This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json) Hash identifier: rzcUFrp52a3spiIR6giyP2+PYiJXsNzuI+1/rUwjHHM= Subject key identifier: 55:C8:A4:F8:F5:88:DF:39:FF:00:4E:05:AA:77:B8:B1:F6:96:24:D9 Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4 Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4 Certificate serial: 019B19164D8D48A09DECCBD83E541B118D38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft Manifest number: 178D Signing time: Sat 13 Dec 2025 19:00:50 +0000 Manifest this update: Sat 13 Dec 2025 19:00:50 +0000 Manifest next update: Sun 14 Dec 2025 19:00:50 +0000 Files and hashes: 1: ELVDoYmFaTCtnTMhAqZufMc8mXg.roa (hash: GX/uRjpcUEeVnkiAfonTZ3Q7zJlqdixXVsuNiqh4BrE=) 2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: ixHP+y28BkADoLZs7OcjXvUwLKw1eSUFxrn6qrINh3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:4d:8d:48:a0:9d:ec:cb:d8:3e:54:1b:11:8d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4 Validity Not Before: Dec 13 19:00:50 2025 GMT Not After : Dec 14 19:00:50 2025 GMT Subject: CN=55c8a4f8f588df39ff004e05aa77b8b1f69624d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:49:9c:d1:7d:7b:16:1c:ba:91:1e:13:ed:0e: 75:5c:23:22:fd:26:8e:aa:c8:d2:d5:a0:8b:1b:89: ab:d4:db:6b:88:5f:e5:0e:ee:f2:ee:0e:75:bd:38: 56:bb:35:26:64:e0:e8:e3:d5:12:c4:8d:72:6f:cf: ed:6c:2d:e3:b0:0d:a0:32:6d:85:81:c1:6f:52:6e: 7f:d5:bc:10:ce:31:5f:ef:7c:6b:cd:82:fd:8c:13: 14:e9:9c:fb:b1:8f:2e:87:c6:47:1e:f2:0b:35:53: 2d:72:46:68:ba:5c:33:f1:fd:a0:78:1c:27:b5:0a: f3:ea:1c:03:49:b5:c0:7e:6f:f7:ec:7a:40:71:cd: df:d6:35:da:25:a3:3e:0d:57:ba:43:b3:1a:dc:59: bf:71:14:6c:8f:bd:52:8a:d0:68:cb:0c:42:db:a1: a1:d5:98:20:3c:3f:87:e5:b5:64:77:5c:5c:02:fe: 1b:e7:3b:41:b9:c1:15:5b:0b:b2:40:a2:e6:e6:75: bb:57:6d:88:c6:c7:ed:10:5f:e5:12:d0:e1:13:d0: 7f:30:c4:9b:a9:d0:b7:67:da:91:fa:69:31:b0:73: 69:c8:1f:b1:c2:eb:a8:b7:43:6e:f4:0c:aa:3d:c2: d4:33:78:10:ee:9a:26:fe:32:e6:e3:9d:7b:30:9a: 2d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C8:A4:F8:F5:88:DF:39:FF:00:4E:05:AA:77:B8:B1:F6:96:24:D9 X509v3 Authority Key Identifier: keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:06:16:09:c7:17:f6:f5:d7:c3:1d:39:89:5c:58:90:2b:92: b9:a1:83:b0:c8:ae:84:26:61:6d:68:5f:c8:f9:2a:81:33:61: e8:a6:c4:62:83:1b:be:ea:43:63:a6:63:94:2b:21:dd:f0:e3: 8b:12:a0:d4:09:db:9b:5a:f6:51:61:2f:85:9c:3f:de:2f:20: bb:0f:6f:a5:7f:a4:19:ef:d8:81:2f:fa:00:b3:8b:a8:cc:78: 7d:88:c7:3b:9d:0c:9b:06:2c:bc:6d:de:68:6a:48:4b:9a:64: 11:c5:60:34:5a:3b:29:d2:77:42:c5:4a:0e:98:f1:cf:00:a8: fe:b1:eb:25:dc:44:8a:ef:90:9c:23:71:24:8d:67:56:fb:d3: 9a:ff:82:53:81:b9:e7:75:7a:6a:8a:99:22:9b:43:1f:50:e3: d4:66:43:79:15:6c:ae:6e:ce:73:0c:61:aa:42:6a:90:90:08: 67:c6:4e:a8:88:de:fc:37:c4:48:e8:4d:04:ed:f1:cd:46:1f: 7d:19:53:9b:ea:8e:78:fd:5c:d9:c1:4e:81:0f:9c:74:f4:72: a0:28:e7:77:5b:37:a6:6b:f2:5a:bf:79:3d:42:07:3d:bd:08: eb:75:fa:27:c0:1d:04:31:05:fa:64:6a:1a:fb:8a:c9:77:a3: aa:48:4d:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFk2NSKCd7MvYPlQbEY04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTgxZmI1Y2YwZmIzMmM0NTc1Zjg0MTNhY2JkNDFhYTg0 YjgyZjQwHhcNMjUxMjEzMTkwMDUwWhcNMjUxMjE0MTkwMDUwWjAzMTEwLwYDVQQD Eyg1NWM4YTRmOGY1ODhkZjM5ZmYwMDRlMDVhYTc3YjhiMWY2OTYyNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUmc0X17Fhy6kR4T7Q51XCMi/SaO qsjS1aCLG4mr1NtriF/lDu7y7g51vThWuzUmZODo49USxI1yb8/tbC3jsA2gMm2F gcFvUm5/1bwQzjFf73xrzYL9jBMU6Zz7sY8uh8ZHHvILNVMtckZoulwz8f2geBwn tQrz6hwDSbXAfm/37HpAcc3f1jXaJaM+DVe6Q7Ma3Fm/cRRsj71SitBoywxC26Gh 1ZggPD+H5bVkd1xcAv4b5ztBucEVWwuyQKLm5nW7V22IxsftEF/lEtDhE9B/MMSb qdC3Z9qR+mkxsHNpyB+xwuuot0Nu9AyqPcLUM3gQ7pom/jLm4517MJotQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXIpPj1iN85/wBOBap3uLH2liTZMB8GA1UdIwQY MBaAFHLoH7XPD7MsRXX4QTrL1BqoS4L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQt Y2RhNmUxOWZmYjg4LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQtY2RhNmUxOWZmYjg4 LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAYWCccX 9vXXwx05iVxYkCuSuaGDsMiuhCZhbWhfyPkqgTNh6KbEYoMbvupDY6ZjlCsh3fDj ixKg1Anbm1r2UWEvhZw/3i8guw9vpX+kGe/YgS/6ALOLqMx4fYjHO50MmwYsvG3e aGpIS5pkEcVgNFo7KdJ3QsVKDpjxzwCo/rHrJdxEiu+QnCNxJI1nVvvTmv+CU4G5 53V6aoqZIptDH1Dj1GZDeRVsrm7OcwxhqkJqkJAIZ8ZOqIje/DfESOhNBO3xzUYf fRlTm+qOeP1c2cFOgQ+cdPRyoCjnd1s3pmvyWr95PUIHPb0I63X6J8AdBDEF+mRq GvuKyXejqkhNrQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:03:30 2025 by rpki-client