This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json) Hash identifier: 3xvCNdTdPTW9NzpPlxBebgNko/b4q+WxAJhqwSVAoOo= Subject key identifier: 63:72:85:01:71:A1:CA:45:01:E4:AF:E4:5A:E6:15:4D:78:5D:25:03 Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78 Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78 Certificate serial: 019C43908461FD64360C9E3F34D0CF2CDCF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 18:01:10 +0000 Manifest this update: Mon 09 Feb 2026 18:01:10 +0000 Manifest next update: Tue 10 Feb 2026 18:01:10 +0000 Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: 1Kkf6yKSBLZGn3iSW92zlgiPBuhY4IwX17BOEsE/bPo=) 2: ouslthZTAKifIxprW-deYjg0IV4.roa (hash: UcvHA4mOVxzyujtpXJcQefQpw5wOyvUPfvVySqUiIdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:84:61:fd:64:36:0c:9e:3f:34:d0:cf:2c:dc:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78 Validity Not Before: Feb 9 18:01:10 2026 GMT Not After : Feb 10 18:01:10 2026 GMT Subject: CN=6372850171a1ca4501e4afe45ae6154d785d2503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:0f:e9:73:f4:c8:94:e4:f7:74:a8:3e:65: 60:0d:db:86:67:60:29:9b:63:d7:85:d7:6c:99:8f: 8f:62:30:43:e0:1c:59:a0:30:eb:17:a1:dd:61:c9: 25:ba:72:ba:53:11:ff:7f:e3:7b:eb:ff:a3:71:db: fa:44:0e:2b:7b:b8:28:1b:76:78:ac:35:48:ea:c3: 29:81:06:63:23:c5:a6:26:12:76:e5:d2:94:73:99: 99:24:60:e0:be:3e:e5:08:8c:70:3e:49:be:65:66: 88:57:4b:a3:f3:bb:67:e4:b9:57:74:bb:40:b1:6e: 01:7d:2e:1e:20:28:8c:b7:d4:53:10:40:17:66:2a: 50:65:51:bb:81:50:42:ce:3b:b7:26:bb:58:e6:e1: cf:90:89:7d:0e:d5:09:c9:48:ba:31:1d:86:34:b2: f7:51:a3:f5:93:3e:5f:b0:2b:4e:07:a4:06:ec:23: 98:3b:df:a3:12:e5:3f:79:59:32:e3:83:1d:00:8c: f4:4c:2b:01:ff:b3:e8:16:86:ab:d1:03:c3:cc:bc: 25:71:ae:70:dc:be:84:45:2e:0a:14:3d:6a:fc:88: 62:88:00:b6:07:66:d4:af:60:da:54:81:93:a0:f9: 60:fa:df:d6:e1:07:0f:e3:0e:c7:35:45:5b:a9:9d: db:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:72:85:01:71:A1:CA:45:01:E4:AF:E4:5A:E6:15:4D:78:5D:25:03 X509v3 Authority Key Identifier: keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:03:eb:6b:d6:66:8c:70:be:6b:9b:54:f2:67:a1:2c:64:50: 2b:de:f2:98:bc:db:99:77:b9:c2:df:fe:fd:3a:0a:f5:b4:39: 44:0a:fc:07:59:43:29:46:de:b2:ee:b1:04:f4:ff:e5:9c:1f: cb:3b:0a:2e:b4:9b:07:5f:fc:20:b4:10:0d:c5:c9:7c:41:3a: 5d:93:14:0a:e7:74:82:81:3f:cb:e5:20:38:90:2e:62:b0:98: 76:b7:15:4a:46:27:2b:60:53:cf:2b:ba:a2:c9:0a:ec:b8:64: 0c:1f:00:12:b7:30:8b:fa:6d:d1:8f:cf:33:ed:13:90:92:30: 36:53:87:d4:f1:18:f3:52:bf:d9:fb:61:69:a7:29:36:77:74: 44:b4:60:d7:ea:5d:98:e2:2f:ac:1a:e0:45:b6:33:49:c0:11: b8:16:03:7f:3e:08:46:9e:e7:a9:fa:0a:2f:c1:1b:57:31:25: 65:b2:e3:ee:40:a6:7c:bb:64:ab:a7:71:e7:20:61:86:bb:f6: ca:57:97:45:a9:a4:ea:b5:6f:ba:02:64:e9:8a:83:29:52:43: 63:53:61:4b:7c:4f:71:c1:fd:29:ed:d8:1e:89:2f:7c:f1:cb: 2a:98:41:a2:43:22:3c:0e:89:de:3d:92:d6:c5:21:f1:5a:26: 7f:90:cd:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkIRh/WQ2DJ4/NNDPLNzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NGZhNTY3YzA3YTVhMmUxZjJjOGNiMjYxMWYxNzM2OTc4 NzFmNzgwHhcNMjYwMjA5MTgwMTEwWhcNMjYwMjEwMTgwMTEwWjAzMTEwLwYDVQQD Eyg2MzcyODUwMTcxYTFjYTQ1MDFlNGFmZTQ1YWU2MTU0ZDc4NWQyNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscUP6XP0yJTk93SoPmVgDduGZ2Ap m2PXhddsmY+PYjBD4BxZoDDrF6HdYcklunK6UxH/f+N76/+jcdv6RA4re7goG3Z4 rDVI6sMpgQZjI8WmJhJ25dKUc5mZJGDgvj7lCIxwPkm+ZWaIV0uj87tn5LlXdLtA sW4BfS4eICiMt9RTEEAXZipQZVG7gVBCzju3JrtY5uHPkIl9DtUJyUi6MR2GNLL3 UaP1kz5fsCtOB6QG7COYO9+jEuU/eVky44MdAIz0TCsB/7PoFoar0QPDzLwlca5w 3L6ERS4KFD1q/IhiiAC2B2bUr2DaVIGToPlg+t/W4QcP4w7HNUVbqZ3btwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNyhQFxocpFAeSv5FrmFU14XSUDMB8GA1UdIwQY MBaAFAlPpWfAelouHyyMsmEfFzaXhx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGIt YWVhMjUyZGM2M2IzLzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGItYWVhMjUyZGM2M2Iz LzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwPra9Zm jHC+a5tU8mehLGRQK97ymLzbmXe5wt/+/ToK9bQ5RAr8B1lDKUbesu6xBPT/5Zwf yzsKLrSbB1/8ILQQDcXJfEE6XZMUCud0goE/y+UgOJAuYrCYdrcVSkYnK2BTzyu6 oskK7LhkDB8AErcwi/pt0Y/PM+0TkJIwNlOH1PEY81K/2fthaacpNnd0RLRg1+pd mOIvrBrgRbYzScARuBYDfz4IRp7nqfoKL8EbVzElZbLj7kCmfLtkq6dx5yBhhrv2 yleXRamk6rVvugJk6YqDKVJDY1NhS3xPccH9Ke3YHokvfPHLKphBokMiPA6J3j2S 1sUh8Vomf5DNHQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:56 2026 by rpki-client