This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: dNOk7U/5sEy49Nx1Q7/IneZLCas5ez+oKzEKINCEMHA= Subject key identifier: ED:46:E0:80:63:7B:67:A5:2C:C5:3F:4C:E9:DC:B7:7C:5C:0A:68:DE Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019BF79A4CD956DA88B71B2BBAD3AE97500C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 00:00:43 +0000 Manifest this update: Mon 26 Jan 2026 00:00:43 +0000 Manifest next update: Tue 27 Jan 2026 00:00:43 +0000 Files and hashes: 1: 1dppl4E5LeYed1_ddeBSXFRftKA.roa (hash: pN3g9tWO1Nl1OAJCCKTDocJwUcz7cU9lRTyplesScF8=) 2: 7hii_CBkhWFEcR7PBsbgDyXmQ9Y.roa (hash: VParP3CSdlBKMMaiiyOgc9apoYvJ3aLSGeumM5G2suQ=) 3: 9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa (hash: 0BBbEj9KrnkzQ7LI3Ja4k/fn10TEbD/JLEqh/Y7YN5Q=) 4: 9zJS2sLQdMyIEXItDHnz9vENCZc.roa (hash: smANRs03fyEMELSZXfc50FOww78+6TO01q3PcjqHhg0=) 5: MARvCBJj6pQzGNHhjfVRnTPDXRw.roa (hash: W1iO+ZpTnMCy3mYaAEE8YESIC/Lb3z77r6zn9zHVz2Q=) 6: NpN7l3_hUP3xVFpljOuMEBlStvc.roa (hash: T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=) 7: ZffOLXHzTQQ9w6R4Acsptb5X-ZQ.roa (hash: nT41EZi54SNK5Qom8A2J9oxN87+LC+L6D9g8JwOo3+E=) 8: b25kHpS94xs5d-Cb2gg_RWdRdqA.roa (hash: UnoS92iWWLeA3lFor4dioIwIwXhzelHfz1mr8ZCSkhY=) 9: cA6GYxFNrQzJXvnUUCTkZ74uPLY.roa (hash: 9ZlPADtkA5tNsCz6vf4xeuKDXE0oMu2t/mqNk4DDlVc=) 10: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: y67dInlH9H0jnfs6h0yH+E1q6fldynypKzLV30vU+Qk=) 11: laLTLAZUfnJXL9IgOMNUJBbcIYM.roa (hash: qH+8NsTPRO3q9UjCnJr8tq7a5R+TvAmnEtSTXrLT0C0=) 12: lcBaOkK9THwl0XIqZgkoB-TZsbs.roa (hash: wKKJUT7JPve5W6FxY/yzXFmsp0AF6c9Iy3VcPHnP9M4=) 13: oX2NoeenvY6od0noJwHOC0vVDFU.roa (hash: PaRvm0af3RdwqkLgxZ1C0CNPV7CmkxdUeLl6SbuiQd4=) 14: r2fhwRZgDnJ42tEzYpq9QARdwNg.roa (hash: UN6m1b3Vnp+W6gqg/ChwnnprYWWgYrCXDJiUYFQZheM=) 15: sPqeNjwkgKgIPC9F-wg4yZRw5vo.roa (hash: gkiNfTfDhe6OjPwvNFzi/YKFCVBUpR1D9DW8GG28M8I=) 16: ww6ypu6XKZLBnCmu95aBOLrx3W4.roa (hash: MJWr+hVoOJcU+dBCIlq6NQXj1hTEMRYcYO7YQk9u0qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:4c:d9:56:da:88:b7:1b:2b:ba:d3:ae:97:50:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Jan 26 00:00:43 2026 GMT Not After : Jan 27 00:00:43 2026 GMT Subject: CN=ed46e080637b67a52cc53f4ce9dcb77c5c0a68de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:ee:64:f3:fd:38:86:ca:44:47:5e:78:e0: 11:af:20:d5:5e:b6:2b:ce:6d:a2:9d:fb:12:a3:4f: 5f:e5:bd:b6:d9:16:0d:38:db:28:8e:57:09:0e:c3: 7a:9e:31:a8:53:4a:b5:88:ca:de:4e:3d:b3:22:4a: 9e:2b:21:c0:61:13:64:d9:75:17:29:8f:02:30:7a: ad:8e:a1:d8:ea:d8:1b:e4:f9:95:0b:96:a0:1d:83: a9:7b:5d:cc:e1:e2:e9:7f:6c:5a:0c:a5:e7:c7:ba: