This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft File: cuv4F-GpLzzX9J32oxwmX_5HgAg.mft (raw, json) Hash identifier: BZ1hn8PccfSt+oIj0cOyTfEuEhlpeBKTamNgzHGe3Ys= Subject key identifier: 26:10:C6:75:6E:3D:BE:13:AD:0A:6F:F3:C0:A5:84:18:58:C4:FD:95 Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08 Certificate issuer: /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008 Certificate serial: 019AABA6F00E56F7C2FB419ACDB56DEEBB9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft Manifest number: 1D Signing time: Sat 22 Nov 2025 13:00:35 +0000 Manifest this update: Sat 22 Nov 2025 13:00:35 +0000 Manifest next update: Sun 23 Nov 2025 13:00:35 +0000 Files and hashes: 1: 1-in9rMNyyFGgYRLDlxHKtg4FB1E.roa (hash: XTsB6+izcSpkaZrV+QFady1SXFl4xfVW0Bsqwj4eQCg=) 2: cofCNEYRacANYAxSTZL4SPw_KX8.roa (hash: xwSJwljg2CxEqSDGPniocZpQ+W81lV+qFtetG3DGsxM=) 3: cuv4F-GpLzzX9J32oxwmX_5HgAg.crl (hash: dp+WwuheWYtQOO10+cHJLym+eYV2uKCkIHye+OM7F7U=) 4: rPOXAe8XWSJTapFNZZ9XZ_7GfpE.roa (hash: r8Jur4EJ7hn/7uLzBKDScLJ8L342U+l/tsyZx+LNM6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a6:f0:0e:56:f7:c2:fb:41:9a:cd:b5:6d:ee:bb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008 Validity Not Before: Nov 22 13:00:35 2025 GMT Not After : Nov 23 13:00:35 2025 GMT Subject: CN=2610c6756e3dbe13ad0a6ff3c0a5841858c4fd95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:5f:fb:28:5f:68:44:4f:bc:13:27:21:42: cd:99:62:e0:9f:1d:5d:17:41:a9:21:48:99:de:b2: 9c:8a:95:04:88:1c:22:20:1b:b3:84:4d:1a:98:bb: 16:f1:70:ea:d0:33:10:2e:bf:71:5e:d7:70:7d:12: ca:27:8f:ae:f0:29:7c:a3:6b:5c:a5:b2:4c:13:ab: 15:42:98:cd:2d:bf:36:19:5d:13:23:3f:88:99:b7: f3:a2:f6:5e:fe:84:4a:0a:73:53:7e:c7:af:6d:5e: ab:cf:36:72:56:d4:79:73:72:70:2c:74:a4:68:6b: ef:b3:a6:3c:70:cd:19:52:57:45:70:d8:7e:40:58: b1:aa:26:15:ec:6d:e8:ab:ff:e6:50:e7:4b:88:9a: 57:2a:96:ef:b9:d7:03:96:f9:8b:f6:95:69:c8:dc: 7b:f7:09:11:fe:f7:4a:af:28:d8:53:f2:36:70:f7: 03:47:e0:5f:bf:17:78:d3:33:0d:8f:81:55:5e:98: 17:f3:3a:79:8f:82:cc:de:cb:9f:2a:6c:21:30:77: 0b:74:43:27:70:84:9d:76:15:29:99:a2:fb:d6:00: 65:44:cf:37:12:0e:b0:f9:a3:bc:f6:b9:35:b7:35: cf:34:27:8e:47:9f:b2:7e:57:3a:35:1f:51:02:d2: a0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:10:C6:75:6E:3D:BE:13:AD:0A:6F:F3:C0:A5:84:18:58:C4:FD:95 X509v3 Authority Key