This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json) Hash identifier: oRhGnwEmiOyhQZQaVKuZJy3VoWAkj/bTUdZzU5t4nbE= Subject key identifier: 39:A3:14:A3:B0:8C:95:2D:B0:62:56:9E:A0:1C:F8:EF:09:00:5A:DD Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7 Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7 Certificate serial: 019BFE4191B131D80EE18FC78E0098218D6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft Manifest number: 1597 Signing time: Tue 27 Jan 2026 07:01:08 +0000 Manifest this update: Tue 27 Jan 2026 07:01:08 +0000 Manifest next update: Wed 28 Jan 2026 07:01:08 +0000 Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: CfRG9dEnqqSmER04mlrzAqrVU++20F2Kj/+iAnrvlbM=) 2: EP3_Y_2rIqHTOMptiyzO0uUUxw0.roa (hash: cbNaVlReRWd6gx/q6NH3r5/UXA7TpZqlkYS//LHJrhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:41:91:b1:31:d8:0e:e1:8f:c7:8e:00:98:21:8d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7 Validity Not Before: Jan 27 07:01:08 2026 GMT Not After : Jan 28 07:01:08 2026 GMT Subject: CN=39a314a3b08c952db062569ea01cf8ef09005add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:4e:a0:d6:2a:4d:ee:e3:a2:22:4a:07:9b: 66:16:c3:33:d1:9b:eb:e3:b2:57:f7:38:96:30:95: 38:4b:28:93:7b:64:b0:32:ce:5d:7d:4d:25:3d:9a: 56:7a:6b:6b:ff:ed:2a:85:6e:52:54:1e:9c:be:9e: b2:3c:62:22:73:2f:0e:cc:78:47:4f:ad:f3:f2:7d: 10:8f:67:0e:a8:df:47:08:c9:02:91:47:63:a3:b2: 93:d4:dd:a4:43:21:e3:b1:73:bf:e8:20:53:cc:bb: b9:13:47:b1:9e:6f:7d:e1:08:7b:6d:9b:b1:bb:5d: e9:4b:48:1c:6b:5f:4e:d2:05:f7:a4:63:15:39:d5: a2:d1:4d:96:a2:df:60:11:a9:42:84:30:2a:ea:5c: 43:af:ba:2c:ce:16:70:79:fd:02:e8:c8:1a:3c:63: c4:b6:5b:48:d8:f2:6d:58:27:f6:d4:fc:61:0e:e5: 06:32:19:59:58:f3:11:4e:45:e8:08:7f:01:ba:ce: fc:f4:4b:b3:46:dd:09:7e:ef:6c:e2:f8:84:bd:d5: 0b:ce:2c:f5:e4:86:e4:97:1d:12:66:e8:f6:68:a6: 28:a1:8b:4a:b7:ef:11:d5:a3:0a:dd:2f:c0:59:3d: 05:34:d2:d6:54:f6:ee:ab:fb:6d:78:b7:c9:b7:e7: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A3:14:A3:B0:8C:95:2D:B0:62:56:9E:A0:1C:F8:EF:09:00:5A:DD X509v3 Authority Key Identifier: keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:24:66:c5:00:0c:3b:b3:4b:3b:7d:bc:ac:b6:e5:7f:55:72: 2d:08:0f:47:e7:3e:eb:eb:fc:93:ab:c2:37:b5:f7:c3:40:9a: ea:b2:fe:8d:64:23:84:60:a2:76:f4:4c:9d:c3:44:e0:3f:fc: 4f:86:e5:f5:86:6e:5b:05:90:dd:91:8b:58:09:23:5d:fe:46: ea:ad:c4:a6:b2:81:d5:ff:9f:e5:fa:c7:d4:60:1e:e8:48:bc: a4:b1:43:0d:b3:57:0e:c5:60:e8:d5:29:1b:2d:b7:33:05:7f: 8b:0f:5a:50:72:00:3a:3c:d5:de:42:db:53:d0:55:a7:e8:80: cd:d0:fa:4d:e1:2a:d6:89:05:9f:5b:f4:7c:c9:08:de:19:9e: 86:d5:6a:1a:7f:60:46:82:ac:a0:b4:5c:d1:a8:de:42:3a:f9: 58:23:dd:81:7f:04:db:7c:9c:5d:63:eb:cb:98:08:af:8b:e9: ce:5c:33:ce:d7:9c:40:0a:6f:d0:fa:e7:c6:8c:67:cb:10:85: 7e:73:f5:67:c8:00:2c:01:f4:c2:4a:51:6b:f8:aa:ff:83:22: 5c:d9:e8:ff:78:e5:e3:95:c2:d6:51:c7:45:7c:bd:4d:79:49: 31:c8:6c:79:eb:4e:b1:89:e6:6e:fc:8b:47:0e:3a:5f:23:eb: b5:ba:a0:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+QZGxMdgO4Y/HjgCYIY1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTFhNWI2OGVjYTc2OGYyMTFhNDhlODU2ZDdmNTgzZjkw ZTc1ZTcwHhcNMjYwMTI3MDcwMTA4WhcNMjYwMTI4MDcwMTA4WjAzMTEwLwYDVQQD EygzOWEzMTRhM2IwOGM5NTJkYjA2MjU2OWVhMDFjZjhlZjA5MDA1YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+5OoNYqTe7joiJKB5tmFsMz0Zvr 47JX9ziWMJU4SyiTe2SwMs5dfU0lPZpWemtr/+0qhW5SVB6cvp6yPGIicy8OzHhH T63z8n0Qj2cOqN9HCMkCkUdjo7KT1N2kQyHjsXO/6CBTzLu5E0exnm994Qh7bZux u13pS0gca19O0gX3pGMVOdWi0U2Wot9gEalChDAq6lxDr7oszhZwef0C6MgaPGPE tltI2PJtWCf21PxhDuUGMhlZWPMRTkXoCH8Bus789EuzRt0Jfu9s4viEvdULziz1 5Ibklx0SZuj2aKYooYtKt+8R1aMK3S/AWT0FNNLWVPbuq/tteLfJt+f+MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmjFKOwjJUtsGJWnqAc+O8JAFrdMB8GA1UdIwQY MBaAFArhpbaOynaPIRpI6FbX9YP5DnXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYt YjljODliOWIxZjY1LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYtYjljODliOWIxZjY1 LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiRmxQAM O7NLO328rLblf1VyLQgPR+c+6+v8k6vCN7X3w0Ca6rL+jWQjhGCidvRMncNE4D/8 T4bl9YZuWwWQ3ZGLWAkjXf5G6q3EprKB1f+f5frH1GAe6Ei8pLFDDbNXDsVg6NUp Gy23MwV/iw9aUHIAOjzV3kLbU9BVp+iAzdD6TeEq1okFn1v0fMkI3hmehtVqGn9g RoKsoLRc0ajeQjr5WCPdgX8E23ycXWPry5gIr4vpzlwzztecQApv0PrnxoxnyxCF fnP1Z8gALAH0wkpRa/iq/4MiXNno/3jl45XC1lHHRXy9TXlJMchseetOsYnmbvyL Rw46XyPrtbqg0A== -----END CERTIFICATE-----Generated at Tue Jan 27 16:21:55 2026 by rpki-client