This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: WDf2qKkTDzmMvIr4CtBOzs4F/6AzBgmXx7IlhFapGdk= Subject key identifier: 50:3B:AA:49:5D:F0:D9:1D:D9:25:ED:A0:89:5F:42:A2:F2:18:62:C9 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019BCAC15E359CF82ECE541C0B8A759185E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 139B Signing time: Sat 17 Jan 2026 07:00:28 +0000 Manifest this update: Sat 17 Jan 2026 07:00:28 +0000 Manifest next update: Sun 18 Jan 2026 07:00:28 +0000 Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: CZ8lo2tNiHHuFlo6bsiseu89NCwu1MN1Nx/Z76TDV8Q=) 3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=) 4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=) 5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=) 6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=) 7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=) 8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 03:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ca:c1:5e:35:9c:f8:2e:ce:54:1c:0b:8a:75:91:85:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 17 07:00:28 2026 GMT Not After : Jan 18 07:00:28 2026 GMT Subject: CN=503baa495df0d91dd925eda0895f42a2f21862c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:14:8f:2a:a6:1e:61:2a:84:84:7b:ee:7a: 40:97:80:a5:0f:38:9b:64:ae:49:b4:a1:9e:c4:6f: 7a:cf:fa:d5:f2:47:7b:02:b3:27:42:43:34:e7:66: 3b:dc:da:4c:b7:31:f0:87:ea:ab:9c:45:c4:b4:ae: 25:de:73:19:e9:9f:ff:9d:14:c8:f1:33:d2:24:6a: 1b:9c:c9:1f:be:a9:00:d8:64:83:23:1f:3a:e3:10: 17:bf:b7:4e:07:04:9c:b4:b8:93:79:a3:da:9c:09: 29:f8:d4:b5:ff:d6:d2:84:7f:33:83:68:17:06:25: 5b:74:24:7b:2c:78:ad:7b:08:8c:39:8c:d7:65:d2: 25:17:a6:85:8d:7e:30:8d:80:31:e7:18:c7:fc:70: 87:d6:57:7f:58:10:54:cd:5f:65:4d:d9:95:29:f9: 11:f4:bf:4c:92:93:2d:96:51:ea:4b:16:b5:05:49: 51:13:b1:60:5e:22:4b:8c:20:1c:e6:c8:71:d3:f5: f5:cf:7f:2f:15:64:0a:14:63:80:fc:63:16:53:f1: 23:2e:3f:ab:a4:b4:17:77:1b:13:95:81:31:09:e2: 29:9e:5b:a9:9b:42:26:74:55:f5:55:4d:37:b8:80: 3f:8e:81:53:0e:63:4e:81:59:0a:e3:5c:7f:ea:7e: 22:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3B:AA:49:5D:F0:D9:1D:D9:25:ED:A0:89:5F:42:A2:F2:18:62:C9 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c2:bf:57:b3:06:4b:b0:8c:c4:f4:f3:71:34:19:29:ee:c6: 23:de:3f:4a:71:cc:a7:65:81:3b:e2:02:d3:c8:eb:41:b7:82: 81:2a:2c:16:80:cc:6a:35:34:22:72:63:15:19:51:78:56:6d: 80:0f:04:a6:09:f4:15:af:05:a8:26:86:fd:99:97:81:9b:ce: a9:a6:1c:b0:e6:75:9a:23:32:84:2b:a4:09:22:2e:3d:24:30: ad:53:83:28:55:60:6d:93:2d:78:82:63:af:ed:8c:31:f7:9e: 64:f1:51:5d:d1:25:89:5d:f7:99:ab:bf:b1:6f:04:98:68:d0: 82:86:9f:fc:8a:0c:27:60:03:9b:51:92:59:30:a5:fe:58:c1: fc:fd:31:d7:cb:1a:a4:b5:89:63:2a:a0:e9:19:92:77:7e:07: 33:ad:e5:e0:26:83:64:ae:3e:e7:01:95:fb:d0:51:ad:c6:2f: 01:bc:66:4e:e8:67:0e:d4:0f:7d:e9:66:c1:e4:ee:c0:81:0f: 7b:fa:9a:dd:be:5d:f2:ea:46:36:08:81:ee:49:9d:31:44:f6: 7f:52:96:16:4b:00:f2:81:b2:33:12:cc:51:19:6d:e0:24:79: da:17:e7:06:7b:44:13:fc:c4:92:7a:ee:bb:ab:c6:77:13:57: 75:83:c3:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvKwV41nPguzlQcC4p1kYXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTE3MDcwMDI4WhcNMjYwMTE4MDcwMDI4WjAzMTEwLwYDVQQD Eyg1MDNiYWE0OTVkZjBkOTFkZDkyNWVkYTA4OTVmNDJhMmYyMTg2MmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkUUjyqmHmEqhIR77npAl4ClDzib ZK5JtKGexG96z/rV8kd7ArMnQkM052Y73NpMtzHwh+qrnEXEtK4l3nMZ6Z//nRTI 8TPSJGobnMkfvqkA2GSDIx864xAXv7dOBwSctLiTeaPanAkp+NS1/9bShH8zg2gX BiVbdCR7LHitewiMOYzXZdIlF6aFjX4wjYAx5xjH/HCH1ld/WBBUzV9lTdmVKfkR 9L9MkpMtllHqSxa1BUlRE7FgXiJLjCAc5shx0/X1z38vFWQKFGOA/GMWU/EjLj+r pLQXdxsTlYExCeIpnlupm0ImdFX1VU03uIA/joFTDmNOgVkK41x/6n4iHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFA7qkld8Nkd2SXtoIlfQqLyGGLJMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMK/V7MG S7CMxPTzcTQZKe7GI94/SnHMp2WBO+IC08jrQbeCgSosFoDMajU0InJjFRlReFZt gA8Epgn0Fa8FqCaG/ZmXgZvOqaYcsOZ1miMyhCukCSIuPSQwrVODKFVgbZMteIJj r+2MMfeeZPFRXdEliV33mau/sW8EmGjQgoaf/IoMJ2ADm1GSWTCl/ljB/P0x18sa pLWJYyqg6RmSd34HM63l4CaDZK4+5wGV+9BRrcYvAbxmTuhnDtQPfelmweTuwIEP e/qa3b5d8upGNgiB7kmdMUT2f1KWFksA8oGyMxLMURlt4CR52hfnBntEE/zEknru u6vGdxNXdYPD9w== -----END CERTIFICATE-----Generated at Sat Jan 17 13:28:02 2026 by rpki-client