This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: YhZuOqzsGpqwV0eb6e7BvgvAuf5hXus3SpeJwYwwEFU= Subject key identifier: 01:12:F7:CC:15:47:69:07:91:3F:5B:60:66:19:C5:51:75:26:32:7F Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019C14244A08B41A00CB29B69A8E80DE2120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 13C1 Signing time: Sat 31 Jan 2026 13:00:48 +0000 Manifest this update: Sat 31 Jan 2026 13:00:48 +0000 Manifest next update: Sun 01 Feb 2026 13:00:48 +0000 Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: eVZhz/Fj8Aj5Nnbs/KdnMnzOybSTdGAzDOhAvZCnHRw=) 3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=) 4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=) 5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=) 6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=) 7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=) 8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:14:24:4a:08:b4:1a:00:cb:29:b6:9a:8e:80:de:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 31 13:00:48 2026 GMT Not After : Feb 1 13:00:48 2026 GMT Subject: CN=0112f7cc15476907913f5b606619c5517526327f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1f:8d:53:96:c2:34:ca:12:7c:5f:e8:aa:d1: bd:20:84:73:de:4a:11:e8:f3:da:a2:2e:4a:10:06: e6:33:81:f8:c1:29:e3:5a:61:ea:a5:da:1d:01:18: bd:3e:a5:42:05:ba:08:7b:5c:6b:e9:30:69:3a:25: 3e:c1:dd:59:d1:b0:06:d9:3f:e9:0e:83:6b:b1:55: d5:12:1c:bd:8a:da:16:70:89:93:3b:df:01:8a:d6: 93:8b:52:08:9b:e6:d5:25:af:eb:ad:fa:f5:dd:26: 69:7a:eb:be:dc:94:19:de:37:46:a8:6c:ec:5a:f5: 5a:9d:82:39:c8:83:65:25:31:dd:cc:0a:37:db:96: 1b:fd:8b:91:62:64:6d:d3:f6:ab:b5:f3:da:f9:75: 63:13:8a:76:bf:36:d2:0b:bf:d1:eb:ee:45:bc:5c: a8:9a:68:4c:9b:47:42:d7:05:53:b9:6b:d4:1b:02: 5b:7b:4d:aa:ff:0c:5d:17:b3:9f:06:dd:3e:ec:f4: 4d:46:f1:f8:58:37:c3:6c:c3:67:bb:5f:b5:ff:2c: fa:6e:a3:00:f6:24:ce:16:f8:e8:20:01:92:26:dc: 64:c2:39:c6:6f:5c:0b:74:22:2a:16:8b:04:91:13: ea:71:4c:0e:8d:36:6f:53:90:96:c0:2f:7c:d8:7e: 3a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:12:F7:CC:15:47:69:07:91:3F:5B:60:66:19:C5:51:75:26:32:7F X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:9d:94:27:1f:6b:fd:e4:41:75:a8:ca:ef:a2:1c:a1:83:ff: e4:a4:47:35:37:85:ee:7d:b8:60:03:a7:cf:6b:81:bc:3e:d4: 95:5d:ee:bd:7f:c7:ad:38:b3:c5:d2:9a:c4:9f:a3:40:f8:ac: b9:3f:34:39:41:95:d7:7c:23:6f:ab:0f:3d:c7:f2:d0:1a:ea: c9:6b:0c:57:62:4f:97:59:8d:05:26:ae:89:25:b3:ed:6f:bb: 2f:f0:d3:f5:46:c7:89:f3:56:4e:2a:5a:6a:ad:75:d0:76:a7: 56:88:6e:4e:ad:e3:4f:f7:f0:20:93:d9:fe:99:c7:f8:e6:2e: a0:95:8e:65:20:c3:29:b5:e3:f5:d6:93:79:5a:8e:fb:11:8d: 8f:31:5d:6a:bb:53:c8:7e:e9:bb:3e:2f:d5:02:a4:cd:68:1f: 1d:ef:a8:5a:15:d2:4b:ff:56:f4:24:10:d2:f7:ab:ab:bb:2f: 54:2b:9e:04:86:4c:bf:a9:a4:c2:f4:50:4e:e2:1b:bd:0f:c0: 34:c3:5b:1e:ba:16:34:cf:bd:ea:33:2f:87:13:fa:73:45:2a: a2:86:41:e0:fc:55:b5:8e:83:cc:d9:02:04:2f:05:a0:52:f2: 8d:3c:52:c9:21:15:9e:d4:7f:a3:d6:2e:3f:f9:51:07:f9:b9: 50:9a:d4:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwUJEoItBoAyym2mo6A3iEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTMxMTMwMDQ4WhcNMjYwMjAxMTMwMDQ4WjAzMTEwLwYDVQQD EygwMTEyZjdjYzE1NDc2OTA3OTEzZjViNjA2NjE5YzU1MTc1MjYzMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR+NU5bCNMoSfF/oqtG9IIRz3koR 6PPaoi5KEAbmM4H4wSnjWmHqpdodARi9PqVCBboIe1xr6TBpOiU+wd1Z0bAG2T/p DoNrsVXVEhy9itoWcImTO98BitaTi1IIm+bVJa/rrfr13SZpeuu+3JQZ3jdGqGzs WvVanYI5yINlJTHdzAo325Yb/YuRYmRt0/artfPa+XVjE4p2vzbSC7/R6+5FvFyo mmhMm0dC1wVTuWvUGwJbe02q/wxdF7OfBt0+7PRNRvH4WDfDbMNnu1+1/yz6bqMA 9iTOFvjoIAGSJtxkwjnGb1wLdCIqFosEkRPqcUwOjTZvU5CWwC982H46+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAES98wVR2kHkT9bYGYZxVF1JjJ/MB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzJ2UJx9r /eRBdajK76IcoYP/5KRHNTeF7n24YAOnz2uBvD7UlV3uvX/HrTizxdKaxJ+jQPis uT80OUGV13wjb6sPPcfy0BrqyWsMV2JPl1mNBSauiSWz7W+7L/DT9UbHifNWTipa aq110HanVohuTq3jT/fwIJPZ/pnH+OYuoJWOZSDDKbXj9daTeVqO+xGNjzFdartT yH7puz4v1QKkzWgfHe+oWhXSS/9W9CQQ0verq7svVCueBIZMv6mkwvRQTuIbvQ/A NMNbHroWNM+96jMvhxP6c0UqooZB4PxVtY6DzNkCBC8FoFLyjTxSySEVntR/o9Yu P/lRB/m5UJrU5Q== -----END CERTIFICATE-----Generated at Sat Jan 31 18:19:35 2026 by rpki-client