This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json) Hash identifier: mj8vrCmnRsjjTgwClecLl9RO1KReGhkcmYO84nvZxsI= Subject key identifier: 70:79:FA:3B:AB:9D:E4:C3:47:32:9E:AB:A8:FA:14:99:FC:37:F0:58 Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb Certificate serial: 019B1EE17D4541BC255402DC305368B35217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft Manifest number: 078A Signing time: Sun 14 Dec 2025 22:00:52 +0000 Manifest this update: Sun 14 Dec 2025 22:00:52 +0000 Manifest next update: Mon 15 Dec 2025 22:00:52 +0000 Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: B07ALVf4fWu5v36OBFG8XpOgaZ6Wshb1YP4QBR1TAsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:7d:45:41:bc:25:54:02:dc:30:53:68:b3:52:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb Validity Not Before: Dec 14 22:00:52 2025 GMT Not After : Dec 15 22:00:52 2025 GMT Subject: CN=7079fa3bab9de4c347329eaba8fa1499fc37f058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:2c:2b:f4:a4:dc:9b:14:d1:a7:27:75:fa: ba:01:a1:31:b1:50:2a:70:77:75:5f:05:8e:ee:7e: fc:cc:29:be:8e:9b:5b:70:18:96:d4:fc:b0:3e:77: b7:87:8d:17:49:02:41:96:97:38:44:ee:5a:fd:48: 62:03:58:7f:48:24:d3:c3:83:3f:65:7a:3e:c2:82: c4:4b:26:96:33:ae:60:39:71:7b:6f:12:48:17:68: b9:21:d0:41:00:20:f1:dc:fd:d9:fe:de:62:18:37: 74:68:40:20:4b:a8:d6:bd:b7:d3:ab:32:c7:7e:ff: 68:9b:30:34:31:83:35:73:26:b3:54:8d:6f:0a:63: f3:69:d3:6a:8e:9a:a1:9d:de:8e:06:ad:d6:f9:82: 97:fc:51:fb:98:8f:84:37:48:2b:6c:97:d8:ab:61: 9b:bf:ca:73:e3:0a:85:1e:a4:d5:54:4d:ae:75:11: d7:86:9e:7c:54:de:54:fb:65:3c:b5:e4:b5:6c:40: d2:4f:d9:d6:26:82:84:1b:ee:ee:cb:a3:f2:f1:6d: 23:96:48:55:7d:b2:39:bf:cb:e3:11:ee:16:8d:62: b2:84:7b:78:33:e0:bb:18:9c:6f:db:2a:4c:1d:b9: 84:af:2f:ef:7c:2f:7d:c5:15:ea:c6:a3:58:8d:27: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:79:FA:3B:AB:9D:E4:C3:47:32:9E:AB:A8:FA:14:99:FC:37:F0:58 X509v3 Authority Key Identifier: keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:7b:80:75:7c:86:1d:dc:2a:4a:a6:d8:dc:4f:49:f5:23:32: 2d:97:37:48:8a:2f:97:76:1a:c9:ba:1a:57:af:30:7b:32:d5: 34:a9:85:4c:be:e9:27:6c:0a:bf:c6:28:74:13:b1:cc:bd:93: 34:4a:13:5b:99:b2:0b:fd:7e:7f:1d:55:7f:a9:bb:bc:45:a8: a8:90:0c:ec:86:3b:73:48:ba:18:eb:7a:ac:7a:be:1c:4c:f5: cc:52:3f:fd:8c:21:48:88:3b:14:33:8f:55:10:02:64:61:41: 12:88:b5:33:7b:2e:c5:e1:60:3b:ba:c8:9f:10:fe:a2:ad:70: 09:18:42:6a:8f:9d:2c:af:c4:3d:92:77:94:26:f8:0c:8c:41: 4a:64:59:68:d2:4c:5c:cb:1e:63:4b:50:b6:f8:97:a4:73:5b: a6:5b:e3:40:a4:a5:69:10:0a:94:da:8f:5d:a8:42:19:4a:c5: 39:46:2f:35:4d:0e:f1:06:59:06:ae:da:18:71:7e:ee:de:ba: dc:ac:8d:ab:13:e0:13:31:37:e1:c4:62:c8:23:1f:24:eb:be: 5d:dd:2c:db:86:f5:35:41:87:00:7f:25:b9:6d:b2:2c:cd:12: 60:0a:5a:cd:b0:18:c2:67:c7:82:cc:04:34:0e:65:d0:98:8c: 64:32:c6:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4X1FQbwlVALcMFNos1IXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMGIzNWZjMzY2ZTg0YjQ1ODBlZWVhNzk4OTExZWQ0ZTE4 ZTNhZWIwHhcNMjUxMjE0MjIwMDUyWhcNMjUxMjE1MjIwMDUyWjAzMTEwLwYDVQQD Eyg3MDc5ZmEzYmFiOWRlNGMzNDczMjllYWJhOGZhMTQ5OWZjMzdmMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbYsK/Sk3JsU0acndfq6AaExsVAq cHd1XwWO7n78zCm+jptbcBiW1PywPne3h40XSQJBlpc4RO5a/UhiA1h/SCTTw4M/ ZXo+woLESyaWM65gOXF7bxJIF2i5IdBBACDx3P3Z/t5iGDd0aEAgS6jWvbfTqzLH fv9omzA0MYM1cyazVI1vCmPzadNqjpqhnd6OBq3W+YKX/FH7mI+EN0grbJfYq2Gb v8pz4wqFHqTVVE2udRHXhp58VN5U+2U8teS1bEDST9nWJoKEG+7uy6Py8W0jlkhV fbI5v8vjEe4WjWKyhHt4M+C7GJxv2ypMHbmEry/vfC99xRXqxqNYjSf0XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHB5+jurneTDRzKeq6j6FJn8N/BYMB8GA1UdIwQY MBaAFHILNfw2boS0WA7up5iRHtThjjrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTct YjcwYjk1NTM5ZGY0LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTctYjcwYjk1NTM5ZGY0 LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnuAdXyG HdwqSqbY3E9J9SMyLZc3SIovl3YayboaV68wezLVNKmFTL7pJ2wKv8YodBOxzL2T NEoTW5myC/1+fx1Vf6m7vEWoqJAM7IY7c0i6GOt6rHq+HEz1zFI//YwhSIg7FDOP VRACZGFBEoi1M3suxeFgO7rInxD+oq1wCRhCao+dLK/EPZJ3lCb4DIxBSmRZaNJM XMseY0tQtviXpHNbplvjQKSlaRAKlNqPXahCGUrFOUYvNU0O8QZZBq7aGHF+7t66 3KyNqxPgEzE34cRiyCMfJOu+Xd0s24b1NUGHAH8luW2yLM0SYApazbAYwmfHgswE NA5l0JiMZDLGlw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:54:03 2025 by rpki-client