This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft File: cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft (raw, json) Hash identifier: fy95i2NMfnF4H+8rZaRnd06ys9QCjAifBFtZASFpzdo= Subject key identifier: 38:C8:0F:2E:89:F4:0E:F5:59:8C:7D:F1:97:36:93:3F:41:0C:47:FD Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48 Certificate issuer: /CN=72e13915fa1bc579f5856f58ecb24786379a5d48 Certificate serial: 019BF5AC58D0DFBF24CF229B39D8CFCED019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft Manifest number: 02A1 Signing time: Sun 25 Jan 2026 15:01:11 +0000 Manifest this update: Sun 25 Jan 2026 15:01:11 +0000 Manifest next update: Mon 26 Jan 2026 15:01:11 +0000 Files and hashes: 1: 1tgtjL3B3YdYAU03MUR31VYv6CI.roa (hash: 16zjErqZd+Fe3OsAh8pnaOrjHjMKr/IPGlIT7NNIBL0=) 2: cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl (hash: FRJN9vqp5xFgMKB69ppDkvgCRRQUSymc4lv3xyhRpKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:58:d0:df:bf:24:cf:22:9b:39:d8:cf:ce:d0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48 Validity Not Before: Jan 25 15:01:11 2026 GMT Not After : Jan 26 15:01:11 2026 GMT Subject: CN=38c80f2e89f40ef5598c7df19736933f410c47fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:38:6d:4e:34:2d:62:d9:eb:de:80:52:ab:90: 18:3e:d1:3f:28:ee:e8:2e:52:78:95:45:7c:ba:45: 77:80:90:24:be:c1:1a:da:bf:4f:6d:a0:57:e6:e5: f0:57:d6:14:86:1e:7c:6e:fa:e6:2a:d7:ef:77:e0: fa:1c:10:d5:c5:02:ce:43:4b:d5:97:f2:50:f3:02: b9:6f:66:35:5b:5c:af:f9:58:34:79:d4:f5:07:e9: ce:94:67:4f:6b:97:c2:7b:c2:d3:f1:cb:8d:98:21: 5f:63:72:d0:ea:25:11:14:58:20:f7:ae:34:35:9a: 0d:a1:91:cf:8c:a2:b9:07:75:f5:bf:26:1e:b4:a2: 60:01:b5:b7:38:66:57:d9:04:de:90:ac:ea:ae:a2: b8:22:60:6a:c8:38:36:e6:40:37:a6:5a:80:1c:d9: 95:fd:6a:22:b1:54:58:c8:7a:19:5b:4a:68:32:69: 37:c1:16:04:36:b4:2d:c8:bb:b0:41:a1:64:a6:4a: da:ac:11:b8:6c:97:85:d6:b3:9f:2e:14:1c:27:ec: e1:5d:e4:cd:5f:7c:43:eb:4a:ca:c8:36:e5:50:53: 49:9d:fc:29:ab:01:bf:57:f3:dd:7f:29:2a:9e:00: 68:f9:56:bc:6c:30:0a:8e:22:b5:f7:dc:14:84:40: e5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C8:0F:2E:89:F4:0E:F5:59:8C:7D:F1:97:36:93:3F:41:0C:47:FD X509v3 Authority Key Identifier: keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:40:05:25:06:f3:74:15:7c:a7:42:5a:9b:a7:92:66:a4:f3: 21:1b:49:3b:a7:23:9d:8d:87:a0:c2:e0:33:54:38:bb:c3:55: 15:ad:3c:88:7b:e2:d4:39:54:e4:de:04:19:d7:0c:3b:a2:08: aa:77:be:d9:3d:54:5b:9a:8e:7f:94:31:59:f9:92:28:bd:0c: 3e:b7:02:f2:30:5f:2f:96:be:3a:dc:a9:1d:4c:c8:7d:88:df: 84:8d:f2:e2:37:b4:c9:00:1c:af:a5:1e:1e:9d:e0:cc:04:87: 14:da:8c:df:bf:e5:37:07:95:6d:7d:71:0b:4f:7a:98:b3:89: 5a:7b:6c:e3:79:14:2e:81:47:e4:c6:ae:70:2c:d4:f0:f6:68: 0d:fc:7f:ee:33:ab:c1:f8:88:f9:c6:21:8d:8c:3b:45:dc:3c: a3:27:61:a2:2c:56:cf:55:62:92:ba:60:90:a1:45:9d:79:65: 62:6a:66:76:8a:b1:bd:8a:a3:e0:82:24:00:21:74:03:78:9c: f8:26:d1:7f:f3:29:58:e9:8e:b4:0d:93:d3:e6:e7:d4:4d:23: 1f:26:7c:92:c5:9d:9e:ee:6d:83:b4:81:32:4f:71:e3:8a:0b: 51:03:c0:f5:3a:dc:94:fd:23:07:6c:dd:c2:7f:99:cc:cd:42: 54:02:a3:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rFjQ378kzyKbOdjPztAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTEzOTE1ZmExYmM1NzlmNTg1NmY1OGVjYjI0Nzg2Mzc5 YTVkNDgwHhcNMjYwMTI1MTUwMTExWhcNMjYwMTI2MTUwMTExWjAzMTEwLwYDVQQD EygzOGM4MGYyZTg5ZjQwZWY1NTk4YzdkZjE5NzM2OTMzZjQxMGM0N2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzhtTjQtYtnr3oBSq5AYPtE/KO7o LlJ4lUV8ukV3gJAkvsEa2r9PbaBX5uXwV9YUhh58bvrmKtfvd+D6HBDVxQLOQ0vV l/JQ8wK5b2Y1W1yv+Vg0edT1B+nOlGdPa5fCe8LT8cuNmCFfY3LQ6iURFFgg9640 NZoNoZHPjKK5B3X1vyYetKJgAbW3OGZX2QTekKzqrqK4ImBqyDg25kA3plqAHNmV /WoisVRYyHoZW0poMmk3wRYENrQtyLuwQaFkpkrarBG4bJeF1rOfLhQcJ+zhXeTN X3xD60rKyDblUFNJnfwpqwG/V/PdfykqngBo+Va8bDAKjiK199wUhEDlmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjIDy6J9A71WYx98Zc2kz9BDEf9MB8GA1UdIwQY MBaAFHLhORX6G8V59YVvWOyyR4Y3ml1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MmJiYmYtOWY5My00NzQxLTg2ODIt ZjFlOGJkNzQxODBjLzEvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85MmJiYmYtOWY5My00NzQxLTg2ODItZjFlOGJkNzQxODBj LzEvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEAFJQbz dBV8p0Jam6eSZqTzIRtJO6cjnY2HoMLgM1Q4u8NVFa08iHvi1DlU5N4EGdcMO6II qne+2T1UW5qOf5QxWfmSKL0MPrcC8jBfL5a+OtypHUzIfYjfhI3y4je0yQAcr6Ue Hp3gzASHFNqM37/lNweVbX1xC096mLOJWnts43kULoFH5MaucCzU8PZoDfx/7jOr wfiI+cYhjYw7Rdw8oydhoixWz1VikrpgkKFFnXllYmpmdoqxvYqj4IIkACF0A3ic +CbRf/MpWOmOtA2T0+bn1E0jHyZ8ksWdnu5tg7SBMk9x44oLUQPA9TrclP0jB2zd wn+ZzM1CVAKjyw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:28 2026 by rpki-client