This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json) Hash identifier: bVWId7JQiVigDhnBRv3J1OmPU0IcUoja8mZvXN+VrsU= Subject key identifier: 95:F5:2E:50:14:40:33:0F:66:92:08:ED:0B:7F:E9:76:25:3D:7C:FA Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06 Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06 Certificate serial: 019BF8ADE48851511AD6CA69C2CAF26A1083 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft Manifest number: 0E29 Signing time: Mon 26 Jan 2026 05:01:44 +0000 Manifest this update: Mon 26 Jan 2026 05:01:44 +0000 Manifest next update: Tue 27 Jan 2026 05:01:44 +0000 Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: akCgeKeKY1eZ3jDbgRD7rrze/M8Px4PZYz3buvTslnI=) 2: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (hash: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:e4:88:51:51:1a:d6:ca:69:c2:ca:f2:6a:10:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06 Validity Not Before: Jan 26 05:01:44 2026 GMT Not After : Jan 27 05:01:44 2026 GMT Subject: CN=95f52e501440330f669208ed0b7fe976253d7cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:40:9c:7f:d5:f6:57:17:5a:e9:0a:40:9b: 1f:f1:eb:0c:e0:e3:48:46:fb:59:72:d6:c1:ef:37: 39:74:7a:3d:dd:c9:b1:c4:00:ee:91:5c:2e:f4:8e: 2f:e2:8e:66:40:74:4a:a4:b7:9c:ff:00:f5:e0:c8: 08:c5:80:59:b7:d0:59:75:80:61:43:a4:e5:f9:97: cc:ab:6e:cc:33:78:e4:59:9d:12:cd:70:63:7b:00: 3f:28:df:56:2f:2f:93:4e:e7:3a:d8:65:ec:9e:50: ff:8f:3b:c8:6b:9b:fb:6f:f8:59:fb:4a:09:af:c4: df:74:60:55:ce:bc:99:a9:cb:59:f7:6f:d9:4c:d1: 9e:bc:61:2c:13:5f:6c:66:56:28:0e:98:9d:66:53: 47:33:95:6c:b9:6c:bb:79:2b:c5:61:a4:a2:db:69: a0:34:ca:9e:fe:7d:58:0b:06:7b:9d:76:35:3c:46: c5:b5:bb:7b:ba:08:49:e8:30:41:06:5b:f4:9d:c9: ca:3f:ce:5c:7f:68:57:92:59:20:da:23:1b:9e:98: 8b:52:ca:a7:45:8f:fe:02:e4:11:6c:43:1d:57:e3: 89:72:0f:eb:b3:e9:8f:a1:26:e7:ad:be:93:19:0a: e6:13:43:54:5d:d9:ca:ca:7d:0f:92:6d:c2:6e:f1: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F5:2E:50:14:40:33:0F:66:92:08:ED:0B:7F:E9:76:25:3D:7C:FA X509v3 Authority Key Identifier: keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bc:87:89:9b:04:2b:6f:1e:d7:36:3b:2f:dc:91:92:5d:ab: e2:4b:64:cb:bd:d1:17:22:cf:2c:35:83:a0:59:49:d2:c9:80: 4a:d5:5c:65:df:ef:59:45:8c:6e:43:ce:72:6a:42:54:01:d9: 84:00:a7:5b:31:0c:4d:04:b4:91:6c:8c:8e:b5:a9:09:13:09: e3:52:c9:78:ee:d6:a5:75:77:e5:f6:4c:2f:f9:b5:4c:50:45: c4:bb:d7:b5:8c:81:30:33:db:d9:21:ae:d1:0d:e4:ec:58:f9: 41:78:97:8c:af:f5:34:ed:88:77:79:38:28:8a:cf:91:b5:4d: 80:b7:7a:ef:06:7e:89:2b:45:0b:55:f4:fb:90:5f:67:da:d7: 25:88:dd:18:77:94:99:ca:39:e4:8b:9f:d6:6f:f0:1b:66:75: 25:2e:8b:25:7b:07:02:89:ac:20:14:bb:df:c5:78:0d:67:19: 9c:97:5e:06:19:20:bd:e5:c3:77:9a:85:2b:81:15:b2:ee:26: f3:65:0b:94:98:e6:13:da:3d:e7:54:e9:46:0d:1a:fc:44:80: 0d:65:21:57:2b:93:05:50:0d:5e:9c:93:d6:6d:a3:fa:99:a8: 89:b6:6c:22:f2:82:6c:0b:62:18:0d:fd:1a:e8:97:40:55:7f: 14:25:8b:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4reSIUVEa1sppwsryahCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NDRhYWFjN2YyZWJiMjk4MWMyNDc2M2ViM2Q2MDQ1ZWZi ZDZmMDYwHhcNMjYwMTI2MDUwMTQ0WhcNMjYwMTI3MDUwMTQ0WjAzMTEwLwYDVQQD Eyg5NWY1MmU1MDE0NDAzMzBmNjY5MjA4ZWQwYjdmZTk3NjI1M2Q3Y2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG5AnH/V9lcXWukKQJsf8esM4ONI RvtZctbB7zc5dHo93cmxxADukVwu9I4v4o5mQHRKpLec/wD14MgIxYBZt9BZdYBh Q6Tl+ZfMq27MM3jkWZ0SzXBjewA/KN9WLy+TTuc62GXsnlD/jzvIa5v7b/hZ+0oJ r8TfdGBVzryZqctZ92/ZTNGevGEsE19sZlYoDpidZlNHM5VsuWy7eSvFYaSi22mg NMqe/n1YCwZ7nXY1PEbFtbt7ughJ6DBBBlv0ncnKP85cf2hXklkg2iMbnpiLUsqn RY/+AuQRbEMdV+OJcg/rs+mPoSbnrb6TGQrmE0NUXdnKyn0Pkm3CbvHvqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJX1LlAUQDMPZpII7Qt/6XYlPXz6MB8GA1UdIwQY MBaAFAlEqqx/LrspgcJHY+s9YEXvvW8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUt NjZjZDAxOTYxZTQ2LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUtNjZjZDAxOTYxZTQ2 LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLyHiZsE K28e1zY7L9yRkl2r4ktky73RFyLPLDWDoFlJ0smAStVcZd/vWUWMbkPOcmpCVAHZ hACnWzEMTQS0kWyMjrWpCRMJ41LJeO7WpXV35fZML/m1TFBFxLvXtYyBMDPb2SGu 0Q3k7Fj5QXiXjK/1NO2Id3k4KIrPkbVNgLd67wZ+iStFC1X0+5BfZ9rXJYjdGHeU mco55Iuf1m/wG2Z1JS6LJXsHAomsIBS738V4DWcZnJdeBhkgveXDd5qFK4EVsu4m 82ULlJjmE9o951TpRg0a/ESADWUhVyuTBVANXpyT1m2j+pmoibZsIvKCbAtiGA39 GuiXQFV/FCWLjQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:16 2026 by rpki-client