$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: N1IJjlAFzwCpCHs4hAgSfks8xPCXq65CVvnyPRcR6Ek= Subject key identifier: 3D:1A:2D:4C:E7:2E:5A:15:BF:2E:42:E6:CE:86:CE:04:BD:C0:A8:C5 Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019FA9E2A2E4F9EBDAAD72BE5ECF329D9D1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 19DB Signing time: Tue 28 Jul 2026 18:00:29 +0000 Manifest this update: Tue 28 Jul 2026 18:00:29 +0000 Manifest next update: Wed 29 Jul 2026 18:00:29 +0000 Files and hashes: 1: 06KsS95-uc37njfmN_yGJWnyq6U.roa (hash: K4nK55gW5SZLVxc3BcynZpT0UUD5TASwk3Svrgii/lI=) 2: 1dppl4E5LeYed1_ddeBSXFRftKA.roa (hash: pN3g9tWO1Nl1OAJCCKTDocJwUcz7cU9lRTyplesScF8=) 3: 7hii_CBkhWFEcR7PBsbgDyXmQ9Y.roa (hash: VParP3CSdlBKMMaiiyOgc9apoYvJ3aLSGeumM5G2suQ=) 4: 9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa (hash: 0BBbEj9KrnkzQ7LI3Ja4k/fn10TEbD/JLEqh/Y7YN5Q=) 5: 9zJS2sLQdMyIEXItDHnz9vENCZc.roa (hash: smANRs03fyEMELSZXfc50FOww78+6TO01q3PcjqHhg0=) 6: HZuqAD7c7zD61eQDUNc43p13Rus.roa (hash: CLnSiDlapsSBOMDzZqR931D1WlMkd94ux2JTr6MJ7iY=) 7: MARvCBJj6pQzGNHhjfVRnTPDXRw.roa (hash: W1iO+ZpTnMCy3mYaAEE8YESIC/Lb3z77r6zn9zHVz2Q=) 8: NpN7l3_hUP3xVFpljOuMEBlStvc.roa (hash: T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=) 9: ZffOLXHzTQQ9w6R4Acsptb5X-ZQ.roa (hash: nT41EZi54SNK5Qom8A2J9oxN87+LC+L6D9g8JwOo3+E=) 10: b25kHpS94xs5d-Cb2gg_RWdRdqA.roa (hash: UnoS92iWWLeA3lFor4dioIwIwXhzelHfz1mr8ZCSkhY=) 11: bcSgZpZBwtbiIL48flh5F_NGfHo.roa (hash: I/NWDutoo/tdtpPAOJuOwfmfUJCK6YwHRmYnSpUxsCY=) 12: cA6GYxFNrQzJXvnUUCTkZ74uPLY.roa (hash: 9ZlPADtkA5tNsCz6vf4xeuKDXE0oMu2t/mqNk4DDlVc=) 13: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: ps0TUk2Bl/CggYVOd7VFERp4uAUJt6eNIHvRftb+gmY=) 14: laLTLAZUfnJXL9IgOMNUJBbcIYM.roa (hash: qH+8NsTPRO3q9UjCnJr8tq7a5R+TvAmnEtSTXrLT0C0=) 15: oX2NoeenvY6od0noJwHOC0vVDFU.roa (hash: PaRvm0af3RdwqkLgxZ1C0CNPV7CmkxdUeLl6SbuiQd4=) 16: sPqeNjwkgKgIPC9F-wg4yZRw5vo.roa (hash: gkiNfTfDhe6OjPwvNFzi/YKFCVBUpR1D9DW8GG28M8I=) 17: ww6ypu6XKZLBnCmu95aBOLrx3W4.roa (hash: MJWr+hVoOJcU+dBCIlq6NQXj1hTEMRYcYO7YQk9u0qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:a2:e4:f9:eb:da:ad:72:be:5e:cf:32:9d:9d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Jul 28 18:00:29 2026 GMT Not After : Jul 29 18:00:29 2026 GMT Subject: CN=3d1a2d4ce72e5a15bf2e42e6ce86ce04bdc0a8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5e:98:c5:a1:ed:6e:cb:ae:d8:52:7b:f6:e8: d7:a2:95:94:f2:07:2c:34:1b:8b:63:6a:0d:fc:3b: a6:17:d8:5b:48:ad:46:d4:18:d5:59:a3:0b:2b:cb: 8b:dc:a9:f6:2e:c0:46:1e:eb:c5:cd:8a:70:18:04: 9a:81:77:fd:ba:c3:66:6c:e0:24:cf:40:0f:a6:a9: bd:57:af:dd:a3:65:c8:8e:ba:f1:89:c1:e7:62:45: