This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json) Hash identifier: U8cwMwQ0QgH4BHKLdQjU2MyFMC3oiACl7FVU7j/bBhU= Subject key identifier: C3:E3:60:51:7C:35:21:5D:4E:BE:D7:C2:4F:10:21:B3:06:A2:DC:8E Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d Certificate serial: 019B0F37C0E12A546291F5F33BB56785DDDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft Manifest number: 1703 Signing time: Thu 11 Dec 2025 21:01:10 +0000 Manifest this update: Thu 11 Dec 2025 21:01:10 +0000 Manifest next update: Fri 12 Dec 2025 21:01:10 +0000 Files and hashes: 1: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: 7XsnQ1ZcJEaXzAk/Q6k+wgY75WU3Yh3QhQqiGdCHZbo=) 2: daRkFVsWIwe8tAsklauoDwt6UpA.roa (hash: a6fXOEYxSdy4VfRiyyu63eijEDfNFxmj7t/XlgH/vhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:c0:e1:2a:54:62:91:f5:f3:3b:b5:67:85:dd:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d Validity Not Before: Dec 11 21:01:10 2025 GMT Not After : Dec 12 21:01:10 2025 GMT Subject: CN=c3e360517c35215d4ebed7c24f1021b306a2dc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:4b:7d:b1:55:7b:3a:96:1e:25:54:6f:8a: 66:31:c6:99:be:75:8e:eb:a6:bf:3a:a7:76:d0:7c: 8c:db:fd:07:66:bf:07:be:1e:26:fd:93:ca:e5:28: 79:5a:68:55:a6:19:1a:5e:31:ef:51:3d:3a:97:f1: a3:6a:94:2d:68:4c:56:9e:b7:69:13:a3:eb:02:3f: 1f:a8:70:c8:0a:ad:6e:72:5b:40:53:89:e7:84:f5: 52:6a:29:6c:85:1e:9f:83:25:e9:4c:ac:a4:8b:e0: da:38:e7:cd:23:f1:12:11:b0:fc:ab:93:a8:fe:f6: da:d5:8a:ad:a5:6b:67:e1:46:00:9f:10:c4:33:f4: 04:b4:c4:c7:25:53:4b:75:96:e0:8b:7e:2b:eb:88: e8:2f:96:dc:a5:26:8c:89:89:dc:74:d8:4e:7c:d5: 47:ff:a1:3c:62:f4:58:bf:d9:ec:f4:c1:3b:1e:00: cf:4f:81:e2:0b:ee:55:63:a0:31:98:bd:be:2c:1f: c1:a1:6f:8e:53:db:67:e8:39:a0:7d:9c:6f:2b:37: 6b:32:7c:60:20:8a:f6:a1:18:b0:a9:56:2e:1d:89: 58:21:ae:51:23:f1:63:4b:a0:a6:71:80:e4:6a:04: c8:c7:f5:55:1b:62:3e:52:d1:22:a8:ab:2d:29:72: 10:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E3:60:51:7C:35:21:5D:4E:BE:D7:C2:4F:10:21:B3:06:A2:DC:8E X509v3 Authority Key Identifier: keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:50:6d:d7:3f:73:af:94:fd:14:11:ca:fc:a2:80:73:c3:95: 30:87:c1:2e:e6:2f:68:e3:b7:35:0b:70:bc:3a:8a:06:ac:4d: 11:ac:f8:9a:e2:0f:65:62:73:82:30:16:84:b9:f9:7b:f8:ec: 55:80:4d:e7:d9:a8:06:ee:c2:02:5c:93:57:03:8b:ae:58:43: 39:30:90:da:aa:48:4a:c1:ac:29:56:48:b4:d3:82:ad:e3:43: 5c:b6:a5:6b:4d:96:cd:a1:67:c6:46:66:d4:e8:dd:a6:e8:ee: 08:34:07:90:09:c3:80:8e:f9:a4:f5:70:06:28:d7:25:31:26: ad:ba:d5:69:03:fc:7a:6d:d5:5f:41:a0:5f:61:22:57:b9:8e: 5a:54:e4:5c:e8:f6:e4:5f:38:22:cb:a8:3c:b3:84:c7:bc:06: 09:1e:c0:95:74:2f:cf:6d:f7:4b:13:4a:26:bf:b5:5f:0b:d9: a7:fc:7f:19:3e:17:33:fa:16:49:95:eb:72:00:bc:fb:0c:86: e8:94:e6:c6:51:2a:3c:27:8a:25:98:18:d6:82:2d:6d:25:fc: cb:8a:42:ae:96:5f:e5:74:da:bb:c3:42:46:85:99:6a:ef:47: 84:52:4e:6a:fb:f2:a2:8a:04:7e:32:5a:58:48:eb:f4:86:09: a3:f6:4b:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN8DhKlRikfXzO7Vnhd3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTEyYTM4NzZmZjdiZDAwZDlkOWViYjk3MmFiMWU2MjFl YTFlOGQwHhcNMjUxMjExMjEwMTEwWhcNMjUxMjEyMjEwMTEwWjAzMTEwLwYDVQQD EyhjM2UzNjA1MTdjMzUyMTVkNGViZWQ3YzI0ZjEwMjFiMzA2YTJkYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg5LfbFVezqWHiVUb4pmMcaZvnWO 66a/Oqd20HyM2/0HZr8Hvh4m/ZPK5Sh5WmhVphkaXjHvUT06l/GjapQtaExWnrdp E6PrAj8fqHDICq1ucltAU4nnhPVSailshR6fgyXpTKyki+DaOOfNI/ESEbD8q5Oo /vba1YqtpWtn4UYAnxDEM/QEtMTHJVNLdZbgi34r64joL5bcpSaMiYncdNhOfNVH /6E8YvRYv9ns9ME7HgDPT4HiC+5VY6AxmL2+LB/BoW+OU9tn6DmgfZxvKzdrMnxg IIr2oRiwqVYuHYlYIa5RI/FjS6CmcYDkagTIx/VVG2I+UtEiqKstKXIQoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPjYFF8NSFdTr7Xwk8QIbMGotyOMB8GA1UdIwQY MBaAFHLhKjh2/3vQDZ2eu5cqseYh6h6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQt NDU1MjdlOGU0NGQyLzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQtNDU1MjdlOGU0NGQy LzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFBt1z9z r5T9FBHK/KKAc8OVMIfBLuYvaOO3NQtwvDqKBqxNEaz4muIPZWJzgjAWhLn5e/js VYBN59moBu7CAlyTVwOLrlhDOTCQ2qpISsGsKVZItNOCreNDXLala02WzaFnxkZm 1OjdpujuCDQHkAnDgI75pPVwBijXJTEmrbrVaQP8em3VX0GgX2EiV7mOWlTkXOj2 5F84IsuoPLOEx7wGCR7AlXQvz233SxNKJr+1XwvZp/x/GT4XM/oWSZXrcgC8+wyG 6JTmxlEqPCeKJZgY1oItbSX8y4pCrpZf5XTau8NCRoWZau9HhFJOavvyoooEfjJa WEjr9IYJo/ZLvQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:38 2025 by rpki-client