This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json) Hash identifier: XOL0MoGJH5GaeJDsTf9TnjFIvyX7UrZdYMvGEFBi7pg= Subject key identifier: FD:7B:A3:28:05:A9:11:3B:39:E9:36:5E:75:A3:77:E3:D4:B9:E7:AE Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019BFC1BC6E375DF6D3D85CA4B34A723CE82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft Manifest number: 14E7 Signing time: Mon 26 Jan 2026 21:00:37 +0000 Manifest this update: Mon 26 Jan 2026 21:00:37 +0000 Manifest next update: Tue 27 Jan 2026 21:00:37 +0000 Files and hashes: 1: 3Adh7KtHVqwqgZmtyDo8Ej6pQKM.roa (hash: wUQuxvOgY7UYkYHJtGk8LL5BCyN5FZHPBwwIxJwHIq4=) 2: 5utcJHsfBrjTs_UOTB5AJlV11DM.roa (hash: p9JiIAKdi3ntcnSsoekfJmDvvRvUwFnZwfz4Ft5kAjc=) 3: InOi1f3veo98pW4OGTBEIEXKEZE.roa (hash: Xjh3PenXVS46SZGt58mV2dcaP4QPqA5YhhKDh/W7EIA=) 4: J41thO8T8h3ECLAtFbEa63FQ07k.roa (hash: 7SAVb1xYsKsQiyuIDRpxE3uEw5S/EAv/z+BlKDTZqQY=) 5: ceEv1t749F4uxJkZjXzVLrcY0W4.roa (hash: CPEu9mzzQjkaDfnSXyi14ADFRqiihJHheO6fccq1E38=) 6: leUezOsMyq96-d8mJ8nIjjD7JvA.roa (hash: g5CFKJHlpq/pgKR++1ZaNjuNwVvKoATKegh0uW1A5JI=) 7: ohU1cnvjNfxWuepVkjRa06OJfuU.roa (hash: 30e5bsuiYaaP9kH7j7NGuQ8fKIB7hM+APPzNsaPzyUo=) 8: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: XaCODyFcxx+wFRo+htYE86ZeSquuO6peBMYtYvsbMgE=) 9: uoFFO71WiREgY844RuKE1yCVJAI.roa (hash: qctNyKkUd5I2cpGY+ypr0Dn6bPJwy7oeCGkLPyDoqRs=) 10: xwd7sohdrx5YU3LTJIWIxQ7gJnc.roa (hash: 0vwAzftKk4tcR77oFqQ7h1CZN6cHODVRJzedfJTmcvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1b:c6:e3:75:df:6d:3d:85:ca:4b:34:a7:23:ce:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Jan 26 21:00:37 2026 GMT Not After : Jan 27 21:00:37 2026 GMT Subject: CN=fd7ba32805a9113b39e9365e75a377e3d4b9e7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:79:1d:9d:ae:4a:e7:ca:b3:c5:e6:09:6a: 8d:05:a2:57:ad:91:1d:b0:c3:5e:50:e1:63:ac:7a: d7:20:a8:70:55:ba:37:74:83:a8:4d:c6:49:37:e2: 5c:83:d4:11:8a:96:57:40:ea:37:dc:c8:12:54:f5: da:7e:65:ec:8b:72:c6:38:49:48:97:f0:6d:c2:83: 85:89:5c:52:04:42:79:36:eb:71:fc:b2:31:94:de: fe:1d:85:32:e7:1f:51:88:ac:ce:c7:3c:65:a4:d7: 37:96:c4:5f:e9:36:4f:bc:9d:e9:9b:0d:c3:4f:84: 6b:c3:a2:66:0d:73:b7:ab:87:90:43:02:ef:7a:ff: 