This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json) Hash identifier: vz12aZlNqFye6avdsApeg1Fq1cgcDXCQHfCtK36yymk= Subject key identifier: 6E:91:2D:55:66:CB:38:78:3A:6F:1F:70:79:F6:A6:20:AD:DC:E6:C7 Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Certificate serial: 019B33B205CF8F760F2EE73F43CE60B09793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft Manifest number: 09AA Signing time: Thu 18 Dec 2025 23:01:03 +0000 Manifest this update: Thu 18 Dec 2025 23:01:03 +0000 Manifest next update: Fri 19 Dec 2025 23:01:03 +0000 Files and hashes: 1: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: qBAgGNCFRYsFmHW2WX3NQuwQl+5qcCnZpCi3oy+rEyE=) 2: d0b72ny8wPnM19_QwF_mbcUjDN0.roa (hash: SMFsSG0c6aEdE5nra06sYeY6XybcAZuUprO34jcJsEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:05:cf:8f:76:0f:2e:e7:3f:43:ce:60:b0:97:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Validity Not Before: Dec 18 23:01:03 2025 GMT Not After : Dec 19 23:01:03 2025 GMT Subject: CN=6e912d5566cb38783a6f1f7079f6a620addce6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:d3:9a:0d:a4:85:c1:33:1c:b2:ec:44:90: 05:5e:cd:19:bf:50:f0:32:cd:9c:52:ce:fc:3e:ba: 84:5b:f9:d0:2a:3b:ce:58:d5:ff:2e:96:7d:cb:bc: 8a:6f:e4:bb:38:d0:f6:1c:9f:76:60:98:fc:ec:d1: c5:39:c0:d6:25:79:71:dd:ea:85:e7:63:26:f2:e4: e3:f3:dd:60:71:0d:2c:18:b1:3b:90:2f:81:67:02: 1f:c6:35:6a:44:9d:4f:66:fd:56:e9:20:e0:c2:06: f7:35:fa:23:1c:25:9c:7a:a8:bf:02:4a:a4:89:cd: a5:e4:42:c8:47:cd:db:04:ed:54:b8:89:dc:a9:fe: 57:af:f9:a9:64:76:9a:b6:d2:c8:e6:5f:9f:7a:41: 70:ef:bf:5a:26:24:db:bf:19:f2:75:44:06:ce:97: 1d:0e:95:8f:1e:b2:f1:73:12:71:bf:68:c7:84:53: 98:af:4f:c8:e7:23:38:ba:fe:7a:72:b5:a6:ce:a9: 55:c4:42:3a:ac:c1:b8:1c:6b:0d:5a:6c:70:1d:f4: 3b:cf:73:7b:ca:de:bc:eb:32:2b:5f:70:ad:9b:dc: ab:b6:2d:f1:fb:13:24:d9:a3:da:a1:aa:01:9b:45: 4d:49:7e:2a:f3:71:79:a0:23:88:71:c8:8d:5b:00: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:91:2D:55:66:CB:38:78:3A:6F:1F:70:79:F6:A6:20:AD:DC:E6:C7 X509v3 Authority Key Identifier: keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c5:e9:4e:78:4f:9c:fa:f9:0e:cb:2e:ed:d6:18:76:e0:cc: 75:e4:01:d4:43:68:a1:6e:5d:d3:11:65:72:81:45:c3:02:a5: 21:60:04:1f:12:0f:49:32:90:85:38:b3:c8:37:4c:b6:dc:08: d0:84:ef:ab:0d:a0:be:f8:cd:70:b5:c0:d6:23:8d:89:f8:2f: 4a:89:9b:be:f5:30:43:4b:f1:3a:3a:ec:b6:1a:1e:ac:d0:56: e5:4e:84:ab:af:b1:e3:82:b0:30:3d:3b:84:aa:2e:91:56:bc: 21:b8:da:c0:13:dd:83:67:bb:49:a9:1b:ce:44:63:88:55:b5: 8e:b1:f9:12:98:c2:21:1b:53:24:7d:fb:ab:93:37:c7:7b:21: 56:14:de:e2:d8:2f:7d:41:7c:09:59:42:79:ca:f4:49:5f:cf: c6:0e:3b:10:f0:4f:42:77:8f:d2:b5:8e:ac:4c:0b:12:e4:0d: 76:f0:26:31:1f:b0:3b:96:ad:2b:70:e8:01:5a:86:cc:35:1f: 13:39:1a:0f:ea:7c:9b:39:8f:a2:32:c3:ea:52:c4:03:be:53: ac:e8:34:b0:d1:ec:e2:e0:37:6a:fd:33:08:54:39:73:77:b1: 4b:4c:d1:e7:99:64:64:4d:64:8f:66:80:cb:6f:48:24:b4:5f: f7:d2:5e:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsgXPj3YPLuc/Q85gsJeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTViNTdiYjM5OGQ1ZTE4MzlhM2ZlNDI1NGRmNzBkNzEy Y2UxNGEwHhcNMjUxMjE4MjMwMTAzWhcNMjUxMjE5MjMwMTAzWjAzMTEwLwYDVQQD Eyg2ZTkxMmQ1NTY2Y2IzODc4M2E2ZjFmNzA3OWY2YTYyMGFkZGNlNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XPTmg2khcEzHLLsRJAFXs0Zv1Dw Ms2cUs78PrqEW/nQKjvOWNX/LpZ9y7yKb+S7OND2HJ92YJj87NHFOcDWJXlx3eqF 52Mm8uTj891gcQ0sGLE7kC+BZwIfxjVqRJ1PZv1W6SDgwgb3NfojHCWceqi/Akqk ic2l5ELIR83bBO1UuIncqf5Xr/mpZHaattLI5l+fekFw779aJiTbvxnydUQGzpcd DpWPHrLxcxJxv2jHhFOYr0/I5yM4uv56crWmzqlVxEI6rMG4HGsNWmxwHfQ7z3N7 yt686zIrX3Ctm9yrti3x+xMk2aPaoaoBm0VNSX4q83F5oCOIcciNWwCuBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6RLVVmyzh4Om8fcHn2piCt3ObHMB8GA1UdIwQY MBaAFHLltXuzmNXhg5o/5CVN9w1xLOFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDct OTY4ZDBjN2YyMmJiLzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDctOTY4ZDBjN2YyMmJi LzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsXpTnhP nPr5Dssu7dYYduDMdeQB1ENooW5d0xFlcoFFwwKlIWAEHxIPSTKQhTizyDdMttwI 0ITvqw2gvvjNcLXA1iONifgvSombvvUwQ0vxOjrsthoerNBW5U6Eq6+x44KwMD07 hKoukVa8IbjawBPdg2e7SakbzkRjiFW1jrH5EpjCIRtTJH37q5M3x3shVhTe4tgv fUF8CVlCecr0SV/Pxg47EPBPQneP0rWOrEwLEuQNdvAmMR+wO5atK3DoAVqGzDUf EzkaD+p8mzmPojLD6lLEA75TrOg0sNHs4uA3av0zCFQ5c3exS0zR55lkZE1kj2aA y29IJLRf99Je0w== -----END CERTIFICATE-----Generated at Fri Dec 19 06:49:49 2025 by rpki-client