This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json) Hash identifier: OeA2qqdx4h1NdEwH+ouVgDC//8RJJ0d1LLRgS6AU864= Subject key identifier: F2:BA:60:E9:C3:45:B6:2F:5D:F7:A6:7B:7B:B4:C6:04:71:A2:7E:C1 Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54 Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54 Certificate serial: 019B59ACA76DD51EFDE32C9517D718C493BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft Manifest number: 01B5 Signing time: Fri 26 Dec 2025 08:00:45 +0000 Manifest this update: Fri 26 Dec 2025 08:00:45 +0000 Manifest next update: Sat 27 Dec 2025 08:00:45 +0000 Files and hashes: 1: B6o2wE6gWawQ2uIluRfTifNoqUE.roa (hash: lR7hCY7gYNPQXdb9GPeTgExNM9M4E71Exsz4LaS2qQc=) 2: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: 8kZC9A6xGcER1SQENWPsC46iYFie/L/byhofCG+6l0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:a7:6d:d5:1e:fd:e3:2c:95:17:d7:18:c4:93:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d51cae877df40a5d39412605070841bd102c54 Validity Not Before: Dec 26 08:00:45 2025 GMT Not After : Dec 27 08:00:45 2025 GMT Subject: CN=f2ba60e9c345b62f5df7a67b7bb4c60471a27ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:97:53:ce:0b:b8:46:83:9e:35:e8:73:39: d0:64:32:cf:a5:9b:2c:2c:68:07:3a:26:56:14:be: 16:a5:89:f8:70:fd:2b:3b:d9:21:5f:33:45:f9:2e: 98:c2:9a:37:2f:fa:fa:40:a3:76:bc:5f:d6:85:33: 1e:73:14:ca:c5:7c:94:f7:a2:37:fa:cb:81:24:60: e3:3d:a9:e0:49:80:2a:24:85:72:a1:74:2b:6e:ef: 77:d1:5d:21:ad:20:8b:22:ec:05:5a:10:5c:71:87: 41:e2:a7:b8:58:aa:f0:e4:c0:9c:01:ca:01:fb:c3: 1d:df:5c:26:59:ef:6e:a0:a6:e9:0e:e2:b2:46:10: 5e:8b:58:10:8d:f3:d2:e8:31:79:b7:73:50:2b:f2: 6b:6e:b9:91:0e:a6:52:71:65:65:49:83:03:2f:64: 0e:0e:9f:bf:1c:98:fa:fe:9a:61:7b:d8:8b:02:e1: ab:32:5c:81:c4:5d:76:99:81:d6:f3:8a:42:92:34: 47:fb:e6:88:ca:e6:ff:42:3b:b4:82:03:31:35:43: e3:5a:b1:ce:df:46:94:03:d2:61:91:0b:40:ab:41: 1b:2c:c8:e1:f8:62:e9:f6:2e:53:1b:bb:c0:53:cd: 76:a3:9e:14:8e:3a:e7:6f:2f:e1:f9:00:f0:a8:ba: d1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BA:60:E9:C3:45:B6:2F:5D:F7:A6:7B:7B:B4:C6:04:71:A2:7E:C1 X509v3 Authority Key Identifier: keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:69:f7:79:ae:6d:02:19:b7:69:a1:c3:f4:bb:90:5c:d8:73: 65:1b:6c:d5:0b:a9:ed:09:f5:28:b5:1e:87:2d:5c:d0:3c:c9: 96:82:7e:4e:72:bd:1f:99:21:52:eb:fa:99:e7:85:54:5d:92: 52:3a:18:72:48:25:8c:0b:b8:87:99:ed:df:6b:8b:0b:c2:f5: f7:53:bd:1b:54:af:4c:eb:ea:02:5e:45:4c:ba:42:96:de:e8: 3c:83:51:65:c1:26:c3:f9:23:3a:a6:4f:b5:ae:a9:f5:d7:9b: 59:8c:d5:3b:8e:03:a4:c6:72:3a:36:f2:65:e5:1e:a9:50:a6: 02:57:df:6e:f6:b5:e5:77:ab:a2:96:44:90:71:37:52:c9:c9: af:8e:88:01:78:5b:96:24:cb:83:16:31:a1:98:40:53:05:73: 7b:9f:26:e1:33:b8:9c:43:46:da:db:07:28:f2:c8:5e:27:83: 35:15:43:90:9d:02:50:f1:64:f2:fa:59:d8:f4:2a:09:a2:0b: 8d:8d:9c:a6:19:bb:83:39:84:00:91:7a:a6:56:17:23:9b:b8: c3:8c:a5:9a:b6:8c:4d:4e:29:e3:27:65:53:64:c2:c7:ae:6d: 28:5b:2d:df:4b:75:76:12:04:00:44:0e:6a:8e:6b:4f:b9:2b: e6:23:2e:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKdt1R794yyVF9cYxJO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDUxY2FlODc3ZGY0MGE1ZDM5NDEyNjA1MDcwODQxYmQx MDJjNTQwHhcNMjUxMjI2MDgwMDQ1WhcNMjUxMjI3MDgwMDQ1WjAzMTEwLwYDVQQD EyhmMmJhNjBlOWMzNDViNjJmNWRmN2E2N2I3YmI0YzYwNDcxYTI3ZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6uXU84LuEaDnjXocznQZDLPpZss LGgHOiZWFL4WpYn4cP0rO9khXzNF+S6Ywpo3L/r6QKN2vF/WhTMecxTKxXyU96I3 +suBJGDjPangSYAqJIVyoXQrbu930V0hrSCLIuwFWhBccYdB4qe4WKrw5MCcAcoB +8Md31wmWe9uoKbpDuKyRhBei1gQjfPS6DF5t3NQK/JrbrmRDqZScWVlSYMDL2QO Dp+/HJj6/pphe9iLAuGrMlyBxF12mYHW84pCkjRH++aIyub/Qju0ggMxNUPjWrHO 30aUA9JhkQtAq0EbLMjh+GLp9i5TG7vAU812o54Ujjrnby/h+QDwqLrR9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPK6YOnDRbYvXfeme3u0xgRxon7BMB8GA1UdIwQY MBaAFAjVHK6HffQKXTlBJgUHCEG9ECxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hNmIwMDktMmQwYi00OGRkLTgyNWUt NGI0ZDFhZDk2YzBlLzEvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hNmIwMDktMmQwYi00OGRkLTgyNWUtNGI0ZDFhZDk2YzBl LzEvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2n3ea5t Ahm3aaHD9LuQXNhzZRts1Qup7Qn1KLUehy1c0DzJloJ+TnK9H5khUuv6meeFVF2S UjoYckgljAu4h5nt32uLC8L191O9G1SvTOvqAl5FTLpClt7oPINRZcEmw/kjOqZP ta6p9debWYzVO44DpMZyOjbyZeUeqVCmAlffbva15XeropZEkHE3UsnJr46IAXhb liTLgxYxoZhAUwVze58m4TO4nENG2tsHKPLIXieDNRVDkJ0CUPFk8vpZ2PQqCaIL jY2cphm7gzmEAJF6plYXI5u4w4ylmraMTU4p4ydlU2TCx65tKFst30t1dhIEAEQO ao5rT7kr5iMuCA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:24 2025 by rpki-client