This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json) Hash identifier: 5dcEvG9xK4DX5YACh/xYqp+SgLtSoJZG2SXKgNKvR6o= Subject key identifier: 6A:A5:42:E4:17:1B:91:84:AF:B6:AB:9B:B5:F2:EA:81:5A:52:62:7F Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53 Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153 Certificate serial: 019BFB772484EE9CF815CB0C66C108E1D7C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft Manifest number: 0C22 Signing time: Mon 26 Jan 2026 18:00:47 +0000 Manifest this update: Mon 26 Jan 2026 18:00:47 +0000 Manifest next update: Tue 27 Jan 2026 18:00:47 +0000 Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: cRP9fIuKxQXuu9B4pKtp0ZbmRvbbpPQvudB7Ejco3+M=) 2: Ma8H1fgQEZiykkTlF-Y0HcwTumQ.roa (hash: V4dnLv6J0q+xgKJjM9hxw2pa2vp40VWjdBqsBD1NqDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:24:84:ee:9c:f8:15:cb:0c:66:c1:08:e1:d7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153 Validity Not Before: Jan 26 18:00:47 2026 GMT Not After : Jan 27 18:00:47 2026 GMT Subject: CN=6aa542e4171b9184afb6ab9bb5f2ea815a52627f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e4:63:db:67:58:ae:a6:b1:58:fc:17:b1:be: ec:2d:d9:ab:f6:25:16:fd:d4:f3:bc:d5:9d:be:d9: 1c:95:69:2d:84:85:e5:59:e1:19:7a:d0:40:d7:26: 47:b2:31:3b:cd:f7:9f:39:fb:38:db:c6:b7:15:22: b4:82:0c:05:be:5a:89:43:9e:3f:fa:4a:91:76:4c: 00:b8:78:c4:27:14:32:7b:2b:6e:24:9d:9c:b0:f4: f2:26:9d:c3:38:fa:e9:af:74:83:67:03:3d:55:98: 9a:3a:28:4c:f6:fd:1a:0f:20:85:d1:f6:c9:e4:16: ea:4b:a8:2d:88:e3:ab:fd:2a:22:08:cb:7a:88:ac: 44:c8:3d:43:6d:9e:8b:af:17:65:bc:d5:17:80:5d: 0c:7b:f0:da:28:da:b7:f9:02:0f:b7:58:25:25:a3: 00:b6:f9:16:e2:69:cd:e2:ae:1e:d2:e8:28:b8:03: f3:86:d9:61:7e:ab:16:24:75:6d:77:4e:7e:cf:9e: 93:3e:85:0d:d2:69:bc:20:13:8f:46:ed:0e:80:fd: 9c:fc:66:45:58:f5:46:23:40:47:34:d2:f8:f6:02: 6f:59:17:04:c3:df:2c:81:97:8f:6e:62:a4:57:7c: dd:2b:ce:08:6c:6b:d3:68:d5:a8:9c:08:9f:7d:e3: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A5:42:E4:17:1B:91:84:AF:B6:AB:9B:B5:F2:EA:81:5A:52:62:7F X509v3 Authority Key Identifier: keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e9:a6:65:cc:ee:3d:c2:ef:1c:aa:f3:69:d7:83:6f:31:c5: c6:9e:74:2e:e7:ff:36:1d:ca:06:2b:65:c0:e0:bd:18:81:bc: e3:48:fe:b6:ef:84:87:2d:1e:6b:29:f5:55:62:47:d2:5c:27: f0:68:19:74:86:19:d0:16:d3:ab:45:3b:a9:2d:03:3e:64:08: e4:e0:87:c3:8a:d9:47:52:de:af:d4:5d:8f:bb:e7:19:6f:b9: 6c:48:cf:9a:04:82:a6:94:2a:0a:e1:99:85:55:07:e6:c7:f0: b6:f4:a2:37:b3:ed:28:28:2c:13:db:8d:e3:66:ca:40:3e:9d: ac:68:16:df:e4:bb:3f:54:29:13:76:ba:86:af:d9:f5:67:81: 83:11:03:c4:ce:61:fd:41:74:d4:c5:49:67:22:0b:e6:ae:9e: c1:46:52:60:d2:b2:ee:9c:ae:0b:b0:b8:94:62:21:53:07:a0: 27:af:bc:fb:df:b8:05:04:7c:12:14:6d:0b:45:ae:3b:a0:a8: ae:a5:e0:9d:ad:52:22:98:90:4f:14:cd:b8:63:02:4b:cb:2c: 74:55:c0:99:c2:b7:27:ef:59:9d:b0:a8:ee:6d:46:d2:e9:cc: fb:ef:a5:1c:6a:ab:b5:f6:af:39:be:9b:ec:b2:97:a7:e6:19: 66:86:f8:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dySE7pz4FcsMZsEI4dfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmN2I3YzBkNmY3YjM0NjA4ZWIyNGNmYTFhODg4YmYzM2Ix YjYxNTMwHhcNMjYwMTI2MTgwMDQ3WhcNMjYwMTI3MTgwMDQ3WjAzMTEwLwYDVQQD Eyg2YWE1NDJlNDE3MWI5MTg0YWZiNmFiOWJiNWYyZWE4MTVhNTI2MjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+Rj22dYrqaxWPwXsb7sLdmr9iUW /dTzvNWdvtkclWkthIXlWeEZetBA1yZHsjE7zfefOfs428a3FSK0ggwFvlqJQ54/ +kqRdkwAuHjEJxQyeytuJJ2csPTyJp3DOPrpr3SDZwM9VZiaOihM9v0aDyCF0fbJ 5BbqS6gtiOOr/SoiCMt6iKxEyD1DbZ6LrxdlvNUXgF0Me/DaKNq3+QIPt1glJaMA tvkW4mnN4q4e0ugouAPzhtlhfqsWJHVtd05+z56TPoUN0mm8IBOPRu0OgP2c/GZF WPVGI0BHNNL49gJvWRcEw98sgZePbmKkV3zdK84IbGvTaNWonAiffeOY7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqlQuQXG5GEr7arm7Xy6oFaUmJ/MB8GA1UdIwQY MBaAFB97fA1vezRgjrJM+hqIi/M7G2FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zZTYwYWQtZDZiYi00NWEzLWFlZjMt MmI5MzJlNjgyM2FkLzEvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zZTYwYWQtZDZiYi00NWEzLWFlZjMtMmI5MzJlNjgyM2Fk LzEvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOmmZczu PcLvHKrzadeDbzHFxp50Luf/Nh3KBitlwOC9GIG840j+tu+Ehy0eayn1VWJH0lwn 8GgZdIYZ0BbTq0U7qS0DPmQI5OCHw4rZR1Ler9Rdj7vnGW+5bEjPmgSCppQqCuGZ hVUH5sfwtvSiN7PtKCgsE9uN42bKQD6drGgW3+S7P1QpE3a6hq/Z9WeBgxEDxM5h /UF01MVJZyIL5q6ewUZSYNKy7pyuC7C4lGIhUwegJ6+8+9+4BQR8EhRtC0WuO6Co rqXgna1SIpiQTxTNuGMCS8ssdFXAmcK3J+9ZnbCo7m1G0unM+++lHGqrtfavOb6b 7LKXp+YZZob4rw== -----END CERTIFICATE-----Generated at Mon Jan 26 23:02:33 2026 by rpki-client