This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft File: CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json) Hash identifier: b3RqzoKYvE6GCJyZsb1+IWp/Jp+rY0GI1MRvMGZzSRg= Subject key identifier: 2A:7D:4B:2E:FC:96:8B:98:BE:59:19:90:43:46:C0:01:A6:EF:10:4C Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47 Certificate issuer: /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047 Certificate serial: 019AF19AE881E2A145D1D235CE68C37C1FAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft Manifest number: 08E6 Signing time: Sat 06 Dec 2025 03:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:00:52 +0000 Manifest next update: Sun 07 Dec 2025 03:00:52 +0000 Files and hashes: 1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: O05tjjIJwVZ/08jepAxWa9dJSmfw0e7ROOrriarn79k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e8:81:e2:a1:45:d1:d2:35:ce:68:c3:7c:1f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047 Validity Not Before: Dec 6 03:00:52 2025 GMT Not After : Dec 7 03:00:52 2025 GMT Subject: CN=2a7d4b2efc968b98be5919904346c001a6ef104c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:92:32:62:3a:c6:c6:5b:9d:01:fd:87:e1:a7: 79:94:db:26:78:13:5f:3c:ef:36:3a:a2:dc:d6:33: 1f:ad:e1:fa:dc:45:9b:d5:9e:99:86:6f:94:0e:f2: 66:c2:0a:2f:dc:95:50:74:2b:21:53:96:4d:93:81: e2:ef:25:24:d4:9c:14:1a:53:ee:fb:c3:f8:78:e1: a2:7b:a1:23:8e:fa:79:70:04:50:1e:41:a0:7a:ed: 9e:5b:07:da:37:0b:c3:49:4f:c0:7b:84:63:53:c3: 66:cc:e4:a4:d0:ee:2c:96:cc:f1:7d:02:e5:32:2c: e0:54:c9:f9:75:23:6d:7d:34:b1:f8:bb:86:cb:b0: 19:e0:cb:04:3b:37:a1:e2:a5:75:40:80:45:19:91: 3c:f7:0f:ca:57:43:24:02:31:39:03:00:96:68:85: c1:67:d6:d8:9c:49:0e:29:98:3c:8b:45:7b:f6:1a: 8b:b0:8b:87:20:90:c6:ca:14:d5:a8:91:cd:e4:09: 2f:df:ce:ac:cd:ea:f4:9e:91:1c:e6:01:9c:15:b4: b5:a8:47:ac:21:6e:ed:50:6f:4f:ba:21:1c:c2:ee: 7f:2c:7e:18:d6:57:7f:2c:16:65:98:58:43:49:a4: c8:6d:7a:46:70:88:b8:3f:98:a4:11:72:c7:85:4b: da:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7D:4B:2E:FC:96:8B:98:BE:59:19:90:43:46:C0:01:A6:EF:10:4C X509v3 Authority Key Identifier: keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:09:8b:f8:c1:43:35:ff:8a:0b:f6:56:26:65:06:50:1f:a4: 2b:e1:e3:fe:10:c9:e9:e4:a3:8c:76:c3:22:85:01:fb:b5:34: 7c:19:46:be:16:66:2b:89:30:ac:5c:45:53:d9:fd:c6:37:78: 70:da:12:51:9c:40:01:d2:d1:8c:42:27:20:95:d9:5f:44:6b: 5e:00:d7:e6:7a:a5:59:e9:a0:20:d1:87:b9:e2:e8:a8:3b:a8: 5c:3a:81:37:63:73:d8:8d:d0:27:a2:f1:c1:29:4f:a4:62:2f: 40:75:e1:b5:dc:98:33:8d:b6:a7:8a:83:79:2a:b1:06:0c:2d: f5:97:f5:ad:d2:8a:81:26:53:71:aa:26:6d:cc:d9:fa:b3:c2: 89:69:ad:61:15:75:8d:60:3d:87:d4:90:f5:59:cd:41:ce:7c: e4:f8:05:a4:7f:fa:7e:68:48:14:36:aa:a1:97:87:65:23:89: ea:6a:02:f9:a9:52:1c:d9:c7:9e:19:cd:ea:cd:09:b0:d3:3f: 39:13:65:ff:5c:32:e5:0c:d5:0b:e5:42:28:51:19:4c:78:c5: c2:cf:6d:16:ad:d4:7d:4e:a6:fc:50:97:2f:9c:46:89:8d:19: ec:83:a7:5f:0d:43:28:ce:89:3b:22:86:05:ca:57:10:a8:85: 17:24:08:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuiB4qFF0dI1zmjDfB+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTdhNzhkNmMwZjdhOTgwMTM5N2JiOWQ1MjlhODcxNTk1 YzgwNDcwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD EygyYTdkNGIyZWZjOTY4Yjk4YmU1OTE5OTA0MzQ2YzAwMWE2ZWYxMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JIyYjrGxludAf2H4ad5lNsmeBNf PO82OqLc1jMfreH63EWb1Z6Zhm+UDvJmwgov3JVQdCshU5ZNk4Hi7yUk1JwUGlPu +8P4eOGie6Ejjvp5cARQHkGgeu2eWwfaNwvDSU/Ae4RjU8NmzOSk0O4slszxfQLl MizgVMn5dSNtfTSx+LuGy7AZ4MsEOzeh4qV1QIBFGZE89w/KV0MkAjE5AwCWaIXB Z9bYnEkOKZg8i0V79hqLsIuHIJDGyhTVqJHN5Akv386szer0npEc5gGcFbS1qEes IW7tUG9PuiEcwu5/LH4Y1ld/LBZlmFhDSaTIbXpGcIi4P5ikEXLHhUva5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCp9Sy78louYvlkZkENGwAGm7xBMMB8GA1UdIwQY MBaAFArnp41sD3qYATl7udUpqHFZXIBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85Yzc2OTUtOTBlMi00ODI1LTlkODUt YWMwZjk1ZDhlZjIwLzEvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85Yzc2OTUtOTBlMi00ODI1LTlkODUtYWMwZjk1ZDhlZjIw LzEvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgmL+MFD Nf+KC/ZWJmUGUB+kK+Hj/hDJ6eSjjHbDIoUB+7U0fBlGvhZmK4kwrFxFU9n9xjd4 cNoSUZxAAdLRjEInIJXZX0RrXgDX5nqlWemgINGHueLoqDuoXDqBN2Nz2I3QJ6Lx wSlPpGIvQHXhtdyYM422p4qDeSqxBgwt9Zf1rdKKgSZTcaombczZ+rPCiWmtYRV1 jWA9h9SQ9VnNQc585PgFpH/6fmhIFDaqoZeHZSOJ6moC+alSHNnHnhnN6s0JsNM/ ORNl/1wy5QzVC+VCKFEZTHjFws9tFq3UfU6m/FCXL5xGiY0Z7IOnXw1DKM6JOyKG BcpXEKiFFyQI6A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:34 2025 by rpki-client