This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json) Hash identifier: nbKmEKxGWY3GobI/88bzQTGmBj999Vlx5nqefOLV7d4= Subject key identifier: F8:A4:F2:D2:C3:B3:CE:14:50:CE:9B:E7:62:B7:A0:57:24:9F:C9:DD Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c Certificate serial: 019B108160727663D91709D13AECF8711A62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft Manifest number: 1778 Signing time: Fri 12 Dec 2025 03:01:12 +0000 Manifest this update: Fri 12 Dec 2025 03:01:12 +0000 Manifest next update: Sat 13 Dec 2025 03:01:12 +0000 Files and hashes: 1: CMRIQH8Z3gsmfK11X0Yt7FBzPg4.roa (hash: V5ZSdWnvmK0T/aEGEmBtNWZc8dJrVrkrhrMMEiAzv8c=) 2: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: PqZxcZsCXqjQnUQ029WF13BNvjHulIHNNYIsaYyXrPE=) 3: _MIIbyQenzH6F7OwMqPXOOY9ctM.roa (hash: eIV7bKM/aiDgvacDkUhEBLMcFg6gGKWdnq3Gtl3ghX0=) 4: doGoX02hMamF9DY5FkiK3Hz0L1A.roa (hash: iVO738ggm8ZAbwUoGkG5FNzeeqtHgLdZjyBQ4SOavsk=) 5: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:60:72:76:63:d9:17:09:d1:3a:ec:f8:71:1a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c Validity Not Before: Dec 12 03:01:12 2025 GMT Not After : Dec 13 03:01:12 2025 GMT Subject: CN=f8a4f2d2c3b3ce1450ce9be762b7a057249fc9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:05:a5:f8:02:1e:d5:f8:7d:6b:d2:fc:46: 03:90:96:2d:91:33:1a:25:23:c9:08:b5:1d:e3:cf: 74:c6:c6:af:e2:7d:52:eb:66:8b:b9:eb:70:64:0b: bf:0e:44:c9:96:c7:31:1f:f1:cc:ed:07:af:89:7a: a2:e5:78:26:f1:c5:96:be:76:18:85:22:d1:29:9d: ab:65:68:74:4b:a4:30:cc:ab:01:8f:6c:a0:48:19: e3:c8:f4:ca:a4:7e:3e:1d:55:1f:6c:98:69:33:23: 8e:97:bc:68:87:c7:bd:4c:3f:f6:74:70:ac:66:69: 48:d7:78:74:50:be:b5:d5:59:91:8a:ba:5d:bc:39: b0:2a:b8:3c:71:65:d0:e8:58:9c:aa:7e:99:73:59: c5:44:ea:23:54:30:2c:4e:97:6d:26:7b:de:77:7c: 69:f9:35:2f:36:0a:74:42:89:de:77:d1:7d:2b:2a: 6d:22:59:26:bd:5d:c6:3f:a4:c8:58:12:aa:df:d4: a9:dd:6f:94:38:fb:cf:e3:ad:4a:81:25:65:22:be: 86:b3:82:41:7f:b5:63:e0:80:86:90:90:38:dc:34: 63:ab:d0:d0:72:fd:70:3e:aa:94:02:da:ac:54:28: e2:0e:8f:57:63:3b:e7:6e:1b:d8:78:8d:ac:b6:f6: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A4:F2:D2:C3:B3:CE:14:50:CE:9B:E7:62:B7:A0:57:24:9F:C9:DD X509v3 Authority Key Identifier: keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:75:8f:9c:e1:a7:46:ab:7f:f1:48:63:99:3e:43:55:cf:18: dd:d0:f5:07:51:16:6b:a2:58:a9:66:23:26:73:b1:41:40:2f: 63:ec:bf:e3:da:2b:9f:c7:ed:d7:5c:32:79:8e:23:54:0a:1c: 4f:a8:19:38:b4:f9:5f:78:7c:d9:08:39:c1:31:1c:b7:0d:3c: d4:2e:4d:30:b5:32:ea:4a:34:87:3b:50:30:ec:9f:9a:10:4b: be:1e:ac:36:11:01:02:84:24:14:cf:bf:81:db:b3:67:90:55: da:dd:8d:d6:0e:da:3f:8e:e7:39:7d:67:89:d4:c8:4d:19:2f: 4a:af:a0:b0:1c:e9:70:6d:45:2f:aa:a3:17:84:d5:9e:a2:8b: cd:eb:3a:66:e3:84:02:e8:5d:ef:98:84:f6:eb:5c:f6:5c:fb: 97:6c:94:5e:b4:90:cf:8f:8c:f7:c3:d4:c9:7f:5b:30:42:f5: da:e0:1d:08:29:60:fd:7a:a2:03:c9:87:9f:05:24:a0:e7:34: 87:5b:ea:c7:0e:78:84:fe:49:8e:06:e2:82:c1:2c:77:92:c6: 12:4e:53:47:47:bd:15:2d:6c:3e:72:b7:88:c3:01:5d:30:02: e6:92:f3:8a:c1:80:7b:79:3f:b9:ad:b5:24:f1:f4:24:30:6f: ea:f0:aa:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgWBydmPZFwnROuz4cRpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw MTRiN2MwHhcNMjUxMjEyMDMwMTEyWhcNMjUxMjEzMDMwMTEyWjAzMTEwLwYDVQQD EyhmOGE0ZjJkMmMzYjNjZTE0NTBjZTliZTc2MmI3YTA1NzI0OWZjOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dcFpfgCHtX4fWvS/EYDkJYtkTMa JSPJCLUd4890xsav4n1S62aLuetwZAu/DkTJlscxH/HM7QeviXqi5Xgm8cWWvnYY hSLRKZ2rZWh0S6QwzKsBj2ygSBnjyPTKpH4+HVUfbJhpMyOOl7xoh8e9TD/2dHCs ZmlI13h0UL611VmRirpdvDmwKrg8cWXQ6Ficqn6Zc1nFROojVDAsTpdtJnved3xp +TUvNgp0Qoned9F9KyptIlkmvV3GP6TIWBKq39Sp3W+UOPvP461KgSVlIr6Gs4JB f7Vj4ICGkJA43DRjq9DQcv1wPqqUAtqsVCjiDo9XYzvnbhvYeI2stvaG8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPik8tLDs84UUM6b52K3oFckn8ndMB8GA1UdIwQY MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt MTE0YWQ0MWNmMzMxLzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3WPnOGn Rqt/8UhjmT5DVc8Y3dD1B1EWa6JYqWYjJnOxQUAvY+y/49orn8ft11wyeY4jVAoc T6gZOLT5X3h82Qg5wTEctw081C5NMLUy6ko0hztQMOyfmhBLvh6sNhEBAoQkFM+/ gduzZ5BV2t2N1g7aP47nOX1nidTITRkvSq+gsBzpcG1FL6qjF4TVnqKLzes6ZuOE Auhd75iE9utc9lz7l2yUXrSQz4+M98PUyX9bMEL12uAdCClg/XqiA8mHnwUkoOc0 h1vqxw54hP5JjgbigsEsd5LGEk5TR0e9FS1sPnK3iMMBXTAC5pLzisGAe3k/ua21 JPH0JDBv6vCqhQ== -----END CERTIFICATE-----Generated at Fri Dec 12 11:30:10 2025 by rpki-client