This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: nvrTEYTrjsgQjm+qQ4UUviQLpadVvGgas+ivNV/Oof8= Subject key identifier: AA:90:2D:0C:1E:DE:AC:B3:5F:EB:C1:C1:95:2A:D8:02:18:68:FB:26 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019BEF7377F051B1CC62979A4A570C2AA36E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 13AE Signing time: Sat 24 Jan 2026 10:01:20 +0000 Manifest this update: Sat 24 Jan 2026 10:01:20 +0000 Manifest next update: Sun 25 Jan 2026 10:01:20 +0000 Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: /6HWEFChVA/LDGu6cc0NkLjypxqrxVB1+bfvJ1buR70=) 3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=) 4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=) 5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=) 6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=) 7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=) 8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 04:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:73:77:f0:51:b1:cc:62:97:9a:4a:57:0c:2a:a3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 24 10:01:20 2026 GMT Not After : Jan 25 10:01:20 2026 GMT Subject: CN=aa902d0c1edeacb35febc1c1952ad8021868fb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:0e:dd:23:8d:c5:c6:a0:a0:c1:30:fd:c3: 09:10:cb:d1:24:bb:2b:03:50:b4:92:c9:27:fe:ec: e5:ca:74:df:42:c7:5e:09:ea:7b:12:dc:58:b6:5b: de:41:1e:cc:30:bd:f7:ba:c5:b9:80:72:56:c4:c9: a4:07:92:8e:e7:ae:d5:83:11:7c:1b:dd:b0:34:ec: 3d:71:a6:16:4c:f8:ea:50:b8:ba:5b:12:9b:32:33: 74:f7:41:d3:35:29:04:d2:ff:79:56:e5:cd:b6:5e: 99:36:59:60:7e:0a:21:c7:be:98:0a:4b:b8:03:6d: b0:a5:c4:10:92:77:f0:8e:68:a5:3d:f9:2c:21:8c: 55:54:4d:74:13:10:83:f9:1f:52:11:e2:25:f8:c2: a9:23:1e:48:4b:cb:97:70:90:98:d3:c7:4d:63:3d: 2d:77:83:c7:30:4e:b3:db:98:d2:90:f6:3d:2e:7e: e5:d3:2c:5f:8e:b4:bf:3f:3e:3e:fd:e5:70:d3:73: ea:94:97:3a:00:1b:ca:99:26:f5:16:e3:94:60:44: 8c:63:de:63:61:61:1c:60:10:f6:29:31:83:41:b3: ba:e0:8a:53:f7:fa:da:2e:11:9b:f3:fb:4b:36:3a: 1d:25:de:ea:b1:f4:69:d5:7c:67:b4:9d:db:d9:60: a0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:90:2D:0C:1E:DE:AC:B3:5F:EB:C1:C1:95:2A:D8:02:18:68:FB:26 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b3:df:0f:e3:b1:60:0b:51:44:3c:a4:f6:8b:89:c7:1c:07: d1:90:f9:69:8c:b7:5e:85:42:b8:53:9d:e1:af:bd:e5:7e:02: df:47:20:50:c6:20:fd:0d:1a:5b:3c:c5:9e:7d:0f:57:33:1d: 89:51:4c:4c:fc:9a:c1:c5:e6:1b:86:13:4b:02:fc:ea:42:f1: 56:34:02:f3:e6:00:27:21:c4:bf:ca:27:21:7c:92:6a:79:1f: 30:33:e8:d3:e8:1d:dc:ca:3a:34:09:5a:89:dd:8f:23:91:46: 51:8b:1b:9e:11:34:1d:27:a3:1d:55:1c:2d:d1:d6:f2:03:f2: 5a:c5:14:dc:65:e2:37:ff:89:42:53:a1:94:ed:61:11:ff:12: 3c:05:94:54:cc:b8:38:53:eb:b5:85:11:8e:70:5c:84:e6:c5: 06:db:61:12:82:4f:f3:77:a5:15:41:fe:ec:b0:9e:f2:90:e6: a6:0d:15:87:dc:f7:5c:c7:e2:bc:bc:68:8d:63:e0:ef:58:31: 9f:26:60:72:09:e3:6b:7f:10:f6:c6:f6:e7:b3:49:e8:c3:4c: 2e:73:e5:f2:c6:32:5f:2e:8b:bf:44:08:e3:4b:11:48:2e:6c: 95:57:38:25:0c:92:dd:f8:04:9a:60:f8:0f:60:cf:c7:52:35: 54:9c:45:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvvc3fwUbHMYpeaSlcMKqNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTI0MTAwMTIwWhcNMjYwMTI1MTAwMTIwWjAzMTEwLwYDVQQD EyhhYTkwMmQwYzFlZGVhY2IzNWZlYmMxYzE5NTJhZDgwMjE4NjhmYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEoO3SONxcagoMEw/cMJEMvRJLsr A1C0kskn/uzlynTfQsdeCep7EtxYtlveQR7MML33usW5gHJWxMmkB5KO567VgxF8 G92wNOw9caYWTPjqULi6WxKbMjN090HTNSkE0v95VuXNtl6ZNllgfgohx76YCku4 A22wpcQQknfwjmilPfksIYxVVE10ExCD+R9SEeIl+MKpIx5IS8uXcJCY08dNYz0t d4PHME6z25jSkPY9Ln7l0yxfjrS/Pz4+/eVw03PqlJc6ABvKmSb1FuOUYESMY95j YWEcYBD2KTGDQbO64IpT9/raLhGb8/tLNjodJd7qsfRp1XxntJ3b2WCgnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqQLQwe3qyzX+vBwZUq2AIYaPsmMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbPfD+Ox YAtRRDyk9ouJxxwH0ZD5aYy3XoVCuFOd4a+95X4C30cgUMYg/Q0aWzzFnn0PVzMd iVFMTPyawcXmG4YTSwL86kLxVjQC8+YAJyHEv8onIXySankfMDPo0+gd3Mo6NAla id2PI5FGUYsbnhE0HSejHVUcLdHW8gPyWsUU3GXiN/+JQlOhlO1hEf8SPAWUVMy4 OFPrtYURjnBchObFBtthEoJP83elFUH+7LCe8pDmpg0Vh9z3XMfivLxojWPg71gx nyZgcgnja38Q9sb257NJ6MNMLnPl8sYyXy6Lv0QI40sRSC5slVc4JQyS3fgEmmD4 D2DPx1I1VJxFUQ== -----END CERTIFICATE-----Generated at Sat Jan 24 15:11:04 2026 by rpki-client