This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft File: SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json) Hash identifier: q+1ahlF0VnwEwlpjJGs1y5Y5gyi2Fmk57SLx+hAeQF0= Subject key identifier: DF:44:09:74:05:59:BF:EF:43:D2:52:45:E2:0D:48:6B:2F:B0:FD:ED Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6 Certificate issuer: /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6 Certificate serial: 019BFF1D292D91FAB39146A0B75E462CF009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft Manifest number: 16FD Signing time: Tue 27 Jan 2026 11:00:59 +0000 Manifest this update: Tue 27 Jan 2026 11:00:59 +0000 Manifest next update: Wed 28 Jan 2026 11:00:59 +0000 Files and hashes: 1: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: xEgSymaOj7PpzNpOnnwB62ykCjPkXaZeZo3fikkskxc=) 2: v3K9X62S23EsPXBUv8o5_0MHn4Y.roa (hash: 6AkfovE+X2QIgtQd8B7GXkBK4tknFic/hJn5uV1siEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1d:29:2d:91:fa:b3:91:46:a0:b7:5e:46:2c:f0:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6 Validity Not Before: Jan 27 11:00:59 2026 GMT Not After : Jan 28 11:00:59 2026 GMT Subject: CN=df4409740559bfef43d25245e20d486b2fb0fded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:7c:60:be:98:27:da:4a:27:c6:52:78:b2: 1e:b7:67:5a:77:76:5e:b4:dd:a3:2d:a5:02:d2:65: 41:11:5b:4a:86:dd:f3:7b:21:52:f4:b8:55:b9:2a: a3:75:56:82:ba:e3:e7:6f:16:6f:25:8c:45:4d:48: 88:32:45:99:38:d7:9f:61:f9:bd:23:6c:4a:90:63: 9a:09:66:6f:d7:bf:13:1b:b8:01:01:b9:b6:42:3e: 4e:c8:bf:83:bc:5b:82:83:5a:15:13:e6:77:7a:4e: 25:8f:6e:a1:eb:93:54:83:0d:af:c2:d2:53:e6:c1: 14:08:63:f6:1d:86:31:47:68:74:ed:30:3e:0a:be: 75:42:23:94:52:19:74:d5:b4:8a:76:25:52:2c:5c: 00:d7:c8:8d:89:21:2a:3e:32:8c:86:ee:81:0d:bc: d5:73:09:52:87:99:ba:43:3d:ff:3b:55:25:ce:64: d0:1e:b9:bf:00:56:58:1a:53:06:6c:eb:b9:a6:c4: 99:e5:9c:5d:a8:1a:97:be:f1:ff:c3:d3:71:b2:ff: 02:86:8e:af:01:32:03:5e:81:3d:39:1f:f9:6f:f9: d2:b0:32:e0:8e:1c:0b:12:9d:cf:74:98:7d:ce:fb: 04:e1:ce:b5:99:40:f3:e0:65:61:81:2e:e1:30:9f: 0b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:44:09:74:05:59:BF:EF:43:D2:52:45:E2:0D:48:6B:2F:B0:FD:ED X509v3 Authority Key Identifier: keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b8:de:d7:24:43:9c:3a:00:4e:9c:8c:2d:51:71:81:e9:90: 6b:e6:c3:11:77:7b:87:4b:7a:cd:e6:35:96:49:ce:34:f4:a1: 8d:db:da:f0:15:61:d0:5d:15:ad:a8:87:9a:51:f3:1a:99:ee: 84:7c:3b:ea:28:76:92:81:35:09:b3:d6:08:3a:7c:6c:9c:05: 30:cc:a4:7e:11:9b:8c:47:73:de:e6:6b:e9:a4:ad:c4:4e:be: 8d:1c:52:16:4f:f0:62:a4:4b:59:ca:ff:94:a2:75:d9:7b:81: 65:02:4a:db:46:90:42:b9:c8:02:d0:3e:c8:5f:20:ca:df:1b: 8c:33:6c:f8:d4:3a:29:68:1f:5b:3c:b2:6b:e1:4f:e2:3c:5c: da:9f:0c:02:eb:5e:96:5b:42:8f:24:a1:35:55:8b:ec:ff:3d: 5c:08:39:bf:54:54:f6:45:3c:97:07:31:be:59:0e:70:2c:2a: 3a:05:72:2c:92:80:4b:86:c2:4d:3e:8e:3f:77:82:45:fd:55: bd:a1:5c:b2:be:be:4e:ab:85:cf:a5:84:ed:26:6b:0f:c8:6f: c1:c0:a1:35:ae:78:ce:bd:78:96:62:34:3a:20:5d:30:a9:66: c3:42:68:91:fb:58:01:dc:a5:b6:ec:5c:6d:48:bf:92:97:05: a1:4c:35:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/HSktkfqzkUagt15GLPAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YmEzNzAxNjkxZDI5MjhhZmFkM2ExYjU3MzVhMjZmNGM5 OWNmZjYwHhcNMjYwMTI3MTEwMDU5WhcNMjYwMTI4MTEwMDU5WjAzMTEwLwYDVQQD EyhkZjQ0MDk3NDA1NTliZmVmNDNkMjUyNDVlMjBkNDg2YjJmYjBmZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukB8YL6YJ9pKJ8ZSeLIet2dad3Ze tN2jLaUC0mVBEVtKht3zeyFS9LhVuSqjdVaCuuPnbxZvJYxFTUiIMkWZONefYfm9 I2xKkGOaCWZv178TG7gBAbm2Qj5OyL+DvFuCg1oVE+Z3ek4lj26h65NUgw2vwtJT 5sEUCGP2HYYxR2h07TA+Cr51QiOUUhl01bSKdiVSLFwA18iNiSEqPjKMhu6BDbzV cwlSh5m6Qz3/O1UlzmTQHrm/AFZYGlMGbOu5psSZ5ZxdqBqXvvH/w9Nxsv8Cho6v ATIDXoE9OR/5b/nSsDLgjhwLEp3PdJh9zvsE4c61mUDz4GVhgS7hMJ8LSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9ECXQFWb/vQ9JSReINSGsvsP3tMB8GA1UdIwQY MBaAFEi6NwFpHSkor606G1c1om9Mmc/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQt ZTNlODE1MWE4NzYwLzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQtZTNlODE1MWE4NzYw LzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbje1yRD nDoATpyMLVFxgemQa+bDEXd7h0t6zeY1lknONPShjdva8BVh0F0VraiHmlHzGpnu hHw76ih2koE1CbPWCDp8bJwFMMykfhGbjEdz3uZr6aStxE6+jRxSFk/wYqRLWcr/ lKJ12XuBZQJK20aQQrnIAtA+yF8gyt8bjDNs+NQ6KWgfWzyya+FP4jxc2p8MAute lltCjyShNVWL7P89XAg5v1RU9kU8lwcxvlkOcCwqOgVyLJKAS4bCTT6OP3eCRf1V vaFcsr6+TquFz6WE7SZrD8hvwcChNa54zr14lmI0OiBdMKlmw0JokftYAdyltuxc bUi/kpcFoUw1mw== -----END CERTIFICATE-----Generated at Tue Jan 27 16:21:09 2026 by rpki-client