This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json) Hash identifier: nxJ/5Pmg54DTFHhuliUzjlZCLyQbsmQV6pwXmAb6TVs= Subject key identifier: EE:21:27:C5:E8:C6:EA:8A:87:80:AF:33:5E:81:FC:51:AE:08:F9:1D Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89 Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89 Certificate serial: 019BD8474F2F0085586488E0F0A8E9F1CEE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft Manifest number: 17D9 Signing time: Mon 19 Jan 2026 22:01:50 +0000 Manifest this update: Mon 19 Jan 2026 22:01:50 +0000 Manifest next update: Tue 20 Jan 2026 22:01:50 +0000 Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: kL4cCq41U1jzhoUHaTHq7m3/K4SLoLUBxRJpJQF1FII=) 2: 6rPz8igkyZRlNFZsutLMqabI34I.roa (hash: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY=) 3: iC10497tJji-WYhWTVtTKPnCEBA.roa (hash: 6xbmmivHgxTXa78A2SNCDzZGkpnLAKBTJU2rllnxUng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:47:4f:2f:00:85:58:64:88:e0:f0:a8:e9:f1:ce:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89 Validity Not Before: Jan 19 22:01:50 2026 GMT Not After : Jan 20 22:01:50 2026 GMT Subject: CN=ee2127c5e8c6ea8a8780af335e81fc51ae08f91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bd:d1:39:98:aa:45:42:22:1b:6e:d2:80:da: 5e:7b:5f:a6:11:67:e8:b6:62:e0:02:31:ed:57:e4: 4b:5d:b2:aa:aa:85:02:22:9e:2a:71:ef:45:e5:01: 50:cb:b7:47:2f:28:52:7d:b2:df:77:d9:9e:11:c6: 4c:17:f9:9c:5d:7e:ad:56:45:0e:ff:15:52:5a:ce: 11:cc:38:67:05:f3:38:f4:4a:07:e9:f5:75:6d:a3: 51:01:40:13:1d:4f:6f:3d:1a:d4:a2:1d:9e:e3:ab: 57:ab:2b:ed:4d:1b:77:f7:8e:4c:ce:99:da:02:76: 12:ff:49:4e:74:70:e2:28:2c:cc:dd:e1:65:be:64: 52:50:26:0a:99:b4:9a:28:52:a3:38:2a:7f:5d:6e: 57:65:e7:22:48:f6:a7:70:aa:b1:f1:7f:0a:16:2f: a0:77:c5:0b:1b:a7:f3:86:d7:84:f9:d7:87:df:9c: 5f:14:90:b2:43:ea:37:d8:73:1d:71:94:04:6f:96: 9d:57:97:c0:7d:b4:23:c9:98:4e:fd:bc:c1:fb:1a: bc:4d:c3:4b:8c:7b:ec:a8:73:77:eb:98:47:cf:9b: 5a:a4:77:46:b3:39:30:1f:62:ba:b7:ab:a1:ed:e3: ed:90:97:8d:9e:5e:a1:cf:61:da:8b:c7:9e:2c:37: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:21:27:C5:E8:C6:EA:8A:87:80:AF:33:5E:81:FC:51:AE:08:F9:1D X509v3 Authority Key Identifier: keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:47:a9:ed:5c:7d:89:9a:a7:08:30:94:91:84:03:65:98:eb: 24:c9:13:47:e9:17:92:64:c9:72:49:40:e1:f3:79:8f:54:95: c9:af:f8:62:93:81:dc:ef:53:93:a7:96:1a:ad:9f:c4:2c:2f: 4e:e3:62:ce:97:d8:8c:d0:56:b3:ec:df:35:44:c0:8e:60:ab: 43:1a:60:ae:46:cf:f7:0a:cc:a1:e0:5f:70:62:ec:42:9c:62: 71:af:4d:80:29:d5:02:76:74:08:18:b1:bf:5b:e2:22:3b:f8: 3b:71:7c:10:2c:f1:45:86:a7:4f:77:d5:2e:dd:0b:52:79:da: c9:d4:bf:75:7b:42:e2:5f:4d:d1:5c:49:51:44:a1:eb:62:55: 9b:bd:1a:e6:25:bf:5f:f8:ee:88:b1:f9:58:c3:9f:37:09:1c: 06:aa:b9:b0:d4:11:da:b4:2f:07:46:ac:37:d5:45:fc:ff:24: cd:30:01:db:25:72:db:64:89:00:e9:18:17:ed:9a:cd:a5:90: ba:f6:9a:d6:29:e4:2c:b7:8f:b1:ed:19:ad:c4:09:f0:45:00: e8:ee:ab:9b:31:4e:db:94:4e:65:db:68:bd:e2:2c:8c:93:4c: e0:1f:80:ee:37:70:81:5e:0c:65:b6:e4:11:85:64:34:04:6e: f5:eb:7a:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYR08vAIVYZIjg8Kjp8c7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZmM0OTE5NWE0MzlkNWI5ZDcxMTJiMzM2MDE1ZWVlMmM5 NDRkODkwHhcNMjYwMTE5MjIwMTUwWhcNMjYwMTIwMjIwMTUwWjAzMTEwLwYDVQQD EyhlZTIxMjdjNWU4YzZlYThhODc4MGFmMzM1ZTgxZmM1MWFlMDhmOTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr3ROZiqRUIiG27SgNpee1+mEWfo tmLgAjHtV+RLXbKqqoUCIp4qce9F5QFQy7dHLyhSfbLfd9meEcZMF/mcXX6tVkUO /xVSWs4RzDhnBfM49EoH6fV1baNRAUATHU9vPRrUoh2e46tXqyvtTRt3945Mzpna AnYS/0lOdHDiKCzM3eFlvmRSUCYKmbSaKFKjOCp/XW5XZeciSPancKqx8X8KFi+g d8ULG6fzhteE+deH35xfFJCyQ+o32HMdcZQEb5adV5fAfbQjyZhO/bzB+xq8TcNL jHvsqHN365hHz5tapHdGszkwH2K6t6uh7ePtkJeNnl6hz2Hai8eeLDe6DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4hJ8XoxuqKh4CvM16B/FGuCPkdMB8GA1UdIwQY MBaAFN/8SRlaQ51bnXESszYBXu4slE2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iMjhkODktYjg5Yi00NjgyLWI4Yzct N2ViYjZiOWUzNjlkLzEvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iMjhkODktYjg5Yi00NjgyLWI4YzctN2ViYjZiOWUzNjlk LzEvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkep7Vx9 iZqnCDCUkYQDZZjrJMkTR+kXkmTJcklA4fN5j1SVya/4YpOB3O9Tk6eWGq2fxCwv TuNizpfYjNBWs+zfNUTAjmCrQxpgrkbP9wrMoeBfcGLsQpxica9NgCnVAnZ0CBix v1viIjv4O3F8ECzxRYanT3fVLt0LUnnaydS/dXtC4l9N0VxJUUSh62JVm70a5iW/ X/juiLH5WMOfNwkcBqq5sNQR2rQvB0asN9VF/P8kzTAB2yVy22SJAOkYF+2azaWQ uvaa1inkLLePse0ZrcQJ8EUA6O6rmzFO25ROZdtoveIsjJNM4B+A7jdwgV4MZbbk EYVkNARu9et66g== -----END CERTIFICATE-----Generated at Tue Jan 20 02:19:51 2026 by rpki-client