This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft File: 33jsawuWmqIijxJe2qQZus278ls.mft (raw, json) Hash identifier: n45WHZy7pkRCNxWoBpQPNzMQQYP1Kc7HdSJgF+4BoHc= Subject key identifier: 3B:0B:AC:96:75:98:AC:4D:5D:09:DC:FD:79:D8:C5:DB:9A:25:97:72 Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b Certificate serial: 019BA490692DFA29784B1C121A0935F5C3D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft Manifest number: 17C0 Signing time: Fri 09 Jan 2026 21:01:26 +0000 Manifest this update: Fri 09 Jan 2026 21:01:26 +0000 Manifest next update: Sat 10 Jan 2026 21:01:26 +0000 Files and hashes: 1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: TecnSlSGnv8kLbqJoamfagOf9AVL7do9ALQ92G8EHXs=) 2: VtZiDTehXWbLuvByNpvV6poX8NU.roa (hash: qzmhlPWDE6wNQJNL/swjxQrHyVqxNbrefZdH2uAfmPk=) 3: fK4x-x6caLzjBJ6h7UqJVWU9HNs.roa (hash: TEAA5N2BX6e88dGktvlV8qoZNHbrtanHoBnJrUnnrxo=) 4: g_q3_hFJu6HXUUHSAWggSZhKtYc.roa (hash: CYiIktGrTnexqrcegKNOYzL4d50/QWocPqLENQVDSYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:90:69:2d:fa:29:78:4b:1c:12:1a:09:35:f5:c3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b Validity Not Before: Jan 9 21:01:26 2026 GMT Not After : Jan 10 21:01:26 2026 GMT Subject: CN=3b0bac967598ac4d5d09dcfd79d8c5db9a259772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:2f:39:19:38:6b:49:fb:ef:17:8e:1f:7c: 8d:03:48:15:88:c4:32:0c:fa:7c:21:ef:cc:f4:a6: 78:24:25:59:c3:d6:ed:68:2b:76:37:6e:d2:5f:c7: df:9f:51:9a:df:e3:36:5c:a1:4c:82:08:22:e7:3a: 21:4c:13:9d:65:44:6b:e6:69:f3:03:49:53:79:ac: 2c:69:2d:5e:21:54:9e:7a:e8:45:05:7c:cb:95:0f: e3:e2:e3:a9:df:fe:7e:ce:5d:1f:05:66:c9:8b:94: 83:b0:bd:93:be:85:fd:f9:28:4f:51:88:2c:bb:c7: 11:6e:a5:4e:8e:49:75:36:9a:61:63:2d:50:58:21: 45:5c:87:5a:3f:b9:8d:2d:da:cb:2d:7a:0d:80:3f: 0c:f4:90:78:59:4d:d0:88:5a:51:6d:7e:5e:dd:75: c1:0c:db:0d:96:42:ec:09:e4:c2:df:f0:55:bb:04: 4d:82:4d:64:43:61:2f:54:e9:ec:44:51:3e:ac:c6: 82:03:4d:4e:bd:53:e9:67:4d:7a:fa:f7:a9:ad:1a: 55:67:e2:58:59:f5:ad:d1:71:2f:53:f7:79:ec:93: ac:d2:39:e8:65:9a:6f:94:dc:5f:85:ce:b4:9b:07: 34:3d:e7:88:2d:6c:8e:43:cb:ba:5e:85:e5:f3:9e: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0B:AC:96:75:98:AC:4D:5D:09:DC:FD:79:D8:C5:DB:9A:25:97:72 X509v3 Authority Key Identifier: keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fc:30:6e:ea:67:e5:73:f0:a2:20:e4:db:6d:6a:eb:98:e4: 0a:4a:9f:9c:6c:cf:3d:47:7d:0f:3a:05:f8:61:cb:d1:0b:36: 32:e9:0d:87:e2:fe:e1:cc:28:8d:ef:77:39:85:33:ae:cd:a9: dc:76:6a:83:c2:20:82:d5:8e:49:ca:a0:8b:be:b4:59:3e:c8: 07:31:b2:d2:35:00:62:e9:76:cb:4e:65:5d:16:7a:2f:c7:9e: 33:8c:b9:cd:72:7f:e4:8d:2e:48:26:6b:4d:8d:86:e2:4d:06: 92:ee:4c:67:45:06:ca:8b:8d:45:af:01:a6:29:95:ad:02:71: 56:cb:23:98:22:b5:26:a6:53:74:54:ee:84:e3:d7:8d:22:79: 36:e8:b4:dd:a9:5f:77:d9:79:51:4e:8c:f6:75:75:c8:11:67: 64:44:8d:a5:ce:7c:ac:6e:45:5a:b5:fb:2f:d6:a1:bb:98:68: 40:2b:82:65:15:54:20:ca:0f:39:db:86:d8:14:28:52:d4:e4: d0:9f:4a:40:63:fe:46:7f:07:98:4a:ff:a1:c2:8e:94:54:91: fc:1a:d5:e4:9c:1a:b0:a7:a3:49:0a:ef:07:fe:98:98:bb:dd: 73:47:5c:8c:fd:7f:8f:d1:65:19:08:c0:bf:41:ac:d3:91:b9: 67:65:24:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZukkGkt+il4SxwSGgk19cPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzhlYzZiMGI5NjlhYTIyMjhmMTI1ZWRhYTQxOWJhY2Ri YmYyNWIwHhcNMjYwMTA5MjEwMTI2WhcNMjYwMTEwMjEwMTI2WjAzMTEwLwYDVQQD EygzYjBiYWM5Njc1OThhYzRkNWQwOWRjZmQ3OWQ4YzVkYjlhMjU5NzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyIvORk4a0n77xeOH3yNA0gViMQy DPp8Ie/M9KZ4JCVZw9btaCt2N27SX8ffn1Ga3+M2XKFMgggi5zohTBOdZURr5mnz A0lTeawsaS1eIVSeeuhFBXzLlQ/j4uOp3/5+zl0fBWbJi5SDsL2TvoX9+ShPUYgs u8cRbqVOjkl1NpphYy1QWCFFXIdaP7mNLdrLLXoNgD8M9JB4WU3QiFpRbX5e3XXB DNsNlkLsCeTC3/BVuwRNgk1kQ2EvVOnsRFE+rMaCA01OvVPpZ016+veprRpVZ+JY WfWt0XEvU/d57JOs0jnoZZpvlNxfhc60mwc0PeeILWyOQ8u6XoXl854kSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsLrJZ1mKxNXQnc/XnYxduaJZdyMB8GA1UdIwQY MBaAFN947GsLlpqiIo8SXtqkGbrNu/JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTIt N2U4YzU1MjZkZTdlLzEvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTItN2U4YzU1MjZkZTdl LzEvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPwwbupn 5XPwoiDk221q65jkCkqfnGzPPUd9DzoF+GHL0Qs2MukNh+L+4cwoje93OYUzrs2p 3HZqg8IggtWOScqgi760WT7IBzGy0jUAYul2y05lXRZ6L8eeM4y5zXJ/5I0uSCZr TY2G4k0Gku5MZ0UGyouNRa8BpimVrQJxVssjmCK1JqZTdFTuhOPXjSJ5Nui03alf d9l5UU6M9nV1yBFnZESNpc58rG5FWrX7L9ahu5hoQCuCZRVUIMoPOduG2BQoUtTk 0J9KQGP+Rn8HmEr/ocKOlFSR/BrV5JwasKejSQrvB/6YmLvdc0dcjP1/j9FlGQjA v0Gs05G5Z2UkaQ== -----END CERTIFICATE-----Generated at Sat Jan 10 07:03:12 2026 by rpki-client