This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json) Hash identifier: lgwFpR25HCaW8dSx6TmPVjA2DE5v+uHQmlvXRb6MjiI= Subject key identifier: ED:BD:15:CF:57:9A:C0:2E:79:07:90:58:00:6D:53:A3:9A:CB:26:BF Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed Certificate serial: 019B1203462B2572B1BD0EBA43333DC25810 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft Manifest number: 12B4 Signing time: Fri 12 Dec 2025 10:02:42 +0000 Manifest this update: Fri 12 Dec 2025 10:02:42 +0000 Manifest next update: Sat 13 Dec 2025 10:02:42 +0000 Files and hashes: 1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: tk3BWN6Z1ILWZnUGTnX8v+MRK9WyDMiii13pCkZC1G0=) 2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:46:2b:25:72:b1:bd:0e:ba:43:33:3d:c2:58:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed Validity Not Before: Dec 12 10:02:42 2025 GMT Not After : Dec 13 10:02:42 2025 GMT Subject: CN=edbd15cf579ac02e79079058006d53a39acb26bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:12:38:c2:59:ca:72:e5:94:71:9c:07:08: f8:e5:a3:c9:8c:f7:7a:6c:4a:9b:4c:75:ae:96:70: 4b:83:6c:b1:36:e0:4a:4a:96:90:fd:ac:e5:5a:8b: 45:fb:17:0f:5f:41:01:09:07:79:8c:1a:5f:e6:aa: 22:f2:a8:8e:2e:fa:8a:dc:8e:a6:3d:5e:13:b0:9f: 9b:68:69:95:c5:cb:38:87:24:86:d5:51:22:b8:23: c2:cb:02:80:f9:61:92:26:dd:5d:a6:20:24:a2:07: 3f:be:6e:cb:a7:fc:13:e4:ab:b8:75:a8:bf:0b:b1: f5:9d:43:6c:e1:e9:d6:b7:3e:f8:45:bb:c1:51:00: 9e:50:25:b4:e2:8d:88:c4:2b:03:15:bd:a6:cd:57: 0b:fd:53:45:fc:4b:b7:93:b5:73:62:db:9e:d5:13: ec:b8:e7:63:e1:25:8b:79:61:97:c6:cc:b4:d6:85: ce:0b:73:06:1f:f2:db:b9:d0:ba:e1:be:68:ac:fa: 65:d3:a9:30:3f:28:0f:ba:b9:73:79:8f:b3:6a:aa: 97:78:f3:35:ba:a8:10:df:25:4b:c9:77:76:72:89: 89:3c:c0:5c:53:06:26:69:d1:ad:05:6c:21:3d:68: 46:02:b8:b0:9e:d7:a2:36:a7:21:2e:d4:4f:16:1b: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BD:15:CF:57:9A:C0:2E:79:07:90:58:00:6D:53:A3:9A:CB:26:BF X509v3 Authority Key Identifier: keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:65:dc:08:f8:92:7d:ed:9d:b6:2e:56:fb:21:ac:e8:81:62: 6a:00:87:07:c0:7f:d2:7b:62:74:54:31:08:67:d2:3b:4d:6c: 03:8a:8c:11:16:7e:f8:b1:bb:95:41:9b:68:02:e1:04:eb:e1: 03:60:51:c7:63:df:d1:aa:de:1b:dc:16:ea:40:0c:df:fb:d0: 38:d2:0d:c9:7d:6c:43:3e:5b:84:a7:45:61:8e:e8:56:fb:16: 7a:74:f5:52:05:41:20:14:4d:d0:9c:5e:bc:d3:9b:38:9d:f7: 20:38:72:1f:5c:b9:71:ad:81:1c:c8:ce:c6:57:81:60:fd:e2: e4:04:26:e7:f3:e3:9c:b4:43:31:3c:79:76:85:da:c7:05:82: e7:bb:eb:64:11:ef:08:43:27:ac:c3:08:fc:df:e6:79:58:16: 3c:d4:33:11:75:dc:96:8d:70:68:5a:38:0a:86:c3:6c:57:18: 2f:b3:4c:48:97:eb:7f:31:a6:14:59:81:4f:f6:95:e7:96:93: 84:c5:9a:50:83:e5:5e:5a:dc:a5:07:d1:a6:2c:12:e4:70:35: a6:8e:a8:c4:9b:cc:cf:51:b0:61:d1:da:79:59:ed:f4:3e:da: 5b:59:b5:9d:e4:85:00:fc:75:61:38:4c:3c:d9:07:1b:0c:5d: 3d:32:ef:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSA0YrJXKxvQ66QzM9wlgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2 ZjcxZWQwHhcNMjUxMjEyMTAwMjQyWhcNMjUxMjEzMTAwMjQyWjAzMTEwLwYDVQQD EyhlZGJkMTVjZjU3OWFjMDJlNzkwNzkwNTgwMDZkNTNhMzlhY2IyNmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygkSOMJZynLllHGcBwj45aPJjPd6 bEqbTHWulnBLg2yxNuBKSpaQ/azlWotF+xcPX0EBCQd5jBpf5qoi8qiOLvqK3I6m PV4TsJ+baGmVxcs4hySG1VEiuCPCywKA+WGSJt1dpiAkogc/vm7Lp/wT5Ku4dai/ C7H1nUNs4enWtz74RbvBUQCeUCW04o2IxCsDFb2mzVcL/VNF/Eu3k7VzYtue1RPs uOdj4SWLeWGXxsy01oXOC3MGH/LbudC64b5orPpl06kwPygPurlzeY+zaqqXePM1 uqgQ3yVLyXd2comJPMBcUwYmadGtBWwhPWhGAriwnteiNqchLtRPFhsiFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO29Fc9XmsAueQeQWABtU6Oayya/MB8GA1UdIwQY MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGXcCPiS fe2dti5W+yGs6IFiagCHB8B/0ntidFQxCGfSO01sA4qMERZ++LG7lUGbaALhBOvh A2BRx2Pf0areG9wW6kAM3/vQONINyX1sQz5bhKdFYY7oVvsWenT1UgVBIBRN0Jxe vNObOJ33IDhyH1y5ca2BHMjOxleBYP3i5AQm5/PjnLRDMTx5doXaxwWC57vrZBHv CEMnrMMI/N/meVgWPNQzEXXclo1waFo4CobDbFcYL7NMSJfrfzGmFFmBT/aV55aT hMWaUIPlXlrcpQfRpiwS5HA1po6oxJvMz1GwYdHaeVnt9D7aW1m1neSFAPx1YThM PNkHGwxdPTLvYA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:36:12 2025 by rpki-client