This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft File: cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json) Hash identifier: lPQxEosPhE23AAVdT5M+I3DXqUUk2ekRXcUYMlXa3gM= Subject key identifier: C0:45:D3:E6:F8:0A:BC:BC:B9:0E:9A:7D:41:98:A8:F4:8C:A0:20:80 Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39 Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39 Certificate serial: 019B4626DB7FBDAD11D57B156EE789C8F8F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft Manifest number: 179B Signing time: Mon 22 Dec 2025 13:01:50 +0000 Manifest this update: Mon 22 Dec 2025 13:01:50 +0000 Manifest next update: Tue 23 Dec 2025 13:01:50 +0000 Files and hashes: 1: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: Vt9VC4yQfoEZHoY3UFlSpshjGyEWyN4bTWJJCMQ2tK0=) 2: ecSF9NE211OUQGVVY-gYrorVDo0.roa (hash: AFCEodkMI54VOYg+dE3fMMiMAl/LGN5jW0HDeqocDmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:db:7f:bd:ad:11:d5:7b:15:6e:e7:89:c8:f8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39 Validity Not Before: Dec 22 13:01:50 2025 GMT Not After : Dec 23 13:01:50 2025 GMT Subject: CN=c045d3e6f80abcbcb90e9a7d4198a8f48ca02080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:c8:94:c0:bc:4c:8f:51:ea:f7:20:ec:12: a2:dd:5f:5e:50:89:79:86:9e:3e:a7:0b:47:63:63: 60:0d:00:1a:00:5f:54:7e:22:c5:fb:b2:df:4c:17: bf:17:c5:7c:04:42:3f:61:13:82:81:b2:96:b2:b4: 75:b5:ea:90:b3:c9:f2:26:f8:47:e0:f8:39:0e:94: 35:f9:fb:63:5e:b4:ac:7a:08:c4:fd:45:ab:24:85: 71:9d:64:56:66:9b:9b:5a:02:ca:a1:be:f8:9f:3a: b6:d9:28:70:56:93:74:be:2a:40:48:58:9f:0c:df: 95:04:74:2f:4e:d1:de:85:d3:52:4d:e9:52:2b:5f: 5e:6c:1c:b8:13:3a:2d:ae:28:6e:f7:80:a9:63:cb: af:d7:87:74:ef:39:87:2d:56:86:7d:18:f8:78:47: c7:94:34:05:4d:c5:f1:ff:80:83:65:3c:a9:3f:27: ef:8d:cb:a7:a6:20:1b:04:27:31:8d:2c:cc:ba:af: d7:78:25:56:d5:b5:86:63:ce:ec:d9:c8:4f:77:c6: 7d:9b:7f:43:76:52:dd:d6:ab:6f:ec:a2:26:0c:ab: 24:af:23:76:1c:f9:4b:6c:bc:a3:36:c0:02:66:68: 72:70:f1:6c:1b:fd:69:4c:56:e1:be:5c:15:e6:2b: 6b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:45:D3:E6:F8:0A:BC:BC:B9:0E:9A:7D:41:98:A8:F4:8C:A0:20:80 X509v3 Authority Key Identifier: keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:37:47:eb:d7:25:b1:a5:17:2f:94:d5:60:98:af:00:16:77: 3e:bd:0d:72:1c:b5:f5:6b:e8:3f:4d:c0:89:06:9f:26:cb:d3: 50:84:87:2e:ba:aa:89:48:fa:7c:04:41:49:8f:4c:a6:55:3e: cb:99:fa:f8:e4:6e:1c:52:99:9e:6b:b0:c7:42:55:69:59:8b: 5a:38:0a:e5:55:ee:05:78:81:35:04:55:02:aa:6e:22:08:79: 87:09:0e:94:ad:a5:ed:2b:fd:2c:66:4c:64:7d:fb:24:f7:c3: 61:54:0b:9f:b1:0a:d1:78:83:ba:4a:25:b2:d9:70:b4:32:94: 74:3a:92:b4:78:b9:94:3e:10:be:16:3e:9e:14:d7:eb:03:f7: ba:cd:85:7f:ad:4d:a8:c3:eb:b9:70:63:55:db:2b:4e:47:d8: b7:d7:6e:5d:05:36:7c:77:14:93:ea:9e:81:5e:8c:b9:db:bb: 04:15:4e:0f:3f:f9:33:a2:e1:6d:f8:c1:fa:97:fd:20:3b:1f: 30:df:ba:2b:9f:ff:9c:71:03:8d:44:e2:ea:3d:0d:be:38:54: 73:c7:79:27:f3:be:8e:9a:9a:e9:e1:1e:84:7d:39:b7:5a:7b: 71:1b:2b:58:c8:58:09:47:51:85:50:d9:ec:15:2e:9d:bc:b2: c3:f6:28:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJtt/va0R1XsVbueJyPj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTRiYWY5OWFiODQwMTI5MTMzMjg1ZmU5YWQ3YjgzZmQx MzBjMzkwHhcNMjUxMjIyMTMwMTUwWhcNMjUxMjIzMTMwMTUwWjAzMTEwLwYDVQQD EyhjMDQ1ZDNlNmY4MGFiY2JjYjkwZTlhN2Q0MTk4YThmNDhjYTAyMDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaTIlMC8TI9R6vcg7BKi3V9eUIl5 hp4+pwtHY2NgDQAaAF9UfiLF+7LfTBe/F8V8BEI/YROCgbKWsrR1teqQs8nyJvhH 4Pg5DpQ1+ftjXrSsegjE/UWrJIVxnWRWZpubWgLKob74nzq22ShwVpN0vipASFif DN+VBHQvTtHehdNSTelSK19ebBy4Ezotrihu94CpY8uv14d07zmHLVaGfRj4eEfH lDQFTcXx/4CDZTypPyfvjcunpiAbBCcxjSzMuq/XeCVW1bWGY87s2chPd8Z9m39D dlLd1qtv7KImDKskryN2HPlLbLyjNsACZmhycPFsG/1pTFbhvlwV5itrQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBF0+b4Cry8uQ6afUGYqPSMoCCAMB8GA1UdIwQY MBaAFHLkuvmauEASkTMoX+mte4P9Eww5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NmI3NGMtODFjMS00MTBlLTk1N2Qt YThkNjVkY2NiOTZiLzEvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi82NmI3NGMtODFjMS00MTBlLTk1N2QtYThkNjVkY2NiOTZi LzEvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczdH69cl saUXL5TVYJivABZ3Pr0Nchy19WvoP03AiQafJsvTUISHLrqqiUj6fARBSY9MplU+ y5n6+ORuHFKZnmuwx0JVaVmLWjgK5VXuBXiBNQRVAqpuIgh5hwkOlK2l7Sv9LGZM ZH37JPfDYVQLn7EK0XiDukolstlwtDKUdDqStHi5lD4QvhY+nhTX6wP3us2Ff61N qMPruXBjVdsrTkfYt9duXQU2fHcUk+qegV6Mudu7BBVODz/5M6LhbfjB+pf9IDsf MN+6K5//nHEDjUTi6j0NvjhUc8d5J/O+jpqa6eEehH05t1p7cRsrWMhYCUdRhVDZ 7BUunbyyw/YokQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:59:49 2025 by rpki-client