This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json) Hash identifier: Y1HPBSQjUml3fUVkDpiwNLy7ePpFsEzFSJLQtjI9T2c= Subject key identifier: ED:D0:32:46:93:EA:A5:9F:C1:B7:23:C4:15:B8:54:5F:AF:9D:BC:AE Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Certificate serial: 019BF8ACCAC9B9A9C7DDAFFEF6D7B8564676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft Manifest number: D8 Signing time: Mon 26 Jan 2026 05:00:32 +0000 Manifest this update: Mon 26 Jan 2026 05:00:32 +0000 Manifest next update: Tue 27 Jan 2026 05:00:32 +0000 Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: dKf3CWGoaO7XqQ2CHuDp0ojeIJd8BO6llodRVb2NABU=) 2: NUFFNkGU4JYbyy4RYS95qukxk74.roa (hash: 6qIGa/yfIOna0n6jM1wvUBaSfiq9oHST89COIeie1Dw=) 3: ZyjNynpH1Sd3iZflEwkYCvSf2zQ.roa (hash: 0cR77B7pMjaFTEO1Opv0sWqFJFren4DQVM3QfUXJoFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:ca:c9:b9:a9:c7:dd:af:fe:f6:d7:b8:56:46:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Validity Not Before: Jan 26 05:00:32 2026 GMT Not After : Jan 27 05:00:32 2026 GMT Subject: CN=edd0324693eaa59fc1b723c415b8545faf9dbcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3c:fc:56:b8:04:af:7a:59:80:25:6f:eb:1b: 64:05:c6:2f:f0:1c:63:a2:96:9d:74:59:18:5d:d8: 5b:bb:06:59:08:dc:14:c3:27:a9:dd:48:08:ab:b2: 96:91:38:48:e9:c1:35:0e:85:b3:ea:76:92:e9:e7: 7b:79:3c:da:e4:09:4e:8a:b0:1c:04:db:c6:eb:6b: 0b:f5:3b:79:82:e2:7f:2b:97:f1:41:cb:93:16:aa: e8:0e:e3:da:f9:3c:cf:9d:50:a4:39:a7:d8:d5:f8: 79:e0:c2:6b:e2:af:51:26:78:e2:b3:99:35:df:83: cb:fe:bb:98:de:3a:14:be:70:06:f7:01:8f:ed:d9: 4c:8f:de:60:fb:ae:ff:93:a3:8b:4d:fe:08:da:29: fe:26:13:b5:7b:9b:24:d6:69:8f:54:98:df:df:51: 33:fa:1c:d6:b1:e4:d8:29:91:e7:8c:92:cc:46:80: 4f:d7:f6:9d:68:af:9b:46:11:04:d7:19:71:e9:3a: 66:5d:5e:fa:e0:bb:8d:00:9a:5e:26:ad:c1:fa:f2: 87:b0:d8:f8:27:81:e5:15:b1:2f:b4:cd:35:44:5d: 46:6b:69:ee:e4:11:4d:a9:02:29:db:fe:78:7f:32: 51:b2:39:cd:63:94:df:43:1d:3a:ba:bc:1d:6a:ef: fa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D0:32:46:93:EA:A5:9F:C1:B7:23:C4:15:B8:54:5F:AF:9D:BC:AE X509v3 Authority Key Identifier: keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:26:d4:8d:8d:49:b3:bf:04:85:3e:46:06:ce:d0:ff:8c:4c: 22:5f:da:f7:82:0c:bc:3a:99:28:75:4d:c7:3d:fb:f1:6a:3a: b0:e0:ee:aa:5a:0e:a9:a6:85:c0:93:1d:14:89:c2:bb:24:a6: 63:e5:4f:aa:ce:b7:aa:2e:39:63:dd:5e:e5:27:db:7a:cf:0e: 4b:14:36:08:32:ee:1d:2f:67:f0:54:9d:c7:ad:e7:bf:2a:0b: 48:1d:f1:6c:61:46:7e:ad:06:b7:cf:6e:c2:b1:38:67:70:bb: 38:9c:20:63:9d:3b:8f:92:ca:0b:2f:54:27:73:49:b6:4a:1d: 74:a6:b8:65:dd:8d:03:63:9a:3c:7c:1f:ed:cd:2d:22:88:86: c2:6c:51:78:75:0c:36:71:b7:0a:b4:55:dd:70:0d:db:53:cd: 07:0a:fe:05:f4:35:59:4c:48:38:6c:c0:5c:9d:9d:b3:84:65: 89:6a:86:d5:20:e3:73:f3:62:d9:56:e5:33:9b:d6:e6:06:73: d6:72:2a:e6:bb:83:b3:ae:80:f0:2e:aa:45:32:0c:7d:18:34: a6:54:9a:16:7b:e3:9e:1f:a2:d6:93:6d:c6:36:e4:18:b7:d4: ee:33:20:68:a3:23:d6:b6:48:c2:bf:6a:c1:1e:fd:d7:17:8a: 24:5b:95:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rMrJuanH3a/+9te4VkZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm NDI2MTEwHhcNMjYwMTI2MDUwMDMyWhcNMjYwMTI3MDUwMDMyWjAzMTEwLwYDVQQD EyhlZGQwMzI0NjkzZWFhNTlmYzFiNzIzYzQxNWI4NTQ1ZmFmOWRiY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zz8VrgEr3pZgCVv6xtkBcYv8Bxj opaddFkYXdhbuwZZCNwUwyep3UgIq7KWkThI6cE1DoWz6naS6ed7eTza5AlOirAc BNvG62sL9Tt5guJ/K5fxQcuTFqroDuPa+TzPnVCkOafY1fh54MJr4q9RJnjis5k1 34PL/ruY3joUvnAG9wGP7dlMj95g+67/k6OLTf4I2in+JhO1e5sk1mmPVJjf31Ez +hzWseTYKZHnjJLMRoBP1/adaK+bRhEE1xlx6TpmXV764LuNAJpeJq3B+vKHsNj4 J4HlFbEvtM01RF1Ga2nu5BFNqQIp2/54fzJRsjnNY5TfQx06urwdau/6EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3QMkaT6qWfwbcjxBW4VF+vnbyuMB8GA1UdIwQY MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct MjQyNDY2ODJiZjAwLzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICbUjY1J s78EhT5GBs7Q/4xMIl/a94IMvDqZKHVNxz378Wo6sODuqloOqaaFwJMdFInCuySm Y+VPqs63qi45Y91e5Sfbes8OSxQ2CDLuHS9n8FSdx63nvyoLSB3xbGFGfq0Gt89u wrE4Z3C7OJwgY507j5LKCy9UJ3NJtkoddKa4Zd2NA2OaPHwf7c0tIoiGwmxReHUM NnG3CrRV3XAN21PNBwr+BfQ1WUxIOGzAXJ2ds4RliWqG1SDjc/Ni2VblM5vW5gZz 1nIq5ruDs66A8C6qRTIMfRg0plSaFnvjnh+i1pNtxjbkGLfU7jMgaKMj1rZIwr9q wR791xeKJFuVJA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:48:17 2026 by rpki-client