This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: AWaWED3sBUr1RnZhntQS4cvkIIL2nnm6HhNIQPAO7y8= Subject key identifier: 1C:1F:2A:9D:35:AD:55:1A:17:02:33:BE:DE:B1:72:BF:60:ED:10:D6 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019BF42BE821F0B2F34C18F21AE7D1F543E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 0F6A Signing time: Sun 25 Jan 2026 08:01:16 +0000 Manifest this update: Sun 25 Jan 2026 08:01:16 +0000 Manifest next update: Mon 26 Jan 2026 08:01:16 +0000 Files and hashes: 1: 068J9u-9DPhKz8VbAm8FpNPGPiY.roa (hash: +esb9M5j9IV22LJzyQWkhthxawZuVqPAoDThaS1QtUo=) 2: 3S2xPTKnn78YdkuL1FaKKKj_YTo.roa (hash: rHbDJXW9oQjYpySunNLhfzqe5DC3DBmeqQpnD/fIuKo=) 3: 4aCYY0RGaMja-Pk9etkR8koJ5JU.roa (hash: p1rgNiymQ5hiACbuTSCO2Aa2mJXgovikostXrp6lnp8=) 4: 90VeTsjn9B8sRwyT-Zs2ngGAxnQ.roa (hash: HsHpJVPkGZx/a9q98DQO2hXkEEporhKmeaG3iVC95GY=) 5: QIQmOYwmYDAmuGNr99m8HLlWChU.roa (hash: 2hFXRY7xApUSUGmkWAKEi1tCNtzyuPD0Q8qiUj/opMw=) 6: S0BwxWcqnvcnEM3DVc0X9YdrdPo.roa (hash: uwh+KVLjYLc/tsdsAb1OMYcg/EazB1FNjXbBEbvCAjY=) 7: V1dXjVL5eg8gDJxHqKz0eodPkis.roa (hash: oAVjG8l8qEsvrM53r2r+TaJaOK1tsDjY980E/tUbOKw=) 8: VQDy1YicmBsXO9_lcwtWu0sGslU.roa (hash: G5K9cpdzUCQ1XRONTvemEadoLGLHCC1DLidbEf7COy4=) 9: WOAffnwybG4qj9V7edyDhpSbDkQ.roa (hash: ycSdSma33JvpNylbgkwuYkr1DaAfpIkfLpSIfBA6Am8=) 10: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (hash: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s=) 11: YRx8EHXTnk19suEZ5MdjZLvthD4.roa (hash: f1uu4Q6sKxpubMRge9Krsyj0AjM6jQFck1/ysuErkPE=) 12: Zaa1ETdAWKfFJ07i5VWdeKJq1Y8.roa (hash: HTBLtFAfHFVHfxP1ldP56H7tmRP+j3VLoPGVIHLY2sI=) 13: ZryCLfhsn2tbfNcOOBqTDrmtBr4.roa (hash: s6nWvNWtX9EXW2C5iu+kYBDobKWsqyYEDZBG1jZg8kw=) 14: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: Tm09Pwm8wGzEehoT3HbUR1gT2uMpuxfbTQu83Fd9PSc=) 15: gxo_Krn-tQ_Z3uSlx4SQJvS2R_Y.roa (hash: v4kU1V7WuMllKhANWEP+pXEZ9tPT1PxzJDS6a6AIcxI=) 16: ryfEVRKZnK1jVhVaw9sfrzHqLCM.roa (hash: r6enxmx5xQGmlOEDSFrMxun8mtTQGChD+RDV9jYpnaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:e8:21:f0:b2:f3:4c:18:f2:1a:e7:d1:f5:43:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Jan 25 08:01:16 2026 GMT Not After : Jan 26 08:01:16 2026 GMT Subject: CN=1c1f2a9d35ad551a170233bedeb172bf60ed10d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:43:ed:54:5e:9a:d9:ed:52:44:a1:b8:ed:2e: 67:5c:c8:4d:ce:31:d6:1c:fc:52:ff:67:eb:31:1c: 7e:1b:97:84:75:8d:e4:d4:8d:71:29:28:4e:e7:cd: 5b:3f:1e:9d:ed:e7:bd:91:7e:a8:f0:d6:c5:90:3e: 25:9a:79:a3:47:52:5a:37:69:b3:92:5f:a2:14:7a: 2d:ca:e0:19:01:b0:fb:25:fe:d7:de:bf:90:f1:38: 41:22:6c:b2:b8:c5:46:5e:5a:74:c3:e2:d6:bf:24: ae:c3:f3:0c:89:da:26:b1:f4:74:86:f9:9f:da:68: a1:d7:fa:1f:c6:c5:e2:d5:de:42:33:a5:44:38:c9: 8c:94:ef:9c:87:35:ab:bf:a0:a0:5f:db:bb:12:64: 36:7f:a1:6b:35:4b:ef:4d:a0:96:d6:ef:3b:2e:3f: 02:b8:f5:95:fc:aa:de:77:6c:fb:b7:76:d0:4f:d9: 01:46:a6:05:79:f0:03:82:ff:e5:8d:2f:4d:2d:5c: 2d:3e:da:e4:d5:9f:b0:37:18:21:22:b2:6c:c6:06: 8d:d9:72:90:8a:1c:b9:94:51:3f:d3:f7:ed:85:54: da:95:8d:cd:78:84:59:48:4d:3a:c5:93:c1:08:50: 08:37:3e:b3:16:c9:3e:e9:4e:74:f2:0b:f1:cf:3c: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1F:2A:9D:35:AD:55:1A:17:02:33:BE:DE:B1:72:BF:60:ED:10:D6 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:82:d8:81:90:58:1b:d7:40:25:65:b1:fc:b1:5c:fd:78:62: 59:17:8e:56:ba:f1:fe:4a:7b:c3:41:67:2d:90:46:da:86:c5: ec:d0:1b:f9:2d:01:23:f7:2b:f7:e4:d9:21:59:eb:54:50:40: c1:f7:98:4c:a0:b8:57:ba:86:94:ad:9b:9f:10:72:56:83:87: 92:de:6f:6f:4b:d7:b1:b4:5f:22:fb:e1:ba:f5:f6:a5:44:0e: 50:5f:d8:02:04:e2:53:ce:26:f6:eb:b3:0f:3e:bd:36:1c:11: 6c:26:9a:69:cd:a5:eb:60:52:f8:d3:ce:e6:23:53:3f:61:9d: d6:08:6d:4b:df:b4:ee:ea:60:43:00:69:ed:5b:a2:4a:9a:de: b1:18:d4:16:1b:bb:8e:e6:2c:f6:f4:1e:51:d4:da:08:e4:75: 29:a1:c9:de:30:1c:15:95:cd:97:99:2b:cc:25:a2:55:cc:ad: 23:13:c2:86:de:e7:97:75:2d:7e:e9:f8:37:5a:f2:38:58:f0: db:c6:46:03:a0:27:5c:54:3f:e4:a7:bd:f3:7f:8f:79:6b:fa: 3f:e4:5d:7d:34:e5:e6:ca:4d:80:2b:d3:07:4a:95:bf:91:8a: 86:0e:aa:53:b2:a4:c6:87:f2:40:b3:37:76:86:48:35:ad:16: a8:2a:05:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K+gh8LLzTBjyGufR9UPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwMTI1MDgwMTE2WhcNMjYwMTI2MDgwMTE2WjAzMTEwLwYDVQQD EygxYzFmMmE5ZDM1YWQ1NTFhMTcwMjMzYmVkZWIxNzJiZjYwZWQxMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEPtVF6a2e1SRKG47S5nXMhNzjHW HPxS/2frMRx+G5eEdY3k1I1xKShO581bPx6d7ee9kX6o8NbFkD4lmnmjR1JaN2mz kl+iFHotyuAZAbD7Jf7X3r+Q8ThBImyyuMVGXlp0w+LWvySuw/MMidomsfR0hvmf 2mih1/ofxsXi1d5CM6VEOMmMlO+chzWrv6CgX9u7EmQ2f6FrNUvvTaCW1u87Lj8C uPWV/Kred2z7t3bQT9kBRqYFefADgv/ljS9NLVwtPtrk1Z+wNxghIrJsxgaN2XKQ ihy5lFE/0/fthVTalY3NeIRZSE06xZPBCFAINz6zFsk+6U508gvxzzyRnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwfKp01rVUaFwIzvt6xcr9g7RDWMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYLYgZBY G9dAJWWx/LFc/XhiWReOVrrx/kp7w0FnLZBG2obF7NAb+S0BI/cr9+TZIVnrVFBA wfeYTKC4V7qGlK2bnxByVoOHkt5vb0vXsbRfIvvhuvX2pUQOUF/YAgTiU84m9uuz Dz69NhwRbCaaac2l62BS+NPO5iNTP2Gd1ghtS9+07upgQwBp7VuiSpresRjUFhu7 juYs9vQeUdTaCOR1KaHJ3jAcFZXNl5krzCWiVcytIxPCht7nl3Utfun4N1ryOFjw 28ZGA6AnXFQ/5Ke983+PeWv6P+RdfTTl5spNgCvTB0qVv5GKhg6qU7KkxofyQLM3 doZINa0WqCoFFA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:40:12 2026 by rpki-client