This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft File: cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft (raw, json) Hash identifier: PkFpgKh+5PSXYTLdNYxZgOTmABxI9RZ2umA7mA7TfoM= Subject key identifier: FC:C0:7E:FC:97:DA:5F:56:50:56:03:DE:B8:72:49:C9:D7:2D:CA:B1 Authority key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6 Certificate issuer: /CN=726f9448a910d2574157a30403f46c1172aeedb6 Certificate serial: 019AF2770BEA6D7E46DFA3B9A6421834DDC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 07:01:19 +0000 Manifest this update: Sat 06 Dec 2025 07:01:19 +0000 Manifest next update: Sun 07 Dec 2025 07:01:19 +0000 Files and hashes: 1: cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl (hash: GRIkc/WxcMT7ge5efep5VX77mPY88Rn6GQR2v45rLHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:0b:ea:6d:7e:46:df:a3:b9:a6:42:18:34:dd:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=726f9448a910d2574157a30403f46c1172aeedb6 Validity Not Before: Dec 6 07:01:19 2025 GMT Not After : Dec 7 07:01:19 2025 GMT Subject: CN=fcc07efc97da5f56505603deb87249c9d72dcab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:cd:a8:a3:9d:e2:a7:7a:6e:96:77:bd:6d: 1d:7e:98:3e:c7:99:38:d6:1c:ce:1d:d4:b7:b2:56: 03:1f:2f:93:03:07:1f:f8:5b:73:6d:ae:09:3d:8d: e5:a2:98:9f:d0:0c:cc:00:b7:49:42:9e:9e:49:1a: f7:4e:ac:64:39:d6:1c:2b:79:15:37:cb:04:32:48: ef:6e:d4:07:34:62:84:92:d7:0b:c3:a4:b9:c8:00: c7:99:7c:96:df:d4:e5:11:b5:77:0d:48:89:71:1f: 8f:9a:0b:9a:fe:73:51:4b:f9:d7:5f:5b:13:a4:38: 8b:2a:22:3e:df:30:e0:6d:77:87:af:4c:aa:93:47: 8b:00:f4:af:eb:50:ef:06:ba:a6:4c:fd:ec:d2:a9: 1c:ca:32:ed:ec:b5:93:9e:59:49:0e:5b:81:42:2b: 77:63:ab:41:45:fa:a7:65:56:44:bc:a6:ed:1f:28: 57:93:91:2e:c7:c7:3c:b0:6c:b5:ce:30:73:6e:ed: 70:ba:1b:8c:17:b4:a4:b2:3c:f1:6f:00:22:da:37: c5:15:27:4b:40:b1:8f:65:1b:66:0d:c7:10:16:74: 96:22:79:84:40:63:3c:9d:ba:9b:7f:af:2c:cb:c2: 79:1e:6c:c1:25:00:6f:23:05:a0:11:d5:a3:a2:95: a9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C0:7E:FC:97:DA:5F:56:50:56:03:DE:B8:72:49:C9:D7:2D:CA:B1 X509v3 Authority Key Identifier: keyid:72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1b:22:db:b0:d9:99:1d:02:ec:63:77:d6:56:97:51:76:b4: 68:32:c9:05:83:d2:34:55:12:f6:1a:61:15:2f:54:0d:b5:b4: 07:e2:97:e6:6b:ef:9d:b1:9d:70:eb:bf:d6:8c:68:80:5c:40: 8a:98:b1:6e:a9:a8:95:78:28:10:f0:98:5a:e5:fe:a8:84:30: 21:e2:70:80:e4:e9:35:18:71:0f:4b:a8:fd:19:fb:b5:a5:c6: 5e:c8:a9:c8:e8:47:b7:cf:c3:2e:44:85:d9:3f:bc:d2:c7:cb: 63:a9:4c:9f:ed:dc:11:d0:86:ce:9e:5c:86:40:ab:b7:fc:32: a3:b9:d3:61:2a:3f:3d:2d:07:da:fc:13:1a:77:33:dc:75:82: 07:09:31:12:77:dd:aa:44:87:c2:32:cb:d5:7f:0c:7f:64:45: 19:87:45:b3:8f:84:bd:8c:cf:42:95:1e:8f:40:b4:2f:21:be: ca:cc:63:6a:ae:74:69:16:21:71:6b:21:50:b6:2d:43:4d:d2: 6a:96:28:b9:e7:1e:01:93:20:60:e1:69:3a:e7:4b:a0:50:63: 46:2b:a6:af:89:32:67:78:b1:eb:73:83:83:9f:dc:e0:da:b3: 5b:4e:13:f6:51:83:15:ef:9d:7e:67:d3:5a:35:8d:80:db:e4: e4:52:02:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwvqbX5G36O5pkIYNN3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNmY5NDQ4YTkxMGQyNTc0MTU3YTMwNDAzZjQ2YzExNzJh ZWVkYjYwHhcNMjUxMjA2MDcwMTE5WhcNMjUxMjA3MDcwMTE5WjAzMTEwLwYDVQQD EyhmY2MwN2VmYzk3ZGE1ZjU2NTA1NjAzZGViODcyNDljOWQ3MmRjYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKbNqKOd4qd6bpZ3vW0dfpg+x5k4 1hzOHdS3slYDHy+TAwcf+Ftzba4JPY3lopif0AzMALdJQp6eSRr3TqxkOdYcK3kV N8sEMkjvbtQHNGKEktcLw6S5yADHmXyW39TlEbV3DUiJcR+Pmgua/nNRS/nXX1sT pDiLKiI+3zDgbXeHr0yqk0eLAPSv61DvBrqmTP3s0qkcyjLt7LWTnllJDluBQit3 Y6tBRfqnZVZEvKbtHyhXk5Eux8c8sGy1zjBzbu1wuhuMF7SksjzxbwAi2jfFFSdL QLGPZRtmDccQFnSWInmEQGM8nbqbf68sy8J5HmzBJQBvIwWgEdWjopWpaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzAfvyX2l9WUFYD3rhyScnXLcqxMB8GA1UdIwQY MBaAFHJvlEipENJXQVejBAP0bBFyru22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lN2UzNmUtYTMyMy00ZjQ3LWE3NzYt NjZiMTQxMTk0ZmQyLzEvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9lN2UzNmUtYTMyMy00ZjQ3LWE3NzYtNjZiMTQxMTk0ZmQy LzEvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxsi27DZ mR0C7GN31laXUXa0aDLJBYPSNFUS9hphFS9UDbW0B+KX5mvvnbGdcOu/1oxogFxA ipixbqmolXgoEPCYWuX+qIQwIeJwgOTpNRhxD0uo/Rn7taXGXsipyOhHt8/DLkSF 2T+80sfLY6lMn+3cEdCGzp5chkCrt/wyo7nTYSo/PS0H2vwTGncz3HWCBwkxEnfd qkSHwjLL1X8Mf2RFGYdFs4+EvYzPQpUej0C0LyG+ysxjaq50aRYhcWshULYtQ03S apYoueceAZMgYOFpOudLoFBjRiumr4kyZ3ix63ODg5/c4NqzW04T9lGDFe+dfmfT WjWNgNvk5FICIA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:50 2025 by rpki-client