This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft File: USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json) Hash identifier: S2BnThKp+CNumPpseqVRDF2EG30JGwIFujK5ATeD9t4= Subject key identifier: AF:A8:AA:C0:DE:61:B1:8A:7D:40:6C:AB:97:56:05:61:D7:5B:42:AF Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6 Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6 Certificate serial: 019AF3C0433F98E91CF5A0DAC315418A682B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft Manifest number: 13F4 Signing time: Sat 06 Dec 2025 13:00:54 +0000 Manifest this update: Sat 06 Dec 2025 13:00:54 +0000 Manifest next update: Sun 07 Dec 2025 13:00:54 +0000 Files and hashes: 1: OA9cjZfM9pcs189DQL3OK7PNscQ.roa (hash: k0wLUi6w93vs71XE/cCMCBIvwa+yuzcb+Mk+I80oin8=) 2: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: aXoNPNjaG95qfOGQcIMXTP6vpViML/2qpyegGRdOXQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:43:3f:98:e9:1c:f5:a0:da:c3:15:41:8a:68:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6 Validity Not Before: Dec 6 13:00:54 2025 GMT Not After : Dec 7 13:00:54 2025 GMT Subject: CN=afa8aac0de61b18a7d406cab97560561d75b42af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:2e:34:b9:28:f5:ed:d2:d7:ef:bb:48:39: e8:f3:aa:66:1c:7e:8a:9e:1a:f1:66:41:70:7b:40: 7f:0e:67:80:e2:77:e3:6a:4b:91:91:8c:31:15:df: 71:83:77:6f:04:6e:e7:8e:33:03:35:27:e8:de:aa: 41:de:7c:e3:af:6b:dd:49:72:ee:68:3f:f6:08:ad: 5a:a8:a9:0e:ff:a4:02:b0:dd:ee:32:f5:14:8c:f6: b9:89:c5:b0:c7:03:6a:3c:21:c2:53:23:7c:28:2e: b2:39:33:9d:fd:da:95:8f:df:b0:dc:b8:55:5b:2e: 2b:81:d0:76:44:ae:20:02:f3:ac:94:c9:47:e2:d6: fb:e1:8d:9d:ec:a9:ed:55:6d:95:c3:7f:02:24:f7: 18:f4:28:4e:39:ac:99:32:e8:46:a9:98:e8:88:9d: a6:6c:d5:51:52:db:7c:50:e5:a9:95:18:e7:9c:fe: 2f:8f:73:fb:85:c9:1c:a5:68:2c:60:f8:b0:3e:d7: 0a:90:1c:47:1c:8a:52:7b:df:8d:80:ac:1e:8a:1d: 33:58:5c:8f:13:36:b5:8b:ae:e2:c6:34:f1:17:00: 6e:f7:c0:9d:9a:e0:ba:32:51:84:08:7f:89:b9:12: 39:98:b5:38:90:22:47:4e:7d:7d:47:9f:68:de:6f: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A8:AA:C0:DE:61:B1:8A:7D:40:6C:AB:97:56:05:61:D7:5B:42:AF X509v3 Authority Key Identifier: keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:9b:a1:f5:50:4e:c1:b3:4d:9d:8c:08:b6:b4:e3:08:86:11: 4b:a5:1a:f6:a8:58:4f:33:63:87:74:3d:89:43:c5:9e:93:3a: c9:55:cc:09:9a:38:24:8e:ca:e5:3a:eb:af:60:2a:5c:5a:7e: 6a:21:38:0c:9f:1c:24:5a:7d:43:eb:ca:84:36:ee:3c:0b:47: 02:15:a1:ac:0e:f7:51:72:e4:6b:d1:68:64:ac:8d:5d:9d:c0: 1d:f6:51:b6:c5:b2:eb:fd:08:bb:31:c5:0e:94:9f:da:61:64: 63:d4:b3:2a:02:5b:c2:bd:d5:19:87:6f:21:71:81:b6:f6:e1: 27:ad:75:79:92:4d:8f:75:5e:35:81:8e:26:a2:78:5c:a3:cc: b9:c1:73:e8:e0:ba:cf:02:60:dd:0d:ba:91:67:cb:b4:43:f8: d6:58:a8:77:bb:26:aa:fb:14:9e:40:aa:c2:da:3a:02:83:21: bc:c0:fb:c9:76:bf:b3:4c:52:be:f4:62:27:20:13:9b:ed:84: 1c:7d:f0:e2:a3:9b:90:22:d0:b8:8e:35:b7:46:24:1a:7d:2c: a2:aa:94:75:bb:9d:ce:04:cc:b7:85:ad:d2:75:ba:77:23:d7: d3:e5:d0:67:7a:38:92:c1:af:39:af:c8:1f:2a:99:93:c2:6e: 5e:e4:86:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEM/mOkc9aDawxVBimgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjM5YTcwMmI5YjQ0MTE5ZmMwZWZiMDA1MjRlN2RkMTJk ZWE4ZjYwHhcNMjUxMjA2MTMwMDU0WhcNMjUxMjA3MTMwMDU0WjAzMTEwLwYDVQQD EyhhZmE4YWFjMGRlNjFiMThhN2Q0MDZjYWI5NzU2MDU2MWQ3NWI0MmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7YuNLko9e3S1++7SDno86pmHH6K nhrxZkFwe0B/DmeA4nfjakuRkYwxFd9xg3dvBG7njjMDNSfo3qpB3nzjr2vdSXLu aD/2CK1aqKkO/6QCsN3uMvUUjPa5icWwxwNqPCHCUyN8KC6yOTOd/dqVj9+w3LhV Wy4rgdB2RK4gAvOslMlH4tb74Y2d7KntVW2Vw38CJPcY9ChOOayZMuhGqZjoiJ2m bNVRUtt8UOWplRjnnP4vj3P7hckcpWgsYPiwPtcKkBxHHIpSe9+NgKweih0zWFyP Eza1i67ixjTxFwBu98CdmuC6MlGECH+JuRI5mLU4kCJHTn19R59o3m/PZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+oqsDeYbGKfUBsq5dWBWHXW0KvMB8GA1UdIwQY MBaAFFEjmnArm0QRn8DvsAUk590S3qj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUt ZDQ0ZmU2MGQxOTQ4LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUtZDQ0ZmU2MGQxOTQ4 LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5uh9VBO wbNNnYwItrTjCIYRS6Ua9qhYTzNjh3Q9iUPFnpM6yVXMCZo4JI7K5Trrr2AqXFp+ aiE4DJ8cJFp9Q+vKhDbuPAtHAhWhrA73UXLka9FoZKyNXZ3AHfZRtsWy6/0IuzHF DpSf2mFkY9SzKgJbwr3VGYdvIXGBtvbhJ611eZJNj3VeNYGOJqJ4XKPMucFz6OC6 zwJg3Q26kWfLtEP41liod7smqvsUnkCqwto6AoMhvMD7yXa/s0xSvvRiJyATm+2E HH3w4qObkCLQuI41t0YkGn0soqqUdbudzgTMt4Wt0nW6dyPX0+XQZ3o4ksGvOa/I HyqZk8JuXuSGlw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:25 2025 by rpki-client