This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: hs2eCgkjPBmDcSPkIGFpm1OIemee+u4C2mMTPe3D68A= Subject key identifier: A4:65:FA:6C:B2:01:50:19:FA:35:16:D0:D2:97:72:89:0E:F3:98:71 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019BEA161DC02C8143308E8DB2A2BEBE9C21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 0226 Signing time: Fri 23 Jan 2026 09:01:16 +0000 Manifest this update: Fri 23 Jan 2026 09:01:16 +0000 Manifest next update: Sat 24 Jan 2026 09:01:16 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: M3/CWLycEFUkpH39lJgijxirSO6ZHGz0Dnlxq8gQ48I=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 5: GMj14rQCEEEVNSj6AmCvvVv6IfM.roa (hash: f2xNsi+1is0NaWE7LQKODuJrsirezUvKFUi1ZQD4AaU=) 6: IfzETMMC-j-YvD0FSk3qPcmm-yw.roa (hash: dGEKAMpI/CAcq7wm1BNcqLfoTKopdJ+aL/NynEfuwvo=) 7: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 8: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 9: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 10: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 11: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:16:1d:c0:2c:81:43:30:8e:8d:b2:a2:be:be:9c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jan 23 09:01:16 2026 GMT Not After : Jan 24 09:01:16 2026 GMT Subject: CN=a465fa6cb2015019fa3516d0d29772890ef39871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:df:21:02:d7:4d:f5:6c:69:7a:81:7a:cc:a6: 45:55:de:e6:5c:57:ed:5f:45:f4:7a:93:3b:d3:c7: 51:be:13:d8:c2:e0:0c:be:7c:85:f2:ee:05:99:80: 7c:98:d1:c0:e4:ca:f8:9c:da:d4:72:96:10:2e:66: 66:82:c6:29:61:a4:54:b1:84:07:ff:e2:be:1e:31: c3:ff:34:5c:df:a1:49:ac:85:e4:be:f8:28:8a:8a: 15:59:67:a3:17:67:a6:b4:25:32:dc:91:f6:d8:5e: af:6c:06:41:80:39:14:5a:d6:d6:4f:77:d7:2a:7d: 4d:df:14:33:bb:19:a5:0a:13:c4:c2:6c:61:45:50: d0:d4:b0:fc:b1:a9:9f:53:1f:b5:f0:4a:b8:3f:cb: c2:8b:dc:03:ca:93:e3:a1:a5:7a:39:80:11:0d:72: 82:13:8e:14:26:08:f0:88:7e:17:0c:39:8c:06:0a: a4:92:5b:d0:91:82:21:ba:58:3c:71:72:a3:01:49: 58:ab:ad:c2:f9:80:19:13:96:7f:44:83:ea:2e:a1: 6e:d6:11:37:cc:de:46:a2:77:61:a5:ca:08:ad:d6: d3:8a:86:ec:f5:b7:d9:c5:90:79:ca:a5:0a:9c:04: 30:b4:6e:aa:aa:ed:f6:b2:ed:91:ab:25:77:45:35: 24:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:65:FA:6C:B2:01:50:19:FA:35:16:D0:D2:97:72:89:0E:F3:98:71 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:36:7a:fd:c3:b2:57:cf:a0:49:60:0e:1d:4d:da:5c:63:82: 3e:b8:bd:0b:93:fe:46:12:82:47:1b:d8:85:48:ec:de:e6:a2: 5a:1d:34:bd:62:e1:7e:c7:ef:5c:ff:35:10:58:e6:62:e4:26: 4c:b7:64:56:a7:c3:60:37:9b:17:0c:7e:79:9c:99:97:28:70: f4:db:91:c0:b8:41:bb:7e:40:3f:eb:80:c0:51:f1:1f:7c:e2: bb:43:20:68:0c:85:7a:24:c4:87:ea:42:9d:aa:ba:7a:98:d1: 00:06:9e:08:e4:0c:da:83:44:9f:00:59:28:59:71:bd:94:c5: ea:1c:2b:39:5e:e6:1e:ff:fb:f9:76:27:98:2a:cf:74:34:c4: 83:0b:03:1e:86:6c:ae:1b:17:78:0b:99:c2:66:da:4c:23:1a: a9:d5:6f:73:61:e4:b0:8a:17:0d:43:33:f0:7c:46:e9:46:3a: bd:4a:a4:dd:75:70:c7:de:88:54:20:03:8b:df:55:cc:68:ff: 86:d3:94:00:ce:1c:46:a1:90:35:48:82:dc:2c:de:28:71:cb: 57:8a:39:b3:94:4e:5e:78:60:01:a3:a6:3e:23:e9:de:29:e4: da:4f:ef:00:22:30:91:3d:11:07:2c:d0:72:17:f5:97:0a:f6: 4d:b9:5a:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvqFh3ALIFDMI6NsqK+vpwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMTIzMDkwMTE2WhcNMjYwMTI0MDkwMTE2WjAzMTEwLwYDVQQD EyhhNDY1ZmE2Y2IyMDE1MDE5ZmEzNTE2ZDBkMjk3NzI4OTBlZjM5ODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt8hAtdN9WxpeoF6zKZFVd7mXFft X0X0epM708dRvhPYwuAMvnyF8u4FmYB8mNHA5Mr4nNrUcpYQLmZmgsYpYaRUsYQH /+K+HjHD/zRc36FJrIXkvvgoiooVWWejF2emtCUy3JH22F6vbAZBgDkUWtbWT3fX Kn1N3xQzuxmlChPEwmxhRVDQ1LD8samfUx+18Eq4P8vCi9wDypPjoaV6OYARDXKC E44UJgjwiH4XDDmMBgqkklvQkYIhulg8cXKjAUlYq63C+YAZE5Z/RIPqLqFu1hE3 zN5GondhpcoIrdbTiobs9bfZxZB5yqUKnAQwtG6qqu32su2RqyV3RTUkLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRl+myyAVAZ+jUW0NKXcokO85hxMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzZ6/cOy V8+gSWAOHU3aXGOCPri9C5P+RhKCRxvYhUjs3uaiWh00vWLhfsfvXP81EFjmYuQm TLdkVqfDYDebFwx+eZyZlyhw9NuRwLhBu35AP+uAwFHxH3ziu0MgaAyFeiTEh+pC naq6epjRAAaeCOQM2oNEnwBZKFlxvZTF6hwrOV7mHv/7+XYnmCrPdDTEgwsDHoZs rhsXeAuZwmbaTCMaqdVvc2HksIoXDUMz8HxG6UY6vUqk3XVwx96IVCADi99VzGj/ htOUAM4cRqGQNUiC3CzeKHHLV4o5s5ROXnhgAaOmPiPp3ink2k/vACIwkT0RByzQ chf1lwr2Tbla9Q== -----END CERTIFICATE-----Generated at Fri Jan 23 14:02:16 2026 by rpki-client