This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft File: cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft (raw, json) Hash identifier: BBJlWYcxgup4LHSMKSe+sk9OJc0kVatQycS4XHWH5Cs= Subject key identifier: 31:14:AE:49:0B:DD:A2:51:56:16:6B:13:67:8D:98:FD:54:96:55:6A Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48 Certificate issuer: /CN=72e13915fa1bc579f5856f58ecb24786379a5d48 Certificate serial: 019B0F374DEAE6495268CA4C73F21D267D6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft Manifest number: 0229 Signing time: Thu 11 Dec 2025 21:00:41 +0000 Manifest this update: Thu 11 Dec 2025 21:00:41 +0000 Manifest next update: Fri 12 Dec 2025 21:00:41 +0000 Files and hashes: 1: cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl (hash: mKuyDD1qvA/tlLlSEz0jK/J9ZbFwqYXsKnA9x+levdA=) 2: xhxuKJYrPBlCKVgSSZLbkArXr9M.roa (hash: eBW3Gn9+jBJu0tA7uYFfIKZTT8p/0XeRa4Z67cWs8N8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:4d:ea:e6:49:52:68:ca:4c:73:f2:1d:26:7d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48 Validity Not Before: Dec 11 21:00:41 2025 GMT Not After : Dec 12 21:00:41 2025 GMT Subject: CN=3114ae490bdda25156166b13678d98fd5496556a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6c:ae:7d:bb:52:f1:21:93:f9:dd:67:81:ea: c4:7d:f0:48:0b:c1:50:11:08:d7:c7:1e:22:e4:c4: f1:0f:d2:09:1b:94:38:61:98:8d:c0:b3:1b:05:ca: fe:c7:82:4f:b0:08:3a:2d:a4:43:79:59:fa:6a:93: 1c:6d:1a:d5:0f:cf:a1:0e:8b:10:c4:b4:b1:5b:77: 75:a5:53:04:e3:da:a3:79:42:d3:4f:fe:27:5b:47: 18:26:79:50:47:74:4b:29:b0:21:a2:53:57:97:e9: 8e:0a:93:62:78:fd:ea:b7:fd:b8:7d:bc:35:6b:c8: 24:43:c1:b0:f1:9a:17:46:6f:55:22:f3:ec:e7:2b: 5c:d3:ba:c2:a6:38:d3:a5:3c:f5:59:ee:14:c6:2d: fc:0c:27:02:c4:c6:d5:fe:ab:01:46:53:82:13:23: a1:63:b0:bb:20:ba:89:e7:21:a2:ec:c3:25:24:27: 4d:39:1a:e4:d8:dc:5d:31:f0:bd:fb:30:c2:f5:85: a7:1f:a8:3e:62:a6:e2:c6:2d:df:ab:91:45:58:3e: 90:5b:96:21:af:14:b6:a1:79:d5:90:f1:25:1d:5e: 69:df:73:62:d1:13:83:21:6f:8d:07:a0:72:35:ac: c5:27:71:5f:4f:1b:8e:cb:2b:13:4d:62:fb:7f:f4: d5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:14:AE:49:0B:DD:A2:51:56:16:6B:13:67:8D:98:FD:54:96:55:6A X509v3 Authority Key Identifier: keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:22:ee:97:da:14:76:61:3c:4a:36:be:bf:f6:2f:80:a6:80: e1:1a:6f:2b:e7:3a:3a:26:42:a6:ce:9d:5a:86:d3:51:e8:8c: 2d:5d:c6:23:0d:2e:4f:59:8e:23:2e:2a:72:f6:0e:f3:ee:f3: 46:ab:ff:b9:47:44:3c:8b:98:75:71:04:dc:6b:c6:cd:63:ea: a1:15:fc:c0:11:98:4f:9b:ba:2d:3e:36:b7:a6:d1:cd:f7:a5: 9b:0f:7e:cb:48:7d:1c:dd:58:af:1a:34:85:63:93:bb:4e:e1: fc:54:a4:cc:fe:90:fb:af:82:69:c9:e1:29:6d:44:f8:9b:e1: 7e:df:69:9a:1e:6a:88:82:cf:0d:e8:de:de:ca:d7:23:31:43: fc:ee:a5:f0:4c:02:0b:b4:52:28:dc:23:ff:91:8f:ed:85:f0: 5a:1e:33:59:6e:7a:db:c0:8d:c0:85:a4:b3:d4:fa:ab:0f:ad: b6:6d:17:70:8f:11:64:c2:4b:45:46:e1:49:03:55:a8:f4:f9: 97:fb:56:1f:07:ae:b3:37:e5:ac:f0:1f:51:1b:2c:2b:71:49: 98:2e:cc:d7:13:5c:ba:32:e9:01:5f:23:69:15:39:51:33:d8: d8:d2:a7:9a:51:54:48:e1:07:80:0e:7a:68:bc:be:c6:92:7c: 6a:12:43:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN03q5klSaMpMc/IdJn1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTEzOTE1ZmExYmM1NzlmNTg1NmY1OGVjYjI0Nzg2Mzc5 YTVkNDgwHhcNMjUxMjExMjEwMDQxWhcNMjUxMjEyMjEwMDQxWjAzMTEwLwYDVQQD EygzMTE0YWU0OTBiZGRhMjUxNTYxNjZiMTM2NzhkOThmZDU0OTY1NTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0myufbtS8SGT+d1ngerEffBIC8FQ EQjXxx4i5MTxD9IJG5Q4YZiNwLMbBcr+x4JPsAg6LaRDeVn6apMcbRrVD8+hDosQ xLSxW3d1pVME49qjeULTT/4nW0cYJnlQR3RLKbAholNXl+mOCpNieP3qt/24fbw1 a8gkQ8Gw8ZoXRm9VIvPs5ytc07rCpjjTpTz1We4Uxi38DCcCxMbV/qsBRlOCEyOh Y7C7ILqJ5yGi7MMlJCdNORrk2NxdMfC9+zDC9YWnH6g+Yqbixi3fq5FFWD6QW5Yh rxS2oXnVkPElHV5p33Ni0RODIW+NB6ByNazFJ3FfTxuOyysTTWL7f/TVUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEUrkkL3aJRVhZrE2eNmP1UllVqMB8GA1UdIwQY MBaAFHLhORX6G8V59YVvWOyyR4Y3ml1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MmJiYmYtOWY5My00NzQxLTg2ODIt ZjFlOGJkNzQxODBjLzEvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85MmJiYmYtOWY5My00NzQxLTg2ODItZjFlOGJkNzQxODBj LzEvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyLul9oU dmE8Sja+v/YvgKaA4RpvK+c6OiZCps6dWobTUeiMLV3GIw0uT1mOIy4qcvYO8+7z Rqv/uUdEPIuYdXEE3GvGzWPqoRX8wBGYT5u6LT42t6bRzfelmw9+y0h9HN1Yrxo0 hWOTu07h/FSkzP6Q+6+CacnhKW1E+Jvhft9pmh5qiILPDeje3srXIzFD/O6l8EwC C7RSKNwj/5GP7YXwWh4zWW5628CNwIWks9T6qw+ttm0XcI8RZMJLRUbhSQNVqPT5 l/tWHweuszflrPAfURssK3FJmC7M1xNcujLpAV8jaRU5UTPY2NKnmlFUSOEHgA56 aLy+xpJ8ahJDFg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:54 2025 by rpki-client