This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json) Hash identifier: AgKgyCX/vSAZ4eWqmc7yPxqoJ40Z+J/oOPHHFQ9yt98= Subject key identifier: 3A:B2:B7:9E:7F:B4:7F:D0:16:F3:2F:78:BC:4B:BC:76:14:7C:C1:35 Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a Certificate serial: 019B5AF67183378B857BD65E73C16F5A80FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 14:00:58 +0000 Manifest this update: Fri 26 Dec 2025 14:00:58 +0000 Manifest next update: Sat 27 Dec 2025 14:00:58 +0000 Files and hashes: 1: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: /3Hyjjj1ugdSoRyybShaGYr1FCAsUxBaSqZsmxNHPeM=) 2: jWNgVTvc3owe3kF91r8d7uRQV_o.roa (hash: uQLZ/d2z4o+33Z42D6wrDoH9q/yv6pAWgOV+vjfJeYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:71:83:37:8b:85:7b:d6:5e:73:c1:6f:5a:80:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a Validity Not Before: Dec 26 14:00:58 2025 GMT Not After : Dec 27 14:00:58 2025 GMT Subject: CN=3ab2b79e7fb47fd016f32f78bc4bbc76147cc135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:fe:f0:4e:a4:1b:d5:cc:08:27:32:5a:ec: 55:00:60:3e:67:6f:78:67:30:31:9e:40:cc:1b:68: 29:ec:f2:13:18:c0:5a:18:d9:a4:ee:90:2d:46:84: af:0a:c2:ff:f6:41:01:8d:19:fa:61:dc:69:2c:40: 25:cc:96:cf:77:ae:e4:33:70:f8:a3:ff:7d:e4:3c: f4:f3:42:09:e8:c6:73:bf:2d:f7:fb:af:f2:a2:2b: 21:a2:0d:b5:28:07:ec:16:6c:28:77:be:59:0c:75: be:75:4f:a2:e0:05:5f:bd:e3:ad:2d:1b:fb:aa:85: 7a:07:40:20:c8:93:e9:15:5c:54:42:07:c8:5b:72: 52:b5:a7:30:99:52:e9:35:d4:9f:44:ca:3e:69:96: ec:4e:33:c3:57:14:73:90:b5:16:11:cc:5a:3f:c0: 64:f4:b8:fc:59:fe:3d:90:ad:ac:26:a4:35:e3:9e: eb:6b:88:9b:10:12:8f:8b:e3:80:e4:19:73:10:b1: f8:aa:a0:cb:1a:95:3e:08:c4:1d:4e:32:2b:37:b0: 5e:91:d8:a2:0f:55:33:7d:93:46:db:48:d8:2b:47: 3a:56:5a:79:d6:73:47:44:8a:96:d2:d5:0f:d4:31: 14:38:23:15:f6:b5:f8:61:45:d9:17:66:d1:93:28: 02:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B2:B7:9E:7F:B4:7F:D0:16:F3:2F:78:BC:4B:BC:76:14:7C:C1:35 X509v3 Authority Key Identifier: keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:80:73:b6:fa:b7:39:68:b7:35:81:23:9f:81:b2:2a:d5:0d: 7a:44:08:b6:af:9a:6e:f6:dc:d2:1c:23:a6:5d:e4:22:73:35: 47:19:c8:3b:64:0d:91:dc:d0:aa:30:41:73:58:f5:a0:f6:20: ea:3b:f9:9f:93:b9:15:9f:f1:99:bc:47:9e:6e:df:ed:b9:1c: a1:f3:c6:45:f9:b9:f9:24:70:54:3a:49:a6:1d:d1:c4:d6:3e: 7b:83:e5:b6:b9:2f:5e:59:1d:e7:0f:12:9f:9f:d1:a8:91:6b: 27:5b:c6:10:3e:b5:7a:61:13:19:2b:09:4c:97:a3:a6:ab:61: 2c:92:7b:5a:c8:6c:57:f3:13:c1:c2:3d:f5:3b:3e:bf:c9:c4: 05:a7:41:bf:16:f7:ec:af:49:ba:a9:13:f5:8d:25:49:4f:4f: b4:4e:c6:2d:45:73:48:ac:b0:18:60:29:a2:17:87:57:0d:0f: f9:39:3e:e8:4c:0b:86:5d:6c:a7:8e:2c:aa:a3:46:6d:95:df: f9:dc:87:59:52:2f:27:a9:f6:92:9c:c4:87:7d:19:ae:47:29: bd:e3:f7:50:3d:c5:56:77:43:27:29:8b:75:97:48:ef:51:03: d0:51:ca:b2:37:52:e5:8c:06:51:a3:da:cc:40:98:72:fc:77: 2c:20:fb:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9nGDN4uFe9Zec8FvWoD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkY2I5NzZiYjYwMjkyMTZmN2EyYWQwNWI3OTMyZjRhNTVl MGNmOGEwHhcNMjUxMjI2MTQwMDU4WhcNMjUxMjI3MTQwMDU4WjAzMTEwLwYDVQQD EygzYWIyYjc5ZTdmYjQ3ZmQwMTZmMzJmNzhiYzRiYmM3NjE0N2NjMTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qf+8E6kG9XMCCcyWuxVAGA+Z294 ZzAxnkDMG2gp7PITGMBaGNmk7pAtRoSvCsL/9kEBjRn6YdxpLEAlzJbPd67kM3D4 o/995Dz080IJ6MZzvy33+6/yoishog21KAfsFmwod75ZDHW+dU+i4AVfveOtLRv7 qoV6B0AgyJPpFVxUQgfIW3JStacwmVLpNdSfRMo+aZbsTjPDVxRzkLUWEcxaP8Bk 9Lj8Wf49kK2sJqQ1457ra4ibEBKPi+OA5BlzELH4qqDLGpU+CMQdTjIrN7Bekdii D1UzfZNG20jYK0c6Vlp51nNHRIqW0tUP1DEUOCMV9rX4YUXZF2bRkygCTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqyt55/tH/QFvMveLxLvHYUfME1MB8GA1UdIwQY MBaAFP3Ll2u2ApIW96KtBbeTL0pV4M+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWIt ZDg4OGEwNjg5YzE5LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWItZDg4OGEwNjg5YzE5 LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIBztvq3 OWi3NYEjn4GyKtUNekQItq+abvbc0hwjpl3kInM1RxnIO2QNkdzQqjBBc1j1oPYg 6jv5n5O5FZ/xmbxHnm7f7bkcofPGRfm5+SRwVDpJph3RxNY+e4PltrkvXlkd5w8S n5/RqJFrJ1vGED61emETGSsJTJejpqthLJJ7WshsV/MTwcI99Ts+v8nEBadBvxb3 7K9JuqkT9Y0lSU9PtE7GLUVzSKywGGApoheHVw0P+Tk+6EwLhl1sp44sqqNGbZXf +dyHWVIvJ6n2kpzEh30ZrkcpveP3UD3FVndDJymLdZdI71ED0FHKsjdS5YwGUaPa zECYcvx3LCD7kg== -----END CERTIFICATE-----Generated at Fri Dec 26 22:44:19 2025 by rpki-client