This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json) Hash identifier: unoGkHd0folmtZt/g+uWMbBplDalCD5/ANCUTLrILvI= Subject key identifier: B4:3D:EC:0E:39:30:09:3A:AF:0C:F9:29:41:C5:34:31:12:59:16:F6 Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2 Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2 Certificate serial: 019BF50748CE557614EA5FA29F1A66F7CB5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft Manifest number: 0873 Signing time: Sun 25 Jan 2026 12:00:53 +0000 Manifest this update: Sun 25 Jan 2026 12:00:53 +0000 Manifest next update: Mon 26 Jan 2026 12:00:53 +0000 Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: Jvq6V5SzMIBdNcHtEOMQ8auMzksKeKkoByy6PJdjkuw=) 2: nlcpl9ulhW9UJP1m-NfebbvM-08.roa (hash: IBQWkMt/VVWxVDIuSxk0QRhZsHES5xi9v/NlOWNnx9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:48:ce:55:76:14:ea:5f:a2:9f:1a:66:f7:cb:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2 Validity Not Before: Jan 25 12:00:53 2026 GMT Not After : Jan 26 12:00:53 2026 GMT Subject: CN=b43dec0e3930093aaf0cf92941c53431125916f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:88:3c:ae:5e:0a:b1:7c:00:e8:5e:f2:24:18: bd:b6:0b:95:89:4c:34:f9:90:25:85:7c:bb:8f:30: f7:90:2f:1b:c8:0a:1d:55:47:d6:88:90:b1:14:11: 27:44:5d:f3:a3:c9:79:d1:18:31:89:9d:d4:75:22: 05:5a:29:6e:e6:15:5c:a4:e3:31:67:45:5a:bc:37: b3:2e:59:c3:93:b3:12:84:f5:21:31:62:aa:18:8e: 66:4a:14:cf:c5:69:2d:4e:17:d3:17:49:e5:1f:9d: 94:46:05:04:c3:66:a3:e3:f7:28:e6:50:fd:2d:08: ca:23:ac:9f:00:f9:25:ab:d1:d3:8c:4a:2c:e9:80: 5d:54:b5:10:d6:50:ac:11:36:e1:22:2f:83:04:9a: a7:12:f7:34:14:a9:a8:ac:a3:ce:4d:b9:f3:50:e2: b4:59:fc:9f:86:bd:8e:93:76:e5:79:62:d4:5e:7c: bd:f4:82:47:b1:1c:a3:11:87:38:64:1f:fd:77:9a: 3c:95:df:9f:64:06:50:4a:17:d9:73:6a:c5:aa:fe: 4f:a3:d4:18:f5:39:3d:d7:89:f9:21:3c:9f:f3:b7: 2f:19:78:94:b3:f4:78:6a:6e:71:7d:c2:83:82:c4: fd:0b:a5:bf:22:25:f1:ce:57:b3:6e:66:71:38:1a: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3D:EC:0E:39:30:09:3A:AF:0C:F9:29:41:C5:34:31:12:59:16:F6 X509v3 Authority Key Identifier: keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:37:ac:bc:2f:e2:fa:0c:f6:7e:4a:1a:78:6b:97:6e:53:e5: b1:dd:15:c3:c0:02:c9:4d:09:fc:8d:63:ac:cb:cd:45:d2:f3: d1:90:57:b5:fb:38:8e:b9:75:5b:a5:6b:b8:47:6e:0b:18:ab: cb:52:7d:29:63:e8:e3:60:cc:69:5a:b9:f8:a8:81:85:d5:4c: 17:a9:8f:48:b5:a0:98:9c:4a:81:a9:02:7e:35:ac:ea:ad:46: 64:33:7e:88:98:36:37:73:f0:b3:33:9c:21:89:b3:99:9b:52: e3:84:ad:d8:28:85:d3:f1:db:03:8b:e1:5d:48:ea:f9:c8:d3: e5:0b:21:ca:cf:5f:e0:b1:1d:bb:7c:64:5f:40:31:ff:36:25: 76:89:f3:3c:f6:3e:37:b3:a3:c7:8c:4f:39:63:27:eb:e9:25: 0a:dc:8e:03:dc:76:07:a1:be:f0:a6:98:68:3c:8b:28:8d:be: f5:86:cb:d9:37:73:46:1b:5c:57:19:85:20:9d:d1:fd:30:ce: c1:31:0a:a2:1f:4f:4f:11:07:34:8c:e0:cd:ba:49:89:2b:7e: 17:f5:9c:d0:1f:d4:96:13:e5:54:9f:42:43:b5:78:09:81:5a: 56:46:b2:c6:c0:d8:57:e7:33:df:c2:f4:c4:5d:d8:37:48:b7: 08:f4:f7:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B0jOVXYU6l+inxpm98taMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0M2I2N2I5ZDRjOTljNzI1ZTM1N2Q4MTc0ZmI3ZTAyNGEx NTAyZTIwHhcNMjYwMTI1MTIwMDUzWhcNMjYwMTI2MTIwMDUzWjAzMTEwLwYDVQQD EyhiNDNkZWMwZTM5MzAwOTNhYWYwY2Y5Mjk0MWM1MzQzMTEyNTkxNmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4g8rl4KsXwA6F7yJBi9tguViUw0 +ZAlhXy7jzD3kC8byAodVUfWiJCxFBEnRF3zo8l50RgxiZ3UdSIFWilu5hVcpOMx Z0VavDezLlnDk7MShPUhMWKqGI5mShTPxWktThfTF0nlH52URgUEw2aj4/co5lD9 LQjKI6yfAPklq9HTjEos6YBdVLUQ1lCsETbhIi+DBJqnEvc0FKmorKPOTbnzUOK0 Wfyfhr2Ok3bleWLUXny99IJHsRyjEYc4ZB/9d5o8ld+fZAZQShfZc2rFqv5Po9QY 9Tk914n5ITyf87cvGXiUs/R4am5xfcKDgsT9C6W/IiXxzlezbmZxOBrlXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ97A45MAk6rwz5KUHFNDESWRb2MB8GA1UdIwQY MBaAFEQ7Z7nUyZxyXjV9gXT7fgJKFQLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTIt YzgzYjVmYzI2NTQ1LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTItYzgzYjVmYzI2NTQ1 LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzesvC/i +gz2fkoaeGuXblPlsd0Vw8ACyU0J/I1jrMvNRdLz0ZBXtfs4jrl1W6VruEduCxir y1J9KWPo42DMaVq5+KiBhdVMF6mPSLWgmJxKgakCfjWs6q1GZDN+iJg2N3PwszOc IYmzmZtS44St2CiF0/HbA4vhXUjq+cjT5Qshys9f4LEdu3xkX0Ax/zYldonzPPY+ N7Ojx4xPOWMn6+klCtyOA9x2B6G+8KaYaDyLKI2+9YbL2TdzRhtcVxmFIJ3R/TDO wTEKoh9PTxEHNIzgzbpJiSt+F/Wc0B/UlhPlVJ9CQ7V4CYFaVkayxsDYV+cz38L0 xF3YN0i3CPT3qQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:43 2026 by rpki-client