This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: gveu0xuDCfkUSktkQyc7uqj63g+WKPKiM02tUjy7tJ8= Subject key identifier: B7:A3:32:2C:B8:E0:EE:FB:41:D7:A4:2C:07:C0:A2:EE:3A:BC:4A:3A Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019C08FC490F7ACDF29BFE2FD93AC57DF633 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 17F8 Signing time: Thu 29 Jan 2026 09:01:17 +0000 Manifest this update: Thu 29 Jan 2026 09:01:17 +0000 Manifest next update: Fri 30 Jan 2026 09:01:17 +0000 Files and hashes: 1: 1dppl4E5LeYed1_ddeBSXFRftKA.roa (hash: pN3g9tWO1Nl1OAJCCKTDocJwUcz7cU9lRTyplesScF8=) 2: 7hii_CBkhWFEcR7PBsbgDyXmQ9Y.roa (hash: VParP3CSdlBKMMaiiyOgc9apoYvJ3aLSGeumM5G2suQ=) 3: 9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa (hash: 0BBbEj9KrnkzQ7LI3Ja4k/fn10TEbD/JLEqh/Y7YN5Q=) 4: 9zJS2sLQdMyIEXItDHnz9vENCZc.roa (hash: smANRs03fyEMELSZXfc50FOww78+6TO01q3PcjqHhg0=) 5: MARvCBJj6pQzGNHhjfVRnTPDXRw.roa (hash: W1iO+ZpTnMCy3mYaAEE8YESIC/Lb3z77r6zn9zHVz2Q=) 6: NpN7l3_hUP3xVFpljOuMEBlStvc.roa (hash: T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=) 7: ZffOLXHzTQQ9w6R4Acsptb5X-ZQ.roa (hash: nT41EZi54SNK5Qom8A2J9oxN87+LC+L6D9g8JwOo3+E=) 8: b25kHpS94xs5d-Cb2gg_RWdRdqA.roa (hash: UnoS92iWWLeA3lFor4dioIwIwXhzelHfz1mr8ZCSkhY=) 9: cA6GYxFNrQzJXvnUUCTkZ74uPLY.roa (hash: 9ZlPADtkA5tNsCz6vf4xeuKDXE0oMu2t/mqNk4DDlVc=) 10: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: 6vK3R9/0UxzPv4lQ6OkhF9Q+venK/UF9LaVyDKM2ny8=) 11: laLTLAZUfnJXL9IgOMNUJBbcIYM.roa (hash: qH+8NsTPRO3q9UjCnJr8tq7a5R+TvAmnEtSTXrLT0C0=) 12: lcBaOkK9THwl0XIqZgkoB-TZsbs.roa (hash: wKKJUT7JPve5W6FxY/yzXFmsp0AF6c9Iy3VcPHnP9M4=) 13: oX2NoeenvY6od0noJwHOC0vVDFU.roa (hash: PaRvm0af3RdwqkLgxZ1C0CNPV7CmkxdUeLl6SbuiQd4=) 14: r2fhwRZgDnJ42tEzYpq9QARdwNg.roa (hash: UN6m1b3Vnp+W6gqg/ChwnnprYWWgYrCXDJiUYFQZheM=) 15: sPqeNjwkgKgIPC9F-wg4yZRw5vo.roa (hash: gkiNfTfDhe6OjPwvNFzi/YKFCVBUpR1D9DW8GG28M8I=) 16: ww6ypu6XKZLBnCmu95aBOLrx3W4.roa (hash: MJWr+hVoOJcU+dBCIlq6NQXj1hTEMRYcYO7YQk9u0qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:fc:49:0f:7a:cd:f2:9b:fe:2f:d9:3a:c5:7d:f6:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Jan 29 09:01:17 2026 GMT Not After : Jan 30 09:01:17 2026 GMT Subject: CN=b7a3322cb8e0eefb41d7a42c07c0a2ee3abc4a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:74:39:f2:c5:a2:ca:cd:62:51:a6:f0:c6:db: e3:70:2e:53:68:29:83:15:1a:b1:cb:ed:27:47:fa: 82:9c:61:af:54:63:f2:0b:8b:fd:3a:35:87:a2:ef: d2:86:a5:d9:53:4c:11:57:ed:f3:1d:c9:d8:23:c3: ed:6b:02:c6:54:4a:eb:ac:fa:9c:24:a7:b1:41:07: ac:7a:b0:32:4f:71:76:a3:14:e5:db:0d:bb:5e:cd: 7c:10:ee:bc:85:39:0c:c5:95:99:c0:8e:85:28:30: 