:ef: d3:1f:ef:85:d7:ae:f2:3d:74:ba:83:c2:91:cf:2c:1b:26:3b: f8:96:b6:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oBLkMaFXb7zsroeDU5EoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTViNTdiYjM5OGQ1ZTE4MzlhM2ZlNDI1NGRmNzBkNzEy Y2UxNGEwHhcNMjUxMjE5MDgwMDQxWhcNMjUxMjIwMDgwMDQxWjAzMTEwLwYDVQQD EyhlZTg1ZDEyMTRhM2FhOTA0Y2U2YjgzZTJmM2ViZGY1MjJhMDk0YzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDW35MnLIK9AThhz/qDlzQFF6MkK BZQ8FbB59XyeNAB9UZM2F+gMOOfutDdgYFNGTyfg6gNVGLflvoB3+kYSYcP3Z7EJ 5TOw1x2HfXKVwzbsNJHnsDOM1StU7xU5yVluWIxYqEApLRFFaYSQZDEpvicDjBzm QMoKJpksG3eEiu1Acz0gmaK2H7PfAUFEkRO3C9X6DvKAOCP7rrpES37C/nTo5D6P 95a7zK9k3+U/O3Mke6d42HHnflIEMctdBAHSFX9lCh0NxfxgH9c6rIQVW8JjeOnn 0Xh5mJuOw1/VUl/jNiz78/6nMOYB6tyPCj0R+RCIZuCO+mAqEMcDnvLUtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6F0SFKOqkEzmuD4vPr31IqCUwLMB8GA1UdIwQY MBaAFHLltXuzmNXhg5o/5CVN9w1xLOFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDct OTY4ZDBjN2YyMmJiLzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDctOTY4ZDBjN2YyMmJi LzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWV2OkJ/ wlEEY5yEOIH+WFvDPpgDjJ7n+zIjM6LCymJHnefz5Do5zZM164kqHhbDvXxgl4v3 942dDlcw0csLy3VVkBC1qqR1VumYwt8dsZcHGtHTTti37OBwkuTsO0CTKCPjs+yO fnOMe7/FNliTHYad7xRY5a9Y5yVAJ6Su0h3S730ZE8j+5pfGCKE5AA57vU4XJife twBzSM9Ohfah+sY68511x2K68YrKaw/oSrC1ifbL6dg/srbc0NYwneMF46wFEKiM PBb+26StN7rOvVvC86JmtOCGD2pQlNCL+r2DCwnZpNw8H6nv0x/vhdeu8j10uoPC kc8sGyY7+Ja2tw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:43:53 2025 by rpki-client