This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json) Hash identifier: UrkdsYccAsvb1suJYpvLiWA8y/agduOJIOts5vtfXnI= Subject key identifier: 82:5B:21:82:CA:94:B3:18:CC:BA:B4:BE:83:93:D0:F7:26:3B:46:B6 Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9 Certificate issuer: /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9 Certificate serial: 019AF1D1BE4847DF50D72FBB7183F79E9CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft Manifest number: 0832 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: iAjyWK3OhDlwiPWbQ03vi8jochMmHvK49M/iwwGl344=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:be:48:47:df:50:d7:2f:bb:71:83:f7:9e:9c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=825b2182ca94b318ccbab4be8393d0f7263b46b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:4a:7e:a0:76:d8:cf:f4:23:89:70:01:e7: a7:36:06:9f:0c:6a:fe:55:6d:05:b6:a9:e6:70:af: a1:b1:94:75:a0:2e:34:20:f2:46:94:6b:00:94:b3: 13:7d:a4:d2:a1:78:b5:d8:92:61:c6:1a:e2:56:3d: 18:4b:93:94:0c:79:eb:35:cc:1f:b5:0f:6f:00:47: 12:b3:f5:6b:07:10:89:ab:64:94:90:4f:90:81:64: 53:0e:c1:c6:86:0f:0d:a3:a6:5c:04:13:ca:f7:f1: 68:16:ff:f5:16:c2:68:1d:05:e0:a0:2e:d7:9c:2f: 54:90:bb:76:21:d7:75:40:96:5a:d1:49:fc:fa:96: 40:c5:28:02:08:db:0c:49:6d:d0:69:ff:e2:fa:6a: a2:69:37:5f:75:d1:fd:29:a7:d2:d6:e0:33:3d:69: 6f:65:5a:45:07:b5:8f:5f:51:d2:f4:7a:dc:17:cc: ee:9c:2f:15:97:10:27:f7:3b:f8:36:8e:14:98:a8: b2:8c:97:e2:d8:4d:1f:88:f8:88:72:9d:a9:e5:24: b6:d2:2b:a5:2c:5d:fa:8c:8e:a4:44:34:2f:5e:cb: b2:7a:0e:18:30:2c:ca:00:cf:39:d9:09:5e:20:bb: c6:fa:41:5c:8a:ef:ad:7a:b2:0a:af:a8:1d:b0:8d: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5B:21:82:CA:94:B3:18:CC:BA:B4:BE:83:93:D0:F7:26:3B:46:B6 X509v3 Authority Key Identifier: keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:38:a5:e9:44:10:20:c4:cb:4a:55:bc:04:fe:ce:02:6f:b3: 18:69:69:52:1d:d0:fa:d6:95:05:92:a7:56:06:b0:21:b9:d1: 89:4c:8f:20:10:6f:71:28:f7:e1:52:e4:03:2a:a8:af:2d:db: d4:23:10:21:dd:b3:31:2e:e4:79:b5:32:c4:37:a9:3b:db:c2: 63:1c:eb:f2:2c:80:a6:69:e0:ad:24:f2:74:05:8d:18:81:fe: dd:1a:30:0d:f7:56:72:d8:4e:14:ac:c3:d2:54:14:f0:54:cd: 24:59:38:b0:1f:f8:09:8f:1b:48:9e:8d:67:23:76:b0:ac:02: e2:9e:5c:be:b0:7d:48:99:0c:39:93:24:32:44:5e:b6:c9:05: fa:97:98:f5:93:da:64:cb:72:7b:c3:20:2b:9c:d9:2b:58:22: d1:57:2d:75:d7:90:16:db:30:1a:45:75:71:ae:a2:bd:33:3e: f2:60:c9:e9:d3:5a:a3:45:c4:d2:46:5d:95:12:a2:8a:7b:7e: 76:99:d2:5f:eb:0f:fd:8f:51:53:16:3c:4c:0c:10:dd:77:74: 07:c3:2f:d6:0a:55:a6:e2:8d:14:11:ae:92:78:d4:f0:59:98: 9d:67:e8:1b:8a:d3:6b:48:d9:e0:a5:08:6c:48:22:04:70:61: 46:b3:ce:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b5IR99Q1y+7cYP3npy4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTU4OGRhNGE2Y2YwNDEzZmZiMzAxNmJlNDY3OGVjOTlh OThkZjkwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD Eyg4MjViMjE4MmNhOTRiMzE4Y2NiYWI0YmU4MzkzZDBmNzI2M2I0NmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxNKfqB22M/0I4lwAeenNgafDGr+ VW0FtqnmcK+hsZR1oC40IPJGlGsAlLMTfaTSoXi12JJhxhriVj0YS5OUDHnrNcwf tQ9vAEcSs/VrBxCJq2SUkE+QgWRTDsHGhg8No6ZcBBPK9/FoFv/1FsJoHQXgoC7X nC9UkLt2Idd1QJZa0Un8+pZAxSgCCNsMSW3Qaf/i+mqiaTdfddH9KafS1uAzPWlv ZVpFB7WPX1HS9HrcF8zunC8VlxAn9zv4No4UmKiyjJfi2E0fiPiIcp2p5SS20iul LF36jI6kRDQvXsuyeg4YMCzKAM852QleILvG+kFciu+terIKr6gdsI0CoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJbIYLKlLMYzLq0voOT0PcmO0a2MB8GA1UdIwQY MBaAFHLliNpKbPBBP/swFr5GeOyZqY35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAt ZjZjMmNkNjdmODU5LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAtZjZjMmNkNjdmODU5 LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDil6UQQ IMTLSlW8BP7OAm+zGGlpUh3Q+taVBZKnVgawIbnRiUyPIBBvcSj34VLkAyqory3b 1CMQId2zMS7kebUyxDepO9vCYxzr8iyApmngrSTydAWNGIH+3RowDfdWcthOFKzD 0lQU8FTNJFk4sB/4CY8bSJ6NZyN2sKwC4p5cvrB9SJkMOZMkMkRetskF+peY9ZPa ZMtye8MgK5zZK1gi0VctddeQFtswGkV1ca6ivTM+8mDJ6dNao0XE0kZdlRKiint+ dpnSX+sP/Y9RUxY8TAwQ3Xd0B8Mv1gpVpuKNFBGuknjU8FmYnWfoG4rTa0jZ4KUI bEgiBHBhRrPOdA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:37 2025 by rpki-client