This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json) Hash identifier: /McMCLPugqLVlQjRNObger4e806quVXlgdSmY9r80ic= Subject key identifier: B9:EF:12:E9:A5:BE:5B:85:55:67:54:E8:0C:39:3A:75:F4:8F:8A:53 Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06 Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06 Certificate serial: 019B3FB68C8A991BD098275C680228A9E1DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft Manifest number: 0DC9 Signing time: Sun 21 Dec 2025 07:01:26 +0000 Manifest this update: Sun 21 Dec 2025 07:01:26 +0000 Manifest next update: Mon 22 Dec 2025 07:01:26 +0000 Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: quhAOjjp6QHjKG3XKZkRPEbo+fOEpNj7cLU9iAOtXrw=) 2: U0OBxV0NmzWdhOROB_4XE_nOuxo.roa (hash: R0oHniHcgRLjr+xP295YEa+yjJ7+h87sW92ahFuO7CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:8c:8a:99:1b:d0:98:27:5c:68:02:28:a9:e1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06 Validity Not Before: Dec 21 07:01:26 2025 GMT Not After : Dec 22 07:01:26 2025 GMT Subject: CN=b9ef12e9a5be5b85556754e80c393a75f48f8a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f6:49:9f:62:67:85:9c:27:1b:d1:5c:f4:be: df:2d:a5:73:67:ff:25:e2:80:43:23:a5:bf:fc:4a: 67:66:80:17:0b:0a:78:f5:7f:88:92:b6:c4:c5:d0: d1:7b:4f:96:4e:50:56:44:4d:11:d8:3d:3f:a2:e9: b0:09:c7:56:c3:de:2d:bc:9c:2f:e9:3e:d0:7b:69: 65:12:e0:90:e8:0c:a5:d4:4a:76:2d:12:43:e7:11: 3a:c5:bb:6e:d9:d5:81:31:f5:37:b8:a3:12:e5:67: ba:b1:c9:35:c9:2f:4e:1b:4c:bd:79:d1:53:49:ae: c8:5b:20:87:99:23:dd:d9:28:96:d9:ad:dd:ac:ec: e7:a9:cc:57:21:de:a7:b2:e0:bf:25:50:90:38:e3: 5c:6d:d8:1b:11:d2:39:63:2a:68:38:a7:93:92:cc: 9c:b2:eb:15:8c:53:13:c8:d5:87:91:83:f0:10:6f: a2:fd:1a:fd:43:69:6c:c4:ad:be:08:b8:58:1f:be: 06:07:a4:40:7b:d9:87:4b:ce:5e:4e:4f:3f:ab:db: a7:43:a1:70:ed:ae:64:83:93:af:4c:f0:1a:13:2a: ee:3d:ab:28:a7:52:33:6d:a2:e0:c9:bf:ea:7a:d4: 8d:72:01:e7:25:f9:4e:97:94:2f:ae:11:fb:1d:5f: 14:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EF:12:E9:A5:BE:5B:85:55:67:54:E8:0C:39:3A:75:F4:8F:8A:53 X509v3 Authority Key Identifier: keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f3:b9:a9:68:c3:78:ca:86:04:ae:e0:56:76:50:40:4f:f9: 20:15:79:3b:0f:1b:fd:a7:bc:de:20:65:66:0c:1a:f0:b3:af: cc:58:23:e5:12:66:4b:30:17:2e:e3:aa:a9:fc:34:af:7a:87: 74:48:e7:13:6b:63:9d:fb:4b:9e:f4:c4:a5:d8:42:ee:bf:4d: 46:92:29:31:99:98:26:b9:59:19:2a:b5:b3:6d:c8:86:e7:d1: 10:0e:88:8d:64:c5:21:2f:36:1f:31:4c:b0:14:f9:46:93:e0: 7b:4d:f5:cf:6a:99:42:55:1f:4a:6e:c0:64:7b:d7:7a:cc:6f: 62:fe:10:2f:33:04:76:c7:1d:bf:26:d2:a7:29:dd:9d:60:77: ce:c3:75:4c:42:6e:c8:ec:92:67:e5:60:4e:af:25:31:b0:63: 1b:2d:6e:b1:32:42:09:a4:cd:f6:71:4a:dd:fd:9d:85:fa:7d: 4a:73:c0:f8:3f:d8:f1:7c:62:28:24:18:d5:d0:c7:d9:1d:40: ab:56:b2:96:a4:31:33:62:e7:a5:b6:f5:ec:f5:90:8e:89:da: 98:b8:b4:cc:a7:f9:9e:87:20:d7:5e:c5:2f:68:a6:a3:1b:8b: ab:8c:9c:e7:a3:07:3b:cd:56:46:70:9c:d8:48:71:87:98:ef: fa:bb:3d:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/toyKmRvQmCdcaAIoqeHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NDRhYWFjN2YyZWJiMjk4MWMyNDc2M2ViM2Q2MDQ1ZWZi ZDZmMDYwHhcNMjUxMjIxMDcwMTI2WhcNMjUxMjIyMDcwMTI2WjAzMTEwLwYDVQQD EyhiOWVmMTJlOWE1YmU1Yjg1NTU2NzU0ZTgwYzM5M2E3NWY0OGY4YTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/ZJn2JnhZwnG9Fc9L7fLaVzZ/8l 4oBDI6W//EpnZoAXCwp49X+IkrbExdDRe0+WTlBWRE0R2D0/oumwCcdWw94tvJwv 6T7Qe2llEuCQ6Ayl1Ep2LRJD5xE6xbtu2dWBMfU3uKMS5We6sck1yS9OG0y9edFT Sa7IWyCHmSPd2SiW2a3drOznqcxXId6nsuC/JVCQOONcbdgbEdI5YypoOKeTksyc susVjFMTyNWHkYPwEG+i/Rr9Q2lsxK2+CLhYH74GB6RAe9mHS85eTk8/q9unQ6Fw 7a5kg5OvTPAaEyruPasop1IzbaLgyb/qetSNcgHnJflOl5QvrhH7HV8U1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnvEumlvluFVWdU6Aw5OnX0j4pTMB8GA1UdIwQY MBaAFAlEqqx/LrspgcJHY+s9YEXvvW8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUt NjZjZDAxOTYxZTQ2LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUtNjZjZDAxOTYxZTQ2 LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvO5qWjD eMqGBK7gVnZQQE/5IBV5Ow8b/ae83iBlZgwa8LOvzFgj5RJmSzAXLuOqqfw0r3qH dEjnE2tjnftLnvTEpdhC7r9NRpIpMZmYJrlZGSq1s23IhufREA6IjWTFIS82HzFM sBT5RpPge031z2qZQlUfSm7AZHvXesxvYv4QLzMEdscdvybSpyndnWB3zsN1TEJu yOySZ+VgTq8lMbBjGy1usTJCCaTN9nFK3f2dhfp9SnPA+D/Y8XxiKCQY1dDH2R1A q1aylqQxM2Lnpbb17PWQjonamLi0zKf5nocg117FL2imoxuLq4yc56MHO81WRnCc 2Ehxh5jv+rs9Qg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:53:44 2025 by rpki-client