This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft File: cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft (raw, json) Hash identifier: 6666Faes45LbCtmG+8/TTYEd8G8ysJJODztGwVBETp0= Subject key identifier: B1:ED:AE:F8:9C:AA:F7:31:9C:6C:C3:71:6E:CD:9D:F7:30:29:35:04 Authority key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6 Certificate issuer: /CN=726f9448a910d2574157a30403f46c1172aeedb6 Certificate serial: 019B51177C1FC317438B0BCF86498092B56C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 16:00:52 +0000 Manifest this update: Wed 24 Dec 2025 16:00:52 +0000 Manifest next update: Thu 25 Dec 2025 16:00:52 +0000 Files and hashes: 1: cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl (hash: eLfq6azjt46oKam7lAQf4FaEC/ryHxReHMYPL6wfy8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:7c:1f:c3:17:43:8b:0b:cf:86:49:80:92:b5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=726f9448a910d2574157a30403f46c1172aeedb6 Validity Not Before: Dec 24 16:00:52 2025 GMT Not After : Dec 25 16:00:52 2025 GMT Subject: CN=b1edaef89caaf7319c6cc3716ecd9df730293504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:31:9d:cd:e4:4c:7c:c2:fc:89:2a:a7:1c: 6a:c0:a2:f1:95:48:39:42:5c:f0:05:66:33:66:d4: 1f:4d:5b:71:a0:f5:1a:6d:22:81:d9:72:e3:6c:d9: 64:a0:17:6e:2c:ee:2f:8d:3a:78:5c:88:0b:3a:34: 1f:c5:c7:1e:48:7e:a7:08:25:72:d7:95:4c:c8:22: c8:db:20:09:3f:9d:43:b8:20:06:37:60:1f:a9:d7: c1:d2:12:fa:3c:14:e0:b0:3f:58:25:f1:8e:78:53: b3:44:19:f6:b7:60:b7:c7:7f:50:5c:3a:0d:cb:85: 51:63:cb:3d:ba:f5:66:55:90:40:88:12:b5:85:e0: 7d:11:e9:ef:a4:55:57:2f:82:e0:2d:9d:b7:c8:08: 89:f2:af:66:45:49:e2:ff:4e:2e:c6:78:7d:72:c0: 50:f9:29:44:4d:68:25:4c:a6:bb:e2:11:b8:95:fc: 4b:ab:df:74:5b:c3:09:4b:e1:b6:e4:23:dd:ad:4c: 74:f6:fe:aa:d5:e3:eb:62:76:61:09:9f:3e:b2:03: 45:cc:6c:1f:e3:82:bd:11:f2:fb:ce:fb:3a:b7:ab: 62:0b:d3:20:ea:10:c4:ae:f4:ce:ac:e9:98:00:e6: a2:cb:d6:1d:9e:d5:62:a0:9d:43:c0:0b:b3:0e:ef: f2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:ED:AE:F8:9C:AA:F7:31:9C:6C:C3:71:6E:CD:9D:F7:30:29:35:04 X509v3 Authority Key Identifier: keyid:72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ae:ab:09:8c:53:89:21:90:82:b7:1d:43:73:ff:fd:d8:5c: 5f:c8:e6:20:b2:31:fe:4b:4c:e7:25:85:ef:e2:e2:42:39:47: 1c:37:1f:13:44:b4:e3:91:89:00:59:8f:2a:a3:74:74:dc:1f: 74:e4:3e:94:75:03:ed:35:3d:d0:d8:97:c3:ff:10:4a:0b:21: 5c:06:96:5d:0a:ad:c6:25:2d:1b:70:bd:bb:eb:eb:34:50:90: 85:51:f8:af:94:f4:31:c7:d1:68:9a:55:37:fd:21:91:1b:0c: fc:ca:0e:5c:4f:17:97:e6:84:40:c7:cd:2b:24:9c:37:d3:f1: 16:b2:e8:9b:7c:ed:c3:ee:dd:4a:e4:5f:b0:70:c6:ac:2b:1d: 12:aa:fd:bc:08:d3:25:8f:97:db:cf:8e:ca:c8:db:c1:57:6f: 95:df:2d:ce:62:3c:41:23:61:b9:28:2c:b0:a7:5b:4a:00:1a: ed:87:17:e3:60:51:14:18:0b:ca:72:70:10:16:7f:02:20:15: ff:a1:31:1b:de:75:a9:c5:d2:a1:97:71:02:15:b5:e2:89:69: f7:6f:bf:da:53:72:47:0e:50:0a:9f:e4:d3:ff:ec:b7:96:19: 8b:3d:65:86:c0:df:96:00:05:c2:13:97:b3:28:66:cd:2f:2c: 4d:df:e4:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF3wfwxdDiwvPhkmAkrVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNmY5NDQ4YTkxMGQyNTc0MTU3YTMwNDAzZjQ2YzExNzJh ZWVkYjYwHhcNMjUxMjI0MTYwMDUyWhcNMjUxMjI1MTYwMDUyWjAzMTEwLwYDVQQD EyhiMWVkYWVmODljYWFmNzMxOWM2Y2MzNzE2ZWNkOWRmNzMwMjkzNTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAYxnc3kTHzC/IkqpxxqwKLxlUg5 QlzwBWYzZtQfTVtxoPUabSKB2XLjbNlkoBduLO4vjTp4XIgLOjQfxcceSH6nCCVy 15VMyCLI2yAJP51DuCAGN2AfqdfB0hL6PBTgsD9YJfGOeFOzRBn2t2C3x39QXDoN y4VRY8s9uvVmVZBAiBK1heB9EenvpFVXL4LgLZ23yAiJ8q9mRUni/04uxnh9csBQ +SlETWglTKa74hG4lfxLq990W8MJS+G25CPdrUx09v6q1ePrYnZhCZ8+sgNFzGwf 44K9EfL7zvs6t6tiC9Mg6hDErvTOrOmYAOaiy9YdntVioJ1DwAuzDu/yrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHtrvicqvcxnGzDcW7NnfcwKTUEMB8GA1UdIwQY MBaAFHJvlEipENJXQVejBAP0bBFyru22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lN2UzNmUtYTMyMy00ZjQ3LWE3NzYt NjZiMTQxMTk0ZmQyLzEvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9lN2UzNmUtYTMyMy00ZjQ3LWE3NzYtNjZiMTQxMTk0ZmQy LzEvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdq6rCYxT iSGQgrcdQ3P//dhcX8jmILIx/ktM5yWF7+LiQjlHHDcfE0S045GJAFmPKqN0dNwf dOQ+lHUD7TU90NiXw/8QSgshXAaWXQqtxiUtG3C9u+vrNFCQhVH4r5T0McfRaJpV N/0hkRsM/MoOXE8Xl+aEQMfNKyScN9PxFrLom3ztw+7dSuRfsHDGrCsdEqr9vAjT JY+X28+OysjbwVdvld8tzmI8QSNhuSgssKdbSgAa7YcX42BRFBgLynJwEBZ/AiAV /6ExG951qcXSoZdxAhW14olp92+/2lNyRw5QCp/k0//st5YZiz1lhsDflgAFwhOX syhmzS8sTd/knw== -----END CERTIFICATE-----Generated at Wed Dec 24 18:38:23 2025 by rpki-client