This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft File: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft (raw, json) Hash identifier: dEAtPz7rn51sxuF4uNXm+M4hiW4FWAYB76l7Bkb0DeE= Subject key identifier: C0:E7:AB:31:70:DF:08:0B:F1:F6:5B:18:33:2C:1B:04:08:F9:C8:A8 Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C Certificate issuer: /CN=72e6826c8628489db041fe78c09ef28b5421e45c Certificate serial: 019B390F9DE9A12100EDBBDEA46F62B79DA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 00:01:23 +0000 Manifest this update: Sat 20 Dec 2025 00:01:23 +0000 Manifest next update: Sun 21 Dec 2025 00:01:23 +0000 Files and hashes: 1: 7Zrn_XBWju-Og5hlhKowGwl2kf8.roa (hash: CHg97u7b8WBMpcTvfGndNn9XQr55QZ9IWb+Xsbuljto=) 2: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl (hash: vxCnsM80VGVm7fl+WsJmigJltKBxLs7aTJcTKxHQ5Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:9d:e9:a1:21:00:ed:bb:de:a4:6f:62:b7:9d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c Validity Not Before: Dec 20 00:01:23 2025 GMT Not After : Dec 21 00:01:23 2025 GMT Subject: CN=c0e7ab3170df080bf1f65b18332c1b0408f9c8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:e4:95:65:6a:71:fb:5b:03:38:37:b3:4e: 83:47:27:3d:1e:9c:cc:96:a3:4e:93:e8:10:b0:d5: 49:67:39:06:d1:7b:37:ff:ca:b0:99:9f:6c:77:76: ff:f7:75:08:7b:c8:dc:9a:8f:3f:12:20:f8:73:2f: 4f:37:57:25:a3:58:ba:e4:a0:f2:62:e0:bf:98:1f: 74:26:77:32:db:43:6c:60:67:47:69:15:f9:1d:78: 9d:f2:71:52:2b:16:cb:e2:ae:ab:20:db:8b:7b:22: 01:e6:56:6f:85:71:d7:f1:7e:d9:1e:1b:ca:2d:75: 10:a1:21:0a:17:3e:6f:78:69:82:ab:ad:27:4c:69: 75:10:bb:46:4d:ef:31:cb:ab:9d:31:f7:b9:2d:27: 1c:b1:83:99:8a:73:7b:a7:f9:0e:e0:e2:a0:bd:1e: 8b:a8:4e:95:7b:d9:e2:4b:f2:8f:4b:dd:76:da:b6: df:a5:7b:bc:25:63:b0:3c:bf:c8:fe:09:d0:50:a9: 06:a6:f4:34:62:64:b2:9c:c8:e5:08:4d:27:7d:3a: 25:8a:3c:82:b4:dc:bf:92:0e:1c:0e:3d:f6:f9:e4: ee:05:e1:a1:e5:4c:95:b3:16:c6:64:ff:fb:82:77: ea:f2:a5:1d:48:28:03:12:55:45:74:34:37:8b:92: c3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E7:AB:31:70:DF:08:0B:F1:F6:5B:18:33:2C:1B:04:08:F9:C8:A8 X509v3 Authority Key Identifier: keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:dc:95:94:81:fd:bf:4f:8f:4a:2f:71:1a:14:72:8d:0e:5f: 25:66:cd:06:24:e9:20:98:86:23:6e:1f:d2:8c:3d:6e:ae:7f: 16:e4:a8:3d:9b:39:84:80:55:96:6b:22:5d:f1:59:33:98:a8: 52:31:37:45:83:7b:7a:ec:ab:af:39:9e:0d:fa:d6:76:6c:e5: 44:3b:f8:b3:57:1c:88:c5:9a:1a:12:9a:0d:42:27:31:98:b6: 02:c0:24:ef:be:6b:03:4a:8b:19:51:f1:59:dd:67:f1:88:bb: 79:9b:45:86:45:62:60:1c:cc:2e:0c:73:ac:31:ad:36:34:96: 98:1b:2f:69:91:e8:73:72:ba:47:8f:aa:62:41:14:78:9a:1a: 74:c7:10:9a:4d:71:43:b5:b6:94:0d:62:b3:4b:c2:25:45:33: fc:4b:1f:56:b6:d3:ab:ab:19:e9:1f:7b:c9:f7:63:8b:d6:b2: 0f:17:f6:44:03:65:fc:7a:42:98:ec:fa:c2:f6:56:73:00:db: f8:23:29:da:0b:bc:f2:a5:b8:28:f9:a0:c5:47:a9:a7:dd:1d: 67:15:dd:99:29:1d:65:e3:25:1c:24:96:0d:34:c3:56:a2:6a: 74:72:63:e7:07:c0:7f:8f:01:9d:68:fc:4e:d1:3f:f8:90:de: 7a:db:c8:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D53poSEA7bvepG9it52oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTY4MjZjODYyODQ4OWRiMDQxZmU3OGMwOWVmMjhiNTQy MWU0NWMwHhcNMjUxMjIwMDAwMTIzWhcNMjUxMjIxMDAwMTIzWjAzMTEwLwYDVQQD EyhjMGU3YWIzMTcwZGYwODBiZjFmNjViMTgzMzJjMWIwNDA4ZjljOGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQvklWVqcftbAzg3s06DRyc9HpzM lqNOk+gQsNVJZzkG0Xs3/8qwmZ9sd3b/93UIe8jcmo8/EiD4cy9PN1clo1i65KDy YuC/mB90Jncy20NsYGdHaRX5HXid8nFSKxbL4q6rINuLeyIB5lZvhXHX8X7ZHhvK LXUQoSEKFz5veGmCq60nTGl1ELtGTe8xy6udMfe5LSccsYOZinN7p/kO4OKgvR6L qE6Ve9niS/KPS9122rbfpXu8JWOwPL/I/gnQUKkGpvQ0YmSynMjlCE0nfTolijyC tNy/kg4cDj32+eTuBeGh5UyVsxbGZP/7gnfq8qUdSCgDElVFdDQ3i5LDEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDnqzFw3wgL8fZbGDMsGwQI+cioMB8GA1UdIwQY MBaAFHLmgmyGKEidsEH+eMCe8otUIeRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEt OTc1YWQwM2Q4OGU2LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEtOTc1YWQwM2Q4OGU2 LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtyVlIH9 v0+PSi9xGhRyjQ5fJWbNBiTpIJiGI24f0ow9bq5/FuSoPZs5hIBVlmsiXfFZM5io UjE3RYN7euyrrzmeDfrWdmzlRDv4s1cciMWaGhKaDUInMZi2AsAk775rA0qLGVHx Wd1n8Yi7eZtFhkViYBzMLgxzrDGtNjSWmBsvaZHoc3K6R4+qYkEUeJoadMcQmk1x Q7W2lA1is0vCJUUz/EsfVrbTq6sZ6R97yfdji9ayDxf2RANl/HpCmOz6wvZWcwDb +CMp2gu88qW4KPmgxUepp90dZxXdmSkdZeMlHCSWDTTDVqJqdHJj5wfAf48BnWj8 TtE/+JDeetvI0Q== -----END CERTIFICATE-----Generated at Sat Dec 20 09:08:49 2025 by rpki-client