This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: MCKKnBPHnUlZnm40IpMz52hHsAo4DL5Ked58svnb9uo= Subject key identifier: B4:38:06:5D:6F:83:CC:FA:E6:28:B4:E1:0D:1B:E3:2C:0C:AE:23:CB Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019BD80F84698CEB785ED05A25E76D0EB35E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0BBB Signing time: Mon 19 Jan 2026 21:00:54 +0000 Manifest this update: Mon 19 Jan 2026 21:00:54 +0000 Manifest next update: Tue 20 Jan 2026 21:00:54 +0000 Files and hashes: 1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=) 2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=) 3: 2zmc64_qwTQPhyAIjVjoeagXv0Y.roa (hash: HxpPRAL0eOabdVSfebhoMXHXX5y42SyM5Qp7Hj3S3Bo=) 4: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=) 5: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=) 6: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=) 7: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=) 8: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=) 9: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=) 10: BLvck3jtH0yiq7mj0oSIpxGzim0.roa (hash: rNoyDTYrAexTBbf0FBqXytC/SgHvT/1Wqrx2FO97F4M=) 11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: 58s7YlsMjzrwqFoPGTJt7ak3Ua80AwKp1edkWVK4vpo=) 12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=) 13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=) 14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=) 15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=) 16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=) 17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=) 18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=) 19: V7zz5RYIeaD1rKbwrR61Qzmy0cE.roa (hash: Bp1wY3wHba5l7UrAhDBjOEjjo7+NQ6Cmh+UiV252fLs=) 20: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=) 21: dMeBF-kn-NkRDRRVpgIYc7U7Gzg.roa (hash: 6oHNnUyVSeR7K0ZmgkLZ6A6vdOgja/OQQJDLB1PEGxU=) 22: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=) 23: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=) 24: hqaui3y0dJBb-G_swK9JTqsP15I.roa (hash: IYmlHOKbbIfZroL4w4V7fPkYaUorBcPfFwoIP2cIOs8=) 25: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=) 26: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=) 27: kjrIZIW45KaOyNR8g_TQidHhKxQ.roa (hash: azT5mOJbUfFEST0Ir7ouylIomcyXSpCUxWYnorkrsXI=) 28: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=) 29: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=) 30: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=) 31: pGtQQai-dxwqAqhELvcpGWvnJZQ.roa (hash: bWty7Pjo+KwFzlM1rDtQDVkiqqU12gvaV9LDUSEaGgU=) 32: pTpGty7SoOlULzj4dFHlP8-2JxY.roa (hash: jwYePEgcBQVLY261Fm3BhfP9W/eR3MhlrFnRKYIgSt4=) 33: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=) 34: xdV6BMUZwA6HK6ackAXJc9L3G8U.roa (hash: qL+/RVIhCRk9UXo6uWsZ6mzt5EaHjBCt/5Hbb7yGo78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:0f:84:69:8c:eb:78:5e:d0:5a:25:e7:6d:0e:b3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 19 21:00:54 2026 GMT Not After : Jan 20 21:00:54 2026 GMT