5d:ea:d0:85:2f:48:c4:90:b1:28:65:47:16:b5:de: 86:c9:e9:8a:42:89:b6:7d:87:14:a9:0d:00:8f:60: c3:33:ae:af:a6:63:8a:62:90:0f:96:6f:30:88:8b: 61:14:46:af:87:9c:b6:9b:13:6a:75:c9:9d:b2:05: d7:2f:87:fa:9a:ab:77:76:b4:e8:2f:7a:d5:e1:b8: e1:17:06:f1:ee:0e:72:18:69:e7:f5:a7:27:a9:a0: 0a:0e:7c:ba:b9:33:f2:e3:b7:81:d2:8b:fa:22:a3: 3f:87:c2:c7:96:0f:30:af:1f:99:75:e9:82:98:74: 3f:bf:b6:81:87:96:5c:37:b8:b1:4b:e6:9e:f4:ba: 80:49:d9:2f:50:67:24:12:e7:b0:5c:a5:b8:7c:b2: 3c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A3:32:2C:B8:E0:EE:FB:41:D7:A4:2C:07:C0:A2:EE:3A:BC:4A:3A X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9c:02:9b:f8:e7:e1:5a:7f:e1:22:05:0d:e7:83:65:e1:e7: dd:16:75:d0:b4:36:a1:88:c6:47:ff:40:40:c5:54:7c:8e:53: 78:4b:08:48:63:b9:a2:6a:08:c0:32:0e:09:02:d9:a7:0d:b4: 0f:db:f6:ce:60:77:e6:4b:fd:65:ce:1b:ee:ab:84:9f:e1:d0: 9c:4a:3f:ea:f9:0d:09:1a:75:23:b4:3e:97:62:31:0c:d7:a1: 0f:9c:51:1c:58:2c:b2:e3:39:bb:8c:62:02:68:79:c9:e5:ec: ad:a3:39:c0:d0:cc:e1:38:38:c4:73:98:f2:04:b5:d3:84:9f: a7:23:d4:2a:56:ec:bb:a1:ad:23:2e:e2:c0:b7:8b:2e:50:ad: eb:f6:0b:f5:6b:e9:8f:9f:34:4a:7c:6f:81:fc:89:ec:00:53: 27:31:b8:3a:a0:3f:a2:f6:cf:51:2f:4d:39:d1:cf:23:e1:a9: ed:86:6f:01:32:36:36:ca:ec:7e:a1:c2:f7:d5:5b:4b:cb:b3: c7:c4:0a:99:1d:92:ed:c1:80:f4:fe:c8:2c:cc:54:d2:1b:17: 38:ca:70:35:f4:cc:ff:d4:7b:79:2a:50:be:7c:2f:e7:a5:ee: 08:53:88:75:a0:80:d4:45:26:56:f8:7a:08:48:b5:7b:9d:94: 07:f9:7e:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwI/EkPes3ym/4v2TrFffYzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwMTI5MDkwMTE3WhcNMjYwMTMwMDkwMTE3WjAzMTEwLwYDVQQD EyhiN2EzMzIyY2I4ZTBlZWZiNDFkN2E0MmMwN2MwYTJlZTNhYmM0YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nQ58sWiys1iUabwxtvjcC5TaCmD FRqxy+0nR/qCnGGvVGPyC4v9OjWHou/ShqXZU0wRV+3zHcnYI8PtawLGVErrrPqc JKexQQeserAyT3F2oxTl2w27Xs18EO68hTkMxZWZwI6FKDBd6tCFL0jEkLEoZUcW td6GyemKQom2fYcUqQ0Aj2DDM66vpmOKYpAPlm8wiIthFEavh5y2mxNqdcmdsgXX L4f6mqt3drToL3rV4bjhFwbx7g5yGGnn9acnqaAKDny6uTPy47eB0ov6IqM/h8LH lg8wrx+ZdemCmHQ/v7aBh5ZcN7ixS+ae9LqASdkvUGckEuewXKW4fLI8mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLejMiy44O77QdekLAfAou46vEo6MB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5wCm/jn 4Vp/4SIFDeeDZeHn3RZ10LQ2oYjGR/9AQMVUfI5TeEsISGO5omoIwDIOCQLZpw20 D9v2zmB35kv9Zc4b7quEn+HQnEo/6vkNCRp1I7Q+l2IxDNehD5xRHFgssuM5u4xi Amh5yeXsraM5wNDM4Tg4xHOY8gS104SfpyPUKlbsu6GtIy7iwLeLLlCt6/YL9Wvp j580SnxvgfyJ7ABTJzG4OqA/ovbPUS9NOdHPI+Gp7YZvATI2NsrsfqHC99VbS8uz x8QKmR2S7cGA9P7ILMxU0hsXOMpwNfTM/9R7eSpQvnwv56XuCFOIdaCA1EUmVvh6 CEi1e52UB/l+tA== -----END CERTIFICATE-----Generated at Thu Jan 29 12:02:18 2026 by rpki-client