This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: zzSDz3mZdqxerGX74weezW8/GGpemTrnqpSoLeiS7V4= Subject key identifier: DE:CE:3C:4D:AB:F1:9A:96:82:4B:58:19:28:14:63:91:7B:F5:D2:72 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019BBB4E54B0D8DB18BE4FA54D0378BF6FBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 1393 Signing time: Wed 14 Jan 2026 07:00:31 +0000 Manifest this update: Wed 14 Jan 2026 07:00:31 +0000 Manifest next update: Thu 15 Jan 2026 07:00:31 +0000 Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: A05RSGmJP1sTCrn415o8uukH/hJSv0h0/k1lBPBc+9g=) 3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=) 4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=) 5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=) 6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=) 7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=) 8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:4e:54:b0:d8:db:18:be:4f:a5:4d:03:78:bf:6f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 14 07:00:31 2026 GMT Not After : Jan 15 07:00:31 2026 GMT Subject: CN=dece3c4dabf19a96824b5819281463917bf5d272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e6:94:05:31:15:43:46:7f:7d:9c:dc:60:e1: fb:ea:00:eb:a8:eb:58:93:ba:37:b5:19:08:8f:b2: bb:8c:ce:52:46:8f:6c:dd:01:f1:4c:64:9b:32:1e: 6a:1a:01:5d:59:4c:34:48:03:de:2b:6f:e1:bc:fb: b7:92:d9:d6:29:62:f0:e5:c0:cd:3b:69:2e:2d:d1: a0:30:a1:82:a3:84:d4:cd:2c:60:19:56:fc:72:ba: cc:ff:ea:3b:6e:3f:f9:c7:2c:5f:65:e1:8e:c1:50: 6b:58:58:8d:f5:ad:6b:eb:f3:52:e9:ff:88:99:d8: ba:78:51:32:50:99:2c:7a:5b:e3:ff:40:10:b8:96: 1f:35:5c:42:b0:22:14:a1:cd:03:4c:32:0a:4a:ed: 14:23:bf:4d:cf:fb:dd:28:58:bc:b4:f9:2b:35:80: 41:bc:39:56:e8:ed:18:f8:72:d3:ec:fd:a3:7a:7f: 99:87:ec:e5:eb:89:3e:5c:36:f9:a3:c0:3c:7b:0b: 18:d1:9a:52:96:ce:58:a4:bb:f3:1e:c0:3a:63:23: d0:ca:bf:e3:ae:ea:e9:4e:29:b9:e7:31:c1:fb:31: ab:21:47:bf:7b:5d:f0:2e:72:12:1f:d3:ab:c6:55: af:ec:61:39:10:ca:11:15:3c:a2:d3:ca:57:74:97: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CE:3C:4D:AB:F1:9A:96:82:4B:58:19:28:14:63:91:7B:F5:D2:72 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a9:8b:23:1e:86:3f:cf:5a:62:29:59:8f:d6:eb:2a:0c:bb: e6:a0:99:de:c0:48:25:19:3e:e9:da:5f:db:36:e5:e3:6f:3d: 9a:74:89:69:3a:d7:3e:72:64:5f:73:3b:81:5c:4f:d7:12:a0: 89:4c:57:54:32:d9:33:d3:5a:73:a8:a9:b3:aa:a3:ad:f9:5a: 7d:b1:be:ff:7d:c9:f0:4d:e6:6c:0d:55:f7:77:80:3d:79:e0: 52:4e:75:46:f4:2f:de:bd:ad:3b:08:cd:02:0f:ba:db:14:b6: 73:6c:00:32:10:4a:1d:d3:e4:e1:1e:83:b0:13:d7:a3:60:00: 96:52:91:46:8f:f5:4f:4a:fd:df:74:37:3d:f1:34:cc:5c:1b: 89:22:44:59:c0:3c:f3:66:fd:56:29:de:0e:fe:29:31:ef:1d: 1a:3b:e7:bb:ca:74:df:a8:2c:4d:9c:e5:9b:4a:66:4c:30:e9: 0b:3b:46:c3:24:1e:b1:8f:37:cc:92:5f:cc:ee:5a:6c:e3:47: fb:06:8b:3f:6d:3e:ac:af:60:3d:23:78:e6:53:d8:a6:4a:fd: 6e:fb:d8:86:75:29:83:69:68:5b:39:7b:5b:e3:75:4d:15:7f: 2b:f0:d0:4a:58:ab:9f:9b:5f:ab:45:22:78:03:2e:04:c3:2f: 8e:12:2c:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu7TlSw2NsYvk+lTQN4v2+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTE0MDcwMDMxWhcNMjYwMTE1MDcwMDMxWjAzMTEwLwYDVQQD EyhkZWNlM2M0ZGFiZjE5YTk2ODI0YjU4MTkyODE0NjM5MTdiZjVkMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eaUBTEVQ0Z/fZzcYOH76gDrqOtY k7o3tRkIj7K7jM5SRo9s3QHxTGSbMh5qGgFdWUw0SAPeK2/hvPu3ktnWKWLw5cDN O2kuLdGgMKGCo4TUzSxgGVb8crrM/+o7bj/5xyxfZeGOwVBrWFiN9a1r6/NS6f+I mdi6eFEyUJkselvj/0AQuJYfNVxCsCIUoc0DTDIKSu0UI79Nz/vdKFi8tPkrNYBB vDlW6O0Y+HLT7P2jen+Zh+zl64k+XDb5o8A8ewsY0ZpSls5YpLvzHsA6YyPQyr/j rurpTim55zHB+zGrIUe/e13wLnISH9OrxlWv7GE5EMoRFTyi08pXdJe2pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7OPE2r8ZqWgktYGSgUY5F79dJyMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlamLIx6G P89aYilZj9brKgy75qCZ3sBIJRk+6dpf2zbl4289mnSJaTrXPnJkX3M7gVxP1xKg iUxXVDLZM9Nac6ips6qjrflafbG+/33J8E3mbA1V93eAPXngUk51RvQv3r2tOwjN Ag+62xS2c2wAMhBKHdPk4R6DsBPXo2AAllKRRo/1T0r933Q3PfE0zFwbiSJEWcA8 82b9VineDv4pMe8dGjvnu8p036gsTZzlm0pmTDDpCztGwyQesY83zJJfzO5abONH +waLP20+rK9gPSN45lPYpkr9bvvYhnUpg2loWzl7W+N1TRV/K/DQSlirn5tfq0Ui eAMuBMMvjhIsIA== -----END CERTIFICATE-----Generated at Wed Jan 14 12:23:15 2026 by rpki-client