This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json) Hash identifier: m8SisK6sEoUNrXj+R8OxewX3yHUyfu78Naw1pjN+WW0= Subject key identifier: D4:E4:4D:E1:D8:0F:0E:E6:4A:B7:C2:FE:33:BE:24:A5:6F:A3:23:2B Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d Certificate serial: 019C43C708F5A13C387AF5218A65B3E628E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 19:00:43 +0000 Manifest this update: Mon 09 Feb 2026 19:00:43 +0000 Manifest next update: Tue 10 Feb 2026 19:00:43 +0000 Files and hashes: 1: VGyi3_XM7fe5glWnkMXs_96XfgY.roa (hash: 5b1Wuvrw9UByaw3AW1uJ5o3W+F06ZtJx4zNpuEiuZ3Q=) 2: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: 74MiusCHJTT7eygmtfl8UHoxIeoJTNJlrcpi7RpIOew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:08:f5:a1:3c:38:7a:f5:21:8a:65:b3:e6:28:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d Validity Not Before: Feb 9 19:00:43 2026 GMT Not After : Feb 10 19:00:43 2026 GMT Subject: CN=d4e44de1d80f0ee64ab7c2fe33be24a56fa3232b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9b:90:ba:85:93:52:9e:ab:a0:e7:c7:35:e5: 87:f0:ea:24:85:16:65:fa:1c:98:e9:37:4e:b8:8a: 8a:34:89:6d:4d:14:60:cb:7e:37:60:27:68:27:11: 4e:cc:53:27:83:ea:6b:58:07:42:87:3c:00:18:47: 5f:86:73:92:eb:c1:a2:32:e8:59:38:59:8a:c4:6e: 85:b9:dd:f6:58:0b:10:47:02:ec:d9:81:db:20:6b: 70:b7:30:62:93:4e:31:88:5b:7e:37:68:8e:17:31: fe:bd:8a:7a:16:a6:8e:17:0e:c2:ed:fd:4c:2e:b5: 6c:0c:c3:63:e0:0a:f7:63:18:76:14:83:0f:58:ca: 4b:85:e6:3b:e9:91:87:2d:57:8f:12:1a:93:31:8d: 0e:3c:1a:17:9f:e0:66:64:dd:49:87:50:04:cf:51: a1:0f:99:39:c3:c4:40:f9:4a:81:fc:38:7c:33:c3: 00:85:c9:b9:ed:e8:b9:86:85:42:68:80:29:04:3c: 6b:74:16:af:d7:b5:44:b5:ca:43:80:40:20:34:34: db:58:7a:f3:55:0d:49:05:ca:fc:10:ff:98:2b:47: 92:ae:2b:66:4c:f9:c5:a4:e9:39:23:91:d1:81:c9: 44:cd:b5:8b:21:c0:d9:ad:19:d0:e2:91:13:60:10: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E4:4D:E1:D8:0F:0E:E6:4A:B7:C2:FE:33:BE:24:A5:6F:A3:23:2B X509v3 Authority Key Identifier: keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:68:ce:e4:d3:5a:5e:40:1b:38:8f:dd:6b:84:b8:87:ed:dc: 36:66:46:e4:6b:c9:c2:d4:d1:cb:bb:27:ae:f9:97:51:64:12: bf:2a:42:23:f1:87:95:3e:c6:2a:7c:7f:ea:66:ca:a8:dc:99: 72:29:77:95:95:3a:2b:d6:e8:db:88:bc:54:76:5a:7c:3f:40: e1:9f:1f:fc:e6:be:3a:ce:e6:b7:e8:c5:df:a5:d5:5b:22:c0: 0e:2f:9d:6c:86:d7:79:9d:c3:f6:8b:5c:e8:c7:6e:29:e7:cf: e5:0c:9e:b9:66:c7:82:20:d2:26:b9:a5:45:ba:d1:e9:23:7a: aa:0c:ae:e2:7d:79:d5:5b:6a:24:ce:3d:f5:ed:91:70:d2:a8: 41:4e:43:65:cd:d0:75:2a:47:a8:bd:d6:91:4e:ea:06:bd:ce: f3:9b:90:03:84:c4:98:79:df:f2:5b:95:80:cc:b0:40:e8:74: 89:4a:4c:0c:71:d0:89:18:b1:b3:50:9a:56:a9:b0:bb:04:24: 3a:2b:ba:11:8e:92:c1:f7:24:dd:9f:86:bc:0a:c7:57:ff:28: cc:a0:4b:4d:e1:a6:98:92:21:75:09:1b:4d:5f:91:d5:47:48: 9d:50:82:5f:23:2d:c4:f5:e8:f7:ee:a0:7b:a4:19:1c:ac:90: 73:98:4b:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxwj1oTw4evUhimWz5ijoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTEyYTM4NzZmZjdiZDAwZDlkOWViYjk3MmFiMWU2MjFl YTFlOGQwHhcNMjYwMjA5MTkwMDQzWhcNMjYwMjEwMTkwMDQzWjAzMTEwLwYDVQQD EyhkNGU0NGRlMWQ4MGYwZWU2NGFiN2MyZmUzM2JlMjRhNTZmYTMyMzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0puQuoWTUp6roOfHNeWH8OokhRZl +hyY6TdOuIqKNIltTRRgy343YCdoJxFOzFMng+prWAdChzwAGEdfhnOS68GiMuhZ OFmKxG6Fud32WAsQRwLs2YHbIGtwtzBik04xiFt+N2iOFzH+vYp6FqaOFw7C7f1M LrVsDMNj4Ar3Yxh2FIMPWMpLheY76ZGHLVePEhqTMY0OPBoXn+BmZN1Jh1AEz1Gh D5k5w8RA+UqB/Dh8M8MAhcm57ei5hoVCaIApBDxrdBav17VEtcpDgEAgNDTbWHrz VQ1JBcr8EP+YK0eSritmTPnFpOk5I5HRgclEzbWLIcDZrRnQ4pETYBC+XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTkTeHYDw7mSrfC/jO+JKVvoyMrMB8GA1UdIwQY MBaAFHLhKjh2/3vQDZ2eu5cqseYh6h6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQt NDU1MjdlOGU0NGQyLzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQtNDU1MjdlOGU0NGQy LzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmjO5NNa XkAbOI/da4S4h+3cNmZG5GvJwtTRy7snrvmXUWQSvypCI/GHlT7GKnx/6mbKqNyZ cil3lZU6K9bo24i8VHZafD9A4Z8f/Oa+Os7mt+jF36XVWyLADi+dbIbXeZ3D9otc 6MduKefP5QyeuWbHgiDSJrmlRbrR6SN6qgyu4n151VtqJM499e2RcNKoQU5DZc3Q dSpHqL3WkU7qBr3O85uQA4TEmHnf8luVgMywQOh0iUpMDHHQiRixs1CaVqmwuwQk Oiu6EY6Swfck3Z+GvArHV/8ozKBLTeGmmJIhdQkbTV+R1UdInVCCXyMtxPXo9+6g e6QZHKyQc5hLlQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:55 2026 by rpki-client