This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json) Hash identifier: 75rdO82+S9FH7u/eqWuseilkfNCfo3zwJcHbmJrqUhc= Subject key identifier: 34:1F:0C:0E:07:8F:D6:CE:58:03:19:3C:1D:55:7F:66:FC:0A:F0:6F Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29 Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729 Certificate serial: 019BA1FD45DF1D3A98CC2072B188E8C4D387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft Manifest number: 09FF Signing time: Fri 09 Jan 2026 09:01:28 +0000 Manifest this update: Fri 09 Jan 2026 09:01:28 +0000 Manifest next update: Sat 10 Jan 2026 09:01:28 +0000 Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=) 2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=) 3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: 1Ae/31lxv+UDoGGQ1d9+sD4iGSsP/KaYiNCq1MrzLjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:fd:45:df:1d:3a:98:cc:20:72:b1:88:e8:c4:d3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729 Validity Not Before: Jan 9 09:01:28 2026 GMT Not After : Jan 10 09:01:28 2026 GMT Subject: CN=341f0c0e078fd6ce5803193c1d557f66fc0af06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:3e:82:ec:ba:74:7e:c9:33:d5:45:c1:40:90: d3:ea:ce:39:3b:f7:ee:c2:f7:04:e8:42:0e:f7:dc: 0d:c5:e7:87:fa:44:02:73:16:a1:4f:b4:44:7e:cc: b8:4f:0b:44:75:28:00:e7:33:dd:c5:11:fe:4a:a5: 2b:d4:1a:58:dc:29:17:18:a6:3e:8a:21:3a:c5:71: c2:6b:85:b0:f3:85:ae:12:73:a2:0f:e7:0b:e4:30: f6:49:0d:17:cc:b3:05:04:c2:5a:23:01:2f:9f:5b: 7a:90:59:5f:44:de:aa:e6:64:ab:08:a9:10:97:48: b9:62:74:26:fe:fc:48:8d:b6:db:f1:8e:93:7d:ad: 91:3a:0c:ae:9a:6a:c7:f0:2f:e9:89:e2:12:3b:39: e6:84:63:fd:81:0f:4a:66:9d:8c:cc:3b:eb:83:19: 06:71:eb:4c:25:9f:e1:a7:4e:18:50:50:b8:ae:1d: 1e:72:c5:b4:8d:7f:cf:75:9c:b7:72:80:16:1e:09: 03:d5:a3:eb:7e:53:14:eb:26:8a:59:99:34:6a:43: 75:bd:d9:f0:9c:18:48:dd:81:21:5e:78:e9:36:d9: 4d:93:c7:b5:31:24:5f:80:85:ef:70:e7:67:fc:ac: f9:fd:e4:4b:b1:cf:f7:ec:62:3c:69:b3:75:9f:6a: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1F:0C:0E:07:8F:D6:CE:58:03:19:3C:1D:55:7F:66:FC:0A:F0:6F X509v3 Authority Key Identifier: keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:95:42:83:3c:51:09:6d:9e:f6:68:8f:8e:c8:6d:2b:33:7b: b6:ce:49:a9:2e:87:89:9f:e7:bd:f2:35:53:62:fd:54:a6:b8: cc:b2:45:b3:80:ac:6c:56:bf:c7:e2:41:21:7a:7d:69:99:82: 77:a2:2f:ba:a0:24:63:a8:82:12:e5:4e:3e:71:4d:a7:9b:63: 4c:8f:05:77:51:11:5c:b5:35:53:41:9b:84:f6:dd:dd:5a:f5: 84:f1:49:17:6f:f5:5b:9e:71:79:99:fd:6d:44:7c:30:dd:de: 0a:4b:2d:4e:87:73:e6:95:9f:fe:88:60:15:e6:c8:04:3f:0d: c0:1c:63:21:fa:5e:30:9b:8d:d9:ae:db:43:4a:92:45:fe:8f: ed:95:22:54:ef:3b:45:6a:07:8f:72:b5:a8:d2:fd:5b:79:b8: df:b6:52:66:d4:48:84:ac:56:f4:34:e6:48:74:a2:d0:69:9d: 4f:06:91:f6:6e:f2:ef:9c:76:9e:45:77:6c:0d:41:23:5a:f0: 9e:6b:55:1c:78:25:f2:7e:c1:12:cc:37:ea:a5:3b:5e:3f:b7: cb:69:3d:44:ed:52:23:03:7b:67:47:af:09:10:24:76:a3:dc: de:26:71:48:a3:84:d1:1b:1a:cd:6c:3c:b8:65:29:52:bf:5e: 5b:0f:55:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuh/UXfHTqYzCBysYjoxNOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMDEwOTM4ZDllZjcyMTU4ZmM5OGJkNDVkZTcxYjBiMWE5 ZmY3MjkwHhcNMjYwMTA5MDkwMTI4WhcNMjYwMTEwMDkwMTI4WjAzMTEwLwYDVQQD EygzNDFmMGMwZTA3OGZkNmNlNTgwMzE5M2MxZDU1N2Y2NmZjMGFmMDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/j6C7Lp0fskz1UXBQJDT6s45O/fu wvcE6EIO99wNxeeH+kQCcxahT7REfsy4TwtEdSgA5zPdxRH+SqUr1BpY3CkXGKY+ iiE6xXHCa4Ww84WuEnOiD+cL5DD2SQ0XzLMFBMJaIwEvn1t6kFlfRN6q5mSrCKkQ l0i5YnQm/vxIjbbb8Y6Tfa2ROgyummrH8C/pieISOznmhGP9gQ9KZp2MzDvrgxkG cetMJZ/hp04YUFC4rh0ecsW0jX/PdZy3coAWHgkD1aPrflMU6yaKWZk0akN1vdnw nBhI3YEhXnjpNtlNk8e1MSRfgIXvcOdn/Kz5/eRLsc/37GI8abN1n2p8EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQfDA4Hj9bOWAMZPB1Vf2b8CvBvMB8GA1UdIwQY MBaAFN0BCTjZ73IVj8mL1F3nGwsan/cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYt Y2VmZjU0NmM5MzNlLzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYtY2VmZjU0NmM5MzNl LzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5VCgzxR CW2e9miPjshtKzN7ts5JqS6HiZ/nvfI1U2L9VKa4zLJFs4CsbFa/x+JBIXp9aZmC d6IvuqAkY6iCEuVOPnFNp5tjTI8Fd1ERXLU1U0GbhPbd3Vr1hPFJF2/1W55xeZn9 bUR8MN3eCkstTodz5pWf/ohgFebIBD8NwBxjIfpeMJuN2a7bQ0qSRf6P7ZUiVO87 RWoHj3K1qNL9W3m437ZSZtRIhKxW9DTmSHSi0GmdTwaR9m7y75x2nkV3bA1BI1rw nmtVHHgl8n7BEsw36qU7Xj+3y2k9RO1SIwN7Z0evCRAkdqPc3iZxSKOE0RsazWw8 uGUpUr9eWw9VBA== -----END CERTIFICATE-----Generated at Fri Jan 9 17:09:00 2026 by rpki-client