This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json) Hash identifier: 4jvLsoxrBHgp6Zwcvb+NmCi7j/ftBC71RDEf0HWNeag= Subject key identifier: FF:41:65:DF:DB:8E:42:E4:B0:4D:37:C2:50:2F:61:36:27:F2:8F:E7 Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4 Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4 Certificate serial: 019C05C3FE6B3C78877AE8316D31BB72E1B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft Manifest number: 1808 Signing time: Wed 28 Jan 2026 18:00:56 +0000 Manifest this update: Wed 28 Jan 2026 18:00:56 +0000 Manifest next update: Thu 29 Jan 2026 18:00:56 +0000 Files and hashes: 1: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: kwocfVfYQxrM5AsMLD/GWNVStJNU8DElNsBy1GrFIFQ=) 2: mrMujXmupWSrwWqOYl2yw1qeUUY.roa (hash: oQq1R322TzKLmH6egDi8qOHSbSztZd52QdHS4JF9sE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:c3:fe:6b:3c:78:87:7a:e8:31:6d:31:bb:72:e1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4 Validity Not Before: Jan 28 18:00:56 2026 GMT Not After : Jan 29 18:00:56 2026 GMT Subject: CN=ff4165dfdb8e42e4b04d37c2502f613627f28fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:64:41:ba:1d:d3:50:33:66:b2:96:f8:3b:8f: 98:00:bb:b6:2f:79:51:ca:53:80:47:cb:67:2c:8b: 4d:38:19:30:e7:65:ff:02:bc:3e:75:96:47:65:2c: 50:a8:6d:c9:8f:b6:e0:ab:d0:0e:db:83:79:93:c6: 5f:8c:cd:8d:46:20:b9:0f:6a:79:ca:38:7e:ac:29: 9c:4f:35:a7:5b:27:e6:c1:5a:1b:b7:8c:ed:1f:e7: 27:27:db:9e:d0:3a:90:9f:0b:49:83:cf:51:24:ad: b9:56:31:cd:4c:7f:39:cb:41:50:e2:74:5f:aa:32: 9b:e0:fb:10:29:9f:d6:5e:3d:a2:bf:6f:cb:d8:51: 89:0f:75:7d:69:81:cd:14:b7:3f:fa:06:70:32:e0: a2:4e:2f:e5:2d:e0:25:c6:ba:f4:43:55:80:47:3a: e8:73:d7:b4:be:da:df:29:4b:a8:1b:a1:c4:51:29: 47:0a:12:b8:27:42:b2:cf:ff:0a:9a:14:1b:a9:c1: 4c:fe:d1:e1:eb:30:d0:fc:0e:b2:97:7f:85:1c:e8: b7:4a:aa:64:a2:44:e6:22:f3:7a:a6:e5:7a:c1:18: 66:9b:27:c6:4b:20:3e:7a:01:2b:14:44:13:e4:80: 23:69:6d:d1:01:8a:99:1a:4a:e7:4c:85:3a:85:2b: 56:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:41:65:DF:DB:8E:42:E4:B0:4D:37:C2:50:2F:61:36:27:F2:8F:E7 X509v3 Authority Key Identifier: keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c1:a5:f4:ce:fa:e7:e8:ad:28:b9:6a:f7:57:1a:91:85:58: 8a:02:9d:57:03:ca:15:1b:a9:a4:0e:c8:c4:d0:a7:49:50:95: e4:06:37:69:b3:6d:84:f7:8d:9c:f5:3e:30:4b:28:f9:8a:00: c7:f1:f7:0c:b4:0d:13:4d:b1:51:61:53:a1:ec:a4:e6:e1:60: 88:cb:17:34:c9:ac:e4:af:4b:2c:a6:db:53:45:a0:e8:48:0b: 11:a9:00:70:2d:a5:72:5a:6e:69:52:85:2c:29:d3:d3:cd:e8: e9:da:ee:bf:e1:fa:16:31:98:79:8a:7f:74:f9:80:2a:ab:e6: 94:3c:02:02:28:65:70:23:da:75:6e:6c:7c:e2:63:21:85:77: c3:61:b3:e9:8c:65:2c:77:08:a6:96:f5:8b:ee:9a:b6:f7:a9: af:7c:df:d8:98:20:03:07:78:96:f4:0e:ca:14:09:2d:65:0c: 98:55:c9:c3:97:01:15:ea:49:4e:2d:d5:59:33:bc:92:70:2d: ac:7a:83:05:4f:7a:13:a4:00:22:63:31:87:53:4e:3a:6a:5f: 15:a3:ae:db:fc:b5:6a:2d:6e:1a:7a:63:ce:d5:d0:52:be:c4: 5c:5e:cf:10:05:15:7b:37:53:6f:b2:0a:f6:e3:83:b4:5f:30: ae:e1:7e:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFw/5rPHiHeugxbTG7cuGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTgxZmI1Y2YwZmIzMmM0NTc1Zjg0MTNhY2JkNDFhYTg0 YjgyZjQwHhcNMjYwMTI4MTgwMDU2WhcNMjYwMTI5MTgwMDU2WjAzMTEwLwYDVQQD EyhmZjQxNjVkZmRiOGU0MmU0YjA0ZDM3YzI1MDJmNjEzNjI3ZjI4ZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmRBuh3TUDNmspb4O4+YALu2L3lR ylOAR8tnLItNOBkw52X/Arw+dZZHZSxQqG3Jj7bgq9AO24N5k8ZfjM2NRiC5D2p5 yjh+rCmcTzWnWyfmwVobt4ztH+cnJ9ue0DqQnwtJg89RJK25VjHNTH85y0FQ4nRf qjKb4PsQKZ/WXj2iv2/L2FGJD3V9aYHNFLc/+gZwMuCiTi/lLeAlxrr0Q1WARzro c9e0vtrfKUuoG6HEUSlHChK4J0Kyz/8KmhQbqcFM/tHh6zDQ/A6yl3+FHOi3Sqpk okTmIvN6puV6wRhmmyfGSyA+egErFEQT5IAjaW3RAYqZGkrnTIU6hStW5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9BZd/bjkLksE03wlAvYTYn8o/nMB8GA1UdIwQY MBaAFHLoH7XPD7MsRXX4QTrL1BqoS4L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQt Y2RhNmUxOWZmYjg4LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQtY2RhNmUxOWZmYjg4 LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMGl9M76 5+itKLlq91cakYVYigKdVwPKFRuppA7IxNCnSVCV5AY3abNthPeNnPU+MEso+YoA x/H3DLQNE02xUWFToeyk5uFgiMsXNMms5K9LLKbbU0Wg6EgLEakAcC2lclpuaVKF LCnT083o6druv+H6FjGYeYp/dPmAKqvmlDwCAihlcCPadW5sfOJjIYV3w2Gz6Yxl LHcIppb1i+6atvepr3zf2JggAwd4lvQOyhQJLWUMmFXJw5cBFepJTi3VWTO8knAt rHqDBU96E6QAImMxh1NOOmpfFaOu2/y1ai1uGnpjztXQUr7EXF7PEAUVezdTb7IK 9uODtF8wruF+8Q== -----END CERTIFICATE-----Generated at Thu Jan 29 01:20:19 2026 by rpki-client