This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft File: cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json) Hash identifier: jBIoFeiCW3vSxpmTPGowpzspE1md4BCuiYBx1LEwk7Q= Subject key identifier: 1D:D8:C3:2F:E8:1B:53:5D:89:B8:C4:91:7F:DB:11:E8:20:2D:2C:CC Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39 Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39 Certificate serial: 019B1BAA6F37A4B3F3313DDBCDFE00006631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft Manifest number: 1785 Signing time: Sun 14 Dec 2025 07:01:52 +0000 Manifest this update: Sun 14 Dec 2025 07:01:52 +0000 Manifest next update: Mon 15 Dec 2025 07:01:52 +0000 Files and hashes: 1: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: 4wyL10OyiRcW/jaVx+9myYBawtbJ3oUy/em1t59LIS0=) 2: ecSF9NE211OUQGVVY-gYrorVDo0.roa (hash: AFCEodkMI54VOYg+dE3fMMiMAl/LGN5jW0HDeqocDmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:6f:37:a4:b3:f3:31:3d:db:cd:fe:00:00:66:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39 Validity Not Before: Dec 14 07:01:52 2025 GMT Not After : Dec 15 07:01:52 2025 GMT Subject: CN=1dd8c32fe81b535d89b8c4917fdb11e8202d2ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:06:01:b6:7c:73:11:5b:76:c6:19:73:84:0b: 0f:f7:f0:c1:df:d0:0d:91:a2:fb:d9:91:83:4a:17: cb:6f:3d:12:2e:64:1e:33:a5:32:48:14:9b:af:03: 5e:9c:fe:e8:e8:1b:b6:a6:6d:84:b8:f1:09:70:47: 03:ba:26:73:e5:18:d0:35:1e:62:ca:cd:92:da:36: 12:3c:59:9a:2c:5a:98:c1:2c:1b:a8:c0:a2:34:8b: fd:60:1f:a4:05:b0:89:fc:80:70:c9:98:c4:60:5c: a1:d8:42:e1:91:3c:6b:ac:89:d9:20:30:6a:e3:c4: e9:aa:b1:79:d5:17:04:26:4f:2a:77:5d:ef:f7:84: e8:ba:1d:f9:35:03:d1:8d:d3:b4:c0:32:65:17:2d: 5f:b5:d9:15:62:cf:a6:2a:31:a2:97:42:0d:49:d7: e6:44:46:ae:a8:92:9d:c2:55:60:37:6f:ec:72:7a: 82:a2:0e:13:fe:d1:67:be:8a:30:64:f8:62:59:9c: 44:8c:00:8b:8c:99:51:ef:36:ae:fc:23:3d:6d:a1: 17:22:11:59:fe:d7:f9:7b:9a:86:b3:cd:24:c0:cb: 7c:8c:ae:68:22:4b:22:89:63:d2:82:c8:f5:e2:31: 97:12:5d:e6:d6:c8:a5:c1:a7:8a:6d:20:34:bf:05: c6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D8:C3:2F:E8:1B:53:5D:89:B8:C4:91:7F:DB:11:E8:20:2D:2C:CC X509v3 Authority Key Identifier: keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:61:5f:32:a5:e4:8e:a6:a7:4c:d6:b1:af:37:c3:9c:b0:99: a6:71:09:d1:06:63:b4:e6:1a:38:4b:89:17:b7:ab:13:97:c2: 2a:80:c4:53:01:b7:09:4c:c8:82:17:4a:21:fb:a6:b7:f7:13: b2:d1:99:f0:3d:6f:4c:76:4c:1c:ce:4b:0f:df:22:54:7f:5c: b2:c6:d8:78:7a:1c:d3:61:2c:80:78:1a:72:84:19:da:65:da: e9:39:81:94:7e:65:60:b6:ac:52:29:cd:8d:53:e2:37:33:a0: 31:e9:47:8d:25:10:14:22:16:b0:a5:5c:ee:54:34:65:aa:c9: 4f:dd:c0:6a:55:a3:39:00:89:09:53:ba:31:1e:db:39:ef:bd: 86:a9:6c:ad:47:30:89:e6:7a:50:9e:08:ab:58:85:36:e6:58: 3a:1e:4a:7e:b1:c0:f3:e5:06:17:a2:88:a4:12:87:3a:28:79: 54:62:bb:97:6c:ae:a4:4f:47:8f:e5:87:4d:da:d0:4a:bb:1a: 32:9d:26:df:20:bc:43:ab:93:e3:59:c2:f4:da:f7:c2:09:1b: 49:e2:84:c1:db:56:c6:f8:25:f9:57:b0:28:12:7e:dd:74:2b: ab:8c:9e:c4:3c:f5:05:26:93:76:00:48:70:35:b2:c6:6c:1b: 12:32:10:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqm83pLPzMT3bzf4AAGYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTRiYWY5OWFiODQwMTI5MTMzMjg1ZmU5YWQ3YjgzZmQx MzBjMzkwHhcNMjUxMjE0MDcwMTUyWhcNMjUxMjE1MDcwMTUyWjAzMTEwLwYDVQQD EygxZGQ4YzMyZmU4MWI1MzVkODliOGM0OTE3ZmRiMTFlODIwMmQyY2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gYBtnxzEVt2xhlzhAsP9/DB39AN kaL72ZGDShfLbz0SLmQeM6UySBSbrwNenP7o6Bu2pm2EuPEJcEcDuiZz5RjQNR5i ys2S2jYSPFmaLFqYwSwbqMCiNIv9YB+kBbCJ/IBwyZjEYFyh2ELhkTxrrInZIDBq 48TpqrF51RcEJk8qd13v94Touh35NQPRjdO0wDJlFy1ftdkVYs+mKjGil0INSdfm REauqJKdwlVgN2/scnqCog4T/tFnvoowZPhiWZxEjACLjJlR7zau/CM9baEXIhFZ /tf5e5qGs80kwMt8jK5oIksiiWPSgsj14jGXEl3m1silwaeKbSA0vwXG1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3Ywy/oG1NdibjEkX/bEeggLSzMMB8GA1UdIwQY MBaAFHLkuvmauEASkTMoX+mte4P9Eww5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NmI3NGMtODFjMS00MTBlLTk1N2Qt YThkNjVkY2NiOTZiLzEvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi82NmI3NGMtODFjMS00MTBlLTk1N2QtYThkNjVkY2NiOTZi LzEvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGFfMqXk jqanTNaxrzfDnLCZpnEJ0QZjtOYaOEuJF7erE5fCKoDEUwG3CUzIghdKIfumt/cT stGZ8D1vTHZMHM5LD98iVH9cssbYeHoc02EsgHgacoQZ2mXa6TmBlH5lYLasUinN jVPiNzOgMelHjSUQFCIWsKVc7lQ0ZarJT93AalWjOQCJCVO6MR7bOe+9hqlsrUcw ieZ6UJ4Iq1iFNuZYOh5KfrHA8+UGF6KIpBKHOih5VGK7l2yupE9Hj+WHTdrQSrsa Mp0m3yC8Q6uT41nC9Nr3wgkbSeKEwdtWxvgl+VewKBJ+3XQrq4yexDz1BSaTdgBI cDWyxmwbEjIQFA== -----END CERTIFICATE-----Generated at Sun Dec 14 08:38:52 2025 by rpki-client