This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft File: cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json) Hash identifier: hLlNTskOwqsDqgBbSRt08n69sMTjY1PbhN1ft5nqRYQ= Subject key identifier: C4:80:03:DD:EB:F1:3C:A9:1D:29:C3:D5:BE:B2:79:F1:4D:C6:E5:28 Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39 Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39 Certificate serial: 019B292F2CE68F17B68CF68525EE9742DFEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft Manifest number: 178C Signing time: Tue 16 Dec 2025 22:01:56 +0000 Manifest this update: Tue 16 Dec 2025 22:01:56 +0000 Manifest next update: Wed 17 Dec 2025 22:01:56 +0000 Files and hashes: 1: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: KWoYgGz3pTywENHYuOWxM02y5lxAdn96NzGbTKecG1g=) 2: ecSF9NE211OUQGVVY-gYrorVDo0.roa (hash: AFCEodkMI54VOYg+dE3fMMiMAl/LGN5jW0HDeqocDmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:2c:e6:8f:17:b6:8c:f6:85:25:ee:97:42:df:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39 Validity Not Before: Dec 16 22:01:56 2025 GMT Not After : Dec 17 22:01:56 2025 GMT Subject: CN=c48003ddebf13ca91d29c3d5beb279f14dc6e528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:2a:d6:c6:6e:ab:2c:e3:27:60:3d:13:e9: db:22:6c:6a:d5:c8:5b:2f:12:f8:04:b4:45:58:7e: 68:33:8e:e9:fa:c4:0b:dc:e6:5e:bf:e7:fa:61:8b: 01:8b:a2:e8:82:54:6f:62:9d:1e:62:2e:c2:97:db: 58:02:10:8f:9e:25:5f:3a:f9:e9:6c:96:ed:dd:b2: bd:20:f9:d4:e0:f6:e9:df:af:32:21:e5:a0:56:32: d7:7f:e3:3b:83:77:04:52:2b:25:dc:33:91:05:bc: 5e:a7:d6:38:74:b8:aa:c4:60:f3:33:a9:5b:b2:4b: a9:0e:af:d4:b3:3e:26:e7:6f:d0:61:71:eb:59:e9: 03:58:a8:9c:4a:6d:c0:67:29:3a:f3:fb:38:b9:12: 0c:fe:67:a6:5b:a0:ce:a2:cb:fa:32:f8:5e:48:98: 00:6f:c9:64:a5:84:36:8f:74:85:4a:3e:63:b1:ab: ef:e4:f3:55:c6:c9:f4:f0:62:02:bd:fb:fc:36:53: ce:2d:21:17:47:db:e5:69:81:e2:b1:63:ea:f7:fe: f9:c5:ef:39:93:73:e4:51:30:e5:ab:2d:b5:0c:83: 02:b0:2b:16:50:86:cd:dd:71:d3:86:50:cb:ef:01: 5b:c5:04:13:6d:e6:1b:ea:8d:9a:46:64:34:f6:86: 6e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:80:03:DD:EB:F1:3C:A9:1D:29:C3:D5:BE:B2:79:F1:4D:C6:E5:28 X509v3 Authority Key Identifier: keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:99:fd:d7:91:27:6d:4e:e2:90:c3:d9:69:1b:2e:71:6a:16: 88:92:65:c7:d1:e3:17:25:1e:5a:f0:ce:06:60:23:eb:64:3d: ef:b7:60:28:3f:c0:02:25:ce:ac:50:c4:f4:73:16:96:4a:fd: 64:6e:5e:d0:48:44:8c:44:bb:c3:c0:69:11:27:e2:71:10:8a: 69:02:22:26:6b:cd:41:69:c3:83:1d:6a:4b:1d:60:b0:e0:f1: 76:e4:54:19:e4:5e:f2:39:c6:e0:a8:44:c5:3c:31:cd:a4:d5: a7:55:a9:d6:c4:11:e6:a7:17:19:a6:27:d3:5a:0b:85:8a:91: 75:a5:65:a0:3c:b9:11:d0:a8:f8:0a:87:a0:30:1d:dd:7b:d0: a7:63:50:20:24:c5:aa:76:7f:d4:ea:66:52:16:44:3e:d0:28: ed:8d:46:0e:dd:69:ed:37:24:87:1a:6f:1a:6c:11:8f:ef:d5: 1e:bc:fe:0d:f1:d8:14:f4:98:5d:8f:93:25:44:c8:09:b0:9d: 45:e5:b2:48:43:bd:54:c1:be:48:2c:fc:87:6b:f2:50:b6:c1: 9a:80:66:79:3d:3c:fb:3c:9b:db:02:6b:6f:3c:a5:c9:f9:a6: c1:2d:ae:6c:4b:2f:59:fb:a8:87:6c:b3:2e:31:38:55:b8:89: 3a:c2:6d:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLyzmjxe2jPaFJe6XQt/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTRiYWY5OWFiODQwMTI5MTMzMjg1ZmU5YWQ3YjgzZmQx MzBjMzkwHhcNMjUxMjE2MjIwMTU2WhcNMjUxMjE3MjIwMTU2WjAzMTEwLwYDVQQD EyhjNDgwMDNkZGViZjEzY2E5MWQyOWMzZDViZWIyNzlmMTRkYzZlNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtMq1sZuqyzjJ2A9E+nbImxq1chb LxL4BLRFWH5oM47p+sQL3OZev+f6YYsBi6LoglRvYp0eYi7Cl9tYAhCPniVfOvnp bJbt3bK9IPnU4Pbp368yIeWgVjLXf+M7g3cEUisl3DORBbxep9Y4dLiqxGDzM6lb skupDq/Usz4m52/QYXHrWekDWKicSm3AZyk68/s4uRIM/memW6DOosv6MvheSJgA b8lkpYQ2j3SFSj5jsavv5PNVxsn08GICvfv8NlPOLSEXR9vlaYHisWPq9/75xe85 k3PkUTDlqy21DIMCsCsWUIbN3XHThlDL7wFbxQQTbeYb6o2aRmQ09oZufwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSAA93r8TypHSnD1b6yefFNxuUoMB8GA1UdIwQY MBaAFHLkuvmauEASkTMoX+mte4P9Eww5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NmI3NGMtODFjMS00MTBlLTk1N2Qt YThkNjVkY2NiOTZiLzEvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi82NmI3NGMtODFjMS00MTBlLTk1N2QtYThkNjVkY2NiOTZi LzEvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpn915En bU7ikMPZaRsucWoWiJJlx9HjFyUeWvDOBmAj62Q977dgKD/AAiXOrFDE9HMWlkr9 ZG5e0EhEjES7w8BpESficRCKaQIiJmvNQWnDgx1qSx1gsODxduRUGeRe8jnG4KhE xTwxzaTVp1Wp1sQR5qcXGaYn01oLhYqRdaVloDy5EdCo+AqHoDAd3XvQp2NQICTF qnZ/1OpmUhZEPtAo7Y1GDt1p7TckhxpvGmwRj+/VHrz+DfHYFPSYXY+TJUTICbCd ReWySEO9VMG+SCz8h2vyULbBmoBmeT08+zyb2wJrbzylyfmmwS2ubEsvWfuoh2yz LjE4VbiJOsJthA== -----END CERTIFICATE-----Generated at Wed Dec 17 03:08:21 2025 by rpki-client