This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json) Hash identifier: PTYaGH7TYww2Typ39RYM81Rsx/vmXhZpz00ZPS5ZN48= Subject key identifier: 10:61:87:C5:EC:16:99:18:33:C2:67:02:8F:2A:69:7E:02:9F:DC:BF Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71 Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71 Certificate serial: 019BFD9CC179D5E28D119110AE3192445C26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft Manifest number: 17F6 Signing time: Tue 27 Jan 2026 04:01:07 +0000 Manifest this update: Tue 27 Jan 2026 04:01:07 +0000 Manifest next update: Wed 28 Jan 2026 04:01:07 +0000 Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: AFHa1JCTByVzDn4UZ2zTsD6LTncJtfe6bN+dMQdywr8=) 2: BkDRLAa3B4lViMgjpTtfQSFV14I.roa (hash: FjVWnkZKxfwmWvnmDOyzpHJdLPGSitKsvtBzxG3wncA=) 3: nFz68vxexIG1S-RusF1_qXkv1Yc.roa (hash: CL/0BWaI5R4mYNyzheF3UgRNXWDP8rh4d3WLBBru+lU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9c:c1:79:d5:e2:8d:11:91:10:ae:31:92:44:5c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71 Validity Not Before: Jan 27 04:01:07 2026 GMT Not After : Jan 28 04:01:07 2026 GMT Subject: CN=106187c5ec16991833c267028f2a697e029fdcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:26:cd:7d:b6:0d:41:55:f5:2c:5e:50:f7:c8: e4:c4:7c:be:e5:38:95:20:dd:bc:56:a6:6f:31:c1: 65:73:d4:3c:43:16:eb:72:cd:99:3a:b6:d1:a2:38: 34:25:ac:c3:9f:d8:76:18:b2:e0:cc:36:89:82:f9: df:f4:fe:f6:fb:58:eb:d8:07:59:a9:66:da:d1:33: ff:0f:7a:62:d7:45:4b:cc:0a:6b:e4:4c:c1:98:b1: 5e:a4:65:c7:7e:b6:eb:00:c2:fa:da:c0:1d:61:9c: 53:f8:eb:49:fd:a9:f0:ac:9a:7e:7f:35:02:27:de: 67:2a:42:d8:e1:b3:71:a6:2c:76:3e:d6:0f:33:01: b4:ff:e5:06:c3:30:68:18:61:c0:a4:46:96:55:71: 80:3c:d1:90:bf:10:ff:23:1b:1e:af:e9:a6:49:39: 45:8d:fb:82:a2:c3:8e:aa:ed:7b:c4:bf:32:c7:4e: 69:bf:cd:56:9d:06:86:76:33:e5:bd:8e:8e:32:d0: 75:ba:0d:29:54:3b:e5:6b:c6:ce:8a:d3:d0:57:fa: 9f:38:0b:10:de:c0:e7:5c:4e:f7:ad:ce:ab:a9:40: 4e:e9:81:0f:0d:57:ac:4e:f3:30:7e:94:ac:2e:b8: 0e:91:22:f0:33:a1:14:dc:ec:5f:ee:82:f5:c7:72: 71:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:61:87:C5:EC:16:99:18:33:C2:67:02:8F:2A:69:7E:02:9F:DC:BF X509v3 Authority Key Identifier: keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:59:66:a9:6f:72:e7:8b:36:24:34:5c:ac:e2:5a:ac:9a:79: 08:6e:dc:d9:fc:85:9f:1c:df:de:67:31:3c:46:b1:0b:f3:40: d1:08:ae:97:a0:a8:2c:f6:57:7f:e4:36:7f:50:f6:dc:1c:9e: da:a2:4b:b8:05:a5:d9:e1:f9:9e:ab:87:02:e2:4c:be:20:68: 94:32:34:9e:4a:28:bf:dc:ef:e8:f8:1d:d6:0e:43:1e:0e:80: 1c:05:d0:27:e1:04:9b:19:10:40:a1:36:8f:3e:a3:4f:f0:e5: fe:11:0d:c1:fd:84:42:66:bf:39:a7:bf:fb:f6:ab:ec:ae:f3: 41:9f:57:65:10:f7:e2:6e:4d:46:ae:63:d0:70:bc:38:a5:0b: 3a:c8:96:f5:d8:e6:9c:26:60:80:7f:5c:97:02:da:a9:3d:43: 69:fe:b4:fd:20:26:03:79:57:eb:cb:ba:13:57:8f:49:4a:8a: e1:5e:47:73:43:c0:0b:20:87:97:a7:9b:5f:0c:5a:a6:1e:fb: 7d:8a:2d:a6:c5:1e:b0:27:a0:f6:ba:2a:08:57:f4:09:3f:27: 0c:c2:45:77:52:83:0e:b9:86:13:6f:a1:ab:cf:6b:11:1d:d7: 89:43:72:ca:4e:61:b4:5b:1f:92:5b:6b:c7:22:89:f8:fa:db: f8:e5:be:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nMF51eKNEZEQrjGSRFwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh MzljNzEwHhcNMjYwMTI3MDQwMTA3WhcNMjYwMTI4MDQwMTA3WjAzMTEwLwYDVQQD EygxMDYxODdjNWVjMTY5OTE4MzNjMjY3MDI4ZjJhNjk3ZTAyOWZkY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCbNfbYNQVX1LF5Q98jkxHy+5TiV IN28VqZvMcFlc9Q8Qxbrcs2ZOrbRojg0JazDn9h2GLLgzDaJgvnf9P72+1jr2AdZ qWba0TP/D3pi10VLzApr5EzBmLFepGXHfrbrAML62sAdYZxT+OtJ/anwrJp+fzUC J95nKkLY4bNxpix2PtYPMwG0/+UGwzBoGGHApEaWVXGAPNGQvxD/Ixser+mmSTlF jfuCosOOqu17xL8yx05pv81WnQaGdjPlvY6OMtB1ug0pVDvla8bOitPQV/qfOAsQ 3sDnXE73rc6rqUBO6YEPDVesTvMwfpSsLrgOkSLwM6EU3Oxf7oL1x3JxpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBhh8XsFpkYM8JnAo8qaX4Cn9y/MB8GA1UdIwQY MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt NmVkNTRkM2ZlNGY0LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0 LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJllmqW9y 54s2JDRcrOJarJp5CG7c2fyFnxzf3mcxPEaxC/NA0Qiul6CoLPZXf+Q2f1D23Bye 2qJLuAWl2eH5nquHAuJMviBolDI0nkoov9zv6Pgd1g5DHg6AHAXQJ+EEmxkQQKE2 jz6jT/Dl/hENwf2EQma/Oae/+/ar7K7zQZ9XZRD34m5NRq5j0HC8OKULOsiW9djm nCZggH9clwLaqT1Daf60/SAmA3lX68u6E1ePSUqK4V5Hc0PACyCHl6ebXwxaph77 fYotpsUesCeg9roqCFf0CT8nDMJFd1KDDrmGE2+hq89rER3XiUNyyk5htFsfkltr xyKJ+Prb+OW+yw== -----END CERTIFICATE-----Generated at Tue Jan 27 09:51:18 2026 by rpki-client