This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json) Hash identifier: 7jLWOwiL03dEHgPnpUjVZtjJCJCqAwYyKnOlW4Kaj+0= Subject key identifier: F3:14:99:86:3B:BE:65:DE:8F:6C:AD:15:90:1A:CB:2F:1D:C3:72:DF Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54 Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54 Certificate serial: 019BF7D1D0E16E6351BAD6E4503AB50C34D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft Manifest number: 0207 Signing time: Mon 26 Jan 2026 01:01:21 +0000 Manifest this update: Mon 26 Jan 2026 01:01:21 +0000 Manifest next update: Tue 27 Jan 2026 01:01:21 +0000 Files and hashes: 1: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: X+nZl3m3g14xBAF8H01QTBb1M4IYTinuADA9LGrb2TY=) 2: uYeeyVnjpGhjZdAO0mHr7CJqfHg.roa (hash: FzLvKxr2COoLVWAh9ki2g9wdf08Gaszu8cu07a51Scw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:d0:e1:6e:63:51:ba:d6:e4:50:3a:b5:0c:34:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d51cae877df40a5d39412605070841bd102c54 Validity Not Before: Jan 26 01:01:21 2026 GMT Not After : Jan 27 01:01:21 2026 GMT Subject: CN=f31499863bbe65de8f6cad15901acb2f1dc372df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bf:cc:46:0a:8f:43:de:ef:ef:75:a5:82:da: 7e:e1:df:00:82:6b:ca:c2:10:0d:27:f7:92:c9:4e: 8d:eb:f4:94:f2:d6:f7:94:03:e4:73:91:77:da:d9: 26:35:90:9b:18:6d:1d:ff:04:22:ba:72:8f:cd:b2: 38:36:53:11:37:73:8e:b0:86:03:d9:eb:b3:74:a1: a7:31:02:0b:5e:80:8b:3b:10:7b:64:0f:d2:fb:58: 1a:85:1d:5c:92:e6:46:67:70:02:63:ef:cf:57:54: d1:06:49:2b:81:18:40:a9:b3:83:99:c8:c0:9a:60: 85:d7:91:c2:68:36:cd:17:8a:58:b2:82:4b:d8:ac: c2:be:2e:c7:c8:ae:72:9d:74:f9:54:60:67:64:b9: da:8a:66:0d:72:0b:f3:ed:e4:49:e7:c5:2b:d1:c1: 24:87:99:0a:31:5f:ef:e2:8d:b3:1f:2a:34:30:13: ba:6c:89:bb:9f:49:ba:a4:20:92:d5:5e:30:7b:f3: 13:ab:fd:d4:03:32:55:64:c5:0e:a9:eb:99:0a:c5: bf:86:06:43:4b:97:04:97:b4:b0:91:97:18:ae:e7: d0:d3:d8:bd:ea:20:8d:e8:02:a4:7e:02:dc:53:a4: 91:e8:54:d3:a5:8f:44:4c:3b:35:ab:e9:28:4a:fc: 23:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:14:99:86:3B:BE:65:DE:8F:6C:AD:15:90:1A:CB:2F:1D:C3:72:DF X509v3 Authority Key Identifier: keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:16:78:6d:12:cc:55:af:fe:1a:bf:b1:58:11:fd:2c:b8:2e: 88:f9:5c:d0:7e:d2:fa:05:9d:2d:04:1b:73:a5:68:dd:72:0d: 56:e8:13:61:db:02:6a:42:4d:4b:71:eb:dc:d4:ae:ff:bf:25: 22:29:4a:62:54:2c:2c:51:d7:c1:94:9c:95:e8:28:5a:f2:cd: 9b:5d:62:f4:5a:7f:b9:ce:9b:9f:5d:51:61:af:38:f6:e0:eb: 59:84:90:54:83:11:e9:fe:35:3a:4a:d3:0d:48:f6:e1:e4:6c: f3:2d:ca:0c:2e:39:dd:b6:86:f9:4a:c3:42:b3:d3:9b:80:a3: d3:04:8c:94:72:fb:47:6d:bc:81:46:a2:4a:4c:15:a0:54:e4: bb:eb:72:11:8c:5e:6e:43:ca:24:de:5d:18:f9:02:8d:19:5f: 9f:87:75:26:31:16:bf:7d:ad:ad:22:9f:6b:3d:00:d2:8c:04: 40:6c:02:26:e4:5e:89:85:25:4b:fe:19:06:90:2f:c8:ec:af: f0:e7:66:16:0b:7a:c8:df:76:ad:14:0e:5a:81:90:ac:d1:fc: f1:0b:86:c7:a6:e2:c1:05:e9:ad:bc:42:32:f1:dd:a5:39:56: c5:b5:19:aa:44:da:62:4c:10:0f:b2:2e:4b:4b:1f:d7:13:45: bd:41:2b:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30dDhbmNRutbkUDq1DDTQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDUxY2FlODc3ZGY0MGE1ZDM5NDEyNjA1MDcwODQxYmQx MDJjNTQwHhcNMjYwMTI2MDEwMTIxWhcNMjYwMTI3MDEwMTIxWjAzMTEwLwYDVQQD EyhmMzE0OTk4NjNiYmU2NWRlOGY2Y2FkMTU5MDFhY2IyZjFkYzM3MmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL/MRgqPQ97v73Wlgtp+4d8AgmvK whANJ/eSyU6N6/SU8tb3lAPkc5F32tkmNZCbGG0d/wQiunKPzbI4NlMRN3OOsIYD 2euzdKGnMQILXoCLOxB7ZA/S+1gahR1ckuZGZ3ACY+/PV1TRBkkrgRhAqbODmcjA mmCF15HCaDbNF4pYsoJL2KzCvi7HyK5ynXT5VGBnZLnaimYNcgvz7eRJ58Ur0cEk h5kKMV/v4o2zHyo0MBO6bIm7n0m6pCCS1V4we/MTq/3UAzJVZMUOqeuZCsW/hgZD S5cEl7SwkZcYrufQ09i96iCN6AKkfgLcU6SR6FTTpY9ETDs1q+koSvwjAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMUmYY7vmXej2ytFZAayy8dw3LfMB8GA1UdIwQY MBaAFAjVHK6HffQKXTlBJgUHCEG9ECxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hNmIwMDktMmQwYi00OGRkLTgyNWUt NGI0ZDFhZDk2YzBlLzEvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hNmIwMDktMmQwYi00OGRkLTgyNWUtNGI0ZDFhZDk2YzBl LzEvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohZ4bRLM Va/+Gr+xWBH9LLguiPlc0H7S+gWdLQQbc6Vo3XINVugTYdsCakJNS3Hr3NSu/78l IilKYlQsLFHXwZSclegoWvLNm11i9Fp/uc6bn11RYa849uDrWYSQVIMR6f41OkrT DUj24eRs8y3KDC453baG+UrDQrPTm4Cj0wSMlHL7R228gUaiSkwVoFTku+tyEYxe bkPKJN5dGPkCjRlfn4d1JjEWv32trSKfaz0A0owEQGwCJuReiYUlS/4ZBpAvyOyv 8OdmFgt6yN92rRQOWoGQrNH88QuGx6biwQXprbxCMvHdpTlWxbUZqkTaYkwQD7Iu S0sf1xNFvUErkg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:27 2026 by rpki-client