This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json) Hash identifier: IQGlSGTeN+ehkLde7TyjOpzSSOPAWZ95ele7dt2mxWE= Subject key identifier: C2:CA:D9:F6:F3:4C:6A:91:0F:28:A3:13:44:90:4B:31:28:CD:30:05 Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Certificate serial: 019BF4D007DD907920645AE9FE4C06131E64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft Manifest number: D6 Signing time: Sun 25 Jan 2026 11:00:32 +0000 Manifest this update: Sun 25 Jan 2026 11:00:32 +0000 Manifest next update: Mon 26 Jan 2026 11:00:32 +0000 Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: tCjOyoiyw5tWiiqFpPSGjD0WtO4T0Ja5gXb+ugy77qg=) 2: NUFFNkGU4JYbyy4RYS95qukxk74.roa (hash: 6qIGa/yfIOna0n6jM1wvUBaSfiq9oHST89COIeie1Dw=) 3: ZyjNynpH1Sd3iZflEwkYCvSf2zQ.roa (hash: 0cR77B7pMjaFTEO1Opv0sWqFJFren4DQVM3QfUXJoFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:07:dd:90:79:20:64:5a:e9:fe:4c:06:13:1e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Validity Not Before: Jan 25 11:00:32 2026 GMT Not After : Jan 26 11:00:32 2026 GMT Subject: CN=c2cad9f6f34c6a910f28a31344904b3128cd3005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:51:99:59:1c:f1:d9:36:22:c9:8d:e7:ab: 91:dd:8e:8e:6f:1e:77:ea:98:19:5b:1e:0c:9a:b0: 40:9e:bd:54:92:be:d6:62:fc:4d:68:56:d3:b2:bb: 38:40:92:7d:ce:53:2f:b6:ef:38:f4:95:a1:31:74: a9:1a:9f:a5:d3:fc:48:08:b7:ce:42:3b:af:04:a6: 32:19:3f:e0:ad:f3:d9:d4:fd:a0:e4:a5:d6:ba:71: 87:3e:3a:c2:5a:fe:40:e3:8c:3b:92:4d:90:8c:fe: bc:3e:20:b3:c0:d3:ca:49:51:4c:ff:1c:da:62:c6: 57:c6:19:2c:cc:6a:63:4b:a2:1b:d5:66:5c:cc:f9: 4e:0d:66:29:ff:f1:81:1c:91:f5:cb:48:81:4e:00: b9:9d:cb:67:d2:89:12:aa:f2:92:89:07:cb:85:db: c4:6f:9a:46:45:45:27:01:6f:ff:6a:e6:27:31:3a: b0:54:77:a8:d8:1e:c8:92:0b:6e:62:75:7c:72:8b: e7:20:23:ae:78:8a:75:ea:33:36:9c:81:c1:17:c0: 0e:ec:11:b2:a1:bd:8d:6e:b3:5a:c9:d7:ea:42:ae: 6c:57:3e:25:8e:e2:1d:d7:84:6f:4e:09:9d:1b:80: db:a0:4b:5c:dc:82:e4:6a:4f:50:d3:49:38:c9:c9: 06:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CA:D9:F6:F3:4C:6A:91:0F:28:A3:13:44:90:4B:31:28:CD:30:05 X509v3 Authority Key Identifier: keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c0:ba:b6:c5:c8:0e:8b:29:c5:ec:46:31:95:d4:73:fb:12: 5b:ed:b0:55:b6:7c:4b:c0:77:6a:7c:65:ef:54:de:91:44:6f: f4:35:27:28:67:c7:b7:89:d9:58:63:cc:cc:4e:e0:f9:28:94: 6b:9c:50:8b:24:6b:cf:11:73:cc:7e:24:91:9f:2c:cb:4e:5c: 7d:b2:b9:b8:40:8d:15:b7:be:e5:a3:83:9b:6e:f7:50:5a:b9: 3d:84:1e:82:2c:b3:24:c1:ad:54:db:a6:45:f2:3b:49:39:57: 12:4b:87:8a:86:e1:74:97:aa:f4:8b:02:a4:7e:42:50:c8:7a: 54:cb:ac:d8:73:2c:00:3e:06:92:a2:0f:98:67:3d:eb:4d:37: 82:8e:d9:30:b7:07:0a:ab:d8:a2:10:fd:9f:86:1b:ef:36:a7: 6c:09:51:62:b5:f2:6b:59:97:46:bb:b1:0e:95:e0:35:9b:ef: b1:48:4e:a7:3f:fb:e7:46:8e:11:62:c0:9c:b1:3e:b1:f3:a2: 93:59:3f:c7:41:1a:81:3c:8d:9c:d8:43:d7:7b:dc:25:5b:d7: 72:ae:3d:70:99:45:90:f7:cf:6e:3a:aa:0d:0c:2e:e0:af:83: 09:2b:cf:d8:d4:bc:8a:8d:7c:25:81:3f:3d:a5:57:fb:b2:73: 15:91:62:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00AfdkHkgZFrp/kwGEx5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm NDI2MTEwHhcNMjYwMTI1MTEwMDMyWhcNMjYwMTI2MTEwMDMyWjAzMTEwLwYDVQQD EyhjMmNhZDlmNmYzNGM2YTkxMGYyOGEzMTM0NDkwNGIzMTI4Y2QzMDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjJRmVkc8dk2IsmN56uR3Y6Obx53 6pgZWx4MmrBAnr1Ukr7WYvxNaFbTsrs4QJJ9zlMvtu849JWhMXSpGp+l0/xICLfO QjuvBKYyGT/grfPZ1P2g5KXWunGHPjrCWv5A44w7kk2QjP68PiCzwNPKSVFM/xza YsZXxhkszGpjS6Ib1WZczPlODWYp//GBHJH1y0iBTgC5nctn0okSqvKSiQfLhdvE b5pGRUUnAW//auYnMTqwVHeo2B7IkgtuYnV8covnICOueIp16jM2nIHBF8AO7BGy ob2NbrNaydfqQq5sVz4ljuId14RvTgmdG4DboEtc3ILkak9Q00k4yckGTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLK2fbzTGqRDyijE0SQSzEozTAFMB8GA1UdIwQY MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct MjQyNDY2ODJiZjAwLzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8C6tsXI DospxexGMZXUc/sSW+2wVbZ8S8B3anxl71TekURv9DUnKGfHt4nZWGPMzE7g+SiU a5xQiyRrzxFzzH4kkZ8sy05cfbK5uECNFbe+5aODm273UFq5PYQegiyzJMGtVNum RfI7STlXEkuHiobhdJeq9IsCpH5CUMh6VMus2HMsAD4GkqIPmGc96003go7ZMLcH CqvYohD9n4Yb7zanbAlRYrXya1mXRruxDpXgNZvvsUhOpz/750aOEWLAnLE+sfOi k1k/x0EagTyNnNhD13vcJVvXcq49cJlFkPfPbjqqDQwu4K+DCSvP2NS8io18JYE/ PaVX+7JzFZFiZA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:19 2026 by rpki-client