e8:d8:c3:b5:d6:36:3e:84:00:97:fe:73:1f:2d:1a: 20:2e:5b:44:98:b0:c0:00:c3:00:fc:03:eb:56:bf: 5d:88:7a:de:ea:8b:e5:3f:ba:00:9c:73:e9:d2:f5: cd:0a:11:db:e6:56:6e:09:8c:c9:b2:58:f4:bc:f6: 58:b9:ee:3f:e5:80:63:8b:8c:3e:ea:fd:e7:1b:bf: 1d:7a:1c:b3:e3:7e:4b:19:d9:89:89:53:a8:f0:ba: da:f5:94:b8:7c:44:3e:71:bc:fe:1d:59:b5:b5:1e: 1c:85:fa:6b:fb:e0:d7:c0:ca:a3:bf:bc:ef:55:9f: 8c:31:07:a0:cc:7b:ac:74:d4:a1:ec:31:92:59:8e: 55:f4:c4:92:9e:8d:15:59:53:d4:db:28:d4:71:38: ff:5c:1c:1e:0c:9e:a9:77:3f:44:38:3b:45:07:43: 37:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1A:2D:4C:E7:2E:5A:15:BF:2E:42:E6:CE:86:CE:04:BD:C0:A8:C5 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:47:de:f9:a3:b0:63:e8:78:a6:8d:fb:f4:14:d6:da:4b:01: 55:e4:e0:5a:a9:c9:de:01:50:d7:5e:0f:11:e0:98:f4:09:98: 0f:93:8d:18:53:5d:66:ee:63:04:6f:96:0c:77:bd:be:60:4e: 5f:b0:5f:42:d1:d5:a5:1d:12:3a:82:00:b1:c0:b5:f6:ac:9b: 7e:4f:19:04:05:c0:a6:0b:d4:0a:2f:c8:05:93:89:ba:03:28: f8:df:40:23:a5:d9:6d:02:16:06:32:76:2d:8e:92:58:ab:03: ec:a1:a4:e6:ad:06:ec:54:f8:df:80:ab:fc:5e:28:42:0d:d0: 56:07:fe:e2:5b:40:ae:af:d5:5f:7c:56:d6:68:f4:84:a5:cd: b9:00:f2:2f:fb:e3:42:1f:d7:46:06:49:df:b8:b3:8e:b1:cd: bb:f6:04:cb:c0:ad:62:95:fa:99:f1:ea:6d:b5:70:ae:41:c6: 57:62:19:c3:55:5c:4c:16:08:72:4f:30:b5:7b:3d:5b:14:e1: f6:7f:7c:9e:8d:c1:fe:8f:89:99:6f:62:26:e4:61:36:65:52: 96:9b:40:09:bd:fb:32:a6:86:e4:45:4e:a3:43:47:a4:80:39: 5f:35:92:95:84:e8:96:6c:de:cb:8f:30:71:c2:e5:a2:58:ad: 60:6a:ea:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4qLk+evarXK+Xs8ynZ0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwNzI4MTgwMDI5WhcNMjYwNzI5MTgwMDI5WjAzMTEwLwYDVQQD EygzZDFhMmQ0Y2U3MmU1YTE1YmYyZTQyZTZjZTg2Y2UwNGJkYzBhOGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml6YxaHtbsuu2FJ79ujXopWU8gcs NBuLY2oN/DumF9hbSK1G1BjVWaMLK8uL3Kn2LsBGHuvFzYpwGASagXf9usNmbOAk z0APpqm9V6/do2XIjrrxicHnYkXo2MO11jY+hACX/nMfLRogLltEmLDAAMMA/APr Vr9diHre6ovlP7oAnHPp0vXNChHb5lZuCYzJslj0vPZYue4/5YBji4w+6v3nG78d ehyz435LGdmJiVOo8Lra9ZS4fEQ+cbz+HVm1tR4chfpr++DXwMqjv7zvVZ+MMQeg zHusdNSh7DGSWY5V9MSSno0VWVPU2yjUcTj/XBweDJ6pdz9EODtFB0M3PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0aLUznLloVvy5C5s6GzgS9wKjFMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkfe+aOw Y+h4po379BTW2ksBVeTgWqnJ3gFQ114PEeCY9AmYD5ONGFNdZu5jBG+WDHe9vmBO X7BfQtHVpR0SOoIAscC19qybfk8ZBAXApgvUCi/IBZOJugMo+N9AI6XZbQIWBjJ2 LY6SWKsD7KGk5q0G7FT434Cr/F4oQg3QVgf+4ltArq/VX3xW1mj0hKXNuQDyL/vj Qh/XRgZJ37izjrHNu/YEy8CtYpX6mfHqbbVwrkHGV2IZw1VcTBYIck8wtXs9WxTh 9n98no3B/o+JmW9iJuRhNmVSlptACb37MqaG5EVOo0NHpIA5XzWSlYTolmzey48w ccLlolitYGrqSA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:35:16 2026 by rpki-client