This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: OC4pOEgO1tDd6XwCWBK5RZ87ohzTvb7DvajMFEplnGM= Subject key identifier: 90:A5:AD:8E:6D:E7:79:18:78:AF:1F:43:90:FB:BD:D6:FC:BC:8F:6C Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019BFEE5E69FA1537682E319364482300AD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 13B6 Signing time: Tue 27 Jan 2026 10:00:38 +0000 Manifest this update: Tue 27 Jan 2026 10:00:38 +0000 Manifest next update: Wed 28 Jan 2026 10:00:38 +0000 Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: UGd8l/RPSPtWT806trFr5xf4LKpvOlZQFdBkCMiIEZ4=) 3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=) 4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=) 5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=) 6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=) 7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=) 8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:e5:e6:9f:a1:53:76:82:e3:19:36:44:82:30:0a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 27 10:00:38 2026 GMT Not After : Jan 28 10:00:38 2026 GMT Subject: CN=90a5ad8e6de7791878af1f4390fbbdd6fcbc8f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:6a:f8:98:0f:13:7e:b5:c9:44:fd:ee:93: 45:b9:48:c9:3e:0f:3e:5a:10:f9:0b:50:5a:b1:ab: d2:7c:97:ef:3f:85:57:a0:ac:7e:d0:89:a6:bd:d8: 3e:1e:f2:4b:25:3f:6d:8f:92:9a:43:58:f3:ff:8c: b4:ed:96:27:4b:33:4f:dd:df:9b:47:18:bb:f1:db: e3:35:5a:c7:eb:d9:79:a7:4e:95:bd:af:37:ca:92: 85:cb:ea:17:d8:b7:81:8d:19:89:00:a1:14:31:7c: 96:3b:9e:4b:45:ec:86:91:90:ac:33:79:35:14:60: d0:91:40:57:c7:3e:9b:c9:42:82:e4:15:54:19:24: b1:54:06:c7:43:88:37:7e:fb:03:93:b7:90:e0:59: 7e:99:64:7f:c5:39:3a:3e:c1:33:45:7c:03:73:fc: 15:5d:3e:30:d5:36:6f:50:81:a5:80:51:15:55:7d: 02:8a:c0:d6:29:1c:14:ba:80:dd:ca:53:dd:ef:5c: 08:34:88:52:4a:92:69:3d:b9:cd:05:0b:7b:ac:e7: 4a:4f:8d:b6:9e:48:5e:0a:2a:54:9a:37:0d:dc:4c: 6f:8b:2c:98:14:df:16:ce:d9:48:ea:92:21:15:c4: 55:65:07:74:17:7a:9f:ad:d1:d9:0c:e3:f5:21:34: 2c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A5:AD:8E:6D:E7:79:18:78:AF:1F:43:90:FB:BD:D6:FC:BC:8F:6C X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:44:ea:fe:76:24:d8:1a:d0:7e:f4:f6:62:1e:9e:e7:12:0e: 1a:4e:a8:0a:e3:7d:ea:a1:aa:d4:af:a9:3a:5a:9f:f3:07:e5: 88:aa:11:48:04:f5:28:95:78:23:73:96:f5:8c:f6:8a:20:48: c1:55:ab:f1:97:3e:d6:8d:ad:d3:28:1c:12:c9:e2:2b:f1:0f: 92:1c:ff:e4:16:15:c5:f2:cc:c0:b2:3a:55:88:88:6c:0d:fe: 30:09:e2:60:69:fb:1f:11:11:f0:f9:16:aa:80:b8:33:95:75: 63:92:93:fc:1c:cc:eb:55:f0:03:4e:4c:05:85:63:d6:72:70: 74:b5:45:05:03:4d:cc:aa:40:39:63:af:f0:35:8d:62:80:4b: 50:98:b3:d3:04:ab:19:1d:7f:9f:98:38:2c:50:62:65:ad:65: 02:ee:75:96:08:a7:4c:e8:7c:68:12:8e:c0:1f:65:d4:ed:df: 35:59:75:60:52:65:97:4c:28:73:cd:73:6c:26:9b:51:39:9c: d6:fa:71:92:84:99:25:6c:25:78:ac:e6:1f:8a:98:00:2a:2d: e0:85:1d:fe:ad:7c:99:5c:8c:27:63:58:4f:89:7a:11:db:3b: e4:71:c7:48:70:00:f0:ad:3a:f1:39:19:d1:ec:79:96:d8:e7: 3a:33:07:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+5eafoVN2guMZNkSCMArSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTI3MTAwMDM4WhcNMjYwMTI4MTAwMDM4WjAzMTEwLwYDVQQD Eyg5MGE1YWQ4ZTZkZTc3OTE4NzhhZjFmNDM5MGZiYmRkNmZjYmM4ZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/xq+JgPE361yUT97pNFuUjJPg8+ WhD5C1BasavSfJfvP4VXoKx+0Immvdg+HvJLJT9tj5KaQ1jz/4y07ZYnSzNP3d+b Rxi78dvjNVrH69l5p06Vva83ypKFy+oX2LeBjRmJAKEUMXyWO55LReyGkZCsM3k1 FGDQkUBXxz6byUKC5BVUGSSxVAbHQ4g3fvsDk7eQ4Fl+mWR/xTk6PsEzRXwDc/wV XT4w1TZvUIGlgFEVVX0CisDWKRwUuoDdylPd71wINIhSSpJpPbnNBQt7rOdKT422 nkheCipUmjcN3ExviyyYFN8WztlI6pIhFcRVZQd0F3qfrdHZDOP1ITQsPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJClrY5t53kYeK8fQ5D7vdb8vI9sMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHETq/nYk 2BrQfvT2Yh6e5xIOGk6oCuN96qGq1K+pOlqf8wfliKoRSAT1KJV4I3OW9Yz2iiBI wVWr8Zc+1o2t0ygcEsniK/EPkhz/5BYVxfLMwLI6VYiIbA3+MAniYGn7HxER8PkW qoC4M5V1Y5KT/BzM61XwA05MBYVj1nJwdLVFBQNNzKpAOWOv8DWNYoBLUJiz0wSr GR1/n5g4LFBiZa1lAu51lginTOh8aBKOwB9l1O3fNVl1YFJll0woc81zbCabUTmc 1vpxkoSZJWwleKzmH4qYACot4IUd/q18mVyMJ2NYT4l6Eds75HHHSHAA8K068TkZ 0ex5ltjnOjMHag== -----END CERTIFICATE-----Generated at Tue Jan 27 16:42:40 2026 by rpki-client