This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: R9ZJCptlKJ3A2gpQk6Z4CCxQssiYSEzxtPFxo9ojSfI= Subject key identifier: 61:8C:D4:7D:56:24:7A:C1:6F:7D:72:3A:23:46:4F:B3:20:CB:4D:65 Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019BFAD270408FB104EF25F45539CFAF926F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 0EAF Signing time: Mon 26 Jan 2026 15:00:53 +0000 Manifest this update: Mon 26 Jan 2026 15:00:53 +0000 Manifest next update: Tue 27 Jan 2026 15:00:53 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: PDeakwsEXxhQiqucl9ROFRHlVGBEGw/WFxoPlintvJw=) 2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=) 3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=) 4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=) 5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=) 6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=) 7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=) 8: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:70:40:8f:b1:04:ef:25:f4:55:39:cf:af:92:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Jan 26 15:00:53 2026 GMT Not After : Jan 27 15:00:53 2026 GMT Subject: CN=618cd47d56247ac16f7d723a23464fb320cb4d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:48:eb:ad:16:d5:a9:b8:f0:25:15:ce:20: ca:89:6a:13:f2:2c:54:da:a5:aa:9e:63:94:66:bd: 3a:e3:6e:2c:b4:11:d8:c7:32:a6:2b:4d:17:24:4a: a7:99:02:5a:de:64:76:32:71:46:34:c6:dc:59:ea: dd:c9:d6:e4:c3:ff:ad:ae:33:95:0d:18:e5:ee:e7: f7:68:80:75:31:9f:57:5b:79:af:21:f3:d1:78:80: 42:13:2c:85:fa:f2:72:d9:3d:97:9f:44:44:61:06: f5:05:88:95:ae:f2:42:eb:6e:89:b5:69:a9:eb:39: 80:e0:a4:c5:c8:dc:74:d3:e0:ed:e6:34:4b:32:2e: 71:9e:53:f1:c1:47:b7:f8:2d:e9:88:ee:80:32:fa: 99:27:74:65:14:ef:91:2d:ea:85:0b:2d:b2:f2:61: eb:1e:00:83:22:b1:1d:ef:3a:65:b8:26:0b:c5:e7: 23:bf:07:07:86:c5:a6:24:69:9c:9b:3c:38:36:52: f2:3e:54:68:62:25:31:f1:48:e1:05:a1:97:9c:be: 72:34:5a:41:55:e8:c4:ad:c5:89:0d:b3:c0:cd:a3: 68:34:2f:e2:62:3b:fd:39:00:3c:a3:1b:0d:81:bb: 0a:93:75:fc:03:a0:88:5b:ab:3f:68:09:71:f0:39: 54:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8C:D4:7D:56:24:7A:C1:6F:7D:72:3A:23:46:4F:B3:20:CB:4D:65 X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8c:79:ec:ce:c0:5a:cf:15:a6:aa:42:57:d9:37:41:00:05: 0c:8e:9d:1e:da:18:ec:aa:4c:9d:f1:d4:a6:b0:5b:cd:bb:d1: 2a:8b:46:b7:6f:3e:5d:ea:fc:7b:ab:6a:0e:9a:a7:29:70:86: 5e:c3:c2:82:65:72:a0:84:7a:c2:c1:58:38:c8:de:8a:03:8a: 94:38:1f:44:22:01:c3:74:f1:eb:50:1f:9c:3b:fb:7d:87:dc: 57:78:e2:eb:8f:22:06:7c:10:b1:e1:c1:4d:13:80:0e:51:13: fa:fb:67:03:4a:82:a9:e4:2f:c6:8d:de:d0:56:ca:84:49:f5: 56:90:35:23:2a:f7:0e:a1:b6:c8:ca:bc:3b:a4:28:d9:9b:d7: df:92:6e:d7:e8:a8:a7:07:4f:89:0a:6d:50:63:ae:42:d8:b5: 4b:04:28:52:12:e2:1d:4d:e7:07:77:67:af:7e:9c:dd:98:0d: 40:c2:52:d6:f7:33:be:c8:5f:c4:1d:3b:1e:5b:1f:2b:67:aa: 26:61:b3:1e:e4:1e:fe:36:48:d1:58:01:a3:8a:ef:79:ec:27: c9:0a:8f:50:06:a8:c9:6b:11:ee:c1:ba:23:20:a6:70:41:40: 6d:2d:3a:ba:8e:75:70:66:b3:96:b8:89:dc:14:0f:49:01:bf: 10:6a:05:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60nBAj7EE7yX0VTnPr5JvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwMTI2MTUwMDUzWhcNMjYwMTI3MTUwMDUzWjAzMTEwLwYDVQQD Eyg2MThjZDQ3ZDU2MjQ3YWMxNmY3ZDcyM2EyMzQ2NGZiMzIwY2I0ZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPtI660W1am48CUVziDKiWoT8ixU 2qWqnmOUZr06424stBHYxzKmK00XJEqnmQJa3mR2MnFGNMbcWerdydbkw/+trjOV DRjl7uf3aIB1MZ9XW3mvIfPReIBCEyyF+vJy2T2Xn0REYQb1BYiVrvJC626JtWmp 6zmA4KTFyNx00+Dt5jRLMi5xnlPxwUe3+C3piO6AMvqZJ3RlFO+RLeqFCy2y8mHr HgCDIrEd7zpluCYLxecjvwcHhsWmJGmcmzw4NlLyPlRoYiUx8UjhBaGXnL5yNFpB VejErcWJDbPAzaNoNC/iYjv9OQA8oxsNgbsKk3X8A6CIW6s/aAlx8DlUtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGM1H1WJHrBb31yOiNGT7Mgy01lMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4x57M7A Ws8VpqpCV9k3QQAFDI6dHtoY7KpMnfHUprBbzbvRKotGt28+Xer8e6tqDpqnKXCG XsPCgmVyoIR6wsFYOMjeigOKlDgfRCIBw3Tx61AfnDv7fYfcV3ji648iBnwQseHB TROADlET+vtnA0qCqeQvxo3e0FbKhEn1VpA1Iyr3DqG2yMq8O6Qo2ZvX35Ju1+io pwdPiQptUGOuQti1SwQoUhLiHU3nB3dnr36c3ZgNQMJS1vczvshfxB07HlsfK2eq JmGzHuQe/jZI0VgBo4rveewnyQqPUAaoyWsR7sG6IyCmcEFAbS06uo51cGazlriJ 3BQPSQG/EGoFsA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:40 2026 by rpki-client