This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: kygeXPbRZdEunbODzXawGd28Ud6UIyhKeIijvEZXOL0= Subject key identifier: 86:C1:F2:4D:83:36:58:B7:B7:B9:FA:76:DA:D7:CB:9E:87:AC:8B:FD Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019B7D828990730FBD7C62CF35060675CB35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 1373 Signing time: Fri 02 Jan 2026 07:01:05 +0000 Manifest this update: Fri 02 Jan 2026 07:01:05 +0000 Manifest next update: Sat 03 Jan 2026 07:01:05 +0000 Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: cnfmJ8w5tK4+AdoCf/BnfLT9GGyRoBIGsSIpA1P02u0=) 3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=) 4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=) 5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=) 6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=) 7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=) 8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 07:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:82:89:90:73:0f:bd:7c:62:cf:35:06:06:75:cb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 2 07:01:05 2026 GMT Not After : Jan 3 07:01:05 2026 GMT Subject: CN=86c1f24d833658b7b7b9fa76dad7cb9e87ac8bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:ea:6a:81:2c:ab:72:45:05:53:53:b5:0b: 17:11:04:e2:59:6e:8a:8b:e9:18:74:cb:30:ba:df: 1f:49:8a:6e:97:ad:09:8f:53:c4:1f:d3:2c:33:26: 5c:66:d0:c6:51:08:25:a7:91:c2:d8:b6:c7:21:21: de:81:ea:92:80:de:90:fe:ba:d3:7a:63:e2:34:03: 13:ed:b6:0f:ba:fa:2f:3f:ea:3b:a6:70:cb:5e:0c: 48:0a:d0:28:38:7c:95:eb:4c:d6:a6:73:c0:77:e7: 3b:30:52:48:fa:fd:21:92:4f:80:62:f0:0e:8f:53: d4:ba:3b:f2:15:3c:db:08:32:83:e0:eb:46:69:12: 2f:70:92:16:34:50:df:9c:db:fc:7e:0e:4a:e3:68: 14:1f:be:ad:63:0d:b8:0b:c1:b3:17:f8:e3:5e:e8: 15:56:f2:97:78:e0:35:98:9d:7b:ec:5b:a9:df:df: 85:77:58:b8:91:d6:80:c9:d2:fa:c7:65:c5:5f:d1: 6b:fe:c8:56:30:4f:f0:52:a6:89:f6:41:1a:aa:02: d3:85:1c:3d:87:e8:ab:23:b3:f4:60:f6:25:3f:7b: ea:06:e8:de:79:1c:a8:be:63:b3:2c:68:77:2d:e4: ad:b6:7f:6c:43:b3:ac:87:0d:f7:a4:9b:99:11:a4: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C1:F2:4D:83:36:58:B7:B7:B9:FA:76:DA:D7:CB:9E:87:AC:8B:FD X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:2c:57:a5:8e:c3:b7:0c:57:86:4d:b1:f1:23:e0:f7:56:72: c5:93:67:a7:83:fc:79:4e:20:b1:e1:2a:a2:92:2e:06:b5:fa: 53:aa:f1:b0:cd:43:f1:3c:e4:33:52:75:30:25:c6:47:9d:f6: 55:1e:11:95:05:50:23:cd:a1:ac:b1:99:90:22:c3:5e:06:b8: a4:36:af:7f:a2:ae:af:d5:20:64:d8:97:98:21:bf:07:89:8d: dd:24:a8:f3:fc:37:c1:4a:c0:8f:f1:16:d6:07:2f:27:51:d1: 74:9d:f5:8c:c5:1c:6a:80:2a:83:77:eb:9f:f0:c9:e0:1f:2b: ef:d6:4b:2a:e2:88:cc:81:58:df:cc:9c:64:16:1f:64:a4:6b: d2:9a:af:3e:77:c7:15:1e:8b:fc:9c:12:46:c4:a0:89:a7:e4: ba:f3:fa:0e:8d:e2:aa:a3:93:15:8e:c0:dc:1a:33:91:f8:cf: aa:89:98:77:17:24:e5:ec:55:31:9d:2a:45:e7:80:7e:02:f3: 67:5a:ed:97:94:7c:49:2e:f5:d0:13:71:93:13:c9:df:ce:a3: d5:6f:d2:2a:f1:93:43:df:0f:7f:90:28:24:43:27:49:f0:c4: de:58:e9:6f:9b:69:8e:e7:de:df:e0:2a:a6:c7:4e:2b:b3:fa: 9c:50:81:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9gomQcw+9fGLPNQYGdcs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTAyMDcwMTA1WhcNMjYwMTAzMDcwMTA1WjAzMTEwLwYDVQQD Eyg4NmMxZjI0ZDgzMzY1OGI3YjdiOWZhNzZkYWQ3Y2I5ZTg3YWM4YmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F3qaoEsq3JFBVNTtQsXEQTiWW6K i+kYdMswut8fSYpul60Jj1PEH9MsMyZcZtDGUQglp5HC2LbHISHegeqSgN6Q/rrT emPiNAMT7bYPuvovP+o7pnDLXgxICtAoOHyV60zWpnPAd+c7MFJI+v0hkk+AYvAO j1PUujvyFTzbCDKD4OtGaRIvcJIWNFDfnNv8fg5K42gUH76tYw24C8GzF/jjXugV VvKXeOA1mJ177Fup39+Fd1i4kdaAydL6x2XFX9Fr/shWME/wUqaJ9kEaqgLThRw9 h+irI7P0YPYlP3vqBujeeRyovmOzLGh3LeSttn9sQ7Oshw33pJuZEaTVTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbB8k2DNli3t7n6dtrXy56HrIv9MB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCxXpY7D twxXhk2x8SPg91ZyxZNnp4P8eU4gseEqopIuBrX6U6rxsM1D8TzkM1J1MCXGR532 VR4RlQVQI82hrLGZkCLDXga4pDavf6Kur9UgZNiXmCG/B4mN3SSo8/w3wUrAj/EW 1gcvJ1HRdJ31jMUcaoAqg3frn/DJ4B8r79ZLKuKIzIFY38ycZBYfZKRr0pqvPnfH FR6L/JwSRsSgiafkuvP6Do3iqqOTFY7A3BozkfjPqomYdxck5exVMZ0qReeAfgLz Z1rtl5R8SS710BNxkxPJ386j1W/SKvGTQ98Pf5AoJEMnSfDE3ljpb5tpjufe3+Aq psdOK7P6nFCBow== -----END CERTIFICATE-----Generated at Fri Jan 2 17:09:35 2026 by rpki-client