This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json) Hash identifier: SILQ+lDpskEED1pj6f1oefguWmvXNiHe/0timqpQMPM= Subject key identifier: 16:07:DD:EF:C6:71:D0:D7:FC:18:61:86:44:BB:9C:FD:73:74:8A:A7 Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Certificate serial: 019BFD65E5F491E8C8D07C0F37E9F69490FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft Manifest number: 17EF Signing time: Tue 27 Jan 2026 03:01:12 +0000 Manifest this update: Tue 27 Jan 2026 03:01:12 +0000 Manifest next update: Wed 28 Jan 2026 03:01:12 +0000 Files and hashes: 1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=) 2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: Xvav8WZw/17cAKljPK8TrxEYZcUkZAsuKXMFhIvycrQ=) 3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=) 4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:e5:f4:91:e8:c8:d0:7c:0f:37:e9:f6:94:90:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Validity Not Before: Jan 27 03:01:12 2026 GMT Not After : Jan 28 03:01:12 2026 GMT Subject: CN=1607ddefc671d0d7fc18618644bb9cfd73748aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:00:40:d6:79:7d:b6:99:f1:52:2e:d4:92: 15:71:a3:b9:c3:10:8a:f4:be:b9:1c:f1:61:9e:3d: 3f:60:86:85:4f:6d:72:5f:7e:33:50:42:b9:59:0f: bd:53:4d:f0:d7:43:05:b5:03:1c:f8:45:af:20:3a: 3e:6c:3c:41:9e:45:48:cb:3b:8a:70:a4:3f:94:a0: 9a:e2:d8:bd:70:a1:5a:d6:a0:de:df:21:e2:10:a9: 27:30:87:14:12:5b:6c:69:44:fb:95:1e:b2:25:66: 4c:61:ed:6e:ef:f1:f9:a5:d4:af:8d:5a:c4:fe:af: cb:a9:3a:72:a0:f9:da:50:54:d9:d0:1a:fc:64:08: 5e:64:f5:7b:fa:60:2c:27:a9:8d:20:e4:3c:e3:20: ce:4e:6a:bd:0d:c4:2f:b9:de:0d:b1:16:43:34:96: 42:7c:86:66:d7:fa:47:4e:b2:e8:66:55:5f:71:58: d1:06:50:5d:55:f9:39:1d:f3:2f:8d:54:68:8d:88: c3:06:43:14:68:47:6e:48:5e:0c:48:01:42:d2:3b: ee:50:73:b7:49:23:dd:06:2f:72:ec:b0:1f:85:42: 91:25:47:a6:b4:e8:9b:80:28:06:9d:61:3d:44:28: 58:66:8f:dd:8d:2f:2c:ea:fa:e1:01:d1:8d:f1:e4: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:07:DD:EF:C6:71:D0:D7:FC:18:61:86:44:BB:9C:FD:73:74:8A:A7 X509v3 Authority Key Identifier: keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b9:b4:e2:3d:c3:fc:0e:a4:fe:d6:e2:b9:a9:ad:2b:d0:f8: 8f:31:50:ea:9c:08:d5:4b:ab:b2:77:81:0f:b4:9c:e4:94:f1: f5:18:51:c4:c5:87:82:48:a9:db:31:d5:e1:eb:e0:ea:7f:c3: fc:22:d4:23:02:9c:a8:59:15:d4:0e:d3:93:99:e3:56:93:8e: 85:10:8c:de:31:d4:fa:34:74:9f:00:c9:52:50:a2:81:b4:ff: 58:9b:47:1a:52:da:92:c6:10:2c:2f:68:f4:d8:0f:3f:fa:b2: ff:48:75:f1:28:d2:fe:76:1b:99:89:51:ea:b9:79:a5:f8:e9: b2:b8:f8:4e:fa:95:bc:41:73:a7:73:4a:d4:92:d0:8d:e2:1d: 0d:20:9d:26:7e:ce:16:6c:f1:32:0a:5f:b1:f2:88:09:af:30: b7:0e:a3:9d:79:09:d8:4b:30:33:ea:43:e8:bd:32:b1:9f:e7: 38:50:77:3c:2c:8a:c0:1e:f4:71:56:fe:19:f3:f0:ea:b8:4c: 18:5f:3e:91:e6:75:88:46:01:cd:6f:a8:cc:4d:89:6a:08:49: 9f:ef:f3:00:85:5a:b3:86:fa:73:02:a1:d8:28:02:3a:ec:76: 79:d6:4c:f5:54:77:49:c5:e5:44:0b:e9:44:78:80:ee:f2:22: 19:60:28:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZeX0kejI0HwPN+n2lJD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx OTBjNTMwHhcNMjYwMTI3MDMwMTEyWhcNMjYwMTI4MDMwMTEyWjAzMTEwLwYDVQQD EygxNjA3ZGRlZmM2NzFkMGQ3ZmMxODYxODY0NGJiOWNmZDczNzQ4YWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DMAQNZ5fbaZ8VIu1JIVcaO5wxCK 9L65HPFhnj0/YIaFT21yX34zUEK5WQ+9U03w10MFtQMc+EWvIDo+bDxBnkVIyzuK cKQ/lKCa4ti9cKFa1qDe3yHiEKknMIcUEltsaUT7lR6yJWZMYe1u7/H5pdSvjVrE /q/LqTpyoPnaUFTZ0Br8ZAheZPV7+mAsJ6mNIOQ84yDOTmq9DcQvud4NsRZDNJZC fIZm1/pHTrLoZlVfcVjRBlBdVfk5HfMvjVRojYjDBkMUaEduSF4MSAFC0jvuUHO3 SSPdBi9y7LAfhUKRJUemtOibgCgGnWE9RChYZo/djS8s6vrhAdGN8eT8OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYH3e/GcdDX/BhhhkS7nP1zdIqnMB8GA1UdIwQY MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt NTJmZTEwNTEzMTI5LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5 LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7m04j3D /A6k/tbiuamtK9D4jzFQ6pwI1UursneBD7Sc5JTx9RhRxMWHgkip2zHV4evg6n/D /CLUIwKcqFkV1A7Tk5njVpOOhRCM3jHU+jR0nwDJUlCigbT/WJtHGlLaksYQLC9o 9NgPP/qy/0h18SjS/nYbmYlR6rl5pfjpsrj4TvqVvEFzp3NK1JLQjeIdDSCdJn7O FmzxMgpfsfKICa8wtw6jnXkJ2EswM+pD6L0ysZ/nOFB3PCyKwB70cVb+GfPw6rhM GF8+keZ1iEYBzW+ozE2JaghJn+/zAIVas4b6cwKh2CgCOux2edZM9VR3ScXlRAvp RHiA7vIiGWAoCg== -----END CERTIFICATE-----Generated at Tue Jan 27 08:10:23 2026 by rpki-client