Identifier: keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:83:4b:06:00:e2:c0:77:d0:bd:6f:c9:0d:7b:7c:00:0d:b1: ed:d0:0d:06:81:02:2f:9d:87:99:93:75:1f:3d:98:b9:57:28: 1b:63:af:84:79:86:ea:a7:c2:45:01:18:0b:38:b2:28:ee:a2: 56:bf:6f:25:b6:ba:bd:5b:0f:67:b7:d2:22:0b:00:fa:ae:5f: 84:ff:30:14:e9:c4:e0:79:4f:47:3f:9b:90:f1:e7:b5:ce:bd: da:9a:99:95:70:af:9e:f8:34:2d:6a:ac:75:67:3c:d9:79:4e: cb:f3:ce:3a:86:29:72:6c:42:45:c5:1b:dc:75:a2:b5:c6:94: 8a:a2:bc:7f:7b:e8:4a:7a:81:d5:26:ed:a9:0b:11:e4:dd:3f: 9a:4a:a9:5b:07:31:51:5f:e5:00:97:52:e1:b1:7f:63:21:a7: eb:8f:2b:65:fb:9c:11:08:90:90:37:9d:49:8f:b9:a8:75:e2: d1:5c:4d:2e:a8:5b:6c:a8:4a:b3:ec:dc:24:de:6f:b8:3a:43: 56:7b:8e:6c:a1:3c:1e:ed:27:4a:df:ae:d5:5d:7c:89:ca:45: 67:75:63:01:63:52:19:9c:0f:0d:12:90:4c:e8:b7:28:18:64: b9:8c:1a:d5:52:a4:3f:f3:55:f9:35:50:a9:ef:02:10:73:09: b3:29:9e:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrpvAOVvfC+0GazbVt7rueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWJmODE3ZTFhOTJmM2NkN2Y0OWRmNmEzMWMyNjVmZmU0 NzgwMDgwHhcNMjUxMTIyMTMwMDM1WhcNMjUxMTIzMTMwMDM1WjAzMTEwLwYDVQQD EygyNjEwYzY3NTZlM2RiZTEzYWQwYTZmZjNjMGE1ODQxODU4YzRmZDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ9f+yhfaERPvBMnIULNmWLgnx1d F0GpIUiZ3rKcipUEiBwiIBuzhE0amLsW8XDq0DMQLr9xXtdwfRLKJ4+u8Cl8o2tc pbJME6sVQpjNLb82GV0TIz+ImbfzovZe/oRKCnNTfsevbV6rzzZyVtR5c3JwLHSk aGvvs6Y8cM0ZUldFcNh+QFixqiYV7G3oq//mUOdLiJpXKpbvudcDlvmL9pVpyNx7 9wkR/vdKryjYU/I2cPcDR+Bfvxd40zMNj4FVXpgX8zp5j4LM3sufKmwhMHcLdEMn cISddhUpmaL71gBlRM83Eg6w+aO89rk1tzXPNCeOR5+yflc6NR9RAtKgCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYQxnVuPb4TrQpv88ClhBhYxP2VMB8GA1UdIwQY MBaAFHLr+BfhqS881/Sd9qMcJl/+R4AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEt YzlmN2MwZTdhY2M2LzEvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEtYzlmN2MwZTdhY2M2 LzEvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlINLBgDi wHfQvW/JDXt8AA2x7dANBoECL52HmZN1Hz2YuVcoG2OvhHmG6qfCRQEYCziyKO6i Vr9vJba6vVsPZ7fSIgsA+q5fhP8wFOnE4HlPRz+bkPHntc692pqZlXCvnvg0LWqs dWc82XlOy/POOoYpcmxCRcUb3HWitcaUiqK8f3voSnqB1SbtqQsR5N0/mkqpWwcx UV/lAJdS4bF/YyGn648rZfucEQiQkDedSY+5qHXi0VxNLqhbbKhKs+zcJN5vuDpD VnuObKE8Hu0nSt+u1V18icpFZ3VjAWNSGZwPDRKQTOi3KBhkuYwa1VKkP/NV+TVQ qe8CEHMJsymedA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:38:49 2025 by rpki-client