This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json) Hash identifier: TqzJZJX+YR5yCaQ6vc/qMsd2fBuN7Pl/Yj1yQoIG9Gg= Subject key identifier: BF:C6:EF:20:CD:54:27:5D:C8:B8:2B:76:68:72:E7:56:0D:C2:33:D4 Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4 Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4 Certificate serial: 019BF46249007B4FB51387E828FBC0B6680D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft Manifest number: 17FF Signing time: Sun 25 Jan 2026 09:00:40 +0000 Manifest this update: Sun 25 Jan 2026 09:00:40 +0000 Manifest next update: Mon 26 Jan 2026 09:00:40 +0000 Files and hashes: 1: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: 4Eu4gmnmFY8QYGb0VSGsWJgAV52zBm2gkKUogqJsheM=) 2: mrMujXmupWSrwWqOYl2yw1qeUUY.roa (hash: oQq1R322TzKLmH6egDi8qOHSbSztZd52QdHS4JF9sE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:49:00:7b:4f:b5:13:87:e8:28:fb:c0:b6:68:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4 Validity Not Before: Jan 25 09:00:40 2026 GMT Not After : Jan 26 09:00:40 2026 GMT Subject: CN=bfc6ef20cd54275dc8b82b766872e7560dc233d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:34:40:21:8f:8d:53:ec:9b:05:9f:b4:33: c8:7b:47:44:ac:17:f3:36:e8:03:8e:27:6f:5d:7c: 5c:84:79:a3:bc:0b:2d:be:68:7c:af:85:a1:a1:fd: cf:90:08:02:38:1e:fc:d8:d6:6d:0c:47:44:06:2f: 74:ee:85:01:05:15:32:25:70:f1:74:5b:e8:bf:8d: 02:e2:f1:7e:18:f9:8e:97:e1:65:7e:62:88:ef:90: 0e:07:06:d9:f8:8f:5f:cf:72:14:5a:7b:7c:b3:8c: a1:a0:e9:5a:ca:d9:df:80:98:ac:ba:1a:d8:6a:03: c0:f0:9f:4b:3c:8d:5d:14:74:ed:a8:d5:fe:2d:b0: e0:7c:29:ef:96:fd:71:5d:a3:65:e7:fd:9d:17:52: 1c:e2:20:fc:e2:6b:8a:5f:ec:92:09:32:f0:ba:d8: 71:ae:86:c0:7f:2b:c2:01:27:23:df:88:26:72:80: 26:eb:f9:7e:27:7b:9f:28:83:ed:aa:4f:09:fb:72: 02:b4:ae:ac:ce:21:98:57:cf:42:4d:4a:a8:78:c0: 39:3e:17:7a:d1:72:d6:ca:a7:07:8f:85:ef:14:c1: c5:ae:31:af:27:da:ea:7f:1b:f1:d5:b2:70:49:73: a3:f6:b9:a7:bc:72:25:bf:f9:90:8b:77:cb:bd:f8: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C6:EF:20:CD:54:27:5D:C8:B8:2B:76:68:72:E7:56:0D:C2:33:D4 X509v3 Authority Key Identifier: keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c6:d4:5e:d3:7c:8c:e4:d7:5a:4a:74:ee:c7:52:16:5f:cc: 47:a1:d4:74:15:73:5a:e4:70:db:f4:d6:91:b3:98:f1:9c:73: e6:91:60:9b:0a:ac:81:e6:3f:a5:c3:ea:b7:43:bd:92:73:0b: 67:3a:86:b6:14:82:ab:f9:d2:d8:b3:71:39:4a:66:70:3d:48: d0:8d:f3:64:e9:9f:ae:e1:75:69:53:f6:3e:fe:cd:7e:30:76: c7:b9:b7:5a:25:90:7c:eb:1a:e6:06:28:ee:41:1d:b6:6d:c3: f8:11:6b:1b:a8:df:8d:a1:a9:15:b8:a7:14:b3:b1:97:8c:de: 16:34:55:4e:5f:6c:58:aa:61:c6:c0:c7:f0:6c:d4:e3:05:4d: 05:63:a0:3f:ef:ed:77:bd:f4:11:be:d0:84:c7:70:99:a9:67: 65:dd:1a:0c:b7:bb:08:31:1f:6e:9a:cc:02:cc:b1:24:93:f0: 6f:49:03:99:4f:67:03:f9:ee:77:45:83:62:5b:f3:dc:97:ff: 55:76:51:ec:1a:20:b5:3f:97:62:c8:a6:a6:7c:4c:f0:ce:2b: fa:6a:08:81:04:1e:a4:04:3e:35:4e:0b:d7:9c:20:57:53:86: 01:78:47:4f:0f:9d:92:f0:5e:19:16:ef:37:cc:89:0c:9d:43: 55:4e:e4:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YkkAe0+1E4foKPvAtmgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTgxZmI1Y2YwZmIzMmM0NTc1Zjg0MTNhY2JkNDFhYTg0 YjgyZjQwHhcNMjYwMTI1MDkwMDQwWhcNMjYwMTI2MDkwMDQwWjAzMTEwLwYDVQQD EyhiZmM2ZWYyMGNkNTQyNzVkYzhiODJiNzY2ODcyZTc1NjBkYzIzM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDE0QCGPjVPsmwWftDPIe0dErBfz NugDjidvXXxchHmjvAstvmh8r4Whof3PkAgCOB782NZtDEdEBi907oUBBRUyJXDx dFvov40C4vF+GPmOl+FlfmKI75AOBwbZ+I9fz3IUWnt8s4yhoOlaytnfgJisuhrY agPA8J9LPI1dFHTtqNX+LbDgfCnvlv1xXaNl5/2dF1Ic4iD84muKX+ySCTLwuthx robAfyvCAScj34gmcoAm6/l+J3ufKIPtqk8J+3ICtK6sziGYV89CTUqoeMA5Phd6 0XLWyqcHj4XvFMHFrjGvJ9rqfxvx1bJwSXOj9rmnvHIlv/mQi3fLvfgJYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/G7yDNVCddyLgrdmhy51YNwjPUMB8GA1UdIwQY MBaAFHLoH7XPD7MsRXX4QTrL1BqoS4L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQt Y2RhNmUxOWZmYjg4LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQtY2RhNmUxOWZmYjg4 LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcbUXtN8 jOTXWkp07sdSFl/MR6HUdBVzWuRw2/TWkbOY8Zxz5pFgmwqsgeY/pcPqt0O9knML ZzqGthSCq/nS2LNxOUpmcD1I0I3zZOmfruF1aVP2Pv7NfjB2x7m3WiWQfOsa5gYo 7kEdtm3D+BFrG6jfjaGpFbinFLOxl4zeFjRVTl9sWKphxsDH8GzU4wVNBWOgP+/t d730Eb7QhMdwmalnZd0aDLe7CDEfbprMAsyxJJPwb0kDmU9nA/nud0WDYlvz3Jf/ VXZR7BogtT+XYsimpnxM8M4r+moIgQQepAQ+NU4L15wgV1OGAXhHTw+dkvBeGRbv N8yJDJ1DVU7kpw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:27:52 2026 by rpki-client