This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft File: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft (raw, json) Hash identifier: M4Wm8YZW1SiYwVpMlNpZVgQMbFodTxD5LOoSkebbh8M= Subject key identifier: E9:93:53:7B:3E:7B:06:C4:34:0A:CC:6C:63:CB:ED:CE:C9:66:C8:D1 Authority key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC Certificate issuer: /CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc Certificate serial: 019BFBAEE0D86BF88FBF9CBF4E141C8AF315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft Manifest number: 03 Signing time: Mon 26 Jan 2026 19:01:40 +0000 Manifest this update: Mon 26 Jan 2026 19:01:40 +0000 Manifest next update: Tue 27 Jan 2026 19:01:40 +0000 Files and hashes: 1: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl (hash: +SZbzUvOsh+QCAZoZhtLey5D9VyaUKi0CopG5GGBATU=) 2: VGuckUmXD3FffNojHBh4mr4L2f8.roa (hash: 8TbPfvVyzj3G5WKw2nSbHXcBZE5w35KkZHPmx5cAQsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:e0:d8:6b:f8:8f:bf:9c:bf:4e:14:1c:8a:f3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc Validity Not Before: Jan 26 19:01:40 2026 GMT Not After : Jan 27 19:01:40 2026 GMT Subject: CN=e993537b3e7b06c4340acc6c63cbedcec966c8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:87:e3:6d:2f:32:69:2a:8b:1e:24:a4:a1:29: 3d:38:13:96:61:ee:6f:49:dc:2f:37:b6:56:eb:56: 00:9d:c5:8e:a3:2d:92:5f:af:70:e0:36:c3:97:19: cf:80:74:7e:03:49:4b:f6:e3:bb:3c:a0:19:d4:ef: 0a:34:7e:91:e6:f6:a9:fb:e2:62:3c:25:bf:60:c7: 66:1b:e5:22:0d:d5:0d:9f:e9:72:b1:39:97:98:b6: 69:cd:d3:06:19:cd:ba:8f:99:01:73:69:b5:90:86: b8:cc:d1:06:34:c4:38:98:80:90:17:50:8f:32:4d: d6:81:37:ab:b5:0b:50:12:ab:27:7d:93:3e:e6:c5: c2:28:0a:22:c7:3a:6c:b9:48:5a:0a:42:08:51:f8: ec:86:1f:db:1d:b8:f2:bf:47:7a:e1:ce:af:b6:81: 31:bc:0a:46:04:d2:e6:1a:cd:d9:ee:b2:ea:6a:ff: 3b:1f:0c:6f:51:b7:8c:1e:8c:44:c9:48:c0:6c:50: 5a:49:3d:a9:4c:12:ad:08:53:ec:cc:de:7d:36:83: 84:c9:54:2c:ed:22:7b:03:21:a8:e1:06:52:60:2d: 16:c9:25:ed:d2:e7:9e:fe:51:a5:c8:07:0a:39:30: a3:0c:94:9b:fd:99:e9:cb:0a:cf:6d:b4:a5:00:df: 12:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:93:53:7B:3E:7B:06:C4:34:0A:CC:6C:63:CB:ED:CE:C9:66:C8:D1 X509v3 Authority Key Identifier: keyid:DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ca:d4:0f:ec:2f:5a:95:4d:ff:19:3e:32:fb:cf:8a:fb:e3: 9b:b9:3a:5e:05:e6:b4:d3:9e:09:3c:11:73:b2:6d:75:0b:2f: 