This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json) Hash identifier: ZAagmh0GgZFVmcII0++xcrsdmxnHySMYIn/kzj1iZO4= Subject key identifier: DE:A7:9E:77:7F:FE:32:37:BA:5A:CB:A8:C4:82:6E:32:0E:17:56:F6 Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1 Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1 Certificate serial: 019BF574E8AAC1082304DF85E24D901C8574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft Manifest number: 1300 Signing time: Sun 25 Jan 2026 14:00:37 +0000 Manifest this update: Sun 25 Jan 2026 14:00:37 +0000 Manifest next update: Mon 26 Jan 2026 14:00:37 +0000 Files and hashes: 1: 7jYS9gDVEX9tzUHFmvI04TaA1ho.roa (hash: C2ax0Rr6kCcrNWLHMlCQV2VOflPoN/onpTnbRqEbck4=) 2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: Krq3RgUqEQUaELwbMELC3iDanEpSecUNAVAiMqUc+pA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:e8:aa:c1:08:23:04:df:85:e2:4d:90:1c:85:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1 Validity Not Before: Jan 25 14:00:37 2026 GMT Not After : Jan 26 14:00:37 2026 GMT Subject: CN=dea79e777ffe3237ba5acba8c4826e320e1756f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:8d:44:64:9b:4c:41:6e:12:39:16:12:b2: 7e:b9:4a:69:d0:5e:ae:42:b0:f6:f3:4f:0a:2a:0a: d1:e7:6b:92:a9:1f:af:cf:ba:27:d9:eb:10:82:9f: ab:ee:dd:2a:88:dc:17:4b:e8:57:4e:65:c5:93:07: 82:59:b0:f6:24:5e:a4:d6:ff:0d:4a:da:ce:93:2f: 4b:0a:88:9b:45:dc:40:56:5e:0f:ef:0e:36:aa:74: d3:42:07:d5:2a:16:e3:4f:cd:6a:62:da:3b:e0:36: fc:98:b1:07:f3:d1:1d:10:7c:cf:f9:59:89:75:e3: e6:1c:34:ce:ae:7f:0e:bd:0e:de:a0:1c:c2:16:3b: fc:e5:54:45:aa:05:01:07:d7:ce:a4:92:69:11:31: 65:04:09:df:a8:ed:bd:9f:97:81:10:a2:7b:29:18: 9a:f5:82:ea:17:16:28:18:d5:15:3b:ad:ef:be:20: e7:20:ee:92:66:93:5d:58:a3:cc:6f:69:57:9a:24: 5a:65:8c:9b:6c:7c:1b:59:0b:5b:7a:cd:fe:f7:fc: 98:c7:45:fc:5b:eb:a0:f8:6f:18:e9:c3:30:be:1a: 1b:6b:13:66:a6:1b:20:2d:e0:0c:ca:b2:c6:45:24: dd:ca:f3:c8:93:57:74:02:8a:33:3a:41:08:ed:e8: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A7:9E:77:7F:FE:32:37:BA:5A:CB:A8:C4:82:6E:32:0E:17:56:F6 X509v3 Authority Key Identifier: keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6a:e4:62:86:7d:2d:de:f0:c9:f9:43:e3:85:7e:75:37:d9: d3:3c:28:f1:65:64:db:e6:43:b7:cf:97:15:52:80:68:24:68: d4:79:51:5f:4c:de:76:2b:fc:7a:b4:39:48:fc:d0:81:e3:75: 7b:19:04:92:19:0c:35:52:f8:8e:f5:9b:73:54:17:91:d5:ae: 98:29:6b:eb:bc:de:ee:96:b8:72:89:29:6e:01:d9:01:06:43: f5:a9:69:bf:d1:bb:9a:94:6a:d6:ee:d5:5b:14:d0:9c:28:0a: 0b:56:56:7d:94:98:01:e8:04:ec:7b:e3:b9:37:c4:1d:bb:d2: 13:54:15:9e:59:6a:2d:da:dd:f0:88:2a:de:0a:e2:3e:66:71: c3:77:fb:b1:f0:a9:22:c9:40:27:f5:bb:33:f7:e1:85:96:6a: 82:fe:6e:1c:c3:80:87:d5:a5:51:43:09:0c:ae:a8:5f:0e:e2: 7e:df:24:a4:05:24:f7:f9:06:1f:94:5a:06:bf:7c:19:56:f3: e3:f8:72:41:13:e4:72:65:1f:51:70:dc:7e:5e:3e:1a:0b:4b: 2a:f3:e2:16:9a:42:55:c9:c7:63:26:cf:62:d3:33:18:b5:3b: 12:35:8b:d7:8e:24:d8:3e:f3:0e:bc:40:ac:03:e8:64:e1:1d: 87:c2:a8:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dOiqwQgjBN+F4k2QHIV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NGY5ZDJkYmVkOTc0NTM4NDA1YTc5ZjZlYzdlODZjNGFl ZGQzZDEwHhcNMjYwMTI1MTQwMDM3WhcNMjYwMTI2MTQwMDM3WjAzMTEwLwYDVQQD EyhkZWE3OWU3NzdmZmUzMjM3YmE1YWNiYThjNDgyNmUzMjBlMTc1NmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP+NRGSbTEFuEjkWErJ+uUpp0F6u QrD2808KKgrR52uSqR+vz7on2esQgp+r7t0qiNwXS+hXTmXFkweCWbD2JF6k1v8N StrOky9LCoibRdxAVl4P7w42qnTTQgfVKhbjT81qYto74Db8mLEH89EdEHzP+VmJ dePmHDTOrn8OvQ7eoBzCFjv85VRFqgUBB9fOpJJpETFlBAnfqO29n5eBEKJ7KRia 9YLqFxYoGNUVO63vviDnIO6SZpNdWKPMb2lXmiRaZYybbHwbWQtbes3+9/yYx0X8 W+ug+G8Y6cMwvhobaxNmphsgLeAMyrLGRSTdyvPIk1d0AoozOkEI7eg1lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6nnnd//jI3ulrLqMSCbjIOF1b2MB8GA1UdIwQY MBaAFEVPnS2+2XRThAWnn27H6GxK7dPRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8zYmIxYTUtOTQxZS00YTYxLTk0M2Ut ZmFhZTRiYWViZWZmLzEvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8zYmIxYTUtOTQxZS00YTYxLTk0M2UtZmFhZTRiYWViZWZm LzEvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGrkYoZ9 Ld7wyflD44V+dTfZ0zwo8WVk2+ZDt8+XFVKAaCRo1HlRX0zediv8erQ5SPzQgeN1 exkEkhkMNVL4jvWbc1QXkdWumClr67ze7pa4cokpbgHZAQZD9alpv9G7mpRq1u7V WxTQnCgKC1ZWfZSYAegE7HvjuTfEHbvSE1QVnllqLdrd8Igq3griPmZxw3f7sfCp IslAJ/W7M/fhhZZqgv5uHMOAh9WlUUMJDK6oXw7ift8kpAUk9/kGH5RaBr98GVbz 4/hyQRPkcmUfUXDcfl4+GgtLKvPiFppCVcnHYybPYtMzGLU7EjWL144k2D7zDrxA rAPoZOEdh8Kotw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:51 2026 by rpki-client