This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft File: SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json) Hash identifier: vrxa1dmn00cz3a8IU2kgnS6gYROpZgmcv6f7efmTUvk= Subject key identifier: EA:85:89:22:4C:58:D8:5B:42:BC:E9:2C:64:1A:4B:ED:E2:DF:78:ED Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90 Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90 Certificate serial: 019BF6BF6D65486F963BF60B3C355F4820DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 20:01:39 +0000 Manifest this update: Sun 25 Jan 2026 20:01:39 +0000 Manifest next update: Mon 26 Jan 2026 20:01:39 +0000 Files and hashes: 1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: RNFqAEBesHLkdATOHla1oyXGHrqDnZ4TwRJenK4ZB88=) 2: oYj8IRsjMXERXaM9fv_aTVNDMiM.roa (hash: 1h5HkPjPP0vcntiwcGgkqpVFeA7WFjBNEknGQLJcQbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:6d:65:48:6f:96:3b:f6:0b:3c:35:5f:48:20:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90 Validity Not Before: Jan 25 20:01:39 2026 GMT Not After : Jan 26 20:01:39 2026 GMT Subject: CN=ea8589224c58d85b42bce92c641a4bede2df78ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:5f:d3:81:23:e6:96:cb:e9:f5:5d:9e:f5: 2d:2d:b2:97:ed:5c:e1:ab:f8:dc:46:f5:4f:b4:61: 7d:35:73:f3:30:31:b8:ab:33:4c:dd:ee:d1:57:1c: 35:72:7d:99:6c:70:6e:92:34:be:25:5e:c0:c1:1d: c2:33:80:7b:5c:2c:9d:42:4e:9f:2c:c3:9c:15:bb: b9:28:86:a3:97:eb:56:77:94:1f:41:8e:33:3d:72: ad:24:f8:f5:eb:f9:c6:d5:5a:58:ef:43:b7:bf:b3: 51:b6:96:fc:8b:4c:e4:de:ac:a9:49:be:dc:7f:f2: 0f:ed:66:71:42:c9:32:3b:d5:04:a9:78:a5:d9:02: dc:a3:77:c5:2d:35:f3:17:a3:fe:bf:a6:76:aa:31: 57:c6:9f:fd:cc:94:37:ca:a8:af:71:c6:59:81:37: f8:62:29:72:52:68:d1:fe:92:d8:2f:69:df:c2:b1: 84:de:9f:2c:95:35:6e:57:a8:51:97:34:cf:b7:24: 16:29:1f:10:a5:5c:5f:26:64:78:0b:4e:9f:eb:ce: 6a:9e:48:50:b5:f7:d1:13:ad:b7:43:c0:69:0d:47: 9c:de:7b:1d:89:29:7b:53:69:93:12:77:f1:4e:c0: b8:09:46:96:f2:ac:10:6f:54:c3:76:bd:4f:73:b9: 8b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:89:22:4C:58:D8:5B:42:BC:E9:2C:64:1A:4B:ED:E2:DF:78:ED X509v3 Authority Key Identifier: keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:60:6b:4f:5f:7d:1d:e2:34:b5:80:07:ad:fd:03:a6:66:24: b9:31:4c:66:1e:6b:a0:99:f2:53:7e:f4:cc:30:ad:e4:9b:05: f6:f8:86:c5:84:99:54:ee:3a:ed:63:6b:f8:e3:16:6c:bc:d1: 97:f2:ac:8f:42:4e:85:22:5e:e4:9c:af:b1:b8:08:90:89:02: e0:a8:7f:0a:1f:53:37:cb:8f:ca:49:d1:85:5f:fb:df:eb:df: 8c:40:17:95:72:cf:b7:44:f8:2e:ab:dc:58:98:3b:24:5e:c0: 6d:b2:11:7d:53:2f:7b:0d:90:02:50:f9:ee:87:1e:d1:8c:0d: e9:01:c9:ff:8f:30:a3:00:56:84:10:7e:e4:65:1f:6d:cf:6d: e0:d4:01:29:7c:29:3c:43:fd:a2:a0:b4:07:af:d0:fc:a0:46: 21:f8:91:a3:28:53:2f:d0:c2:a6:c1:c5:15:ec:f8:be:fa:43: d0:eb:39:d1:7d:8b:0e:3d:a6:51:34:b3:67:21:d0:ea:99:fe: 91:d8:2e:a2:a1:1b:56:a9:35:13:7e:3a:b7:03:8e:c2:b3:4a: 37:94:99:40:05:2a:e3:5a:fa:e4:80:73:0d:13:fd:14:31:0c: 25:31:83:46:85:8a:5f:19:97:94:ba:f6:6e:dd:f2:1d:4c:62: 9a:6a:24:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v21lSG+WO/YLPDVfSCDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4Mzk1ZWI0YzBlZTJkYWE1MzkyY2Q5OWZjNDVlZmJjNGE3 NTRlOTAwHhcNMjYwMTI1MjAwMTM5WhcNMjYwMTI2MjAwMTM5WjAzMTEwLwYDVQQD EyhlYTg1ODkyMjRjNThkODViNDJiY2U5MmM2NDFhNGJlZGUyZGY3OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYtf04Ej5pbL6fVdnvUtLbKX7Vzh q/jcRvVPtGF9NXPzMDG4qzNM3e7RVxw1cn2ZbHBukjS+JV7AwR3CM4B7XCydQk6f LMOcFbu5KIajl+tWd5QfQY4zPXKtJPj16/nG1VpY70O3v7NRtpb8i0zk3qypSb7c f/IP7WZxQskyO9UEqXil2QLco3fFLTXzF6P+v6Z2qjFXxp/9zJQ3yqivccZZgTf4 YilyUmjR/pLYL2nfwrGE3p8slTVuV6hRlzTPtyQWKR8QpVxfJmR4C06f685qnkhQ tffRE623Q8BpDUec3nsdiSl7U2mTEnfxTsC4CUaW8qwQb1TDdr1Pc7mLVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqFiSJMWNhbQrzpLGQaS+3i33jtMB8GA1UdIwQY MBaAFEg5XrTA7i2qU5LNmfxF77xKdU6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83YTk5NjEtMjEzZS00Y2M0LThmOTYt N2Y1NzliYTA5OGJlLzEvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83YTk5NjEtMjEzZS00Y2M0LThmOTYtN2Y1NzliYTA5OGJl LzEvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2BrT199 HeI0tYAHrf0DpmYkuTFMZh5roJnyU370zDCt5JsF9viGxYSZVO467WNr+OMWbLzR l/Ksj0JOhSJe5JyvsbgIkIkC4Kh/Ch9TN8uPyknRhV/73+vfjEAXlXLPt0T4Lqvc WJg7JF7AbbIRfVMvew2QAlD57oce0YwN6QHJ/48wowBWhBB+5GUfbc9t4NQBKXwp PEP9oqC0B6/Q/KBGIfiRoyhTL9DCpsHFFez4vvpD0Os50X2LDj2mUTSzZyHQ6pn+ kdguoqEbVqk1E346twOOwrNKN5SZQAUq41r65IBzDRP9FDEMJTGDRoWKXxmXlLr2 bt3yHUximmok6g== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:43 2026 by rpki-client