This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json) Hash identifier: fvOXxq1wyvPcaiubHIJxaUp0bdkG5Ea6tkXxRO7Rk3Q= Subject key identifier: 5D:EC:05:19:1C:5B:4A:2C:5B:46:CF:59:E8:6A:F6:C1:3B:68:8B:12 Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06 Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06 Certificate serial: 019AF276A9D77F271BF63B1A23550113B51D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft Manifest number: 0DA1 Signing time: Sat 06 Dec 2025 07:00:54 +0000 Manifest this update: Sat 06 Dec 2025 07:00:54 +0000 Manifest next update: Sun 07 Dec 2025 07:00:54 +0000 Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: BgF5motDoKdgt5uzhZ/snoH4KeMPQvuRurGgpYYO7Dc=) 2: U0OBxV0NmzWdhOROB_4XE_nOuxo.roa (hash: R0oHniHcgRLjr+xP295YEa+yjJ7+h87sW92ahFuO7CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a9:d7:7f:27:1b:f6:3b:1a:23:55:01:13:b5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06 Validity Not Before: Dec 6 07:00:54 2025 GMT Not After : Dec 7 07:00:54 2025 GMT Subject: CN=5dec05191c5b4a2c5b46cf59e86af6c13b688b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:f4:38:d2:4c:06:30:ec:41:41:37:4a:f2: d0:b7:84:09:67:74:25:d1:be:7e:c9:f5:21:3b:2f: 9c:cc:d8:5f:67:7f:9e:fc:89:33:00:e8:29:09:4d: f3:6f:6e:57:9a:30:9a:04:33:34:cb:f3:b8:34:6b: 7b:b4:82:3b:39:99:94:fa:bd:d6:00:ab:30:32:10: f4:e1:58:fc:18:fc:51:93:a2:d3:27:00:50:0e:92: e0:c8:db:4b:2a:36:e6:0f:7c:1f:1e:49:db:60:26: d2:e6:22:f8:8a:7b:42:ad:1d:ef:ee:02:fd:d8:df: d5:03:b7:ea:30:e9:a6:bf:a3:33:0f:f4:1c:cf:da: 30:e9:80:9d:b9:6f:2a:b5:81:48:36:14:e8:f4:26: 8a:23:4b:ff:4a:ed:49:61:9c:7d:7e:e0:22:83:6c: f4:f3:a8:12:79:62:d6:9b:d0:5c:78:85:5f:c1:56: 49:72:60:c0:3c:da:46:0e:0a:b5:64:c3:5f:56:b5: 49:c8:7f:1c:4a:49:5c:13:b8:03:9b:a5:de:7c:c8: 16:16:3f:bc:e0:85:e3:df:ae:6c:08:20:db:25:fd: e2:27:55:c8:05:84:e1:df:d6:9e:76:ce:ad:d3:24: 36:31:6f:9d:55:80:06:78:41:5e:40:2f:57:73:1a: 87:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EC:05:19:1C:5B:4A:2C:5B:46:CF:59:E8:6A:F6:C1:3B:68:8B:12 X509v3 Authority Key Identifier: keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:84:7b:7b:12:75:bf:e0:a5:dc:78:01:5d:72:01:7f:b7:0c: 10:ee:cd:80:e6:77:14:a1:11:0e:18:c7:ee:4b:ab:ed:fb:08: 37:23:48:d5:81:ec:14:41:9a:42:b7:9a:59:d8:9d:81:33:56: 06:5f:8c:e8:81:a9:7a:c4:d7:be:24:8c:56:ae:38:5f:05:eb: 21:c7:26:9f:94:ca:15:34:77:af:a8:99:d9:1b:fa:ca:03:f9: df:8a:9e:61:ae:78:8a:14:58:94:c5:60:d1:18:20:40:2c:9b: 4c:bc:7a:dd:d4:6d:70:3c:fe:3e:3f:bc:3d:8d:d8:30:0d:84: d1:95:53:b7:17:f3:d4:14:59:cd:c3:34:53:9c:43:84:00:cc: 2f:ba:b9:be:20:e2:59:53:e6:a3:df:d0:1f:09:35:6a:5d:a9: d0:af:0f:cc:cf:5f:d9:fc:43:d5:06:23:9a:90:cc:91:8d:cf: 16:f2:63:a9:0b:4f:ad:ea:6c:e9:1d:f6:1c:11:b6:60:8e:75: 78:5a:c3:ea:8f:fe:c3:44:2b:f8:e3:aa:0a:a9:2c:8c:c3:65: 46:57:29:18:bc:65:4c:ec:ee:6a:93:00:15:a0:70:b4:6e:fb: bd:55:a2:8a:b8:34:c4:c8:fb:c9:3e:69:b2:98:93:7b:01:5f: 80:62:d9:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqnXfycb9jsaI1UBE7UdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NDRhYWFjN2YyZWJiMjk4MWMyNDc2M2ViM2Q2MDQ1ZWZi ZDZmMDYwHhcNMjUxMjA2MDcwMDU0WhcNMjUxMjA3MDcwMDU0WjAzMTEwLwYDVQQD Eyg1ZGVjMDUxOTFjNWI0YTJjNWI0NmNmNTllODZhZjZjMTNiNjg4YjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRb0ONJMBjDsQUE3SvLQt4QJZ3Ql 0b5+yfUhOy+czNhfZ3+e/IkzAOgpCU3zb25XmjCaBDM0y/O4NGt7tII7OZmU+r3W AKswMhD04Vj8GPxRk6LTJwBQDpLgyNtLKjbmD3wfHknbYCbS5iL4intCrR3v7gL9 2N/VA7fqMOmmv6MzD/Qcz9ow6YCduW8qtYFINhTo9CaKI0v/Su1JYZx9fuAig2z0 86gSeWLWm9BceIVfwVZJcmDAPNpGDgq1ZMNfVrVJyH8cSklcE7gDm6XefMgWFj+8 4IXj365sCCDbJf3iJ1XIBYTh39aeds6t0yQ2MW+dVYAGeEFeQC9XcxqHKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3sBRkcW0osW0bPWehq9sE7aIsSMB8GA1UdIwQY MBaAFAlEqqx/LrspgcJHY+s9YEXvvW8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUt NjZjZDAxOTYxZTQ2LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUtNjZjZDAxOTYxZTQ2 LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4R7exJ1 v+Cl3HgBXXIBf7cMEO7NgOZ3FKERDhjH7kur7fsINyNI1YHsFEGaQreaWdidgTNW Bl+M6IGpesTXviSMVq44XwXrIccmn5TKFTR3r6iZ2Rv6ygP534qeYa54ihRYlMVg 0RggQCybTLx63dRtcDz+Pj+8PY3YMA2E0ZVTtxfz1BRZzcM0U5xDhADML7q5viDi WVPmo9/QHwk1al2p0K8PzM9f2fxD1QYjmpDMkY3PFvJjqQtPreps6R32HBG2YI51 eFrD6o/+w0Qr+OOqCqksjMNlRlcpGLxlTOzuapMAFaBwtG77vVWiirg0xMj7yT5p spiTewFfgGLZaw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:44:27 2025 by rpki-client