This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft File: USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json) Hash identifier: XGik5g68XC/caT+VUXg69ww+/mwBs7ll/ryUdBXI48A= Subject key identifier: 73:09:E8:98:D5:F4:32:7C:68:F8:A6:32:13:7B:D6:E5:7D:1B:3C:3B Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6 Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6 Certificate serial: 019B2F9E7866E6676034D2053E6CC432DCFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft Manifest number: 1413 Signing time: Thu 18 Dec 2025 04:01:13 +0000 Manifest this update: Thu 18 Dec 2025 04:01:13 +0000 Manifest next update: Fri 19 Dec 2025 04:01:13 +0000 Files and hashes: 1: OA9cjZfM9pcs189DQL3OK7PNscQ.roa (hash: k0wLUi6w93vs71XE/cCMCBIvwa+yuzcb+Mk+I80oin8=) 2: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: 1hQYz+cbuZ2jpQUvv9hB/HQhzDk0MoQQWiD860V09e0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:78:66:e6:67:60:34:d2:05:3e:6c:c4:32:dc:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6 Validity Not Before: Dec 18 04:01:13 2025 GMT Not After : Dec 19 04:01:13 2025 GMT Subject: CN=7309e898d5f4327c68f8a632137bd6e57d1b3c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:50:7f:31:f3:dc:01:cc:0f:67:20:cd:6b:1a: d7:a4:4d:de:5b:ca:1e:3c:43:02:45:bc:dc:e1:17: 45:cb:c8:ff:0e:e7:bd:30:4f:82:f6:1a:a6:e4:e6: ce:c2:e5:f0:ec:15:61:d7:51:68:ce:e2:a5:9f:5f: 6b:9d:32:a6:18:11:69:ac:e5:7d:1b:95:d4:86:ac: 06:3a:82:ae:8a:cd:08:f3:a7:05:bd:24:12:c8:3c: 07:37:84:08:f8:db:99:78:bd:94:10:42:20:bc:42: 6c:b2:26:d6:56:12:24:ea:65:1c:6a:d1:7d:f7:d1: c4:2b:b6:af:2f:81:ac:4d:e5:7f:e0:fb:a2:84:04: 6d:83:8d:d5:6d:5d:7a:58:cb:b3:53:93:d3:ea:19: 8f:56:67:03:f1:10:9f:12:46:15:8f:31:42:bb:22: 7c:69:ce:4b:48:53:6f:5f:fd:7a:c1:4a:ae:28:36: 79:7f:c4:79:d9:b1:45:97:0c:01:23:df:92:0d:27: d7:ec:04:da:58:7c:54:d3:81:76:30:4f:5f:74:b3: 3b:a6:6d:0a:78:5a:de:44:cf:01:83:9e:2b:d2:41: c9:fd:7c:d0:51:b3:93:09:28:85:d2:1a:51:1b:87: e6:ac:97:70:4a:3b:1c:a6:0a:9c:74:ad:d7:bd:ce: b4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:09:E8:98:D5:F4:32:7C:68:F8:A6:32:13:7B:D6:E5:7D:1B:3C:3B X509v3 Authority Key Identifier: keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8c:63:43:93:fa:04:2f:dc:e0:0e:2e:32:d7:38:89:53:13: 9a:44:37:c5:66:04:83:82:68:70:37:74:8f:58:e6:78:34:e6: 8a:28:d0:bb:b6:a0:21:ac:df:8d:c3:0c:eb:9c:a9:14:bb:68: 1a:fc:e2:ac:70:b8:b6:61:f8:83:9b:f7:22:48:56:68:5e:21: 06:cc:a6:6e:94:17:f3:82:08:76:8d:f0:d0:6c:67:48:f7:0e: 07:87:10:bc:0d:c0:a2:6b:3f:45:f9:2b:f2:8c:02:ee:98:45: 12:34:c3:07:e6:f0:6f:83:60:3a:cb:8c:4b:71:6d:78:be:7e: f3:32:b5:40:a8:42:f9:e1:68:8e:12:ee:fe:1a:97:76:5d:9f: 03:25:90:b8:71:b6:6a:77:13:43:9e:7c:83:10:f8:80:28:28: 64:5c:70:e1:04:ff:cf:77:89:d3:7d:0c:89:bd:10:29:18:42: 86:91:19:79:2e:a0:77:30:3a:44:34:94:2f:8e:27:2d:33:36: fe:7b:82:06:ad:49:fb:be:65:6e:49:12:23:fe:6a:a7:a9:7a: 10:46:86:65:ba:23:ec:8d:73:b1:a8:68:44:e2:87:0b:be:c2: 00:04:f4:68:8d:d7:01:bc:68:90:9e:b1:f3:52:2d:2a:7e:a0: b9:9f:89:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnnhm5mdgNNIFPmzEMtz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjM5YTcwMmI5YjQ0MTE5ZmMwZWZiMDA1MjRlN2RkMTJk ZWE4ZjYwHhcNMjUxMjE4MDQwMTEzWhcNMjUxMjE5MDQwMTEzWjAzMTEwLwYDVQQD Eyg3MzA5ZTg5OGQ1ZjQzMjdjNjhmOGE2MzIxMzdiZDZlNTdkMWIzYzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFB/MfPcAcwPZyDNaxrXpE3eW8oe PEMCRbzc4RdFy8j/Due9ME+C9hqm5ObOwuXw7BVh11FozuKln19rnTKmGBFprOV9 G5XUhqwGOoKuis0I86cFvSQSyDwHN4QI+NuZeL2UEEIgvEJssibWVhIk6mUcatF9 99HEK7avL4GsTeV/4PuihARtg43VbV16WMuzU5PT6hmPVmcD8RCfEkYVjzFCuyJ8 ac5LSFNvX/16wUquKDZ5f8R52bFFlwwBI9+SDSfX7ATaWHxU04F2ME9fdLM7pm0K eFreRM8Bg54r0kHJ/XzQUbOTCSiF0hpRG4fmrJdwSjscpgqcdK3Xvc60KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMJ6JjV9DJ8aPimMhN71uV9Gzw7MB8GA1UdIwQY MBaAFFEjmnArm0QRn8DvsAUk590S3qj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUt ZDQ0ZmU2MGQxOTQ4LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUtZDQ0ZmU2MGQxOTQ4 LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYxjQ5P6 BC/c4A4uMtc4iVMTmkQ3xWYEg4JocDd0j1jmeDTmiijQu7agIazfjcMM65ypFLto GvzirHC4tmH4g5v3IkhWaF4hBsymbpQX84IIdo3w0GxnSPcOB4cQvA3Aoms/Rfkr 8owC7phFEjTDB+bwb4NgOsuMS3FteL5+8zK1QKhC+eFojhLu/hqXdl2fAyWQuHG2 ancTQ558gxD4gCgoZFxw4QT/z3eJ030Mib0QKRhChpEZeS6gdzA6RDSUL44nLTM2 /nuCBq1J+75lbkkSI/5qp6l6EEaGZboj7I1zsahoROKHC77CAAT0aI3XAbxokJ6x 81ItKn6guZ+J9g== -----END CERTIFICATE-----Generated at Thu Dec 18 07:50:04 2025 by rpki-client