This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft File: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft (raw, json) Hash identifier: gUMAXe3b5aRqpA+dV+PqH14coPoFHkT8gt1rSGoOJQY= Subject key identifier: 97:0C:42:76:D0:E8:74:64:92:8D:74:A2:75:43:9F:41:8F:58:8A:B3 Authority key identifier: DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D Certificate issuer: /CN=dd70c5f09b62683292fd9109e694713590281f8d Certificate serial: 019BF875F63073788048E4A218C1A0A1D0BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft Manifest number: 17E6 Signing time: Mon 26 Jan 2026 04:00:38 +0000 Manifest this update: Mon 26 Jan 2026 04:00:38 +0000 Manifest next update: Tue 27 Jan 2026 04:00:38 +0000 Files and hashes: 1: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl (hash: IktooLzBUc+xgxyFF657EtV3NpKkMmh+zkc/8kptJlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:f6:30:73:78:80:48:e4:a2:18:c1:a0:a1:d0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd70c5f09b62683292fd9109e694713590281f8d Validity Not Before: Jan 26 04:00:38 2026 GMT Not After : Jan 27 04:00:38 2026 GMT Subject: CN=970c4276d0e87464928d74a275439f418f588ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:34:74:70:0b:36:fb:c3:1e:3a:74:19:8b:44: 9b:36:26:80:ac:84:cd:6b:8f:c5:2c:42:86:f1:24: cc:f7:38:33:50:0e:e5:88:05:5f:49:cf:26:67:b1: 55:01:82:11:95:9a:b2:aa:52:42:d0:5b:38:9e:a3: fb:49:59:93:36:33:d2:29:6d:6a:25:d3:bf:90:0b: 6e:15:f8:6a:24:c5:62:63:9c:0b:cc:31:1a:65:fe: 11:15:ca:ca:3c:b1:98:0e:e2:13:a2:dd:f9:54:63: 43:93:30:aa:7b:1f:2e:95:cb:7c:fe:95:48:e3:31: 78:a0:ee:54:38:96:77:89:39:75:d3:13:c4:b9:32: b6:e7:ec:22:0e:4d:28:8c:89:af:b4:86:d2:54:af: 1b:53:3c:48:d8:57:fc:a7:ec:48:6b:a2:58:0c:59: 2d:19:e5:56:a8:c3:63:56:9e:f0:cb:1d:24:f5:4c: f2:fe:d6:5a:96:6b:58:78:e9:b9:8d:b4:9b:38:57: 9e:39:de:4a:2f:ea:27:30:af:06:04:b7:83:1d:05: 03:ce:c2:b6:57:ab:67:da:e0:e2:36:35:c4:72:c4: 1a:44:2e:25:ec:50:67:3c:66:46:79:b1:db:23:63: 1f:13:82:56:3e:2b:6d:57:06:e0:15:46:4f:1f:2e: 59:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0C:42:76:D0:E8:74:64:92:8D:74:A2:75:43:9F:41:8F:58:8A:B3 X509v3 Authority Key Identifier: keyid:DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c4:c7:60:9b:1f:66:6e:d1:57:71:c1:d8:3f:c2:bb:f1:63: de:4d:0a:ba:2b:86:ad:20:53:c5:78:d2:fe:21:f6:e3:46:3c: f5:36:3c:98:11:d5:d2:18:d8:c0:22:ab:04:61:b8:00:8a:46: b9:07:df:12:52:70:65:58:09:07:10:b7:68:7f:7b:a5:3e:96: 7e:b3:f8:d9:3b:79:34:d5:98:71:c1:78:8a:ad:47:24:da:04: 0d:8d:9b:71:b3:60:38:80:c0:c0:06:06:06:0d:0d:32:c9:1f: 8e:7c:98:67:52:d6:c8:d1:b7:9f:03:f3:ba:b3:63:3c:ee:86: 27:c8:3b:80:48:14:fd:33:8a:6b:98:83:90:4e:b0:01:12:aa: ed:0c:30:0e:cd:75:7d:54:02:f1:a4:2e:b3:3a:09:98:32:3b: dc:5e:8c:6f:53:eb:eb:a3:9a:f5:27:f7:16:1c:13:50:25:a3: c7:83:14:e2:c6:e8:1d:a5:bb:94:35:e1:e5:34:3c:f3:f3:1d: c6:5f:4c:3d:cd:0f:36:5a:91:69:a7:49:70:7f:6f:31:a8:0f: a5:10:e1:2c:2f:4d:b2:15:1d:03:8a:77:98:32:90:ee:17:bf: 6b:cb:25:1a:80:da:ab:b9:de:b8:c4:e5:3d:7c:69:ad:34:09: dd:71:fa:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dfYwc3iASOSiGMGgodC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNzBjNWYwOWI2MjY4MzI5MmZkOTEwOWU2OTQ3MTM1OTAy ODFmOGQwHhcNMjYwMTI2MDQwMDM4WhcNMjYwMTI3MDQwMDM4WjAzMTEwLwYDVQQD Eyg5NzBjNDI3NmQwZTg3NDY0OTI4ZDc0YTI3NTQzOWY0MThmNTg4YWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDR0cAs2+8MeOnQZi0SbNiaArITN a4/FLEKG8STM9zgzUA7liAVfSc8mZ7FVAYIRlZqyqlJC0Fs4nqP7SVmTNjPSKW1q JdO/kAtuFfhqJMViY5wLzDEaZf4RFcrKPLGYDuITot35VGNDkzCqex8ulct8/pVI 4zF4oO5UOJZ3iTl10xPEuTK25+wiDk0ojImvtIbSVK8bUzxI2Ff8p+xIa6JYDFkt GeVWqMNjVp7wyx0k9Uzy/tZalmtYeOm5jbSbOFeeOd5KL+onMK8GBLeDHQUDzsK2 V6tn2uDiNjXEcsQaRC4l7FBnPGZGebHbI2MfE4JWPittVwbgFUZPHy5ZGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcMQnbQ6HRkko10onVDn0GPWIqzMB8GA1UdIwQY MBaAFN1wxfCbYmgykv2RCeaUcTWQKB+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1hERjhKdGlhREtTX1pFSjVwUnhOWkFvSDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNjc1NTctZDg5YS00ZWYxLWJkNjMt YTdmY2FiOWFhN2FhLzEvM1hERjhKdGlhREtTX1pFSjVwUnhOWkFvSDQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9hNjc1NTctZDg5YS00ZWYxLWJkNjMtYTdmY2FiOWFhN2Fh LzEvM1hERjhKdGlhREtTX1pFSjVwUnhOWkFvSDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMTHYJsf Zm7RV3HB2D/Cu/Fj3k0KuiuGrSBTxXjS/iH240Y89TY8mBHV0hjYwCKrBGG4AIpG uQffElJwZVgJBxC3aH97pT6WfrP42Tt5NNWYccF4iq1HJNoEDY2bcbNgOIDAwAYG Bg0NMskfjnyYZ1LWyNG3nwPzurNjPO6GJ8g7gEgU/TOKa5iDkE6wARKq7QwwDs11 fVQC8aQuszoJmDI73F6Mb1Pr66Oa9Sf3FhwTUCWjx4MU4sboHaW7lDXh5TQ88/Md xl9MPc0PNlqRaadJcH9vMagPpRDhLC9NshUdA4p3mDKQ7he/a8slGoDaq7neuMTl PXxprTQJ3XH65Q== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:41 2026 by rpki-client