This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json) Hash identifier: YPmm040q27HFNInXaqkiF3KbsfJNh37fbS8xZ+viGAs= Subject key identifier: 03:A3:29:DD:EE:9F:6A:E3:61:23:4F:E7:7D:6C:6A:86:46:59:2F:13 Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78 Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78 Certificate serial: 019B59E39A8ECDD1B4D770D8737798EAC088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 09:00:46 +0000 Manifest this update: Fri 26 Dec 2025 09:00:46 +0000 Manifest next update: Sat 27 Dec 2025 09:00:46 +0000 Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: G4QJ4DjOIbJqSzN5KhJYP2aEcDZndbNQFpu8OHB7ob8=) 2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:9a:8e:cd:d1:b4:d7:70:d8:73:77:98:ea:c0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78 Validity Not Before: Dec 26 09:00:46 2025 GMT Not After : Dec 27 09:00:46 2025 GMT Subject: CN=03a329ddee9f6ae361234fe77d6c6a8646592f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4c:28:96:24:e7:25:05:33:44:52:1f:83:c4: 8b:65:31:f3:63:53:03:dc:9d:a4:1f:48:f6:5f:28: dd:70:53:f8:83:ff:de:2f:78:3c:7a:1d:bf:a1:b1: a5:43:00:9f:15:39:94:a2:72:f8:5c:12:ff:18:71: e7:01:bf:eb:83:b4:09:0d:8d:dd:76:06:e3:cb:df: f2:0e:db:b0:a1:8f:73:dd:1b:bf:e5:1d:cf:6b:c9: 27:8d:48:79:15:97:f9:9e:e0:a8:da:8b:23:67:1f: d0:ca:92:90:c3:4a:32:14:46:51:ff:78:8f:78:1c: 9b:92:0d:63:07:01:45:92:ee:73:43:1c:ea:d8:40: 57:39:fb:9e:e7:5a:fe:0b:96:7c:ab:fc:df:f0:e2: 11:3f:2b:28:d3:ac:10:33:f0:c8:d3:78:11:99:87: 30:92:15:13:ef:27:b5:f7:e0:2b:02:34:8b:05:f1: 29:de:48:08:91:67:e8:0e:5f:f6:36:23:49:e7:24: af:49:68:59:37:b2:1d:ac:c5:dc:07:c5:a1:ae:95: 33:eb:4a:4d:0b:9c:cf:d5:4f:2d:dc:67:9c:93:9d: 3a:01:92:03:8f:66:5f:64:02:3e:7a:98:83:d7:f6: a4:40:1e:f6:cf:c7:f0:40:d0:31:48:27:1a:7b:af: 61:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A3:29:DD:EE:9F:6A:E3:61:23:4F:E7:7D:6C:6A:86:46:59:2F:13 X509v3 Authority Key Identifier: keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e2:e6:96:56:ca:37:52:01:77:06:fa:a2:f1:ba:bb:d0:1b: dc:d0:87:d4:1d:a7:fd:40:32:9a:86:db:c6:d1:1b:4c:39:d5: 42:d4:28:4b:5e:df:a7:79:14:a5:c8:84:d4:08:a9:d1:e3:06: bf:59:76:fc:4b:f9:5f:b4:75:39:2d:3e:a9:7c:3f:ad:86:e5: 43:53:ee:ea:70:c1:c0:d6:83:bd:fd:bc:7f:7a:db:1b:ae:15: f6:d1:bb:a2:83:46:6c:ca:ee:99:bb:7a:5e:eb:35:a5:72:79: 02:45:bc:89:7c:93:f9:ae:d8:90:f0:e8:12:f7:36:98:00:1d: 99:8c:57:42:a1:86:88:3f:af:8c:67:fb:b7:61:09:af:68:87: 86:1b:00:50:ad:a7:a3:c2:5a:79:d0:ef:d1:6f:68:a2:fa:8c: 63:61:ae:45:70:b0:ab:2c:c6:73:3d:74:1a:ee:66:71:0e:b9: 95:c1:27:18:34:d3:47:ba:a6:77:f8:8e:86:23:de:f7:07:29: 04:f0:fb:cc:c7:b6:4a:d7:62:ac:95:a5:52:05:05:dd:e5:6c: c0:cf:12:b9:31:8e:73:d4:34:da:1c:a0:48:cc:6f:a1:a4:d7: 87:5e:44:59:22:4f:a5:75:1e:03:11:ec:52:a1:77:d1:cb:39: eb:6f:e8:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45qOzdG013DYc3eY6sCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NGZhNTY3YzA3YTVhMmUxZjJjOGNiMjYxMWYxNzM2OTc4 NzFmNzgwHhcNMjUxMjI2MDkwMDQ2WhcNMjUxMjI3MDkwMDQ2WjAzMTEwLwYDVQQD EygwM2EzMjlkZGVlOWY2YWUzNjEyMzRmZTc3ZDZjNmE4NjQ2NTkyZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkwoliTnJQUzRFIfg8SLZTHzY1MD 3J2kH0j2XyjdcFP4g//eL3g8eh2/obGlQwCfFTmUonL4XBL/GHHnAb/rg7QJDY3d dgbjy9/yDtuwoY9z3Ru/5R3Pa8knjUh5FZf5nuCo2osjZx/QypKQw0oyFEZR/3iP eBybkg1jBwFFku5zQxzq2EBXOfue51r+C5Z8q/zf8OIRPyso06wQM/DI03gRmYcw khUT7ye19+ArAjSLBfEp3kgIkWfoDl/2NiNJ5ySvSWhZN7IdrMXcB8WhrpUz60pN C5zP1U8t3Geck506AZIDj2ZfZAI+epiD1/akQB72z8fwQNAxSCcae69hZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOjKd3un2rjYSNP531saoZGWS8TMB8GA1UdIwQY MBaAFAlPpWfAelouHyyMsmEfFzaXhx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGIt YWVhMjUyZGM2M2IzLzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGItYWVhMjUyZGM2M2Iz LzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOLmllbK N1IBdwb6ovG6u9Ab3NCH1B2n/UAymobbxtEbTDnVQtQoS17fp3kUpciE1Aip0eMG v1l2/Ev5X7R1OS0+qXw/rYblQ1Pu6nDBwNaDvf28f3rbG64V9tG7ooNGbMrumbt6 Xus1pXJ5AkW8iXyT+a7YkPDoEvc2mAAdmYxXQqGGiD+vjGf7t2EJr2iHhhsAUK2n o8JaedDv0W9oovqMY2GuRXCwqyzGcz10Gu5mcQ65lcEnGDTTR7qmd/iOhiPe9wcp BPD7zMe2StdirJWlUgUF3eVswM8SuTGOc9Q02hygSMxvoaTXh15EWSJPpXUeAxHs UqF30cs562/oKA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:52 2025 by rpki-client