This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft File: 82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft (raw, json) Hash identifier: BRBE6p+7GJjPzFz1ktgR1JlUikNVmBXflOom4vIvcHw= Subject key identifier: DF:EB:66:D1:B1:6B:44:27:F5:45:AA:48:50:8F:A5:1E:69:28:A2:96 Authority key identifier: F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64 Certificate issuer: /CN=f36f9cbaff653b60134b46aa70e79117098a7c64 Certificate serial: 019AF389DB09BBEEE07D4C5BBF062557B1FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft Manifest number: 1268 Signing time: Sat 06 Dec 2025 12:01:29 +0000 Manifest this update: Sat 06 Dec 2025 12:01:29 +0000 Manifest next update: Sun 07 Dec 2025 12:01:29 +0000 Files and hashes: 1: 4Ocvr5gePs8rQXUxhPB4UFZ5TcY.roa (hash: FS134QCSv+f7Sa1190NHb4XIoYMRMPf9uXBwxQKSXX0=) 2: 82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl (hash: W0p6sTRRKkrLbhrxp4Gf/7OhFJIVa/Bc+1dejxxzmWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:db:09:bb:ee:e0:7d:4c:5b:bf:06:25:57:b1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f36f9cbaff653b60134b46aa70e79117098a7c64 Validity Not Before: Dec 6 12:01:29 2025 GMT Not After : Dec 7 12:01:29 2025 GMT Subject: CN=dfeb66d1b16b4427f545aa48508fa51e6928a296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:74:0e:a9:5e:4d:4d:6e:b9:46:2e:86:04: 35:7b:63:60:a2:f7:0b:6d:a7:7d:d2:cf:b4:a3:aa: 25:9b:28:ee:45:aa:89:c4:10:8a:7b:60:05:f8:55: 9a:04:40:93:a2:6e:00:64:b1:01:97:f7:49:81:12: 24:4a:ca:1e:d7:bc:16:d4:bd:ff:60:e5:2a:b8:ba: f1:65:9b:72:03:4a:7f:e9:74:2f:47:94:cb:63:94: ad:3d:1b:08:a0:72:4b:be:ea:95:fb:44:30:ed:ce: 85:4f:0e:3c:3d:78:d4:88:fa:bc:d6:c6:68:84:ff: d0:ee:8b:09:97:07:ff:8c:c1:ab:64:fe:9a:75:20: 23:9b:09:fd:d2:d4:d7:b4:41:7a:c1:ff:bf:f5:7b: 0b:b0:09:56:21:58:2a:3f:19:27:4c:21:fc:df:6a: 18:b5:52:26:9e:b1:31:2a:8f:5f:a1:20:a6:81:7b: 3c:81:7b:e5:a8:ec:ad:18:90:5c:40:0d:77:32:1c: 6b:6f:62:71:35:a3:83:e9:c8:cf:8f:43:7f:f9:99: 4d:86:ed:06:1e:bc:4e:61:39:cc:03:93:de:b9:ea: cc:f4:55:b3:49:00:f4:cd:d2:20:b4:cb:69:5b:2e: 49:c1:ec:13:eb:6e:cc:73:b9:87:dd:e3:b0:53:9b: 38:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EB:66:D1:B1:6B:44:27:F5:45:AA:48:50:8F:A5:1E:69:28:A2:96 X509v3 Authority Key Identifier: keyid:F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:42:f7:d2:16:a7:84:98:4f:e3:3e:9e:21:50:d4:4a:f7:f8: 02:86:39:4c:00:61:31:27:65:d2:6f:3c:e4:0c:a4:3c:45:a9: 07:ed:1c:ec:c6:cf:f7:ef:85:ab:98:a0:a2:ec:db:be:7d:11: 1b:ad:e4:53:36:f1:22:25:3d:98:e9:c2:9f:f4:52:b0:33:c0: 92:09:10:60:05:ab:6e:b6:de:3e:57:29:20:c9:97:b2:7f:34: bf:b1:ce:f7:62:0f:41:81:22:ba:bc:f3:16:61:b8:13:60:37: 4c:16:37:9e:82:43:f7:bd:f9:bc:d9:9a:36:36:4b:a1:29:2e: ba:20:9d:75:7e:d8:18:58:b5:15:20:70:a4:53:bd:3b:cb:3c: 2a:e1:e8:06:c7:81:b6:fe:15:30:be:f9:cf:82:b4:f7:a2:ae: c2:5c:06:d6:30:4e:e9:05:c3:a0:62:1a:08:d7:ff:39:b5:08: 4a:bf:60:df:a5:78:9d:7c:8f:70:e7:bf:e0:a0:10:89:e6:3f: fd:8f:d3:bd:e3:73:91:bd:62:ac:1c:de:28:16:b1:15:58:0c: 7d:ef:c6:81:c0:73:70:cf:6a:e5:60:45:d5:3f:2d:2c:20:47: 17:6f:0e:65:4a:39:98:9c:c5:fa:ef:aa:94:d0:27:3a:ff:46: 05:97:5e:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidsJu+7gfUxbvwYlV7H7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNmY5Y2JhZmY2NTNiNjAxMzRiNDZhYTcwZTc5MTE3MDk4 YTdjNjQwHhcNMjUxMjA2MTIwMTI5WhcNMjUxMjA3MTIwMTI5WjAzMTEwLwYDVQQD EyhkZmViNjZkMWIxNmI0NDI3ZjU0NWFhNDg1MDhmYTUxZTY5MjhhMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfl0DqleTU1uuUYuhgQ1e2NgovcL bad90s+0o6olmyjuRaqJxBCKe2AF+FWaBECTom4AZLEBl/dJgRIkSsoe17wW1L3/ YOUquLrxZZtyA0p/6XQvR5TLY5StPRsIoHJLvuqV+0Qw7c6FTw48PXjUiPq81sZo hP/Q7osJlwf/jMGrZP6adSAjmwn90tTXtEF6wf+/9XsLsAlWIVgqPxknTCH832oY tVImnrExKo9foSCmgXs8gXvlqOytGJBcQA13Mhxrb2JxNaOD6cjPj0N/+ZlNhu0G HrxOYTnMA5PeuerM9FWzSQD0zdIgtMtpWy5JwewT627Mc7mH3eOwU5s4owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/rZtGxa0Qn9UWqSFCPpR5pKKKWMB8GA1UdIwQY MBaAFPNvnLr/ZTtgE0tGqnDnkRcJinxkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMt ZDk1YWI5OWZiMGM1LzEvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMtZDk1YWI5OWZiMGM1 LzEvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkL30han hJhP4z6eIVDUSvf4AoY5TABhMSdl0m885AykPEWpB+0c7MbP9++Fq5igouzbvn0R G63kUzbxIiU9mOnCn/RSsDPAkgkQYAWrbrbePlcpIMmXsn80v7HO92IPQYEiurzz FmG4E2A3TBY3noJD9735vNmaNjZLoSkuuiCddX7YGFi1FSBwpFO9O8s8KuHoBseB tv4VML75z4K096KuwlwG1jBO6QXDoGIaCNf/ObUISr9g36V4nXyPcOe/4KAQieY/ /Y/TveNzkb1irBzeKBaxFVgMfe/GgcBzcM9q5WBF1T8tLCBHF28OZUo5mJzF+u+q lNAnOv9GBZdeBA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:54:20 2025 by rpki-client