This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json) Hash identifier: PSo7snJDlEVWkP6efpXAcLR6ul1dQV86wvGOlKWRuIk= Subject key identifier: C6:1E:EA:59:1A:63:A5:FB:7B:A4:32:E4:84:1A:F1:AE:AE:EB:23:D8 Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66 Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66 Certificate serial: 019BFB772F7B24B06E388063E66B67BF7191 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft Manifest number: 0A5D Signing time: Mon 26 Jan 2026 18:00:50 +0000 Manifest this update: Mon 26 Jan 2026 18:00:50 +0000 Manifest next update: Tue 27 Jan 2026 18:00:50 +0000 Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: pqnuNI2Nvo/m3Dpe8dAISJc4Uv2MaR6xR5R7p+4xDJ8=) 2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:2f:7b:24:b0:6e:38:80:63:e6:6b:67:bf:71:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66 Validity Not Before: Jan 26 18:00:50 2026 GMT Not After : Jan 27 18:00:50 2026 GMT Subject: CN=c61eea591a63a5fb7ba432e4841af1aeaeeb23d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ab:1e:21:18:c8:c1:d1:9e:d9:cd:17:45:dc: d0:7f:9e:91:7d:10:27:8f:64:8a:67:aa:d7:97:5c: 55:f1:30:b5:fe:c9:de:2d:06:5a:31:db:8c:f7:76: 65:17:c0:04:7a:ef:8a:5f:5d:0c:fe:ea:92:af:85: 34:69:e1:db:b2:08:1c:e1:c6:77:78:a7:08:5e:de: 50:24:39:d7:62:71:71:05:66:c0:5f:23:57:e3:a5: 98:6d:b6:7b:4b:0f:eb:18:1d:bf:1c:14:51:dd:e6: 0d:cc:ff:fe:9d:a5:86:11:f0:ba:0d:ee:48:13:15: 02:c0:1d:f7:02:60:77:33:be:c2:0e:ab:d4:00:b7: 5f:8f:bf:ce:c8:e2:95:cd:80:07:1b:4a:51:06:ea: 94:1b:1b:70:fe:8a:ed:3c:f6:d5:31:04:d3:f7:df: 5f:49:66:88:ed:4b:85:32:54:89:c9:93:ff:db:c6: 95:61:4c:de:eb:74:27:7e:4b:c6:8e:3c:45:c1:c0: c4:23:47:b7:46:c6:11:bb:69:cc:0d:18:0f:b3:a4: 11:bd:b4:d2:e2:46:4a:29:1f:b5:1e:5f:70:80:3c: 45:8d:85:86:f9:43:1b:73:31:e8:a1:82:75:d0:6c: 21:4c:08:51:06:00:3d:5b:b8:bc:4a:0e:1b:14:40: 22:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1E:EA:59:1A:63:A5:FB:7B:A4:32:E4:84:1A:F1:AE:AE:EB:23:D8 X509v3 Authority Key Identifier: keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f5:1f:d6:33:e6:a8:cb:b6:c7:cd:cf:c3:a2:a1:ee:20:72: 66:20:05:c4:cc:3c:b9:16:d2:a2:a4:b8:4e:32:9d:92:fe:1f: 78:47:c9:9e:6e:3f:be:ec:78:0a:f5:ca:cb:01:64:e7:2f:c0: 95:e0:0f:f0:e6:46:9c:32:41:62:5b:a7:be:f0:0d:de:65:44: 73:97:35:00:c0:69:f1:23:ea:e7:8c:f4:fa:ae:dc:67:fc:58: 02:d0:89:da:30:ba:10:35:c8:64:ef:42:09:3b:93:fd:85:aa: 8b:97:f5:77:04:39:81:3b:b1:ff:1d:9b:9d:72:f8:b5:8f:70: 41:cc:21:25:c1:69:66:b8:0e:55:91:60:01:3a:52:ed:11:d5: 4f:09:16:c4:44:9b:cf:96:72:2c:16:59:18:89:18:2b:05:4b: 87:10:c5:83:a5:aa:4d:07:3a:e0:4a:aa:93:be:27:26:ad:ba: fc:93:d3:57:cb:46:e0:88:34:1f:9f:dd:26:12:07:a4:40:13: 65:42:5c:8a:62:dc:08:08:15:c1:ba:ea:4d:81:d5:bb:a4:68: 00:33:8d:45:a4:71:e7:69:7d:01:49:34:7d:1d:8f:b4:0f:f6: 6d:9f:e9:14:af:ab:5f:e6:96:f9:c6:1b:cc:85:0f:f7:c1:1d: 85:f8:ff:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dy97JLBuOIBj5mtnv3GRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMTg4ZWMyZTQ5YWM5NDU4NTI0NWI0Yjg3NDVhMWJiN2Ex Y2RjNjYwHhcNMjYwMTI2MTgwMDUwWhcNMjYwMTI3MTgwMDUwWjAzMTEwLwYDVQQD EyhjNjFlZWE1OTFhNjNhNWZiN2JhNDMyZTQ4NDFhZjFhZWFlZWIyM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaseIRjIwdGe2c0XRdzQf56RfRAn j2SKZ6rXl1xV8TC1/sneLQZaMduM93ZlF8AEeu+KX10M/uqSr4U0aeHbsggc4cZ3 eKcIXt5QJDnXYnFxBWbAXyNX46WYbbZ7Sw/rGB2/HBRR3eYNzP/+naWGEfC6De5I ExUCwB33AmB3M77CDqvUALdfj7/OyOKVzYAHG0pRBuqUGxtw/ortPPbVMQTT999f SWaI7UuFMlSJyZP/28aVYUze63QnfkvGjjxFwcDEI0e3RsYRu2nMDRgPs6QRvbTS 4kZKKR+1Hl9wgDxFjYWG+UMbczHooYJ10GwhTAhRBgA9W7i8Sg4bFEAiIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYe6lkaY6X7e6Qy5IQa8a6u6yPYMB8GA1UdIwQY MBaAFN0YjsLkmslFhSRbS4dFobt6HNxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1JpT3d1U2F5VVdGSkZ0TGgwV2h1M29jM0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hNDFlZGItOWRmNS00MGY5LTllY2Ut YjU5MTk4YjkxNTVkLzEvM1JpT3d1U2F5VVdGSkZ0TGgwV2h1M29jM0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hNDFlZGItOWRmNS00MGY5LTllY2UtYjU5MTk4YjkxNTVk LzEvM1JpT3d1U2F5VVdGSkZ0TGgwV2h1M29jM0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/Uf1jPm qMu2x83Pw6Kh7iByZiAFxMw8uRbSoqS4TjKdkv4feEfJnm4/vux4CvXKywFk5y/A leAP8OZGnDJBYlunvvAN3mVEc5c1AMBp8SPq54z0+q7cZ/xYAtCJ2jC6EDXIZO9C CTuT/YWqi5f1dwQ5gTux/x2bnXL4tY9wQcwhJcFpZrgOVZFgATpS7RHVTwkWxESb z5ZyLBZZGIkYKwVLhxDFg6WqTQc64Eqqk74nJq26/JPTV8tG4Ig0H5/dJhIHpEAT ZUJcimLcCAgVwbrqTYHVu6RoADONRaRx52l9AUk0fR2PtA/2bZ/pFK+rX+aW+cYb zIUP98Edhfj/Yg== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:04 2026 by rpki-client