This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json) Hash identifier: fPxGdGOLOLkbrTIgRqjS7a0Kdbzp70RBBOxxsi1j3jY= Subject key identifier: 1B:B3:27:5C:EB:0A:24:3B:A2:E3:EA:3F:1E:E1:16:14:24:75:83:AC Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Certificate serial: 019AF12E518959BA4C78B52823D295B27AAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft Manifest number: 49 Signing time: Sat 06 Dec 2025 01:02:15 +0000 Manifest this update: Sat 06 Dec 2025 01:02:15 +0000 Manifest next update: Sun 07 Dec 2025 01:02:15 +0000 Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: KIqNsxLtBk6c14/vz9uN3D7WgkzvUNHV7jPmmmE+2P4=) 2: IrqfmjYSmlJL7OXNC0rQX5WLKy4.roa (hash: 4w58/gVJ68aFODCVE7Wslm87HGUIEPkeLLjV+tW59TI=) 3: StEj_fKIhM_Y-WvhqR9asn3zkJ4.roa (hash: rySuoIem67mU+hNq7a7plBWUhA9LSHC6nBRvTCxnrcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:51:89:59:ba:4c:78:b5:28:23:d2:95:b2:7a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Validity Not Before: Dec 6 01:02:15 2025 GMT Not After : Dec 7 01:02:15 2025 GMT Subject: CN=1bb3275ceb0a243ba2e3ea3f1ee11614247583ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:1a:37:de:7d:0e:bc:a1:f1:a1:e1:24:ab: 02:08:d9:2e:63:ac:ef:0f:2e:b0:88:14:a0:5d:3c: ed:61:43:b4:14:7d:d9:3b:24:0f:2d:60:d2:fa:81: 46:b1:ad:8a:f9:c6:5a:a0:6d:9e:d5:a3:ec:8a:3c: 43:54:92:87:4f:19:1e:2a:5e:a9:7e:91:76:f6:5b: 68:05:25:44:68:3a:ac:ba:c1:57:5b:0b:f2:97:d2: 38:5e:29:48:03:9b:ba:9a:2b:bc:b4:3d:80:02:05: 82:49:cb:6b:49:98:65:2c:4f:c5:09:98:c9:2b:45: a8:90:76:c0:21:be:4f:81:12:02:c3:8a:d8:e0:e6: b7:89:de:f2:60:2a:32:0c:6a:07:ea:38:35:e3:52: 19:1e:c4:8f:25:f9:6d:7f:93:96:55:df:be:ac:b7: 48:83:45:86:ab:27:2a:36:39:03:3c:55:6c:c3:95: 74:16:23:cd:18:66:e3:65:f3:10:a6:8e:d3:53:0f: c0:5c:3e:0c:58:6f:8a:91:b4:e2:77:48:c0:66:1c: b9:ad:e7:1d:a4:12:b3:44:3e:b4:08:5d:6e:6e:16: 26:50:e1:58:cf:29:c6:3a:06:b6:29:8e:ce:cd:07: f2:10:de:f0:32:be:85:c7:6e:3a:b8:81:e9:6f:a6: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B3:27:5C:EB:0A:24:3B:A2:E3:EA:3F:1E:E1:16:14:24:75:83:AC X509v3 Authority Key Identifier: keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:8f:c2:26:f5:ed:99:23:4a:4d:cf:8f:8c:b8:cc:a6:22:a0: 68:3f:52:05:48:f1:84:6c:f3:67:09:47:0d:3c:08:0a:2b:26: f0:82:d8:0a:01:08:66:04:77:e8:24:44:a6:c4:b2:ad:c4:bf: a5:2d:d6:40:6a:66:21:af:68:19:ed:c2:5d:40:4a:40:43:b9: 66:1b:30:d4:b6:0e:4d:f9:be:e4:eb:af:18:de:88:bd:c0:29: 43:00:d4:1b:cc:0f:66:51:af:a0:15:0d:69:13:a6:04:8d:21: de:17:2d:f2:8f:a1:56:01:cb:55:95:1b:37:0e:69:c0:29:ad: bb:a4:c7:79:c4:53:98:69:5d:7d:07:d6:d3:81:3f:19:1b:79: cf:38:ff:ed:49:a2:d7:ce:1e:d5:ab:f0:79:4b:3f:12:cb:8f: 97:7c:15:94:f5:9c:f8:92:55:80:50:d5:24:25:f3:bb:78:d7: bb:60:c4:a4:a1:a8:dc:4a:d8:18:01:da:b0:53:2c:5e:61:d7: 92:2f:46:9e:8c:70:81:2c:97:a5:96:48:18:7c:d2:b6:8e:25: 50:0a:6d:14:78:47:b9:39:53:76:c7:a4:7c:e7:36:94:c3:da: 28:8f:93:ca:67:6c:82:dc:a8:21:88:48:99:44:5d:f9:0c:fc: bf:b1:af:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlGJWbpMeLUoI9KVsnqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm NDI2MTEwHhcNMjUxMjA2MDEwMjE1WhcNMjUxMjA3MDEwMjE1WjAzMTEwLwYDVQQD EygxYmIzMjc1Y2ViMGEyNDNiYTJlM2VhM2YxZWUxMTYxNDI0NzU4M2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtAaN959Dryh8aHhJKsCCNkuY6zv Dy6wiBSgXTztYUO0FH3ZOyQPLWDS+oFGsa2K+cZaoG2e1aPsijxDVJKHTxkeKl6p fpF29ltoBSVEaDqsusFXWwvyl9I4XilIA5u6miu8tD2AAgWCSctrSZhlLE/FCZjJ K0WokHbAIb5PgRICw4rY4Oa3id7yYCoyDGoH6jg141IZHsSPJfltf5OWVd++rLdI g0WGqycqNjkDPFVsw5V0FiPNGGbjZfMQpo7TUw/AXD4MWG+KkbTid0jAZhy5recd pBKzRD60CF1ubhYmUOFYzynGOga2KY7OzQfyEN7wMr6Fx246uIHpb6b/TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuzJ1zrCiQ7ouPqPx7hFhQkdYOsMB8GA1UdIwQY MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct MjQyNDY2ODJiZjAwLzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFo/CJvXt mSNKTc+PjLjMpiKgaD9SBUjxhGzzZwlHDTwICism8ILYCgEIZgR36CREpsSyrcS/ pS3WQGpmIa9oGe3CXUBKQEO5Zhsw1LYOTfm+5OuvGN6IvcApQwDUG8wPZlGvoBUN aROmBI0h3hct8o+hVgHLVZUbNw5pwCmtu6THecRTmGldfQfW04E/GRt5zzj/7Umi 184e1avweUs/EsuPl3wVlPWc+JJVgFDVJCXzu3jXu2DEpKGo3ErYGAHasFMsXmHX ki9GnoxwgSyXpZZIGHzSto4lUAptFHhHuTlTdsekfOc2lMPaKI+TymdsgtyoIYhI mURd+Qz8v7GvRA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:08 2025 by rpki-client