This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: NEBJXNafhVUt+xJcIaIlr1Pg5FPlEi0HhGT53YDqLxo= Subject key identifier: EB:B9:D8:BB:BA:2A:6C:19:DD:B0:5F:49:2E:A5:3C:99:F4:D4:F0:F8 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019C04B1E1F6784E0BAA57693AA033295AEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 13B9 Signing time: Wed 28 Jan 2026 13:01:32 +0000 Manifest this update: Wed 28 Jan 2026 13:01:32 +0000 Manifest next update: Thu 29 Jan 2026 13:01:32 +0000 Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: K//GdXS9eB2u2NpmiaCYUp5/NC2KaTqup1PGH7lMzzw=) 3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=) 4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=) 5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=) 6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=) 7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=) 8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:b1:e1:f6:78:4e:0b:aa:57:69:3a:a0:33:29:5a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 28 13:01:32 2026 GMT Not After : Jan 29 13:01:32 2026 GMT Subject: CN=ebb9d8bbba2a6c19ddb05f492ea53c99f4d4f0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:81:a1:e6:7c:1e:66:f0:81:29:35:80:c6: 46:fe:d8:e1:a9:2d:28:31:11:06:76:72:27:15:79: b1:76:ab:69:59:e9:2c:c0:8f:f9:65:d7:94:7b:31: 97:ad:a3:3a:14:f5:ab:70:d0:be:c2:46:a3:45:3b: 96:97:e4:f5:89:38:15:c7:54:f5:bc:3d:e3:d5:5c: a0:a9:eb:50:d6:35:04:3d:6a:cf:8e:bc:80:6e:41: 10:2f:7f:f7:2b:44:f3:bf:d4:6c:43:e0:e5:3e:3a: da:20:83:02:3f:03:38:8e:90:a9:d4:97:d6:31:e0: cf:40:4b:66:32:19:7e:fc:7d:0d:f4:e7:db:3d:17: a3:2d:75:e1:a2:a6:6c:03:a0:b8:ec:2f:b8:66:eb: 94:46:99:05:8e:eb:b4:c5:2e:75:2d:4e:f9:bb:b0: 82:a7:ae:fa:a2:ec:b7:43:6a:33:81:a8:88:47:25: 73:d8:b1:50:39:a4:b9:ba:46:3b:59:36:18:36:ca: bf:b4:82:3c:bf:ce:1c:45:6f:3b:eb:72:c5:9d:e9: 02:a3:4a:2c:58:c6:9f:05:ca:1b:c7:92:d9:73:52: ec:5b:c7:40:3b:b3:92:e2:6f:92:25:a9:b0:b6:de: 52:f8:3e:a2:f8:c1:21:00:e3:7b:e4:2e:c9:2e:3b: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B9:D8:BB:BA:2A:6C:19:DD:B0:5F:49:2E:A5:3C:99:F4:D4:F0:F8 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:98:7c:a9:e5:78:2b:f1:bc:d6:ab:b2:a5:f1:d3:04:99:18: 3b:22:7d:d1:28:30:a8:15:37:5d:66:31:29:2d:35:55:30:71: 91:7c:af:9c:a3:7b:c9:ee:8a:53:bd:6e:52:c1:2f:3a:56:83: 6e:4e:6c:f3:7e:24:42:5f:5f:bc:d2:2b:6e:b0:5e:0e:ec:e7: 84:5c:77:cb:84:ee:33:bb:85:d1:aa:d6:2a:b9:7e:50:1d:5c: 2d:56:a4:eb:69:a6:a0:74:59:79:14:05:ae:e6:f2:1f:fb:29: b3:b4:b8:6c:fb:a3:b1:94:d0:0e:b4:e2:24:93:93:33:d7:48: 39:ea:44:59:81:b8:6b:ab:f5:c1:36:6e:0d:04:2e:d7:f5:6f: 64:d6:63:d8:9a:a9:b1:5d:44:3f:40:bf:1d:14:8a:6e:32:2a: b6:0c:ee:65:f9:22:6b:de:0b:95:30:0c:45:be:f8:6f:5e:b2: 4f:eb:39:60:51:b7:58:8b:61:ad:4e:bd:26:f2:76:fb:c9:13: 3e:e3:9a:0c:01:93:3e:aa:30:3c:67:ba:43:bb:12:96:29:6f: 49:4b:07:a1:ce:02:56:3f:2f:84:15:a0:9d:ef:7b:47:92:fd: 07:44:eb:61:9f:bb:9d:da:8c:a2:e9:49:05:4f:80:5a:d3:7d: e5:96:f6:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEseH2eE4LqldpOqAzKVrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTI4MTMwMTMyWhcNMjYwMTI5MTMwMTMyWjAzMTEwLwYDVQQD EyhlYmI5ZDhiYmJhMmE2YzE5ZGRiMDVmNDkyZWE1M2M5OWY0ZDRmMGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyeBoeZ8HmbwgSk1gMZG/tjhqS0o MREGdnInFXmxdqtpWekswI/5ZdeUezGXraM6FPWrcNC+wkajRTuWl+T1iTgVx1T1 vD3j1VygqetQ1jUEPWrPjryAbkEQL3/3K0Tzv9RsQ+DlPjraIIMCPwM4jpCp1JfW MeDPQEtmMhl+/H0N9OfbPRejLXXhoqZsA6C47C+4ZuuURpkFjuu0xS51LU75u7CC p676ouy3Q2ozgaiIRyVz2LFQOaS5ukY7WTYYNsq/tII8v84cRW8763LFnekCo0os WMafBcobx5LZc1LsW8dAO7OS4m+SJamwtt5S+D6i+MEhAON75C7JLjtQSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu52Lu6KmwZ3bBfSS6lPJn01PD4MB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGph8qeV4 K/G81quypfHTBJkYOyJ90SgwqBU3XWYxKS01VTBxkXyvnKN7ye6KU71uUsEvOlaD bk5s834kQl9fvNIrbrBeDuznhFx3y4TuM7uF0arWKrl+UB1cLVak62mmoHRZeRQF rubyH/sps7S4bPujsZTQDrTiJJOTM9dIOepEWYG4a6v1wTZuDQQu1/VvZNZj2Jqp sV1EP0C/HRSKbjIqtgzuZfkia94LlTAMRb74b16yT+s5YFG3WIthrU69JvJ2+8kT PuOaDAGTPqowPGe6Q7sSlilvSUsHoc4CVj8vhBWgne97R5L9B0TrYZ+7ndqMoulJ BU+AWtN95Zb2UQ== -----END CERTIFICATE-----Generated at Wed Jan 28 16:57:16 2026 by rpki-client