This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json) Hash identifier: /ftlacJ8onbEpmz7V2OPi/Sp4PplaOrDZjEmbTSrVbk= Subject key identifier: 30:45:95:4A:D6:E0:45:59:CC:F7:52:B1:9D:DB:DA:26:E8:48:46:B2 Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a Certificate serial: 019BFC531B6B2B018D78354B1B0F209A7270 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft Manifest number: 112C Signing time: Mon 26 Jan 2026 22:01:03 +0000 Manifest this update: Mon 26 Jan 2026 22:01:03 +0000 Manifest next update: Tue 27 Jan 2026 22:01:03 +0000 Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: s92wYZvM031NsT7k2nbGQEVDFMb4DiYiNpz9VREfwUg=) 2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:1b:6b:2b:01:8d:78:35:4b:1b:0f:20:9a:72:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a Validity Not Before: Jan 26 22:01:03 2026 GMT Not After : Jan 27 22:01:03 2026 GMT Subject: CN=3045954ad6e04559ccf752b19ddbda26e84846b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:8f:9e:79:87:15:fb:26:53:4f:28:8b:fc: 71:51:96:3f:79:e5:70:5d:32:5f:02:d0:6d:0f:f9: 36:3a:b4:85:0e:fa:10:89:57:14:ae:a2:d2:6e:f4: 1a:6c:a5:b1:59:7b:37:c5:02:86:08:fd:9c:eb:c0: 10:c1:7e:ec:cc:3d:94:c2:4e:48:a5:f5:49:d4:42: da:0f:09:aa:72:b5:aa:f5:0f:15:79:b5:15:30:57: 7f:c2:30:f8:f3:26:42:f5:dc:73:9b:72:10:5f:1a: f1:f9:ec:b9:4d:65:3f:34:48:46:28:2a:a1:01:7e: 58:1b:3e:c2:3f:cd:8e:8e:81:2e:32:b0:ae:26:55: 07:ef:8e:af:82:1b:b2:b9:55:4f:a9:09:e0:1a:cd: 4c:44:87:46:e0:77:02:f9:60:49:37:0e:fb:eb:16: e3:97:a2:4d:8e:85:cd:19:fe:b8:1e:a3:0d:50:1b: 1c:f3:ae:0f:e9:36:ba:09:da:e8:7a:1a:be:ae:f6: a7:4f:a9:ef:a3:4f:7f:d0:00:0a:04:be:ac:72:16: e1:ec:16:84:f1:d0:c1:b0:68:60:00:a9:25:3d:1a: 04:f4:35:ef:58:5d:d7:8d:c4:b7:38:e7:e4:81:0b: 3d:43:8b:b8:3d:db:3b:c1:90:86:d5:ba:5d:0f:34: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:45:95:4A:D6:E0:45:59:CC:F7:52:B1:9D:DB:DA:26:E8:48:46:B2 X509v3 Authority Key Identifier: keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:50:a4:20:b2:6f:85:1c:63:01:a0:a6:93:a5:b2:26:a6:37: 26:f9:7f:dc:2e:28:16:51:0f:fc:c4:3b:9c:fd:de:78:14:3c: c4:a0:95:ce:a7:d8:79:9f:84:ef:4f:bc:ce:8f:bf:74:3b:23: 30:b6:81:f7:3b:55:0a:c6:cd:74:1f:5b:af:50:6d:a4:a7:0d: 86:88:3c:c1:8f:81:22:cd:3b:8f:5e:62:a3:f1:b2:ef:25:62: f2:79:fc:8f:06:94:74:14:d9:18:9d:ab:6e:07:b6:99:3d:f3: 8a:d2:42:63:49:5e:60:cf:40:e9:88:61:82:f6:fa:b3:be:89: 95:13:ff:19:36:03:f4:75:66:8b:a0:e9:d2:1a:00:e6:bb:04: 5b:bb:61:35:fd:85:da:4f:45:e0:33:24:fc:3a:ec:6d:ac:87: 74:1a:9f:05:6e:c3:78:13:be:7f:b2:29:8b:4a:60:cc:cc:8a: 6a:ec:ee:d7:e4:66:72:88:37:e7:72:26:b7:42:aa:5a:aa:07: 9c:db:2b:ec:b7:92:b7:30:2b:e2:44:24:93:a4:6e:3e:27:00: 72:20:8e:06:13:5c:d0:f0:f4:e9:d7:68:d5:71:d8:9f:be:f7: db:5a:b1:cd:48:80:5b:bf:91:78:24:61:22:3a:b5:00:c4:82: 98:72:af:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UxtrKwGNeDVLGw8gmnJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYjE0NTc1NjA4MGFmZjFiYjAwZjVmOTBmZDlmMmYyN2Nj NTczMmEwHhcNMjYwMTI2MjIwMTAzWhcNMjYwMTI3MjIwMTAzWjAzMTEwLwYDVQQD EygzMDQ1OTU0YWQ2ZTA0NTU5Y2NmNzUyYjE5ZGRiZGEyNmU4NDg0NmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYaPnnmHFfsmU08oi/xxUZY/eeVw XTJfAtBtD/k2OrSFDvoQiVcUrqLSbvQabKWxWXs3xQKGCP2c68AQwX7szD2Uwk5I pfVJ1ELaDwmqcrWq9Q8VebUVMFd/wjD48yZC9dxzm3IQXxrx+ey5TWU/NEhGKCqh AX5YGz7CP82OjoEuMrCuJlUH746vghuyuVVPqQngGs1MRIdG4HcC+WBJNw776xbj l6JNjoXNGf64HqMNUBsc864P6Ta6Cdroehq+rvanT6nvo09/0AAKBL6schbh7BaE 8dDBsGhgAKklPRoE9DXvWF3XjcS3OOfkgQs9Q4u4Pds7wZCG1bpdDzQLMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBFlUrW4EVZzPdSsZ3b2iboSEayMB8GA1UdIwQY MBaAFN6xRXVggK/xuwD1+Q/Z8vJ8xXMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1Njgt M2ZmOTY0NTUwM2U5LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1NjgtM2ZmOTY0NTUwM2U5 LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlCkILJv hRxjAaCmk6WyJqY3Jvl/3C4oFlEP/MQ7nP3eeBQ8xKCVzqfYeZ+E70+8zo+/dDsj MLaB9ztVCsbNdB9br1BtpKcNhog8wY+BIs07j15io/Gy7yVi8nn8jwaUdBTZGJ2r bge2mT3zitJCY0leYM9A6Yhhgvb6s76JlRP/GTYD9HVmi6Dp0hoA5rsEW7thNf2F 2k9F4DMk/DrsbayHdBqfBW7DeBO+f7Ipi0pgzMyKauzu1+Rmcog353Imt0KqWqoH nNsr7LeStzAr4kQkk6RuPicAciCOBhNc0PD06ddo1XHYn77321qxzUiAW7+ReCRh Ijq1AMSCmHKvyg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:23 2026 by rpki-client