This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json) Hash identifier: +LItIiGhjU9EyRD3KWh5PPG/j5N2kEx22nXPyhOiuzQ= Subject key identifier: 24:A2:2E:FB:59:35:AD:55:4C:FE:EA:CD:1E:09:3C:F8:B5:41:0F:80 Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed Certificate serial: 019BFC8A7C2FF488FB3EF03634C2616AB39E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft Manifest number: 132E Signing time: Mon 26 Jan 2026 23:01:32 +0000 Manifest this update: Mon 26 Jan 2026 23:01:32 +0000 Manifest next update: Tue 27 Jan 2026 23:01:32 +0000 Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=) 2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: JvxJ+SwXmLgCarhIeB/KFeZsZcNiu+gRRBW6rlw+TXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:7c:2f:f4:88:fb:3e:f0:36:34:c2:61:6a:b3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed Validity Not Before: Jan 26 23:01:32 2026 GMT Not After : Jan 27 23:01:32 2026 GMT Subject: CN=24a22efb5935ad554cfeeacd1e093cf8b5410f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:7d:1c:3c:69:23:ef:a6:6b:2e:7f:12:90: 3d:d3:30:a9:98:bd:98:5e:ef:6f:9e:9d:3a:6b:02: 00:03:72:4b:8c:5a:db:3f:26:80:aa:84:1f:53:0f: 55:43:1e:cd:f0:2a:9b:69:ef:bf:d2:ee:62:d1:47: 69:3e:91:c7:79:8f:be:34:ba:74:6b:ee:55:11:04: 26:b8:4b:be:8b:06:13:78:37:52:cb:2d:89:16:49: 97:59:46:59:bf:9e:de:61:4d:3c:7a:5b:84:3e:bb: d5:08:19:50:76:88:69:91:95:25:f4:fc:fd:d7:e4: 2e:df:4e:68:d0:e5:7f:3e:f0:f9:b9:50:51:1d:80: 28:6f:8a:43:15:72:a4:4a:ca:eb:45:32:84:dc:fe: c3:a1:6a:6e:e0:f2:e8:5e:1f:92:54:41:51:67:85: c5:c0:42:86:de:02:69:f4:26:4b:78:77:dd:7f:00: dd:3a:be:c1:9d:29:7d:b9:4d:d7:33:55:c7:b7:92: 31:6c:45:b6:6b:ea:19:1f:c6:a6:d8:ab:1f:bf:aa: 05:d1:01:fd:3c:67:31:97:d6:58:b5:97:55:0c:ac: 8a:2a:4f:20:15:16:5f:bd:77:a3:84:50:22:cf:e4: e9:96:34:08:3f:6b:cf:05:e0:03:81:8d:af:7b:34: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A2:2E:FB:59:35:AD:55:4C:FE:EA:CD:1E:09:3C:F8:B5:41:0F:80 X509v3 Authority Key Identifier: keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5b:15:08:63:b3:86:3b:5f:23:f9:a1:cd:26:cb:dd:03:82: 55:7c:b9:74:8f:ef:29:e2:21:42:cb:7e:66:65:eb:77:90:39: 92:1a:28:ee:70:55:83:a7:d9:5d:26:07:ef:05:de:93:a7:59: af:73:51:a9:57:d4:9f:8b:ad:8a:ab:71:22:79:8b:8b:38:df: 16:d4:5f:72:da:4e:88:7a:0d:8f:5b:90:a7:3d:a9:7e:6c:da: cf:9a:a9:8f:88:92:21:df:b4:e1:7f:d1:5e:64:69:17:e8:78: 09:86:3d:18:53:ac:92:a1:d7:ad:03:35:69:94:c3:82:95:2c: e0:42:4a:1d:f0:de:df:31:7e:9f:68:ba:7c:fa:46:11:4e:0b: 2d:df:c7:ce:c5:b2:85:e3:94:0e:18:46:a3:99:bd:27:1a:51: 11:43:80:2c:a7:cb:05:33:0a:17:57:4a:84:e8:22:e5:5b:19: db:c4:d2:8f:9d:c4:58:ff:2d:94:0f:ac:5d:dc:f6:74:5c:ef: ef:48:86:74:35:42:ca:3a:f8:18:bf:b9:aa:07:26:3f:7b:60: 42:27:bd:97:c9:12:a2:25:98:e2:2c:86:b1:e3:5a:b4:04:aa: 8e:1b:d0:82:86:23:83:15:11:49:65:dd:a5:06:b5:c5:2d:2b: 02:96:58:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8inwv9Ij7PvA2NMJharOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2 ZjcxZWQwHhcNMjYwMTI2MjMwMTMyWhcNMjYwMTI3MjMwMTMyWjAzMTEwLwYDVQQD EygyNGEyMmVmYjU5MzVhZDU1NGNmZWVhY2QxZTA5M2NmOGI1NDEwZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGN9HDxpI++may5/EpA90zCpmL2Y Xu9vnp06awIAA3JLjFrbPyaAqoQfUw9VQx7N8Cqbae+/0u5i0UdpPpHHeY++NLp0 a+5VEQQmuEu+iwYTeDdSyy2JFkmXWUZZv57eYU08eluEPrvVCBlQdohpkZUl9Pz9 1+Qu305o0OV/PvD5uVBRHYAob4pDFXKkSsrrRTKE3P7DoWpu4PLoXh+SVEFRZ4XF wEKG3gJp9CZLeHfdfwDdOr7BnSl9uU3XM1XHt5IxbEW2a+oZH8am2Ksfv6oF0QH9 PGcxl9ZYtZdVDKyKKk8gFRZfvXejhFAiz+TpljQIP2vPBeADgY2vezSmBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSiLvtZNa1VTP7qzR4JPPi1QQ+AMB8GA1UdIwQY MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1sVCGOz hjtfI/mhzSbL3QOCVXy5dI/vKeIhQst+ZmXrd5A5khoo7nBVg6fZXSYH7wXek6dZ r3NRqVfUn4utiqtxInmLizjfFtRfctpOiHoNj1uQpz2pfmzaz5qpj4iSId+04X/R XmRpF+h4CYY9GFOskqHXrQM1aZTDgpUs4EJKHfDe3zF+n2i6fPpGEU4LLd/HzsWy heOUDhhGo5m9JxpREUOALKfLBTMKF1dKhOgi5VsZ28TSj53EWP8tlA+sXdz2dFzv 70iGdDVCyjr4GL+5qgcmP3tgQie9l8kSoiWY4iyGseNatASqjhvQgoYjgxURSWXd pQa1xS0rApZYNA== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:13 2026 by rpki-client