This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json) Hash identifier: UV47iyy0PJRO+51Kkh/Q0sBdpavt+LKuXT0ioG40D9U= Subject key identifier: 07:93:56:19:E2:E1:3C:17:A6:A7:29:C1:AE:10:10:A4:8C:D5:A9:73 Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c Certificate serial: 019BF5E32249C786765C7B64CBD1D780205C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft Manifest number: 17EF Signing time: Sun 25 Jan 2026 16:01:01 +0000 Manifest this update: Sun 25 Jan 2026 16:01:01 +0000 Manifest next update: Mon 26 Jan 2026 16:01:01 +0000 Files and hashes: 1: 1D3XGuEQn9Eo498gEH4KY15UEy0.roa (hash: KfByO/UOYDGSRZuUArFURrgdPsxMkmj0LnL2B657g+A=) 2: AADyehhwhuiqG2B43K-5JXegEjw.roa (hash: wVGqqJINwciy7adEJNnlXYs9SAwZocsvmhviH2wPRl0=) 3: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: aWvmKeyWYwGthAJNQ5GOhH2MhZo/a3nt+RyTVbS8ZDE=) 4: ZzhGs3xeuqjtegogr3JbD8EGy8A.roa (hash: QzKiuA6J4PH51Dtd4/mrQUF28CyQcdY+pEYCB8jZjMg=) 5: wOPk17nv5KIiudN64aSMjj945cw.roa (hash: PusivWzV1D+Sz5sW5Ck+szJ+lL1X1qExgZ8AO7cPnS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:22:49:c7:86:76:5c:7b:64:cb:d1:d7:80:20:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c Validity Not Before: Jan 25 16:01:01 2026 GMT Not After : Jan 26 16:01:01 2026 GMT Subject: CN=07935619e2e13c17a6a729c1ae1010a48cd5a973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d0:73:84:2e:dc:cd:4b:a3:f6:bd:7e:e8:7b: d9:53:1c:bc:45:8c:12:fc:88:23:1f:1f:10:8d:5c: 2d:71:dd:b6:93:02:cf:67:57:44:8b:98:c5:8e:c0: 0a:77:0b:50:d6:d8:af:1f:77:4c:37:2c:fd:39:70: eb:db:58:76:ab:63:dc:43:5e:02:0b:7d:e1:5c:fd: e9:3e:4b:9a:6e:7e:86:13:37:1b:30:c1:55:a7:5d: 0f:be:a9:59:d4:ae:e3:f9:94:f9:34:8f:92:76:e2: cf:ed:c3:57:16:12:f2:66:e5:b9:04:35:fc:95:2c: 33:fe:11:9d:b2:ef:c5:00:4a:8a:6b:f3:20:df:06: 8f:bc:12:d9:56:95:51:e1:01:e0:c4:82:3b:33:6e: 59:05:f3:f1:cc:0b:3f:55:3c:ab:59:43:2a:93:44: b9:9c:b5:5c:98:36:66:2d:e1:4d:fd:5a:44:f7:73: b4:62:84:90:68:6e:1e:ce:79:5b:f0:79:1d:f9:2d: b3:04:ae:bb:a6:7d:63:dc:e2:ca:07:cd:9b:87:0c: 77:0f:b8:10:4e:88:d8:bf:94:fd:f8:bf:8c:92:88: f8:4a:b4:c5:c4:56:ac:58:ec:3c:3a:ad:8f:37:38: fe:9c:0d:cd:9f:71:9f:64:f0:53:bd:df:49:40:3f: 8d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:93:56:19:E2:E1:3C:17:A6:A7:29:C1:AE:10:10:A4:8C:D5:A9:73 X509v3 Authority Key Identifier: keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c8:8d:f8:1a:0f:94:b8:eb:3f:88:51:d6:c4:d1:88:4c:28: 1f:a0:bf:5d:42:6c:d0:82:cc:df:ee:88:a5:74:8a:81:39:3d: 34:f6:da:74:50:96:c0:fe:be:c8:fc:5a:ef:fa:be:3e:ef:cf: c7:7f:de:c0:3e:96:5b:4b:02:3e:89:c1:ee:54:4d:fc:62:3e: 6a:cc:fb:d0:d7:9e:2b:61:0b:82:be:62:da:fa:e3:9c:68:e6: d4:a5:02:15:2c:51:be:cc:71:2f:f1:f8:14:86:4e:9d:35:55: 36:d3:19:79:2d:6a:1f:4d:ef:6f:67:dd:d2:bb:09:d7:8c:df: 8d:a0:72:ed:98:de:3a:02:f4:f7:ff:1d:f7:f3:4d:b6:cd:33: f7:58:29:1c:c6:20:49:98:b9:b3:12:92:42:c8:e6:f4:0e:09: d9:7c:37:c4:51:a9:5f:e1:b4:9a:fb:e5:cd:11:2d:d7:97:c7: 9d:3a:0d:47:cb:24:49:1d:39:c3:68:dd:c0:4c:5c:bf:a6:b7: 10:48:7d:01:f4:41:72:f3:d6:07:91:90:27:c1:10:09:42:ca: 41:65:17:32:86:8d:ab:80:96:e0:e0:80:b5:a0:0c:49:7c:68: 3d:e8:7e:62:73:90:12:0d:4a:53:4c:f6:58:93:9c:88:e2:83: fa:82:67:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14yJJx4Z2XHtky9HXgCBcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw MTRiN2MwHhcNMjYwMTI1MTYwMTAxWhcNMjYwMTI2MTYwMTAxWjAzMTEwLwYDVQQD EygwNzkzNTYxOWUyZTEzYzE3YTZhNzI5YzFhZTEwMTBhNDhjZDVhOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdBzhC7czUuj9r1+6HvZUxy8RYwS /IgjHx8QjVwtcd22kwLPZ1dEi5jFjsAKdwtQ1tivH3dMNyz9OXDr21h2q2PcQ14C C33hXP3pPkuabn6GEzcbMMFVp10PvqlZ1K7j+ZT5NI+SduLP7cNXFhLyZuW5BDX8 lSwz/hGdsu/FAEqKa/Mg3waPvBLZVpVR4QHgxII7M25ZBfPxzAs/VTyrWUMqk0S5 nLVcmDZmLeFN/VpE93O0YoSQaG4eznlb8Hkd+S2zBK67pn1j3OLKB82bhwx3D7gQ TojYv5T9+L+Mkoj4SrTFxFasWOw8Oq2PNzj+nA3Nn3GfZPBTvd9JQD+N/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeTVhni4TwXpqcpwa4QEKSM1alzMB8GA1UdIwQY MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt MTE0YWQ0MWNmMzMxLzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMiN+BoP lLjrP4hR1sTRiEwoH6C/XUJs0ILM3+6IpXSKgTk9NPbadFCWwP6+yPxa7/q+Pu/P x3/ewD6WW0sCPonB7lRN/GI+asz70NeeK2ELgr5i2vrjnGjm1KUCFSxRvsxxL/H4 FIZOnTVVNtMZeS1qH03vb2fd0rsJ14zfjaBy7ZjeOgL09/8d9/NNts0z91gpHMYg SZi5sxKSQsjm9A4J2Xw3xFGpX+G0mvvlzREt15fHnToNR8skSR05w2jdwExcv6a3 EEh9AfRBcvPWB5GQJ8EQCULKQWUXMoaNq4CW4OCAtaAMSXxoPeh+YnOQEg1KU0z2 WJOciOKD+oJnoA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:13:46 2026 by rpki-client