This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft File: USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json) Hash identifier: cqWUhbUu2LQvWg9tya4tK7l4fzsxuaSdo1LXfhglW8U= Subject key identifier: A5:B8:44:83:31:44:74:46:48:78:23:F3:D6:41:37:B8:B9:CA:0F:74 Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6 Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6 Certificate serial: 019B318CD2D097D7D7B37DDE46D2E15110F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft Manifest number: 1414 Signing time: Thu 18 Dec 2025 13:01:11 +0000 Manifest this update: Thu 18 Dec 2025 13:01:11 +0000 Manifest next update: Fri 19 Dec 2025 13:01:11 +0000 Files and hashes: 1: OA9cjZfM9pcs189DQL3OK7PNscQ.roa (hash: k0wLUi6w93vs71XE/cCMCBIvwa+yuzcb+Mk+I80oin8=) 2: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: mfdSHtHo0IErFy5YlqldvvKFfabxS7R873Nkcwg6mjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:d2:d0:97:d7:d7:b3:7d:de:46:d2:e1:51:10:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6 Validity Not Before: Dec 18 13:01:11 2025 GMT Not After : Dec 19 13:01:11 2025 GMT Subject: CN=a5b8448331447446487823f3d64137b8b9ca0f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:8e:13:07:a7:79:da:82:a0:7f:c2:4f:67: d9:2d:e2:91:17:7a:a5:1a:e1:5a:16:a1:97:18:9c: e9:40:08:aa:23:dc:d6:d8:1c:3b:31:07:d3:74:01: e4:3c:2a:84:a7:d9:e9:38:f4:c9:cd:e9:71:d8:73: 9a:79:1e:75:48:0d:0b:78:99:7a:a7:05:71:21:3f: 49:c8:e2:ff:73:b4:fb:49:9b:55:bc:13:4a:1a:cc: ae:8f:58:04:de:4d:09:28:a9:e7:6e:96:cd:17:dc: 6a:c8:a5:0f:58:0b:75:c0:3d:6f:e4:73:52:c7:c1: 54:10:eb:a4:93:47:d7:c1:b4:df:5d:44:09:b1:af: 5d:25:0a:46:ab:44:79:08:41:8c:60:8a:9c:19:e9: ab:8f:27:86:8f:6c:5e:1f:f5:75:17:eb:0e:dc:61: 21:4b:fa:66:57:7e:bb:42:eb:54:02:ce:88:c1:eb: f1:d0:92:b1:30:70:26:dc:87:e3:1f:85:dc:90:a3: 23:9f:14:d1:75:72:9c:00:df:53:6a:50:9a:d4:52: aa:b9:16:9a:b6:0b:5e:6f:15:95:4a:67:63:1f:29: ca:05:79:ed:d1:42:9c:84:24:92:83:d2:7c:3f:b4: 45:0d:6c:3b:f4:8d:97:2e:3f:28:50:5f:18:9f:c6: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B8:44:83:31:44:74:46:48:78:23:F3:D6:41:37:B8:B9:CA:0F:74 X509v3 Authority Key Identifier: keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8e:55:f0:8f:d7:37:6f:de:68:b6:27:49:81:57:a5:fa:7a: b4:70:6d:ee:71:06:95:13:84:d5:95:bf:b6:27:2f:0c:81:09: dd:a3:f4:5f:1e:c9:db:1e:5f:d2:71:30:30:93:e4:43:84:6e: e5:90:ee:b8:59:75:9d:aa:ae:37:77:2a:8a:71:98:3a:ae:a3: bb:c3:48:cb:a9:1a:4f:65:84:ee:cd:5e:eb:4d:3a:dc:69:06: 6b:4b:f0:20:48:fa:5f:75:4e:8f:da:43:a6:3e:73:34:45:68: ef:fd:40:4d:b3:3a:b3:4d:c3:f3:e6:8d:7b:ab:79:70:3b:2f: f3:7f:2c:11:86:03:30:f1:e1:02:75:c0:04:b0:a9:39:28:eb: a4:45:92:f5:79:2b:42:2a:0e:e5:91:10:cb:77:8f:eb:82:7a: ec:0b:91:20:3e:ee:da:3b:37:d8:92:d0:3f:bd:f0:94:e3:16: b5:1d:6d:b6:35:3a:db:3d:c1:af:54:a7:73:83:be:d0:68:57: a0:07:52:b6:1e:33:e1:12:26:c2:4b:fa:61:e0:57:c4:6e:b6: e4:b6:60:43:6f:34:c1:d9:63:c6:f8:e9:7b:5a:41:65:de:e7: ae:75:f6:9f:3a:97:a6:b6:0f:55:ce:1c:c8:33:7b:82:2c:fd: be:67:08:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjNLQl9fXs33eRtLhURD5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjM5YTcwMmI5YjQ0MTE5ZmMwZWZiMDA1MjRlN2RkMTJk ZWE4ZjYwHhcNMjUxMjE4MTMwMTExWhcNMjUxMjE5MTMwMTExWjAzMTEwLwYDVQQD EyhhNWI4NDQ4MzMxNDQ3NDQ2NDg3ODIzZjNkNjQxMzdiOGI5Y2EwZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH6OEwenedqCoH/CT2fZLeKRF3ql GuFaFqGXGJzpQAiqI9zW2Bw7MQfTdAHkPCqEp9npOPTJzelx2HOaeR51SA0LeJl6 pwVxIT9JyOL/c7T7SZtVvBNKGsyuj1gE3k0JKKnnbpbNF9xqyKUPWAt1wD1v5HNS x8FUEOukk0fXwbTfXUQJsa9dJQpGq0R5CEGMYIqcGemrjyeGj2xeH/V1F+sO3GEh S/pmV367QutUAs6Iwevx0JKxMHAm3IfjH4XckKMjnxTRdXKcAN9TalCa1FKquRaa tgtebxWVSmdjHynKBXnt0UKchCSSg9J8P7RFDWw79I2XLj8oUF8Yn8a/lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKW4RIMxRHRGSHgj89ZBN7i5yg90MB8GA1UdIwQY MBaAFFEjmnArm0QRn8DvsAUk590S3qj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUt ZDQ0ZmU2MGQxOTQ4LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUtZDQ0ZmU2MGQxOTQ4 LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASI5V8I/X N2/eaLYnSYFXpfp6tHBt7nEGlROE1ZW/ticvDIEJ3aP0Xx7J2x5f0nEwMJPkQ4Ru 5ZDuuFl1naquN3cqinGYOq6ju8NIy6kaT2WE7s1e60063GkGa0vwIEj6X3VOj9pD pj5zNEVo7/1ATbM6s03D8+aNe6t5cDsv838sEYYDMPHhAnXABLCpOSjrpEWS9Xkr QioO5ZEQy3eP64J67AuRID7u2js32JLQP73wlOMWtR1ttjU62z3Br1Snc4O+0GhX oAdSth4z4RImwkv6YeBXxG625LZgQ280wdljxvjpe1pBZd7nrnX2nzqXprYPVc4c yDN7giz9vmcIFQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:34:43 2025 by rpki-client