This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json) Hash identifier: qMAh0AFXgXKlLgzY1Qdv4+JenUA1j9QYsLvwMuehdAw= Subject key identifier: B5:CE:5B:C7:6D:21:F2:12:FD:88:20:58:21:17:53:88:0A:E5:A1:E3 Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c Certificate serial: 019BFBAE2041714E562BF7DBD778DE427C9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft Manifest number: 17F2 Signing time: Mon 26 Jan 2026 19:00:51 +0000 Manifest this update: Mon 26 Jan 2026 19:00:51 +0000 Manifest next update: Tue 27 Jan 2026 19:00:51 +0000 Files and hashes: 1: 1D3XGuEQn9Eo498gEH4KY15UEy0.roa (hash: KfByO/UOYDGSRZuUArFURrgdPsxMkmj0LnL2B657g+A=) 2: AADyehhwhuiqG2B43K-5JXegEjw.roa (hash: wVGqqJINwciy7adEJNnlXYs9SAwZocsvmhviH2wPRl0=) 3: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: 2QCMthMhoXOhJldALRWFCAY2RlKS+cZdu6xR8MU4AME=) 4: ZzhGs3xeuqjtegogr3JbD8EGy8A.roa (hash: QzKiuA6J4PH51Dtd4/mrQUF28CyQcdY+pEYCB8jZjMg=) 5: wOPk17nv5KIiudN64aSMjj945cw.roa (hash: PusivWzV1D+Sz5sW5Ck+szJ+lL1X1qExgZ8AO7cPnS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:20:41:71:4e:56:2b:f7:db:d7:78:de:42:7c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c Validity Not Before: Jan 26 19:00:51 2026 GMT Not After : Jan 27 19:00:51 2026 GMT Subject: CN=b5ce5bc76d21f212fd882058211753880ae5a1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:c4:33:1e:f9:84:5a:a9:1d:94:bd:9e:14: 3d:c4:56:b3:91:cc:4b:f6:35:92:54:44:1d:6b:65: 5c:7e:7f:08:13:f9:63:1a:6b:d9:1f:c0:04:2d:94: 4e:fd:fa:c5:f5:00:28:b1:c8:a5:ce:0c:68:2c:b1: 75:2b:8c:12:07:4e:8f:08:8b:f2:70:16:3a:df:3e: 68:67:33:be:18:81:a5:72:11:bd:70:18:5e:f4:62: c3:6f:ac:77:0c:44:5b:50:d6:04:e6:09:09:c5:cf: 6d:b3:30:b9:f8:dc:22:74:2d:17:98:85:9d:28:1a: a8:c3:44:1f:fb:3d:37:31:1e:cd:23:f5:f7:6c:12: 87:5f:4e:e8:13:3d:36:63:25:81:23:c3:cb:0c:7f: 84:22:16:fa:85:1f:9c:0e:e2:0b:2a:a7:de:33:43: ed:fd:20:68:a7:92:6d:23:d1:73:86:9c:b5:08:03: c0:2b:dc:2d:6d:4b:e5:07:81:89:b8:d3:0d:7d:08: ba:7d:7c:cb:36:21:a8:92:08:2c:c7:16:c7:97:9c: 98:54:9c:e3:fd:e0:74:a0:d4:b6:a9:5f:91:a0:81: e0:5d:f8:8f:1d:78:29:25:2e:18:27:a2:09:35:34: ac:b6:b3:1e:54:96:7b:61:9a:0f:b5:0f:e9:06:58: 06:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CE:5B:C7:6D:21:F2:12:FD:88:20:58:21:17:53:88:0A:E5:A1:E3 X509v3 Authority Key Identifier: keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3b:76:e5:d1:77:78:5f:21:19:df:29:0e:7e:ba:03:9e:e7: 2d:87:05:71:33:0d:58:7f:ee:81:32:e6:a7:06:c7:30:64:21: 34:f6:d3:7b:4d:8b:4e:26:ae:ab:9f:43:92:6b:d7:b3:39:78: 4f:5e:d0:c9:de:9f:fb:5d:97:db:7d:f2:2f:db:7f:f8:b8:c5: b5:f5:40:16:6b:61:3d:54:4d:79:1f:ce:c3:bd:6c:55:d7:71: e1:20:3d:8f:7f:8d:43:49:4d:ed:7f:9b:90:f3:3f:46:9f:77: f8:b7:04:48:2d:f9:76:b6:d1:18:ef:e3:16:1d:bd:f8:e6:a4: a1:a8:3b:9f:5d:bd:26:38:64:94:f5:9f:ae:95:0e:47:b8:e2: c7:ee:88:16:3c:7a:c5:c9:b5:a9:08:26:a4:05:fa:d6:64:27: 85:6a:b3:04:1a:56:06:cb:e1:e0:bb:c8:be:9b:76:50:07:ac: 63:e6:2a:84:4b:b4:67:1e:4e:4f:75:58:f0:b5:e9:cb:4a:c8: 7f:d4:77:c5:27:dd:fe:b4:4c:76:6a:f9:d4:8f:97:52:42:d8: 74:64:f8:93:bc:85:e3:14:5e:a2:f9:3e:81:fa:35:61:37:83: 3c:47:21:6d:97:7b:7f:29:09:22:86:90:d5:bd:5b:a4:a4:cb: a0:8e:a6:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7riBBcU5WK/fb13jeQnyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw MTRiN2MwHhcNMjYwMTI2MTkwMDUxWhcNMjYwMTI3MTkwMDUxWjAzMTEwLwYDVQQD EyhiNWNlNWJjNzZkMjFmMjEyZmQ4ODIwNTgyMTE3NTM4ODBhZTVhMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ/EMx75hFqpHZS9nhQ9xFazkcxL 9jWSVEQda2Vcfn8IE/ljGmvZH8AELZRO/frF9QAoscilzgxoLLF1K4wSB06PCIvy cBY63z5oZzO+GIGlchG9cBhe9GLDb6x3DERbUNYE5gkJxc9tszC5+NwidC0XmIWd KBqow0Qf+z03MR7NI/X3bBKHX07oEz02YyWBI8PLDH+EIhb6hR+cDuILKqfeM0Pt /SBop5JtI9Fzhpy1CAPAK9wtbUvlB4GJuNMNfQi6fXzLNiGokggsxxbHl5yYVJzj /eB0oNS2qV+RoIHgXfiPHXgpJS4YJ6IJNTSstrMeVJZ7YZoPtQ/pBlgGZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXOW8dtIfIS/YggWCEXU4gK5aHjMB8GA1UdIwQY MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt MTE0YWQ0MWNmMzMxLzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzt25dF3 eF8hGd8pDn66A57nLYcFcTMNWH/ugTLmpwbHMGQhNPbTe02LTiauq59DkmvXszl4 T17Qyd6f+12X233yL9t/+LjFtfVAFmthPVRNeR/Ow71sVddx4SA9j3+NQ0lN7X+b kPM/Rp93+LcESC35drbRGO/jFh29+Oakoag7n129JjhklPWfrpUOR7jix+6IFjx6 xcm1qQgmpAX61mQnhWqzBBpWBsvh4LvIvpt2UAesY+YqhEu0Zx5OT3VY8LXpy0rI f9R3xSfd/rRMdmr51I+XUkLYdGT4k7yF4xReovk+gfo1YTeDPEchbZd7fykJIoaQ 1b1bpKTLoI6mPQ== -----END CERTIFICATE-----Generated at Tue Jan 27 00:37:02 2026 by rpki-client