This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft File: 82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft (raw, json) Hash identifier: bgFhH8/KWEKTsnQkwtwh0ADu+vNYW6UW//Co0vNQTAk= Subject key identifier: CA:DA:89:A6:67:5A:96:77:57:83:38:AA:7F:01:60:C4:39:A0:09:D6 Authority key identifier: F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64 Certificate issuer: /CN=f36f9cbaff653b60134b46aa70e79117098a7c64 Certificate serial: 019B126FB43F3BFE086AE5283716DA18AD07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft Manifest number: 1278 Signing time: Fri 12 Dec 2025 12:01:08 +0000 Manifest this update: Fri 12 Dec 2025 12:01:08 +0000 Manifest next update: Sat 13 Dec 2025 12:01:08 +0000 Files and hashes: 1: 4Ocvr5gePs8rQXUxhPB4UFZ5TcY.roa (hash: FS134QCSv+f7Sa1190NHb4XIoYMRMPf9uXBwxQKSXX0=) 2: 82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl (hash: CVILb1jMcTOt8cnpisTbcDFAy8CZNI/To84vmAxanlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:b4:3f:3b:fe:08:6a:e5:28:37:16:da:18:ad:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f36f9cbaff653b60134b46aa70e79117098a7c64 Validity Not Before: Dec 12 12:01:08 2025 GMT Not After : Dec 13 12:01:08 2025 GMT Subject: CN=cada89a6675a9677578338aa7f0160c439a009d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:1c:60:84:9b:79:94:7c:62:fe:bd:0f:02: c8:1e:f2:4d:b2:04:d4:9f:f5:e0:47:3a:ef:9b:9c: bb:b5:32:dd:27:db:d5:47:f5:83:8a:fe:5d:33:82: 48:07:97:30:ad:69:5f:af:fd:8a:de:54:c3:47:bd: b1:90:5c:06:15:ee:f2:83:26:c8:00:c7:93:bf:cf: 4f:6a:6d:06:98:31:43:45:29:86:2c:bc:cc:2d:95: df:42:9c:5a:d3:17:89:0c:59:b4:c4:47:26:ef:e6: 65:c2:ff:46:3e:24:84:e7:1f:1e:80:a0:80:2c:a0: 83:8e:59:de:01:4a:0b:64:76:51:3c:a6:69:35:99: 9d:1e:8b:82:f7:4e:ac:44:34:0b:ef:33:62:ac:f5: aa:8c:de:fc:0f:67:10:17:72:3f:1f:4e:82:d0:ce: c0:54:03:1a:23:ea:6b:92:7a:ec:60:38:22:37:01: 10:5b:f0:ac:d7:c1:9e:d3:ca:54:06:ef:0f:59:0e: ab:74:7f:4f:63:f1:61:83:52:6b:71:12:b7:6d:10: b1:4a:bf:71:6a:29:48:c2:11:cf:75:5f:d2:43:cb: 6c:c8:50:0e:62:fd:6f:00:00:21:fe:c4:86:69:95: b8:be:0d:e0:b0:18:7f:5b:78:a0:35:a2:d5:78:e5: fb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DA:89:A6:67:5A:96:77:57:83:38:AA:7F:01:60:C4:39:A0:09:D6 X509v3 Authority Key Identifier: keyid:F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:49:95:08:a2:1f:75:6d:20:71:e6:8a:68:07:b6:48:4c:e8: 1c:2b:94:58:9d:48:c8:16:4f:12:98:01:91:1b:e4:7f:8e:8f: 66:3d:43:e2:ab:28:31:81:b9:44:53:e0:ed:70:4b:5f:ab:41: ac:78:f3:f5:ea:2d:f6:3e:15:1e:9b:da:ad:11:1b:f5:8a:cf: 60:d9:34:9f:26:20:27:37:3d:90:4b:48:31:aa:fc:f6:0e:56: ad:0e:b3:6b:ee:91:08:80:27:0d:fe:10:c9:2a:5e:e9:b9:f2: 9f:da:cf:03:5f:a3:2d:58:07:5d:ad:2a:ec:88:45:a5:e1:68: fa:4a:05:59:79:60:2e:85:d2:3d:cb:0a:b8:19:ca:68:d5:ae: 45:1b:9b:99:5c:41:e9:49:40:e7:a5:02:8e:99:cf:72:cf:c5: 84:bf:dd:e9:4a:7f:19:a8:3d:50:f8:a7:07:4a:81:21:bc:38: 9a:de:44:e9:4f:c1:1c:9e:98:79:f0:27:df:97:72:25:46:7d: a2:e0:bf:a0:21:d5:62:9e:66:a8:ae:9a:3e:db:5c:26:34:a3: 4f:75:11:71:c8:98:d8:a5:20:b1:77:1e:a1:bf:26:6b:b3:03: 48:20:7b:0e:69:91:2e:94:f9:da:b8:eb:70:20:c8:90:73:fb: 89:62:de:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSb7Q/O/4IauUoNxbaGK0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNmY5Y2JhZmY2NTNiNjAxMzRiNDZhYTcwZTc5MTE3MDk4 YTdjNjQwHhcNMjUxMjEyMTIwMTA4WhcNMjUxMjEzMTIwMTA4WjAzMTEwLwYDVQQD EyhjYWRhODlhNjY3NWE5Njc3NTc4MzM4YWE3ZjAxNjBjNDM5YTAwOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNYcYISbeZR8Yv69DwLIHvJNsgTU n/XgRzrvm5y7tTLdJ9vVR/WDiv5dM4JIB5cwrWlfr/2K3lTDR72xkFwGFe7ygybI AMeTv89Pam0GmDFDRSmGLLzMLZXfQpxa0xeJDFm0xEcm7+Zlwv9GPiSE5x8egKCA LKCDjlneAUoLZHZRPKZpNZmdHouC906sRDQL7zNirPWqjN78D2cQF3I/H06C0M7A VAMaI+prknrsYDgiNwEQW/Cs18Ge08pUBu8PWQ6rdH9PY/Fhg1JrcRK3bRCxSr9x ailIwhHPdV/SQ8tsyFAOYv1vAAAh/sSGaZW4vg3gsBh/W3igNaLVeOX7awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMraiaZnWpZ3V4M4qn8BYMQ5oAnWMB8GA1UdIwQY MBaAFPNvnLr/ZTtgE0tGqnDnkRcJinxkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMt ZDk1YWI5OWZiMGM1LzEvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMtZDk1YWI5OWZiMGM1 LzEvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUmVCKIf dW0gceaKaAe2SEzoHCuUWJ1IyBZPEpgBkRvkf46PZj1D4qsoMYG5RFPg7XBLX6tB rHjz9eot9j4VHpvarREb9YrPYNk0nyYgJzc9kEtIMar89g5WrQ6za+6RCIAnDf4Q ySpe6bnyn9rPA1+jLVgHXa0q7IhFpeFo+koFWXlgLoXSPcsKuBnKaNWuRRubmVxB 6UlA56UCjpnPcs/FhL/d6Up/Gag9UPinB0qBIbw4mt5E6U/BHJ6YefAn35dyJUZ9 ouC/oCHVYp5mqK6aPttcJjSjT3URcciY2KUgsXceob8ma7MDSCB7DmmRLpT52rjr cCDIkHP7iWLegQ== -----END CERTIFICATE-----Generated at Fri Dec 12 15:32:05 2025 by rpki-client