ea:a9:96:d8:2e:71:3d:78:a1:eb:f8:52:55:40:fa: e8:8b:87:d0:0a:69:b0:a4:d1:d1:9f:c2:f4:ca:b3: 32:07:bf:b1:bf:ca:bc:f3:ee:39:99:1c:17:fa:2a: c6:0d:e9:43:fe:74:10:12:f8:90:3b:f6:bf:f3:d3: a9:bf:7c:51:12:12:99:bf:90:18:6c:26:7f:09:1d: 5b:94:06:5f:8c:7b:32:b6:1c:e0:d0:2d:42:23:66: 64:c6:47:df:10:95:ba:c4:2b:cd:20:cf:ab:97:7c: f3:ba:2a:4a:4c:6b:44:34:15:58:b7:7a:01:19:a4: 1f:77:47:40:1d:3b:57:5c:be:a2:a7:62:8b:74:74: 6a:52:cd:af:8d:f5:26:87:ce:61:28:88:25:03:0a: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:46:E0:80:63:7B:67:A5:2C:C5:3F:4C:E9:DC:B7:7C:5C:0A:68:DE X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:39:f2:d2:7b:a3:d2:f8:ca:ea:fe:48:ed:45:12:c2:42:87: f8:c4:32:5c:60:79:42:76:39:ea:82:b0:5e:8c:c2:da:fd:77: 4a:ea:50:d1:e1:70:67:60:5e:16:47:11:b8:71:7f:59:e1:09: eb:9b:f0:dd:ac:e7:78:a7:9a:61:4b:f1:f3:02:3b:0d:9e:12: 64:ae:e8:2f:43:78:bb:c2:73:ab:45:02:59:22:0a:0d:3b:ae: 72:3b:45:47:d1:20:9c:bb:99:ea:27:aa:01:74:c0:ca:16:47: 31:36:9c:84:80:1d:51:3f:4c:09:38:0c:e9:8d:e1:a9:2d:db: 8a:43:92:58:bf:b4:82:01:3e:1d:ff:c5:bc:2f:1a:83:63:6c: 19:61:7d:36:b6:7b:91:99:12:74:57:8b:c9:85:a3:6b:fb:9c: 66:72:2a:e6:d1:d6:95:c6:19:36:4f:8c:19:72:41:79:9a:65: 7c:fb:7a:05:fd:62:7a:05:e4:3e:46:3e:c5:71:1e:14:5e:f7: 43:76:56:6f:cd:21:b8:21:40:74:80:9e:47:26:e7:3a:d8:33: b5:74:08:a6:74:99:ab:38:43:65:a3:0a:4c:56:89:99:cb:f0: 28:ee:a9:9c:cf:96:9e:f6:8e:11:44:4e:94:37:37:fc:5b:42: dc:2f:2e:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mkzZVtqItxsrutOul1AMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwMTI2MDAwMDQzWhcNMjYwMTI3MDAwMDQzWjAzMTEwLwYDVQQD EyhlZDQ2ZTA4MDYzN2I2N2E1MmNjNTNmNGNlOWRjYjc3YzVjMGE2OGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnruZPP9OIbKREdeeOARryDVXrYr zm2infsSo09f5b222RYNONsojlcJDsN6njGoU0q1iMreTj2zIkqeKyHAYRNk2XUX KY8CMHqtjqHY6tgb5PmVC5agHYOpe13M4eLpf2xaDKXnx7rqqZbYLnE9eKHr+FJV QProi4fQCmmwpNHRn8L0yrMyB7+xv8q88+45mRwX+irGDelD/nQQEviQO/a/89Op v3xREhKZv5AYbCZ/CR1blAZfjHsythzg0C1CI2ZkxkffEJW6xCvNIM+rl3zzuipK TGtENBVYt3oBGaQfd0dAHTtXXL6ip2KLdHRqUs2vjfUmh85hKIglAwpfJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1G4IBje2elLMU/TOnct3xcCmjeMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDny0nuj 0vjK6v5I7UUSwkKH+MQyXGB5QnY56oKwXozC2v13SupQ0eFwZ2BeFkcRuHF/WeEJ 65vw3azneKeaYUvx8wI7DZ4SZK7oL0N4u8Jzq0UCWSIKDTuucjtFR9EgnLuZ6ieq AXTAyhZHMTachIAdUT9MCTgM6Y3hqS3bikOSWL+0ggE+Hf/FvC8ag2NsGWF9NrZ7 kZkSdFeLyYWja/ucZnIq5tHWlcYZNk+MGXJBeZplfPt6Bf1iegXkPkY+xXEeFF73 Q3ZWb80huCFAdICeRybnOtgztXQIpnSZqzhDZaMKTFaJmcvwKO6pnM+WnvaOEURO lDc3/FtC3C8u5Q== -----END CERTIFICATE-----Generated at Mon Jan 26 04:25:03 2026 by rpki-client