This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json) Hash identifier: zQURrsZGeHfU+DZGHo9t5bqzrV7C5EPLyNz/cVPDDkU= Subject key identifier: F9:1B:4F:CE:CF:AA:CA:8A:45:CC:E2:F2:62:FD:8A:13:76:8A:39:50 Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d Certificate serial: 019B33E8C7DDE8A5534F1BB62793001AD6B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft Manifest number: 1716 Signing time: Fri 19 Dec 2025 00:00:52 +0000 Manifest this update: Fri 19 Dec 2025 00:00:52 +0000 Manifest next update: Sat 20 Dec 2025 00:00:52 +0000 Files and hashes: 1: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: v/oG/YGPk+GKAuSADZbm10wjWqeAW32eLf4wKeFBtag=) 2: daRkFVsWIwe8tAsklauoDwt6UpA.roa (hash: a6fXOEYxSdy4VfRiyyu63eijEDfNFxmj7t/XlgH/vhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:c7:dd:e8:a5:53:4f:1b:b6:27:93:00:1a:d6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d Validity Not Before: Dec 19 00:00:52 2025 GMT Not After : Dec 20 00:00:52 2025 GMT Subject: CN=f91b4fcecfaaca8a45cce2f262fd8a13768a3950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:42:4f:a8:16:04:0a:06:6c:ce:7f:c2:9e: 05:84:de:29:1b:c9:47:ef:3e:a0:d8:97:c9:f9:78: a8:24:55:f0:90:3e:5b:e0:7a:44:f1:4f:c4:26:81: 7f:8d:db:4f:b7:db:f9:5f:cd:3a:b4:db:40:1c:d5: f4:85:82:01:4b:6a:87:d8:8d:93:1a:a6:f8:f1:0e: 6f:91:ac:5d:00:cc:c8:77:4f:75:23:e7:52:31:3d: e7:96:95:60:b1:33:67:77:40:b1:cf:36:fb:b9:35: 1a:c4:5f:80:ff:0f:83:3e:a7:10:9a:16:e5:26:17: bd:71:be:9c:a1:2a:76:1a:d1:51:da:99:53:d9:f7: 27:7e:2a:13:32:82:ef:b6:44:d5:c2:f9:ed:cf:73: b8:3a:83:bd:e6:e7:e6:8d:0c:81:96:b5:20:8b:6a: 3f:f1:68:c3:31:04:7f:32:e7:7d:df:24:51:f4:ca: 71:cf:ef:de:41:fb:d8:1f:12:41:85:38:f9:77:15: a2:fb:75:e9:da:37:d8:f0:ad:c3:5e:4c:05:30:ea: 19:74:7b:c3:67:d7:49:e7:52:44:a0:c9:e5:98:de: 9d:57:50:56:3a:25:51:07:52:cf:36:89:c5:11:48: 27:ea:57:70:17:f7:ae:31:89:33:95:c4:f0:14:da: cb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1B:4F:CE:CF:AA:CA:8A:45:CC:E2:F2:62:FD:8A:13:76:8A:39:50 X509v3 Authority Key Identifier: keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d9:c5:ec:f3:05:5c:c9:32:39:18:df:b8:fb:31:03:a3:3d: 37:0d:45:2e:b1:0b:92:6d:c5:8a:73:be:6a:26:b1:97:7c:f0: f8:89:7b:6a:af:5f:4b:27:59:81:96:86:33:ab:e4:10:dd:80: a6:5c:d2:8a:b0:bd:28:0f:fe:b8:8e:49:6d:49:0a:3c:de:64: 8d:fe:6f:14:52:86:2f:86:85:0e:57:70:74:01:31:cf:1f:24: 16:bc:5a:1f:cc:df:00:41:70:1b:29:53:e7:d5:ee:d5:46:c7: 11:3c:e1:fb:c4:e4:8d:0d:61:db:a6:03:e3:12:7f:bb:ff:3f: 46:cb:9b:47:c5:ca:09:da:f1:69:47:04:52:1f:f7:22:c6:49: ca:6b:b4:2c:a7:27:4e:60:d7:6f:b0:23:59:2c:bb:8a:d5:11: 14:e8:ba:4d:67:6a:e0:70:89:a5:ff:63:dd:45:72:5f:b4:2f: cf:99:41:f4:24:ae:1b:97:72:e4:25:0f:06:fe:68:63:0c:4e: f1:93:0d:22:42:9e:bd:e7:b9:65:e9:00:90:77:58:f7:63:7b: 04:15:d1:0f:64:78:dc:57:c2:fb:66:9b:11:62:bb:68:09:ca: 56:ae:27:74:5b:09:34:4e:9c:54:14:bf:34:8b:8f:d0:ba:21: 4a:c4:9e:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6Mfd6KVTTxu2J5MAGta3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTEyYTM4NzZmZjdiZDAwZDlkOWViYjk3MmFiMWU2MjFl YTFlOGQwHhcNMjUxMjE5MDAwMDUyWhcNMjUxMjIwMDAwMDUyWjAzMTEwLwYDVQQD EyhmOTFiNGZjZWNmYWFjYThhNDVjY2UyZjI2MmZkOGExMzc2OGEzOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlVCT6gWBAoGbM5/wp4FhN4pG8lH 7z6g2JfJ+XioJFXwkD5b4HpE8U/EJoF/jdtPt9v5X806tNtAHNX0hYIBS2qH2I2T Gqb48Q5vkaxdAMzId091I+dSMT3nlpVgsTNnd0Cxzzb7uTUaxF+A/w+DPqcQmhbl Jhe9cb6coSp2GtFR2plT2fcnfioTMoLvtkTVwvntz3O4OoO95ufmjQyBlrUgi2o/ 8WjDMQR/Mud93yRR9Mpxz+/eQfvYHxJBhTj5dxWi+3Xp2jfY8K3DXkwFMOoZdHvD Z9dJ51JEoMnlmN6dV1BWOiVRB1LPNonFEUgn6ldwF/euMYkzlcTwFNrL2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkbT87PqsqKRczi8mL9ihN2ijlQMB8GA1UdIwQY MBaAFHLhKjh2/3vQDZ2eu5cqseYh6h6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQt NDU1MjdlOGU0NGQyLzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQtNDU1MjdlOGU0NGQy LzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNnF7PMF XMkyORjfuPsxA6M9Nw1FLrELkm3FinO+aiaxl3zw+Il7aq9fSydZgZaGM6vkEN2A plzSirC9KA/+uI5JbUkKPN5kjf5vFFKGL4aFDldwdAExzx8kFrxaH8zfAEFwGylT 59Xu1UbHETzh+8TkjQ1h26YD4xJ/u/8/RsubR8XKCdrxaUcEUh/3IsZJymu0LKcn TmDXb7AjWSy7itURFOi6TWdq4HCJpf9j3UVyX7Qvz5lB9CSuG5dy5CUPBv5oYwxO 8ZMNIkKevee5ZekAkHdY92N7BBXRD2R43FfC+2abEWK7aAnKVq4ndFsJNE6cVBS/ NIuP0LohSsSe+w== -----END CERTIFICATE-----Generated at Fri Dec 19 04:49:09 2025 by rpki-client