This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json) Hash identifier: Lp1GceLUsToK816Ag2RyCUXPOr+ILtMCM0byA9NmD50= Subject key identifier: F8:87:1B:C8:79:5D:F2:07:CC:66:68:5A:2C:34:67:6B:2E:CF:F5:C5 Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Certificate serial: 019AF7D49F0FA831B22A5B311E3D18170D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft Manifest number: 098B Signing time: Sun 07 Dec 2025 08:01:37 +0000 Manifest this update: Sun 07 Dec 2025 08:01:37 +0000 Manifest next update: Mon 08 Dec 2025 08:01:37 +0000 Files and hashes: 1: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: WgmUWZ6jGknSJLZPkFPwfQvI8csqebDoUq83xhtGHuQ=) 2: d0b72ny8wPnM19_QwF_mbcUjDN0.roa (hash: SMFsSG0c6aEdE5nra06sYeY6XybcAZuUprO34jcJsEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:9f:0f:a8:31:b2:2a:5b:31:1e:3d:18:17:0d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Validity Not Before: Dec 7 08:01:37 2025 GMT Not After : Dec 8 08:01:37 2025 GMT Subject: CN=f8871bc8795df207cc66685a2c34676b2ecff5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:05:8c:5e:9a:a0:82:9c:53:f6:70:b6:c4:82: 60:2e:f7:19:e1:1b:21:68:d8:b2:00:d9:a0:08:63: 30:e7:1f:b9:2a:54:cb:a4:83:9a:ea:e3:68:bf:33: 10:cd:fc:c2:c3:fe:16:10:de:1e:97:b6:fd:bb:a3: 81:76:de:60:f5:c5:b6:05:75:1d:2a:23:b2:5d:72: 7e:4a:f3:3e:cc:2e:ae:4a:32:30:8c:86:3b:b4:66: b9:e6:81:91:f0:d1:cb:1b:e0:fa:d1:b6:99:0c:f2: af:e0:08:0f:7d:fb:b6:d6:3c:f2:fc:2c:e8:6a:29: c4:b2:22:d4:6c:02:c9:bf:c6:ac:54:a1:3c:34:f3: 52:50:d1:0b:4d:d2:7b:d8:2a:b2:58:e1:2e:58:aa: 44:ee:c2:85:fe:71:4f:02:6a:00:71:6e:b6:ee:52: 60:7e:75:55:d3:83:81:d4:cc:26:47:a1:35:8a:2b: 4d:00:3a:03:d5:29:ec:eb:d0:53:91:e0:f8:a6:52: 5d:df:f1:db:72:4a:ee:8b:e4:68:da:6e:6b:51:2c: 10:86:c2:e7:b6:ca:9d:2f:3d:bd:72:1f:74:4c:06: c4:f1:81:f0:da:fd:a9:c5:89:3c:81:25:ad:1c:68: 36:d1:55:39:69:c4:78:80:bd:f9:ee:25:3f:a4:9c: 2e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:87:1B:C8:79:5D:F2:07:CC:66:68:5A:2C:34:67:6B:2E:CF:F5:C5 X509v3 Authority Key Identifier: keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:55:61:b2:6e:33:c9:2c:58:20:92:d5:fa:f1:3a:b5:d3:7e: 9d:a0:75:34:07:e4:d5:fd:be:37:d1:3d:66:78:36:b3:d3:81: 8b:f0:0c:51:1b:c5:92:de:2e:b4:a7:7e:6e:5b:b3:9d:e7:a4: 70:a1:e2:18:9a:a7:89:16:a1:b3:c7:ca:a9:37:50:95:55:bf: 9b:b2:45:61:ba:33:13:e3:09:90:f2:da:c2:51:82:8f:6d:bd: d5:65:8f:5c:2a:2c:2d:a9:5a:5f:d5:b1:04:80:e6:59:22:ac: 12:d4:8e:b8:fd:9c:f0:9a:88:ca:61:93:08:a0:3a:4a:3e:14: 78:a2:9a:ec:12:9a:d6:d0:94:ea:e7:76:ba:46:c3:12:9b:2b: 36:ef:5e:3b:6f:11:cc:20:ab:25:c5:94:5c:0a:40:23:7e:14: 13:21:08:5d:df:a2:ee:44:c5:84:77:3a:16:49:3d:85:77:2a: de:36:76:a6:32:ca:eb:1b:cb:c4:35:13:07:a2:b1:0a:b0:30: ea:ca:e2:ae:68:91:10:57:a8:0a:90:8a:4a:ff:eb:5c:f4:5e: 52:88:16:0e:18:e8:c2:a1:d0:22:26:5d:05:d5:a7:40:3b:cd: 77:d4:9b:f6:c8:a3:44:b6:9a:65:2d:38:e2:a6:22:42:b0:be: 3e:9d:18:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31J8PqDGyKlsxHj0YFw1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTViNTdiYjM5OGQ1ZTE4MzlhM2ZlNDI1NGRmNzBkNzEy Y2UxNGEwHhcNMjUxMjA3MDgwMTM3WhcNMjUxMjA4MDgwMTM3WjAzMTEwLwYDVQQD EyhmODg3MWJjODc5NWRmMjA3Y2M2NjY4NWEyYzM0Njc2YjJlY2ZmNWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QWMXpqggpxT9nC2xIJgLvcZ4Rsh aNiyANmgCGMw5x+5KlTLpIOa6uNovzMQzfzCw/4WEN4el7b9u6OBdt5g9cW2BXUd KiOyXXJ+SvM+zC6uSjIwjIY7tGa55oGR8NHLG+D60baZDPKv4AgPffu21jzy/Czo ainEsiLUbALJv8asVKE8NPNSUNELTdJ72CqyWOEuWKpE7sKF/nFPAmoAcW627lJg fnVV04OB1MwmR6E1iitNADoD1Sns69BTkeD4plJd3/Hbckrui+Ro2m5rUSwQhsLn tsqdLz29ch90TAbE8YHw2v2pxYk8gSWtHGg20VU5acR4gL357iU/pJwurwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiHG8h5XfIHzGZoWiw0Z2suz/XFMB8GA1UdIwQY MBaAFHLltXuzmNXhg5o/5CVN9w1xLOFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDct OTY4ZDBjN2YyMmJiLzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDctOTY4ZDBjN2YyMmJi LzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlVhsm4z ySxYIJLV+vE6tdN+naB1NAfk1f2+N9E9Zng2s9OBi/AMURvFkt4utKd+bluzneek cKHiGJqniRahs8fKqTdQlVW/m7JFYbozE+MJkPLawlGCj2291WWPXCosLalaX9Wx BIDmWSKsEtSOuP2c8JqIymGTCKA6Sj4UeKKa7BKa1tCU6ud2ukbDEpsrNu9eO28R zCCrJcWUXApAI34UEyEIXd+i7kTFhHc6Fkk9hXcq3jZ2pjLK6xvLxDUTB6KxCrAw 6srirmiREFeoCpCKSv/rXPReUogWDhjowqHQIiZdBdWnQDvNd9Sb9sijRLaaZS04 4qYiQrC+Pp0Ybg== -----END CERTIFICATE-----Generated at Sun Dec 7 14:39:49 2025 by rpki-client