This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json) Hash identifier: 4VAavgGjOXo1leDDYyDNieXI4BlB6RtOvw1cU5xPoxk= Subject key identifier: 37:65:CD:06:8E:69:0D:CB:EE:1D:C4:6D:11:01:D6:2F:31:BE:F1:5B Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed Certificate serial: 019BF6BF5AE290D21643397F9D0459E118B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft Manifest number: 132B Signing time: Sun 25 Jan 2026 20:01:34 +0000 Manifest this update: Sun 25 Jan 2026 20:01:34 +0000 Manifest next update: Mon 26 Jan 2026 20:01:34 +0000 Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=) 2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: VnpZqG7ce916IrDN4IDCiOS+C1eQ7uaUcWIMl7pwCiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:5a:e2:90:d2:16:43:39:7f:9d:04:59:e1:18:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed Validity Not Before: Jan 25 20:01:34 2026 GMT Not After : Jan 26 20:01:34 2026 GMT Subject: CN=3765cd068e690dcbee1dc46d1101d62f31bef15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ba:38:e7:54:3e:bf:35:28:02:04:78:1d:e7: 03:84:3a:51:41:90:ed:d3:8a:55:28:b3:3d:d2:f4: b7:4c:96:16:1e:63:2b:dc:2b:d1:ec:82:98:92:1f: 65:21:ef:d1:13:ca:1f:ca:81:a7:13:51:ee:6a:39: ab:31:6c:25:48:b2:d2:d0:53:27:8a:a1:18:78:3f: d7:e7:2c:8f:0b:72:37:1f:c8:7e:ab:8e:b5:c3:71: 2e:1c:81:dc:9a:84:8e:a7:b4:e6:b1:54:aa:7f:83: 53:26:ea:18:9c:36:50:ff:a4:fe:dd:d6:a5:2b:7b: ed:ea:c7:4a:7a:0b:fb:1a:bd:9a:20:6c:53:e2:0d: 52:98:e7:4b:47:f4:14:0d:b9:20:6a:60:08:8b:24: 41:78:90:d9:b6:f7:7d:b1:0c:8d:14:de:80:c2:f5: e4:7f:dd:e1:16:d6:47:72:c7:2c:99:c1:fc:00:4e: 2b:0b:f7:c2:5e:c7:bd:50:72:71:ed:c6:74:57:0d: b5:15:df:db:28:76:18:08:0b:42:dd:b7:0e:bb:5b: c9:60:c9:a6:d6:01:9b:6e:45:c2:27:91:d6:51:f9: ce:a2:f5:18:9d:03:32:bb:24:e4:00:f8:45:87:a9: a0:cf:e1:a9:78:2f:93:98:e5:5a:c3:6a:9d:92:9e: fb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:65:CD:06:8E:69:0D:CB:EE:1D:C4:6D:11:01:D6:2F:31:BE:F1:5B X509v3 Authority Key Identifier: keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b4:29:da:5a:a5:05:22:bf:7b:90:12:eb:b9:1c:8b:95:06: 61:29:35:68:2d:5f:fe:a2:3f:f2:02:b7:84:d8:35:cf:63:d3: 67:21:db:98:9a:6b:54:dc:61:52:5d:69:6f:44:d6:bf:b0:c1: d1:61:d7:c0:37:3f:1b:ee:67:72:be:e8:d6:a1:99:6a:40:75: 34:06:fe:2c:01:1c:e0:56:a1:7c:f5:6f:bf:0e:cc:e8:02:ca: a4:d2:e7:0b:f0:9c:13:0c:6b:1d:bd:e5:30:f5:15:31:1d:f0: 61:af:87:b2:a4:cc:7f:76:b7:4b:70:87:32:b1:8e:0e:ac:9f: a1:90:d0:22:00:48:98:04:7f:88:9a:5d:f3:a3:18:e5:b0:ff: 49:9f:db:9f:8c:c6:ff:7e:15:db:d1:7d:57:0b:bd:85:35:dc: ad:a7:d9:ab:8a:0c:45:82:b4:0a:16:c4:72:44:7b:ac:8b:97: 6d:8a:aa:bc:cc:e1:52:7b:78:1f:d7:01:34:c8:9e:53:d3:67: df:61:e1:74:61:15:2a:e2:7e:65:d8:9a:6a:c3:c9:b9:83:fc: dc:90:8c:17:0d:78:59:75:4b:3c:ee:b1:6e:4b:cd:e1:26:77: 1b:e2:26:06:e3:44:87:78:34:65:2e:a3:7e:27:f5:34:ee:ab: 24:aa:f0:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v1rikNIWQzl/nQRZ4Ri3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2 ZjcxZWQwHhcNMjYwMTI1MjAwMTM0WhcNMjYwMTI2MjAwMTM0WjAzMTEwLwYDVQQD EygzNzY1Y2QwNjhlNjkwZGNiZWUxZGM0NmQxMTAxZDYyZjMxYmVmMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbo451Q+vzUoAgR4HecDhDpRQZDt 04pVKLM90vS3TJYWHmMr3CvR7IKYkh9lIe/RE8ofyoGnE1HuajmrMWwlSLLS0FMn iqEYeD/X5yyPC3I3H8h+q461w3EuHIHcmoSOp7TmsVSqf4NTJuoYnDZQ/6T+3dal K3vt6sdKegv7Gr2aIGxT4g1SmOdLR/QUDbkgamAIiyRBeJDZtvd9sQyNFN6AwvXk f93hFtZHcscsmcH8AE4rC/fCXse9UHJx7cZ0Vw21Fd/bKHYYCAtC3bcOu1vJYMmm 1gGbbkXCJ5HWUfnOovUYnQMyuyTkAPhFh6mgz+GpeC+TmOVaw2qdkp77UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdlzQaOaQ3L7h3EbREB1i8xvvFbMB8GA1UdIwQY MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbQp2lql BSK/e5AS67kci5UGYSk1aC1f/qI/8gK3hNg1z2PTZyHbmJprVNxhUl1pb0TWv7DB 0WHXwDc/G+5ncr7o1qGZakB1NAb+LAEc4FahfPVvvw7M6ALKpNLnC/CcEwxrHb3l MPUVMR3wYa+HsqTMf3a3S3CHMrGODqyfoZDQIgBImAR/iJpd86MY5bD/SZ/bn4zG /34V29F9Vwu9hTXcrafZq4oMRYK0ChbEckR7rIuXbYqqvMzhUnt4H9cBNMieU9Nn 32HhdGEVKuJ+ZdiaasPJuYP83JCMFw14WXVLPO6xbkvN4SZ3G+ImBuNEh3g0ZS6j fif1NO6rJKrwfQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:12 2026 by rpki-client