This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json) Hash identifier: J1S2IaBJI2U+LCcbfe8B36phTiw2CCpWkip38QBoYpo= Subject key identifier: 36:B8:8F:2B:D1:73:6D:87:AA:CA:EE:68:83:D4:36:7A:DF:E4:ED:5A Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb Certificate serial: 019B304291D759A0F0E9C4CB2EC899BACA4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft Manifest number: 0793 Signing time: Thu 18 Dec 2025 07:00:27 +0000 Manifest this update: Thu 18 Dec 2025 07:00:27 +0000 Manifest next update: Fri 19 Dec 2025 07:00:27 +0000 Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: /1pUnw5RbS6iiq7gg03LMm17xz6EMoY6+LkJdbwndPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:91:d7:59:a0:f0:e9:c4:cb:2e:c8:99:ba:ca:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb Validity Not Before: Dec 18 07:00:27 2025 GMT Not After : Dec 19 07:00:27 2025 GMT Subject: CN=36b88f2bd1736d87aacaee6883d4367adfe4ed5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:29:de:89:6d:d1:59:18:cc:69:d8:cb:3a: 8f:76:7c:b2:11:f5:f5:45:a3:90:76:df:ee:60:4c: d1:3a:e4:e6:da:84:db:7f:6b:3a:7c:20:c0:61:4e: fe:73:bf:83:cc:7f:4a:ca:5b:17:67:9a:ff:36:0a: 01:2e:ba:53:43:28:58:5f:ca:f8:a7:c7:1b:51:e1: 89:43:0d:6e:92:ba:f8:35:b5:a4:ba:ca:fe:8f:3e: b1:0e:12:4e:56:03:39:df:5f:17:23:eb:dc:3b:5c: c2:30:e0:59:b0:fb:60:dc:86:47:55:c2:a1:fc:50: 7c:fa:31:f6:bd:c3:b9:29:2e:fc:18:2e:09:b2:3e: 35:7f:ab:b0:70:1c:1d:63:8c:76:6a:40:7e:02:bf: d2:07:54:52:fc:d8:0d:b3:56:2a:2d:88:ee:2b:9b: 99:ed:96:64:c0:de:68:bc:37:7d:87:a8:48:fe:d1: a8:d9:a5:41:93:28:4b:a9:08:d4:bc:0d:fe:19:a6: eb:f5:f9:7b:ed:4c:08:22:ed:b9:0d:d0:b2:00:d7: 8e:67:55:15:80:19:dc:1e:e7:0f:66:74:28:b3:fb: 94:bc:4f:a5:a7:a3:80:ff:c5:dc:c8:66:9c:00:d3: e1:37:76:2b:47:79:d9:6a:53:14:65:83:77:22:58: fb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B8:8F:2B:D1:73:6D:87:AA:CA:EE:68:83:D4:36:7A:DF:E4:ED:5A X509v3 Authority Key Identifier: keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:dc:0b:fd:a6:a6:42:02:1a:3f:f4:3f:55:f7:c4:cc:1d:93: f9:87:c1:26:60:ef:a6:60:02:8f:a1:d7:35:53:11:b0:37:f7: bb:38:7b:73:fd:37:d7:e9:6b:83:b9:cc:38:30:47:77:8a:67: 47:af:7c:cf:d9:c9:a3:5f:97:eb:2e:45:9c:6c:1e:d3:96:79: 4c:9c:9b:11:7f:0b:c2:42:3b:46:c8:ab:6f:b4:2c:fd:d2:19: 08:21:43:e3:de:cf:96:76:07:91:0f:84:b3:5c:23:c2:43:45: 22:54:a0:8a:7b:50:c1:e6:ef:6f:06:f7:16:5a:bc:90:18:e6: 2c:9f:3e:11:68:b5:36:97:5a:67:f8:68:e1:b7:4c:06:fe:04: 54:69:2b:0a:eb:1e:7e:5c:f7:e2:0d:0d:56:57:e1:ad:5a:ff: c5:50:f2:79:13:50:e0:84:9a:87:2c:df:05:7f:7b:5c:8e:63: b0:d0:a8:3f:eb:fb:b1:4a:fd:a5:b5:be:73:6f:2c:76:ff:3d: b5:69:8e:59:e4:06:2f:8e:a6:1d:49:8e:71:24:a5:e0:76:4e: 8c:55:9e:55:dc:8f:c1:d0:5a:bb:05:4f:f5:b7:4c:40:f2:52: 4e:a7:fd:2a:9d:7b:45:f3:4c:bc:91:ab:95:83:c5:bb:d8:c5: 1c:ac:ac:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQpHXWaDw6cTLLsiZuspPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMGIzNWZjMzY2ZTg0YjQ1ODBlZWVhNzk4OTExZWQ0ZTE4 ZTNhZWIwHhcNMjUxMjE4MDcwMDI3WhcNMjUxMjE5MDcwMDI3WjAzMTEwLwYDVQQD EygzNmI4OGYyYmQxNzM2ZDg3YWFjYWVlNjg4M2Q0MzY3YWRmZTRlZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMAp3olt0VkYzGnYyzqPdnyyEfX1 RaOQdt/uYEzROuTm2oTbf2s6fCDAYU7+c7+DzH9KylsXZ5r/NgoBLrpTQyhYX8r4 p8cbUeGJQw1ukrr4NbWkusr+jz6xDhJOVgM5318XI+vcO1zCMOBZsPtg3IZHVcKh /FB8+jH2vcO5KS78GC4Jsj41f6uwcBwdY4x2akB+Ar/SB1RS/NgNs1YqLYjuK5uZ 7ZZkwN5ovDd9h6hI/tGo2aVBkyhLqQjUvA3+Gabr9fl77UwIIu25DdCyANeOZ1UV gBncHucPZnQos/uUvE+lp6OA/8XcyGacANPhN3YrR3nZalMUZYN3Ilj7OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDa4jyvRc22HqsruaIPUNnrf5O1aMB8GA1UdIwQY MBaAFHILNfw2boS0WA7up5iRHtThjjrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTct YjcwYjk1NTM5ZGY0LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTctYjcwYjk1NTM5ZGY0 LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNwL/aam QgIaP/Q/VffEzB2T+YfBJmDvpmACj6HXNVMRsDf3uzh7c/031+lrg7nMODBHd4pn R698z9nJo1+X6y5FnGwe05Z5TJybEX8LwkI7Rsirb7Qs/dIZCCFD497PlnYHkQ+E s1wjwkNFIlSgintQwebvbwb3Flq8kBjmLJ8+EWi1NpdaZ/ho4bdMBv4EVGkrCuse flz34g0NVlfhrVr/xVDyeRNQ4ISahyzfBX97XI5jsNCoP+v7sUr9pbW+c28sdv89 tWmOWeQGL46mHUmOcSSl4HZOjFWeVdyPwdBauwVP9bdMQPJSTqf9Kp17RfNMvJGr lYPFu9jFHKyssQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:51:11 2025 by rpki-client