This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json) Hash identifier: 85FiVqZQ4c9i3bPwGyWYI3k/Cs6RmzMVXQziA1/NAPE= Subject key identifier: DB:85:F8:14:2E:FD:AB:5A:C8:7F:16:4D:12:B7:D9:56:DF:C8:F7:8A Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Certificate serial: 019B0F6F1C9153F71668219555BEC0110D27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft Manifest number: 5A Signing time: Thu 11 Dec 2025 22:01:38 +0000 Manifest this update: Thu 11 Dec 2025 22:01:38 +0000 Manifest next update: Fri 12 Dec 2025 22:01:38 +0000 Files and hashes: 1: 4FJzd_Wfr7xcsj_U76Sq9g_Qctk.roa (hash: plueYcsSwAm/2lTu9lvJeTlCkxmMfqNyVXx7DhNEahY=) 2: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: 6i9XLTimHYV+1Y9jW4z470FDpAcsXqs9Oi8iBEeu5OI=) 3: bEqxgWflQukJ8O98vGGp4LMFKBw.roa (hash: Gaf1MwZeCFBwfsW0oOzvsK8aJItv5fxmI2bAgLbfTec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6f:1c:91:53:f7:16:68:21:95:55:be:c0:11:0d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Validity Not Before: Dec 11 22:01:38 2025 GMT Not After : Dec 12 22:01:38 2025 GMT Subject: CN=db85f8142efdab5ac87f164d12b7d956dfc8f78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:5c:08:83:69:c2:9a:be:6b:e8:fb:75:4e: 9f:f6:25:58:ec:43:cb:4f:bc:02:76:d0:b7:a4:e8: 55:b1:3d:ca:e9:4e:13:4c:3d:ef:3b:28:64:20:d8: de:31:bc:7d:2c:65:44:c9:20:f1:0d:01:4f:44:55: a6:96:86:a8:dc:5b:aa:e7:7c:12:b8:4a:12:f1:5d: e3:61:47:f1:e1:81:24:96:1f:27:b2:a2:7b:ee:8b: d2:1a:6b:ed:dd:a9:d4:f1:41:ea:6c:43:f6:4d:1f: ac:ba:18:0d:1a:73:c1:d6:1d:43:84:10:b5:9f:ab: 73:86:cd:dd:9f:e3:56:3b:88:d9:cb:83:9f:9a:72: ff:38:cf:73:43:8c:d2:6c:ca:ee:de:ca:40:8e:b5: 2a:e4:4b:fe:cf:17:09:0a:d3:9f:94:0e:3d:58:48: 90:07:c1:e6:dd:22:90:74:40:a5:48:27:ec:f9:d8: 99:7f:83:45:bf:ef:2b:d9:7a:93:ab:86:26:ba:a9: c2:9d:bf:29:e2:f8:4f:40:fa:5f:61:f9:67:f5:3e: cb:85:52:ca:67:da:9f:ff:69:f2:69:b9:c6:e8:8c: c6:3a:fa:34:b0:37:3a:8f:39:d6:01:07:b0:fd:af: 64:36:15:58:e0:58:47:19:4f:fe:bb:01:0a:c9:6a: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:85:F8:14:2E:FD:AB:5A:C8:7F:16:4D:12:B7:D9:56:DF:C8:F7:8A X509v3 Authority Key Identifier: keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bd:50:7b:e7:96:47:62:87:54:cc:8f:db:23:5c:45:70:8a: 56:c5:d8:cc:6c:36:65:4d:0d:d1:5b:69:1f:5f:fc:b0:ca:83: c5:f5:ef:4e:2c:e9:56:39:d7:a0:e4:2c:96:2b:97:fe:af:0e: a3:09:db:f0:2a:27:64:b5:00:16:c8:9b:d5:49:fc:e7:e7:72: c9:b3:fd:62:e9:f9:68:8d:5f:79:39:3a:87:e4:4e:e8:e7:f2: 47:bc:20:0e:97:7b:5b:35:f9:9c:23:88:4a:1f:4d:b7:cc:9a: 55:f4:bb:33:2d:55:34:43:42:ba:85:7e:57:0d:48:a9:d3:31: e4:41:f3:5e:24:23:20:4e:9a:5a:b8:f7:bb:46:94:0c:10:41: 73:43:10:fc:35:7c:54:cd:83:3e:3c:cc:11:3d:5d:a5:ba:78: 5a:ba:16:ea:64:a6:42:cf:44:e8:7b:6c:4e:eb:38:b9:7e:42: c3:45:35:29:04:d7:06:d3:9e:49:2e:cc:b3:fa:d1:23:f9:14: 23:79:3f:36:10:ff:f0:5e:4b:89:8b:79:a3:60:24:ab:4b:48: 3f:3a:06:25:f2:e6:56:1f:82:75:34:c8:94:ea:29:53:19:fa: 3c:13:f1:f5:8b:01:8b:1c:71:9f:f5:c4:34:b7:96:97:8f:1c: 35:d1:53:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbxyRU/cWaCGVVb7AEQ0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm NDI2MTEwHhcNMjUxMjExMjIwMTM4WhcNMjUxMjEyMjIwMTM4WjAzMTEwLwYDVQQD EyhkYjg1ZjgxNDJlZmRhYjVhYzg3ZjE2NGQxMmI3ZDk1NmRmYzhmNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+RcCINpwpq+a+j7dU6f9iVY7EPL T7wCdtC3pOhVsT3K6U4TTD3vOyhkINjeMbx9LGVEySDxDQFPRFWmloao3Fuq53wS uEoS8V3jYUfx4YEklh8nsqJ77ovSGmvt3anU8UHqbEP2TR+suhgNGnPB1h1DhBC1 n6tzhs3dn+NWO4jZy4OfmnL/OM9zQ4zSbMru3spAjrUq5Ev+zxcJCtOflA49WEiQ B8Hm3SKQdEClSCfs+diZf4NFv+8r2XqTq4YmuqnCnb8p4vhPQPpfYfln9T7LhVLK Z9qf/2nyabnG6IzGOvo0sDc6jznWAQew/a9kNhVY4FhHGU/+uwEKyWqlXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuF+BQu/atayH8WTRK32VbfyPeKMB8GA1UdIwQY MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct MjQyNDY2ODJiZjAwLzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD71Qe+eW R2KHVMyP2yNcRXCKVsXYzGw2ZU0N0VtpH1/8sMqDxfXvTizpVjnXoOQsliuX/q8O ownb8ConZLUAFsib1Un85+dyybP9Yun5aI1feTk6h+RO6OfyR7wgDpd7WzX5nCOI Sh9Nt8yaVfS7My1VNENCuoV+Vw1IqdMx5EHzXiQjIE6aWrj3u0aUDBBBc0MQ/DV8 VM2DPjzMET1dpbp4WroW6mSmQs9E6HtsTus4uX5Cw0U1KQTXBtOeSS7Ms/rRI/kU I3k/NhD/8F5LiYt5o2Akq0tIPzoGJfLmVh+CdTTIlOopUxn6PBPx9YsBixxxn/XE NLeWl48cNdFT8w== -----END CERTIFICATE-----Generated at Fri Dec 12 00:14:07 2025 by rpki-client