This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json) Hash identifier: mSxU1QRQlOjEmGURyf2ZWCTQpqxJy0j7UeYK/v9p2dE= Subject key identifier: 94:19:71:15:8C:C6:F4:1E:87:98:3E:B5:93:2E:23:B6:DB:E1:FB:41 Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52 Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52 Certificate serial: 019BE06DBE567D66FB1A837C55B9E39FD4BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft Manifest number: 17DF Signing time: Wed 21 Jan 2026 12:00:46 +0000 Manifest this update: Wed 21 Jan 2026 12:00:46 +0000 Manifest next update: Thu 22 Jan 2026 12:00:46 +0000 Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: rGZIk3xRgPhAbG7wk2f0YaEmrsUK/3yc0lELcpHEP3M=) 2: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (hash: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM=) 3: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (hash: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:6d:be:56:7d:66:fb:1a:83:7c:55:b9:e3:9f:d4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52 Validity Not Before: Jan 21 12:00:46 2026 GMT Not After : Jan 22 12:00:46 2026 GMT Subject: CN=941971158cc6f41e87983eb5932e23b6dbe1fb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b6:70:84:bd:ec:c2:ae:1f:f0:f7:21:4a:19: a7:bf:87:79:81:65:9c:85:63:99:0c:af:ef:f3:64: 6f:5b:1a:b8:d4:3c:60:40:cf:d0:53:22:72:8c:08: 85:9c:e9:de:ef:99:f7:41:ea:48:33:c3:a5:70:5f: b2:df:ac:0d:c9:5c:c0:24:bb:a8:f4:dc:31:66:e7: 2a:c8:e7:a0:65:fb:5b:a4:de:97:36:58:74:72:ed: 61:0e:1d:68:8e:5c:6e:85:59:e8:e8:a2:a1:59:9f: 90:4b:ad:79:ac:25:4c:b2:59:92:09:c8:af:25:0f: cb:dc:60:bb:a7:c0:31:31:7b:c8:fd:a8:c7:46:c9: 10:29:0b:2b:92:67:e8:e8:ee:80:c1:e7:71:dd:a4: f7:a3:b9:d5:d3:68:20:1b:7d:a1:10:07:a4:42:56: b9:c4:6b:45:4b:f2:8b:9e:d7:dc:b0:5d:54:7f:d7: 0b:09:a8:16:88:8e:48:8e:8f:0a:13:9a:4b:ea:dc: f6:6f:02:a9:d4:57:c3:82:38:c3:60:3c:44:ff:99: d3:87:ce:3c:65:b2:6b:84:74:ff:1c:7d:2f:7d:2a: 6a:f9:c6:eb:b0:1d:18:ef:6d:8a:34:e1:58:a3:7c: c1:5e:49:58:7e:94:b7:a6:66:6d:92:79:ad:c5:30: 11:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:19:71:15:8C:C6:F4:1E:87:98:3E:B5:93:2E:23:B6:DB:E1:FB:41 X509v3 Authority Key Identifier: keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:30:6e:06:a6:e4:10:98:68:43:47:a7:03:7a:00:01:b4:8d: 0b:43:af:7c:73:02:3d:32:90:80:0d:3c:45:4c:f9:bf:f0:8b: 56:72:51:a3:e3:19:84:69:d9:54:ef:e1:1e:b8:28:bf:eb:2c: 34:68:6e:b0:99:72:8d:e8:cc:08:d6:a0:9a:87:41:c2:3e:1c: ef:ae:8f:2b:af:cf:dd:d0:c9:30:5a:40:82:6d:3a:32:88:04: fe:0f:fd:97:88:21:46:5c:b2:d8:fa:fc:56:a9:8e:1a:14:d0: 7a:be:39:11:8c:fa:0e:35:e3:f7:21:9f:f8:a8:6e:a4:6c:b3: 08:13:2d:27:be:2f:82:87:bf:20:1e:dd:7b:b4:66:00:f0:62: 76:81:1b:74:b6:15:df:5f:f6:c1:01:6d:16:32:48:d4:59:c5: c0:85:1c:89:13:74:e9:78:c8:bb:73:81:e6:53:93:7f:ab:a2: 18:28:67:ad:b8:3a:0d:35:a8:19:56:89:a5:d0:e1:de:7f:81: 02:c5:b6:91:31:ea:7d:5d:83:07:32:a6:d9:47:94:1e:ed:58: 69:49:35:05:ec:37:fe:ab:20:42:e7:bc:2f:e3:86:40:64:e4: a5:81:76:54:70:c5:8d:e2:f2:a0:4b:9d:7f:10:88:eb:23:f2: 1b:58:82:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgbb5WfWb7GoN8Vbnjn9S6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZGNiMDJiNjFlM2ExNWVhYzM3M2I5OTJlMGUxYTY1NDVm NjFlNTIwHhcNMjYwMTIxMTIwMDQ2WhcNMjYwMTIyMTIwMDQ2WjAzMTEwLwYDVQQD Eyg5NDE5NzExNThjYzZmNDFlODc5ODNlYjU5MzJlMjNiNmRiZTFmYjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LZwhL3swq4f8PchShmnv4d5gWWc hWOZDK/v82RvWxq41DxgQM/QUyJyjAiFnOne75n3QepIM8OlcF+y36wNyVzAJLuo 9NwxZucqyOegZftbpN6XNlh0cu1hDh1ojlxuhVno6KKhWZ+QS615rCVMslmSCciv JQ/L3GC7p8AxMXvI/ajHRskQKQsrkmfo6O6Awedx3aT3o7nV02ggG32hEAekQla5 xGtFS/KLntfcsF1Uf9cLCagWiI5Ijo8KE5pL6tz2bwKp1FfDgjjDYDxE/5nTh848 ZbJrhHT/HH0vfSpq+cbrsB0Y722KNOFYo3zBXklYfpS3pmZtknmtxTAR8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQZcRWMxvQeh5g+tZMuI7bb4ftBMB8GA1UdIwQY MBaAFNzcsCth46FerDc7mS4OGmVF9h5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAt NjY3NTg0Nzk4NjNlLzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAtNjY3NTg0Nzk4NjNl LzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjBuBqbk EJhoQ0enA3oAAbSNC0OvfHMCPTKQgA08RUz5v/CLVnJRo+MZhGnZVO/hHrgov+ss NGhusJlyjejMCNagmodBwj4c766PK6/P3dDJMFpAgm06MogE/g/9l4ghRlyy2Pr8 VqmOGhTQer45EYz6DjXj9yGf+KhupGyzCBMtJ74vgoe/IB7de7RmAPBidoEbdLYV 31/2wQFtFjJI1FnFwIUciRN06XjIu3OB5lOTf6uiGChnrbg6DTWoGVaJpdDh3n+B AsW2kTHqfV2DBzKm2UeUHu1YaUk1Bew3/qsgQue8L+OGQGTkpYF2VHDFjeLyoEud fxCI6yPyG1iCXQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:34:22 2026 by rpki-client