This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json) Hash identifier: lmMBNgsWQfF9wyIJ/lb9GJkjdczdB8jYLCsbX5ndIhM= Subject key identifier: F3:A6:FA:70:29:03:EE:60:C4:F2:16:2B:DA:93:3B:37:D4:21:C4:22 Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9 Certificate issuer: /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9 Certificate serial: 019B3D23694F5213412905F3F3FA32C0CD3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft Manifest number: 0859 Signing time: Sat 20 Dec 2025 19:01:29 +0000 Manifest this update: Sat 20 Dec 2025 19:01:29 +0000 Manifest next update: Sun 21 Dec 2025 19:01:29 +0000 Files and hashes: 1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: nQF8gmz2BXMxKBkk4o+n6QBY4ZExD413M6X9Rdnc3H4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:69:4f:52:13:41:29:05:f3:f3:fa:32:c0:cd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9 Validity Not Before: Dec 20 19:01:29 2025 GMT Not After : Dec 21 19:01:29 2025 GMT Subject: CN=f3a6fa702903ee60c4f2162bda933b37d421c422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:0b:96:9d:da:88:16:0e:cc:77:f9:6b:75: a3:7a:38:a0:7a:d8:6e:92:88:6a:92:00:57:49:e8: f6:07:d4:36:87:93:e3:75:3c:e9:d3:4e:af:42:ba: a6:5a:13:f0:e8:9e:bb:1e:61:58:1b:7e:b2:74:e9: 4a:0a:68:e0:4b:56:80:7e:bc:84:5b:4d:55:ef:e0: c0:0d:f1:85:5a:96:c5:70:94:f8:fc:04:f3:4a:6e: 1c:07:e8:90:ff:4d:f6:c1:a8:6a:fd:ef:81:09:23: aa:fd:a3:c3:9b:12:0e:47:b1:21:42:62:04:e7:7e: d6:4c:d6:2c:4f:2d:5f:58:23:1c:d9:43:5f:bd:4b: 09:e0:12:91:d9:94:98:fe:20:f5:5f:8e:b8:3b:6d: 4c:ac:48:b5:71:ef:2e:57:fc:12:e2:28:ae:4e:4a: 81:0d:9d:bc:e6:a0:0a:ae:a7:6d:fa:67:67:d5:b9: fd:ce:75:34:bb:53:00:97:a9:5c:4c:ef:3a:b5:b9: a5:86:5c:ab:06:61:d0:6b:cd:6a:42:bc:9b:b9:49: 35:e4:c1:7b:89:81:3d:1c:7c:ce:dc:1c:3a:d5:10: fc:44:bb:61:2c:bf:54:35:6f:f4:97:ef:65:30:03: c5:c2:c9:57:0b:27:69:23:61:ad:ef:81:40:34:75: 4e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A6:FA:70:29:03:EE:60:C4:F2:16:2B:DA:93:3B:37:D4:21:C4:22 X509v3 Authority Key Identifier: keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6e:b2:0e:e7:9a:8b:a6:fb:79:bd:a9:9d:92:4c:c7:e0:53: 71:7f:33:2d:92:81:bc:c3:1b:a7:e2:b1:a8:ed:ff:78:87:81: 1e:27:e9:47:78:59:02:f5:e5:cf:30:55:a4:b8:ce:f6:d6:d2: 2f:40:d0:f8:22:cb:01:e0:08:fe:ec:47:d2:fe:ea:4a:a4:6c: b2:51:08:44:a7:7b:1c:a3:b2:eb:ab:81:ce:26:09:1f:09:3e: 08:ab:80:6d:2e:3b:65:d2:83:30:0e:34:70:e7:bf:c9:bc:ac: e8:4e:9b:3a:47:bc:0b:f0:92:85:96:c8:96:c4:b4:1a:cf:8f: ac:f6:70:d0:76:5e:73:1e:f6:d7:1a:ca:73:c0:bc:47:4c:b8: 70:35:1b:c3:dd:2c:52:12:11:d2:6c:7a:98:de:62:23:68:46: f4:7f:07:f7:d8:d6:e1:6f:69:ce:92:5a:59:81:9d:69:48:73: 15:2e:22:70:0a:7f:09:44:bc:91:5f:63:c8:85:94:e9:c3:29: 73:58:be:17:9b:37:f4:6c:59:23:ea:ca:cf:8f:83:98:31:61: af:d0:af:2e:f3:58:30:dd:7f:93:81:d8:f1:9d:fe:3a:1b:78: 2f:d3:15:e2:c5:8e:a4:f7:b2:0f:7d:4b:f2:b1:6d:f1:38:d3: aa:4c:85:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I2lPUhNBKQXz8/oywM0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTU4OGRhNGE2Y2YwNDEzZmZiMzAxNmJlNDY3OGVjOTlh OThkZjkwHhcNMjUxMjIwMTkwMTI5WhcNMjUxMjIxMTkwMTI5WjAzMTEwLwYDVQQD EyhmM2E2ZmE3MDI5MDNlZTYwYzRmMjE2MmJkYTkzM2IzN2Q0MjFjNDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBcLlp3aiBYOzHf5a3Wjejigethu kohqkgBXSej2B9Q2h5PjdTzp006vQrqmWhPw6J67HmFYG36ydOlKCmjgS1aAfryE W01V7+DADfGFWpbFcJT4/ATzSm4cB+iQ/032wahq/e+BCSOq/aPDmxIOR7EhQmIE 537WTNYsTy1fWCMc2UNfvUsJ4BKR2ZSY/iD1X464O21MrEi1ce8uV/wS4iiuTkqB DZ285qAKrqdt+mdn1bn9znU0u1MAl6lcTO86tbmlhlyrBmHQa81qQrybuUk15MF7 iYE9HHzO3Bw61RD8RLthLL9UNW/0l+9lMAPFwslXCydpI2Gt74FANHVOywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOm+nApA+5gxPIWK9qTOzfUIcQiMB8GA1UdIwQY MBaAFHLliNpKbPBBP/swFr5GeOyZqY35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAt ZjZjMmNkNjdmODU5LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAtZjZjMmNkNjdmODU5 LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHm6yDuea i6b7eb2pnZJMx+BTcX8zLZKBvMMbp+KxqO3/eIeBHifpR3hZAvXlzzBVpLjO9tbS L0DQ+CLLAeAI/uxH0v7qSqRsslEIRKd7HKOy66uBziYJHwk+CKuAbS47ZdKDMA40 cOe/ybys6E6bOke8C/CShZbIlsS0Gs+PrPZw0HZecx721xrKc8C8R0y4cDUbw90s UhIR0mx6mN5iI2hG9H8H99jW4W9pzpJaWYGdaUhzFS4icAp/CUS8kV9jyIWU6cMp c1i+F5s39GxZI+rKz4+DmDFhr9CvLvNYMN1/k4HY8Z3+Oht4L9MV4sWOpPeyD31L 8rFt8TjTqkyFHw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:29:27 2025 by rpki-client