This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json) Hash identifier: nS92Gq41HTvORoRXp4v4fuF+vvG+SDApfo5wUvQBUJE= Subject key identifier: 3E:5C:39:A0:6D:FA:A4:B5:8F:39:C0:1E:FC:4D:76:94:E8:78:FA:97 Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0 Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0 Certificate serial: 019BF462A5F28C9E639017DC6D9274F6996F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft Manifest number: 14AE Signing time: Sun 25 Jan 2026 09:01:04 +0000 Manifest this update: Sun 25 Jan 2026 09:01:04 +0000 Manifest next update: Mon 26 Jan 2026 09:01:04 +0000 Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: LmWzrP2XmQbAJYeKPs+ZF0E9lxAxLs5h1q7M6U0kxOM=) 2: Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa (hash: G8coFslA7SGGsh7OBwFjSWY/mTtlNbU81EsuVTVQlk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:a5:f2:8c:9e:63:90:17:dc:6d:92:74:f6:99:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0 Validity Not Before: Jan 25 09:01:04 2026 GMT Not After : Jan 26 09:01:04 2026 GMT Subject: CN=3e5c39a06dfaa4b58f39c01efc4d7694e878fa97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:d8:f6:5f:52:1f:49:6f:38:da:23:e1:77: c2:b4:ac:21:2c:25:db:76:93:89:a7:05:8d:a0:ed: f8:5c:88:75:40:2b:1b:27:e7:7d:7b:ef:15:46:c6: 0a:cf:b1:a6:79:a1:7c:d6:92:4f:e0:4a:64:27:20: f3:c3:51:52:a7:90:51:0b:94:6d:73:30:db:44:7f: 2e:4a:7d:65:79:63:64:96:67:63:c4:8b:b4:3c:b4: 57:2e:92:e6:5e:5c:34:c4:35:83:f5:ad:95:e0:5c: 11:77:3d:77:a4:74:92:29:32:a1:b9:a4:1d:6c:b7: df:c1:13:3c:17:3f:30:1d:7b:17:67:a7:e9:9a:ca: 52:f4:c6:27:8d:2f:94:2c:ab:d3:17:8d:bd:ac:e2: 2d:d0:c2:26:b0:7b:00:58:82:ae:7f:84:f6:94:7f: 6f:4e:9b:d3:75:21:77:2e:6f:f1:b8:23:19:49:20: 54:3a:e3:f2:69:a1:a6:5f:6d:0f:d6:9e:db:b3:d7: f9:b1:ef:ae:28:2d:91:b6:60:52:3c:39:5f:76:1d: 74:d3:fa:7d:c7:ea:62:02:3a:32:3f:e5:63:67:80: af:51:f7:dd:69:fd:ce:61:70:4f:f0:a4:de:6a:56: b1:bf:db:22:ec:27:c2:06:0f:b3:93:8c:3a:9e:af: 74:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5C:39:A0:6D:FA:A4:B5:8F:39:C0:1E:FC:4D:76:94:E8:78:FA:97 X509v3 Authority Key Identifier: keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:8b:32:8e:4f:a7:cb:ed:1e:29:0a:de:cf:0e:1a:db:c9:f7: 02:fa:dd:b1:ef:bc:ef:24:9d:56:48:19:66:9c:89:87:80:e7: 82:b3:a0:a4:f7:1b:ed:38:2e:e4:16:3e:3c:99:9e:bb:d3:83: 1c:7e:69:aa:cf:67:fb:37:22:74:f6:06:5b:ed:48:9d:ea:b7: 9f:d4:e3:6d:3f:98:0f:2f:56:b3:15:b5:d4:75:bc:6e:1e:c5: 87:22:83:32:b4:18:33:f9:55:7e:52:c2:8a:ca:c0:88:24:2b: 3a:f9:cd:0a:66:10:ef:f8:7e:0c:6b:f9:d3:14:cc:ee:fa:d3: 85:fa:69:a6:28:3a:6c:1f:eb:76:17:05:81:6c:12:4b:8f:f0: fe:6a:5c:fc:19:72:ac:39:e4:7f:8e:14:79:fa:98:eb:24:dc: fc:8a:a0:b6:19:49:2b:a4:52:4b:de:ce:57:20:75:1c:4e:cc: 20:75:5c:a4:ef:1f:21:a5:39:f1:98:94:75:24:df:83:60:93: aa:5f:3b:80:eb:55:ae:83:22:8f:26:27:5b:54:41:90:5a:ce: cd:2c:0f:49:05:27:38:52:1e:d6:c7:85:42:40:85:21:69:87: 70:9e:56:0b:07:ab:87:bb:87:a7:a1:f2:2d:13:b2:42:8b:0a: fd:0f:78:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YqXyjJ5jkBfcbZJ09plvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDRmM2UyNGJiZmM2MDQ4ZTVmZmE1MGMzZGNlMzY0ZmZj MDEyYjAwHhcNMjYwMTI1MDkwMTA0WhcNMjYwMTI2MDkwMTA0WjAzMTEwLwYDVQQD EygzZTVjMzlhMDZkZmFhNGI1OGYzOWMwMWVmYzRkNzY5NGU4NzhmYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYXY9l9SH0lvONoj4XfCtKwhLCXb dpOJpwWNoO34XIh1QCsbJ+d9e+8VRsYKz7GmeaF81pJP4EpkJyDzw1FSp5BRC5Rt czDbRH8uSn1leWNklmdjxIu0PLRXLpLmXlw0xDWD9a2V4FwRdz13pHSSKTKhuaQd bLffwRM8Fz8wHXsXZ6fpmspS9MYnjS+ULKvTF429rOIt0MImsHsAWIKuf4T2lH9v TpvTdSF3Lm/xuCMZSSBUOuPyaaGmX20P1p7bs9f5se+uKC2RtmBSPDlfdh100/p9 x+piAjoyP+VjZ4CvUffdaf3OYXBP8KTealaxv9si7CfCBg+zk4w6nq90RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5cOaBt+qS1jznAHvxNdpToePqXMB8GA1UdIwQY MBaAFAxE8+JLv8YEjl/6UMPc42T/wBKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmIt OGFjN2JlNDZjYzRiLzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmItOGFjN2JlNDZjYzRi LzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIsyjk+n y+0eKQrezw4a28n3Avrdse+87ySdVkgZZpyJh4DngrOgpPcb7Tgu5BY+PJmeu9OD HH5pqs9n+zcidPYGW+1Ineq3n9TjbT+YDy9WsxW11HW8bh7FhyKDMrQYM/lVflLC isrAiCQrOvnNCmYQ7/h+DGv50xTM7vrThfpppig6bB/rdhcFgWwSS4/w/mpc/Bly rDnkf44UefqY6yTc/IqgthlJK6RSS97OVyB1HE7MIHVcpO8fIaU58ZiUdSTfg2CT ql87gOtVroMijyYnW1RBkFrOzSwPSQUnOFIe1seFQkCFIWmHcJ5WCwerh7uHp6Hy LROyQosK/Q94SQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:08:20 2026 by rpki-client