5d:b6:94:8e:eb:ba:f0:fe:f8:32:2b:fe:a3:4d:a7:c6:e8:60: ae:ed:32:3b:16:aa:b2:f8:86:b9:51:61:a4:bc:63:ed:32:35: db:71:48:0d:39:f0:8b:fc:73:ca:3d:d2:02:81:ac:af:ed:11: f9:c0:a4:57:05:22:11:2e:84:f8:8f:e0:7f:06:72:3e:46:07: dd:46:cc:f2:7e:10:1a:a4:0a:12:17:6a:75:6a:91:61:0c:55: 30:b0:ac:bd:bd:c2:25:83:71:25:79:6d:1c:01:1b:30:e9:3a: 8a:79:4b:4d:1b:a9:13:57:a0:10:a3:01:f1:63:f6:9b:0e:aa: 24:08:a1:97:4f:38:99:53:53:8c:8d:3a:8f:71:bd:8e:e4:be: 28:ad:97:9f:ce:a8:19:86:a0:2f:e5:be:60:47:3a:84:4a:dc: 25:3e:fc:71:ee:51:5b:bc:8d:b1:f6:27:4a:6d:76:79:52:63: 5a:b6:b3:f7:39:7e:db:8a:64:bc:f0:11:ff:e1:0b:68:f3:30: 93:1d:00:72:8b:bb:47:e8:15:24:c0:21:2a:8f:c1:ab:6f:2e: ee:9c:00:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7ruDYa/iPv5y/ThQcivMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkY2JlZmU2YzY0ZDI5YTM0NmIyYjQwMTA5ZjhkODZiZjE4 MzgxY2MwHhcNMjYwMTI2MTkwMTQwWhcNMjYwMTI3MTkwMTQwWjAzMTEwLwYDVQQD EyhlOTkzNTM3YjNlN2IwNmM0MzQwYWNjNmM2M2NiZWRjZWM5NjZjOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqofjbS8yaSqLHiSkoSk9OBOWYe5v SdwvN7ZW61YAncWOoy2SX69w4DbDlxnPgHR+A0lL9uO7PKAZ1O8KNH6R5vap++Ji PCW/YMdmG+UiDdUNn+lysTmXmLZpzdMGGc26j5kBc2m1kIa4zNEGNMQ4mICQF1CP Mk3WgTertQtQEqsnfZM+5sXCKAoixzpsuUhaCkIIUfjshh/bHbjyv0d64c6vtoEx vApGBNLmGs3Z7rLqav87HwxvUbeMHoxEyUjAbFBaST2pTBKtCFPszN59NoOEyVQs 7SJ7AyGo4QZSYC0WySXt0uee/lGlyAcKOTCjDJSb/ZnpywrPbbSlAN8S3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmTU3s+ewbENArMbGPL7c7JZsjRMB8GA1UdIwQY MBaAFN3L7+bGTSmjRrK0AQn42Gvxg4HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2N2djVzWk5LYU5Hc3JRQkNmallhX0dEZ2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYjk5NjQtNjg3Yi00NzRlLWI5M2Yt NDU1MDZjN2JlMDVkLzEvM2N2djVzWk5LYU5Hc3JRQkNmallhX0dEZ2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xYjk5NjQtNjg3Yi00NzRlLWI5M2YtNDU1MDZjN2JlMDVk LzEvM2N2djVzWk5LYU5Hc3JRQkNmallhX0dEZ2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesrUD+wv WpVN/xk+MvvPivvjm7k6XgXmtNOeCTwRc7JtdQsvXbaUjuu68P74Miv+o02nxuhg ru0yOxaqsviGuVFhpLxj7TI123FIDTnwi/xzyj3SAoGsr+0R+cCkVwUiES6E+I/g fwZyPkYH3UbM8n4QGqQKEhdqdWqRYQxVMLCsvb3CJYNxJXltHAEbMOk6inlLTRup E1egEKMB8WP2mw6qJAihl084mVNTjI06j3G9juS+KK2Xn86oGYagL+W+YEc6hErc JT78ce5RW7yNsfYnSm12eVJjWraz9zl+24pkvPAR/+ELaPMwkx0Acou7R+gVJMAh Ko/Bq28u7pwAIw== -----END CERTIFICATE-----Generated at Tue Jan 27 03:05:42 2026 by rpki-client