This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json) Hash identifier: w3AE26aMKQD1x040K8aMw4uW4+XMfP0Bpm00W19Rwhk= Subject key identifier: 40:58:32:E3:30:DF:12:B0:89:3B:3F:96:7D:30:09:72:2C:6B:FB:65 Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7 Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7 Certificate serial: 019BF68814C3885CF4DD617723E0FF30D372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft Manifest number: 1593 Signing time: Sun 25 Jan 2026 19:01:11 +0000 Manifest this update: Sun 25 Jan 2026 19:01:11 +0000 Manifest next update: Mon 26 Jan 2026 19:01:11 +0000 Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: 2zxhHVlmyHtASQ9p0VoEBFXY5feNsz+gHE1ZOETC3i8=) 2: EP3_Y_2rIqHTOMptiyzO0uUUxw0.roa (hash: cbNaVlReRWd6gx/q6NH3r5/UXA7TpZqlkYS//LHJrhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:14:c3:88:5c:f4:dd:61:77:23:e0:ff:30:d3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7 Validity Not Before: Jan 25 19:01:11 2026 GMT Not After : Jan 26 19:01:11 2026 GMT Subject: CN=405832e330df12b0893b3f967d3009722c6bfb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:40:72:f5:88:d7:56:95:6e:c7:25:c8:d2:5b: b8:bf:84:fe:15:aa:c7:0b:fa:b1:72:3a:76:1d:2e: 79:8f:2c:e1:2f:03:74:f7:cf:45:bf:73:a6:25:47: 5c:2d:0e:be:c2:37:9a:13:52:d2:48:f7:2d:3e:c9: e5:28:38:3e:10:9b:ed:ec:04:e5:d6:2a:39:7d:c4: ea:16:a0:96:4c:1f:94:34:30:f0:e2:01:75:e7:3c: 66:84:43:cf:b8:d3:09:16:de:ac:e8:78:d7:fe:51: 05:27:0a:0a:8e:21:57:dd:9e:ae:a3:1b:e1:8c:6f: 18:11:36:5e:5b:6a:fd:2f:aa:52:05:87:cd:40:d9: bd:a5:18:c3:b7:2f:cc:95:56:02:76:c4:57:26:4c: 7b:20:ae:e6:c0:34:1f:cb:e9:57:a2:05:c7:a2:21: ed:ac:71:33:61:4e:c6:a0:ae:6b:cd:3f:26:59:5e: ab:0c:b8:44:2d:25:fa:d9:c0:9c:d0:90:0b:17:8e: d8:69:33:e6:6e:52:29:89:cd:6b:38:da:ee:30:ea: fb:e4:66:a8:af:b0:7f:be:1c:84:88:ca:f4:d7:91: fa:9a:0c:2a:e0:9d:dc:04:b8:8a:2d:41:85:fe:9d: 70:27:21:db:79:99:95:31:a0:36:df:51:a9:b5:6e: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:58:32:E3:30:DF:12:B0:89:3B:3F:96:7D:30:09:72:2C:6B:FB:65 X509v3 Authority Key Identifier: keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bc:36:0d:7e:94:dc:56:01:18:80:5c:3b:8c:0d:00:ff:45: 79:31:71:18:29:44:c3:4b:5b:fe:3b:e6:d3:31:d8:f9:04:95: fc:79:ff:ca:05:b6:a4:2a:f7:d5:da:f9:2c:07:97:f1:b2:10: db:60:5c:3e:6b:a1:9f:86:68:32:7a:15:b1:56:ec:ce:f7:54: 62:94:d6:3f:42:62:64:4e:52:33:be:90:da:80:af:32:6e:d5: af:48:20:27:99:dc:91:5a:f7:d0:f0:69:7a:18:b2:1b:02:73: 59:26:74:8c:4a:f8:98:a0:9e:71:c1:cf:16:3e:00:b0:7a:c9: 91:e5:9f:60:12:62:c8:d8:e7:6a:c0:75:21:5f:b9:ac:3f:33: 6a:74:35:3c:0b:22:74:d6:57:1e:74:0e:12:e6:81:8d:4a:a4: eb:fe:68:15:79:ee:72:1a:d5:02:bf:61:34:e2:a2:cc:6f:d5: 84:0e:0b:c8:d9:87:d7:56:f7:67:1e:d0:09:77:05:08:ae:1e: 75:5e:d9:f6:97:1a:cf:71:8a:f1:04:43:ab:e7:0c:a3:38:7c: cf:d2:f3:a9:a1:e9:f2:ce:44:04:7c:65:4d:a5:4b:96:79:ea: 0b:f5:31:37:a8:44:2d:2b:12:4a:0a:11:77:2b:5e:be:c0:dd: e1:27:53:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iBTDiFz03WF3I+D/MNNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTFhNWI2OGVjYTc2OGYyMTFhNDhlODU2ZDdmNTgzZjkw ZTc1ZTcwHhcNMjYwMTI1MTkwMTExWhcNMjYwMTI2MTkwMTExWjAzMTEwLwYDVQQD Eyg0MDU4MzJlMzMwZGYxMmIwODkzYjNmOTY3ZDMwMDk3MjJjNmJmYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30By9YjXVpVuxyXI0lu4v4T+FarH C/qxcjp2HS55jyzhLwN0989Fv3OmJUdcLQ6+wjeaE1LSSPctPsnlKDg+EJvt7ATl 1io5fcTqFqCWTB+UNDDw4gF15zxmhEPPuNMJFt6s6HjX/lEFJwoKjiFX3Z6uoxvh jG8YETZeW2r9L6pSBYfNQNm9pRjDty/MlVYCdsRXJkx7IK7mwDQfy+lXogXHoiHt rHEzYU7GoK5rzT8mWV6rDLhELSX62cCc0JALF47YaTPmblIpic1rONruMOr75Gao r7B/vhyEiMr015H6mgwq4J3cBLiKLUGF/p1wJyHbeZmVMaA231GptW53owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBYMuMw3xKwiTs/ln0wCXIsa/tlMB8GA1UdIwQY MBaAFArhpbaOynaPIRpI6FbX9YP5DnXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYt YjljODliOWIxZjY1LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYtYjljODliOWIxZjY1 LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7w2DX6U 3FYBGIBcO4wNAP9FeTFxGClEw0tb/jvm0zHY+QSV/Hn/ygW2pCr31dr5LAeX8bIQ 22BcPmuhn4ZoMnoVsVbszvdUYpTWP0JiZE5SM76Q2oCvMm7Vr0ggJ5nckVr30PBp ehiyGwJzWSZ0jEr4mKCeccHPFj4AsHrJkeWfYBJiyNjnasB1IV+5rD8zanQ1PAsi dNZXHnQOEuaBjUqk6/5oFXnuchrVAr9hNOKizG/VhA4LyNmH11b3Zx7QCXcFCK4e dV7Z9pcaz3GK8QRDq+cMozh8z9LzqaHp8s5EBHxlTaVLlnnqC/UxN6hELSsSSgoR dytevsDd4SdT9w== -----END CERTIFICATE-----Generated at Mon Jan 26 05:13:44 2026 by rpki-client