Subject: CN=b438065d6f83ccfae628b4e10d1be32c0cae23cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8f:b1:60:21:f4:4b:86:69:7e:fc:da:89:4a: 87:b6:73:b3:a3:1c:df:6e:ce:00:6e:ee:59:a6:0b: 48:c6:ae:5c:ec:c3:79:55:e3:37:3e:29:be:7e:65: 59:54:c1:58:84:af:0b:d6:cc:be:22:fe:e3:77:47: e4:62:f1:f4:74:1e:3a:c4:82:b0:26:ab:f8:ff:4e: 9a:a1:9e:9a:6c:9a:0e:03:ef:ab:12:76:f4:ee:0e: be:d5:8e:e2:e3:55:3e:c4:4f:44:9a:62:f1:54:dc: 27:fa:fa:04:2b:f6:1b:06:ae:c1:c6:74:c1:8c:43: 1d:c1:5b:c4:a4:b1:37:b2:7d:70:8b:d2:1f:96:f8: e1:49:2d:c4:ec:be:7e:31:23:ca:5c:44:a8:37:24: 24:94:6f:24:06:df:77:e2:0c:a8:05:46:cc:63:2f: df:6c:e1:a8:fa:25:ca:19:23:e3:60:3b:62:fe:ee: 05:d4:ec:3a:0f:af:08:d0:b6:97:4a:87:6b:53:0b: 8d:ae:f7:7d:d8:3c:03:5f:a4:6e:c1:0e:5a:92:f1: 5e:04:98:7b:9c:f6:62:8a:3f:2e:8e:5f:09:4d:cb: d6:94:81:6f:e5:4b:79:60:e0:0e:26:75:96:b7:08: 5a:73:7d:0a:97:6e:ea:51:4b:3a:68:30:ba:0b:98: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:38:06:5D:6F:83:CC:FA:E6:28:B4:E1:0D:1B:E3:2C:0C:AE:23:CB X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:31:f6:53:5b:2f:9c:59:46:1e:39:a2:5c:25:1f:53:00:92: bd:09:d2:f5:25:9e:1b:19:26:94:f0:1f:03:aa:53:20:3d:06: 12:06:eb:57:71:1d:cc:0c:5b:6f:56:83:6c:b7:bb:1b:f3:d5: ed:d4:e8:58:80:9f:68:6d:c6:82:65:2d:b7:13:8a:8e:e1:e5: 3d:b6:4c:c5:27:f0:a2:9a:b4:f0:e5:a3:8a:7d:9a:da:e2:47: da:9a:27:49:af:a2:64:4d:6d:a5:df:15:57:dc:9a:1b:d8:8e: 79:d7:2e:e4:69:ff:3b:37:2d:e3:3e:41:a7:34:82:cf:05:b0: 2e:35:df:75:ad:f4:71:e9:ac:7e:f1:b2:47:ab:14:44:b7:26: 06:3e:9b:41:af:52:a9:48:01:28:2c:62:eb:03:65:c0:d7:23: ab:2f:8f:5f:7e:4a:6b:a7:f7:e4:d1:99:d8:d9:6d:90:a6:73: 15:52:9e:f6:ea:cc:91:0b:d4:a8:e4:e0:66:07:66:0d:52:1b: 90:35:db:e7:14:bd:0a:f6:48:f9:a3:64:b1:55:15:d0:82:22: 33:ee:8a:c2:75:72:90:78:6a:95:b8:26:a4:f4:a8:aa:82:48: 17:e6:02:b9:ac:ba:50:09:cd:78:9d:ce:2b:d0:1d:3c:e7:94: 53:82:e0:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYD4RpjOt4XtBaJedtDrNeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTE5MjEwMDU0WhcNMjYwMTIwMjEwMDU0WjAzMTEwLwYDVQQD EyhiNDM4MDY1ZDZmODNjY2ZhZTYyOGI0ZTEwZDFiZTMyYzBjYWUyM2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y+xYCH0S4ZpfvzaiUqHtnOzoxzf bs4Abu5ZpgtIxq5c7MN5VeM3Pim+fmVZVMFYhK8L1sy+Iv7jd0fkYvH0dB46xIKw Jqv4/06aoZ6abJoOA++rEnb07g6+1Y7i41U+xE9EmmLxVNwn+voEK/YbBq7BxnTB jEMdwVvEpLE3sn1wi9IflvjhSS3E7L5+MSPKXESoNyQklG8kBt934gyoBUbMYy/f bOGo+iXKGSPjYDti/u4F1Ow6D68I0LaXSodrUwuNrvd92DwDX6RuwQ5akvFeBJh7 nPZiij8ujl8JTcvWlIFv5Ut5YOAOJnWWtwhac30Kl27qUUs6aDC6C5gTrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ4Bl1vg8z65ii04Q0b4ywMriPLMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADH2U1sv nFlGHjmiXCUfUwCSvQnS9SWeGxkmlPAfA6pTID0GEgbrV3EdzAxbb1aDbLe7G/PV 7dToWICfaG3GgmUttxOKjuHlPbZMxSfwopq08OWjin2a2uJH2ponSa+iZE1tpd8V V9yaG9iOedcu5Gn/Ozct4z5BpzSCzwWwLjXfda30cemsfvGyR6sURLcmBj6bQa9S qUgBKCxi6wNlwNcjqy+PX35Ka6f35NGZ2NltkKZzFVKe9urMkQvUqOTgZgdmDVIb kDXb5xS9CvZI+aNksVUV0IIiM+6KwnVykHhqlbgmpPSoqoJIF+YCuay6UAnNeJ3O K9AdPOeUU4LgfA== -----END CERTIFICATE-----Generated at Tue Jan 20 07:36:19 2026 by rpki-client