This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: ifeeDrwNKaSmZrhSg0XKS8W1Ftgytchh5euwP7ZF0Ms= Subject key identifier: C4:19:83:39:A9:81:14:53:89:80:E1:7F:0F:B4:A4:73:48:2B:87:BD Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019B969D9750B1511091F8BB90B9C9B18C13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 1380 Signing time: Wed 07 Jan 2026 04:01:08 +0000 Manifest this update: Wed 07 Jan 2026 04:01:08 +0000 Manifest next update: Thu 08 Jan 2026 04:01:08 +0000 Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: EgmaRs7xrkLz+Geak9brFzkLuVtA18fXwYXfL6/fACg=) 3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=) 4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=) 5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=) 6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=) 7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=) 8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:96:9d:97:50:b1:51:10:91:f8:bb:90:b9:c9:b1:8c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 7 04:01:08 2026 GMT Not After : Jan 8 04:01:08 2026 GMT Subject: CN=c4198339a98114538980e17f0fb4a473482b87bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:0b:3f:cc:62:d2:63:61:8e:de:a3:13:27: 97:ec:19:cb:29:e6:ba:35:2c:f5:02:69:42:3d:c0: 53:71:9e:11:f4:cc:7d:b1:99:fc:a5:93:3a:a4:cc: f4:6e:10:2d:0c:57:4b:d6:07:a7:b7:9b:a9:58:c4: 51:50:90:e8:f2:bf:5d:a0:94:31:12:7b:c5:01:42: 66:d4:ae:57:19:16:57:2c:85:67:c9:a3:ca:a3:6f: 7d:dc:71:5d:3d:6c:84:14:fb:45:74:36:ea:2c:30: 16:26:54:c5:a3:28:95:25:1c:ff:40:af:88:e9:9a: d5:63:61:5d:ac:de:16:8f:40:3e:ed:74:c2:ef:16: 04:f5:14:b7:bf:13:31:96:fd:0e:a9:47:b2:14:64: 55:a0:cc:e3:7c:7d:a8:64:2c:ae:76:25:fd:13:35: d2:98:02:f9:f4:d1:03:3a:d1:e9:a0:65:68:58:9f: 0f:4e:f5:98:a2:60:37:66:b5:96:6b:24:52:9d:cc: 80:2d:1b:82:6f:0e:b7:80:bf:3f:7b:8d:b1:3c:71: 1d:aa:3d:cc:ea:a4:e9:65:9f:65:bb:57:c8:5e:ea: 7b:fd:c1:9f:a4:a0:c1:43:52:fc:67:ec:af:15:26: a2:56:51:38:3f:78:65:03:0d:ce:18:91:b4:49:78: 75:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:19:83:39:A9:81:14:53:89:80:E1:7F:0F:B4:A4:73:48:2B:87:BD X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b6:4b:21:bd:04:c8:4e:e1:72:2c:95:7f:df:cb:96:a5:24: c3:62:79:d9:d4:19:dc:d3:a9:99:f7:db:18:78:b5:ec:18:fe: 39:35:d1:7d:7a:9f:e8:fb:a2:b7:d9:06:21:c9:7d:1c:5a:e8: b0:a4:29:96:2d:16:eb:98:e3:32:fd:72:22:d1:5d:a4:95:0c: 59:44:9e:b5:7e:37:f7:ee:13:bb:9e:99:bc:c0:cb:3b:a3:c6: 27:a0:1d:8c:1c:6b:bd:82:29:49:6e:c3:5f:0c:19:3c:e8:cf: 17:4b:4a:b2:4b:74:c8:f4:b4:ee:13:d4:58:f3:96:07:db:1e: 72:43:45:8e:36:90:36:7c:ea:4f:cc:25:25:14:2f:ad:27:8f: b7:94:e4:7e:ff:4b:7c:35:cb:ce:84:03:e3:75:ac:cb:7e:3f: c4:e7:69:f3:42:41:c1:2e:15:e6:9c:45:ba:d4:ae:3a:cf:8c: 20:3c:29:01:9a:62:cf:15:ad:da:ee:94:f6:3e:3d:0b:06:ca: 17:a9:66:93:38:f7:21:98:ad:25:a8:be:fe:9e:3a:7f:a0:ce: 4a:e1:38:56:8b:6c:ce:5f:4d:e7:7c:c1:07:1c:73:db:af:ca: 25:5f:9d:ca:dd:42:72:51:da:ab:89:64:15:d5:e3:49:1a:4e: dd:d0:2e:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuWnZdQsVEQkfi7kLnJsYwTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTA3MDQwMTA4WhcNMjYwMTA4MDQwMTA4WjAzMTEwLwYDVQQD EyhjNDE5ODMzOWE5ODExNDUzODk4MGUxN2YwZmI0YTQ3MzQ4MmI4N2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppYLP8xi0mNhjt6jEyeX7BnLKea6 NSz1AmlCPcBTcZ4R9Mx9sZn8pZM6pMz0bhAtDFdL1gent5upWMRRUJDo8r9doJQx EnvFAUJm1K5XGRZXLIVnyaPKo2993HFdPWyEFPtFdDbqLDAWJlTFoyiVJRz/QK+I 6ZrVY2FdrN4Wj0A+7XTC7xYE9RS3vxMxlv0OqUeyFGRVoMzjfH2oZCyudiX9EzXS mAL59NEDOtHpoGVoWJ8PTvWYomA3ZrWWayRSncyALRuCbw63gL8/e42xPHEdqj3M 6qTpZZ9lu1fIXup7/cGfpKDBQ1L8Z+yvFSaiVlE4P3hlAw3OGJG0SXh12wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQZgzmpgRRTiYDhfw+0pHNIK4e9MB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLZLIb0E yE7hciyVf9/LlqUkw2J52dQZ3NOpmffbGHi17Bj+OTXRfXqf6Puit9kGIcl9HFro sKQpli0W65jjMv1yItFdpJUMWUSetX439+4Tu56ZvMDLO6PGJ6AdjBxrvYIpSW7D XwwZPOjPF0tKskt0yPS07hPUWPOWB9seckNFjjaQNnzqT8wlJRQvrSePt5Tkfv9L fDXLzoQD43Wsy34/xOdp80JBwS4V5pxFutSuOs+MIDwpAZpizxWt2u6U9j49CwbK F6lmkzj3IZitJai+/p46f6DOSuE4Votszl9N53zBBxxz26/KJV+dyt1CclHaq4lk FdXjSRpO3dAuRA== -----END CERTIFICATE-----Generated at Wed Jan 7 11:21:21 2026 by rpki-client