This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json) Hash identifier: 37J13PZyLrhR088vTjE9pdU9V6+deIajj9irRvU4y/o= Subject key identifier: 76:03:B0:74:9D:14:83:FB:3B:A4:1D:62:E2:83:7E:9E:82:D9:2B:34 Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c Certificate serial: 019B390F5D555467F6192AB395EBD2092268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 00:01:06 +0000 Manifest this update: Sat 20 Dec 2025 00:01:06 +0000 Manifest next update: Sun 21 Dec 2025 00:01:06 +0000 Files and hashes: 1: CMRIQH8Z3gsmfK11X0Yt7FBzPg4.roa (hash: V5ZSdWnvmK0T/aEGEmBtNWZc8dJrVrkrhrMMEiAzv8c=) 2: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: 1TxL19x4EZv97ZOoqj9i2CeBi7kqP1vPeyhlv/f0da4=) 3: _MIIbyQenzH6F7OwMqPXOOY9ctM.roa (hash: eIV7bKM/aiDgvacDkUhEBLMcFg6gGKWdnq3Gtl3ghX0=) 4: doGoX02hMamF9DY5FkiK3Hz0L1A.roa (hash: iVO738ggm8ZAbwUoGkG5FNzeeqtHgLdZjyBQ4SOavsk=) 5: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:5d:55:54:67:f6:19:2a:b3:95:eb:d2:09:22:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c Validity Not Before: Dec 20 00:01:06 2025 GMT Not After : Dec 21 00:01:06 2025 GMT Subject: CN=7603b0749d1483fb3ba41d62e2837e9e82d92b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f7:14:34:11:12:aa:0f:c0:72:22:14:6d:27: 3d:2b:3e:c7:44:f2:a0:7f:96:53:69:94:b1:bb:1e: d6:f7:14:dc:27:d1:23:eb:86:44:69:06:84:dd:e1: 45:6d:8b:c2:a9:29:8f:71:63:51:b7:28:ad:2c:56: 5b:df:21:76:1f:0b:9c:72:a2:f5:99:ee:b4:19:4a: a9:fb:f5:09:96:68:20:73:2a:5e:2b:2b:93:e1:d0: 00:ca:34:12:e1:2e:fd:37:25:8e:e5:88:d3:70:d9: 2a:8c:13:dd:83:2f:f6:cc:00:97:29:2a:d7:4d:6e: 6d:83:2e:9d:a4:90:28:b4:0f:af:50:bc:08:d0:4a: 97:7b:23:37:f8:e2:71:26:72:1d:b1:b8:37:ca:e9: de:5e:88:f7:39:ed:05:82:d4:00:ab:da:85:36:ad: 06:fd:d4:d3:a7:46:01:91:0a:66:7e:d4:d9:d1:0c: 5b:74:44:75:56:87:a5:8f:80:30:7c:b6:20:5a:76: b5:47:a9:28:b6:8f:5b:38:5d:d8:ab:ac:a4:74:55: 87:2d:b2:64:6b:06:ed:d4:cd:b9:4d:b7:f9:80:c0: aa:f9:e0:04:9c:ac:e9:32:c2:cb:cb:1c:81:96:06: 35:2b:36:c6:65:fa:74:a5:da:83:3b:89:0a:32:bb: 40:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:03:B0:74:9D:14:83:FB:3B:A4:1D:62:E2:83:7E:9E:82:D9:2B:34 X509v3 Authority Key Identifier: keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:d2:cd:dc:11:9c:4b:e5:76:f5:7c:45:12:d1:f3:d3:c3:38: 46:3c:75:a0:47:0a:23:a9:79:74:9c:da:ea:43:f2:ce:fc:d1: 7d:7e:7c:af:0f:01:7c:13:33:d6:63:e1:3d:cd:92:7c:11:56: b0:2c:bf:5f:1b:be:29:81:fa:6d:8f:8e:69:c6:78:d7:b4:08: 36:6e:81:63:36:59:35:84:06:8f:0c:01:42:6a:db:7a:1f:73: eb:6d:04:c8:62:4d:7c:27:28:e7:04:ac:08:15:fa:a4:03:78: 4a:f0:0c:56:e6:b3:16:0d:20:e9:78:cd:41:e8:31:2c:af:f3: 1a:1c:4f:32:39:b4:43:0e:c2:ea:f6:f5:70:d6:8c:ea:e3:64: 6d:46:15:12:d4:42:88:b3:e0:ab:4b:47:54:82:55:77:31:75: cc:62:44:a6:4a:49:03:9e:4f:f6:be:8c:06:80:69:7e:60:4f: 16:2c:f4:49:2b:51:bb:68:85:4d:b9:df:15:58:f8:c5:f1:75: b6:d1:0f:4d:82:df:e9:bf:c5:db:7b:39:54:1b:bb:01:b0:a3: 82:f0:20:59:02:84:03:c7:18:be:6d:dd:7f:8e:24:a4:59:4c: de:41:e6:ca:7f:ce:03:eb:27:99:3e:c2:a7:e0:f6:1f:6a:1f: 2f:50:ff:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D11VVGf2GSqzlevSCSJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw MTRiN2MwHhcNMjUxMjIwMDAwMTA2WhcNMjUxMjIxMDAwMTA2WjAzMTEwLwYDVQQD Eyg3NjAzYjA3NDlkMTQ4M2ZiM2JhNDFkNjJlMjgzN2U5ZTgyZDkyYjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vcUNBESqg/AciIUbSc9Kz7HRPKg f5ZTaZSxux7W9xTcJ9Ej64ZEaQaE3eFFbYvCqSmPcWNRtyitLFZb3yF2HwuccqL1 me60GUqp+/UJlmggcypeKyuT4dAAyjQS4S79NyWO5YjTcNkqjBPdgy/2zACXKSrX TW5tgy6dpJAotA+vULwI0EqXeyM3+OJxJnIdsbg3yuneXoj3Oe0FgtQAq9qFNq0G /dTTp0YBkQpmftTZ0QxbdER1Voelj4AwfLYgWna1R6koto9bOF3Yq6ykdFWHLbJk awbt1M25Tbf5gMCq+eAEnKzpMsLLyxyBlgY1KzbGZfp0pdqDO4kKMrtAuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYDsHSdFIP7O6QdYuKDfp6C2Ss0MB8GA1UdIwQY MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt MTE0YWQ0MWNmMzMxLzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxdLN3BGc S+V29XxFEtHz08M4Rjx1oEcKI6l5dJza6kPyzvzRfX58rw8BfBMz1mPhPc2SfBFW sCy/Xxu+KYH6bY+OacZ417QINm6BYzZZNYQGjwwBQmrbeh9z620EyGJNfCco5wSs CBX6pAN4SvAMVuazFg0g6XjNQegxLK/zGhxPMjm0Qw7C6vb1cNaM6uNkbUYVEtRC iLPgq0tHVIJVdzF1zGJEpkpJA55P9r6MBoBpfmBPFiz0SStRu2iFTbnfFVj4xfF1 ttEPTYLf6b/F23s5VBu7AbCjgvAgWQKEA8cYvm3df44kpFlM3kHmyn/OA+snmT7C p+D2H2ofL1D/4Q== -----END CERTIFICATE-----Generated at Sat Dec 20 09:01:43 2025 by rpki-client