0d:7e:b6:fc:83:e1:c7:d6:14:76:2d:1e:77:10:98: 3f:51:9d:2a:e5:ef:9b:f8:5c:3c:41:c3:44:44:06: 14:fb:fa:a9:98:c7:b8:52:1b:46:60:5b:03:d9:20: 1c:7f:73:b8:16:23:b0:86:61:39:0c:ba:c6:41:c2: 07:f1:1a:76:7b:b0:90:f7:b8:38:7e:20:14:a7:2e: d8:d6:97:da:f2:90:49:a9:db:9e:a8:ab:0d:f6:f5: 1b:be:b7:fa:a9:17:c8:0b:11:68:55:ec:31:c7:68: 1b:e1:61:33:9b:65:16:23:6a:c8:3d:76:2f:b4:bd: b7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7B:A3:28:05:A9:11:3B:39:E9:36:5E:75:A3:77:E3:D4:B9:E7:AE X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:b1:03:8d:04:9e:2a:5c:91:33:fc:56:95:d1:9f:a1:83:52: 4f:26:c5:8b:03:b2:2f:f1:84:af:d1:13:19:61:aa:4e:1a:b0: f4:7e:f8:5f:7b:b4:6a:da:b3:1f:07:e3:21:b6:e8:ae:5f:84: 5c:a2:52:3a:e4:8f:bf:0e:6d:c5:db:4c:ea:97:b6:6a:2e:cf: a9:8f:7c:72:4e:4e:8f:fb:b9:93:92:f9:a3:83:bd:2d:4e:3b: ed:97:83:e3:7c:e4:1a:c9:40:69:21:c7:75:c6:2f:0d:71:e5: 54:cf:67:6c:3d:a7:7b:df:de:67:d6:15:65:2b:b9:20:40:ca: 5c:b1:4f:fa:d5:80:07:69:90:27:fa:76:71:5b:f0:b6:01:89: 81:47:1b:ad:e3:da:ee:26:31:6e:e5:8c:20:a8:cb:95:00:8d: 09:b3:a8:c9:5b:4d:a9:07:6b:72:6d:51:71:a5:02:13:a3:bd: 00:80:ea:17:85:a0:8d:95:aa:2b:ee:5c:77:dc:a3:d0:43:36: b9:01:51:fc:72:28:27:41:46:46:1a:12:1c:0f:37:b1:4e:8a: 01:f1:b5:72:42:53:d2:ff:57:37:5d:45:c6:20:67:c1:82:1e: 79:99:8e:19:a0:e7:59:90:27:cc:b9:9c:42:bf:d0:c7:8f:d2: 02:ad:6e:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8G8bjdd9tPYXKSzSnI86CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjYwMTI2MjEwMDM3WhcNMjYwMTI3MjEwMDM3WjAzMTEwLwYDVQQD EyhmZDdiYTMyODA1YTkxMTNiMzllOTM2NWU3NWEzNzdlM2Q0YjllN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRZ5HZ2uSufKs8XmCWqNBaJXrZEd sMNeUOFjrHrXIKhwVbo3dIOoTcZJN+Jcg9QRipZXQOo33MgSVPXafmXsi3LGOElI l/BtwoOFiVxSBEJ5Nutx/LIxlN7+HYUy5x9RiKzOxzxlpNc3lsRf6TZPvJ3pmw3D T4Rrw6JmDXO3q4eQQwLvev8Nfrb8g+HH1hR2LR53EJg/UZ0q5e+b+Fw8QcNERAYU +/qpmMe4UhtGYFsD2SAcf3O4FiOwhmE5DLrGQcIH8Rp2e7CQ97g4fiAUpy7Y1pfa 8pBJqdueqKsN9vUbvrf6qRfICxFoVewxx2gb4WEzm2UWI2rIPXYvtL23TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP17oygFqRE7Oek2XnWjd+PUueeuMB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7EDjQSe KlyRM/xWldGfoYNSTybFiwOyL/GEr9ETGWGqThqw9H74X3u0atqzHwfjIbborl+E XKJSOuSPvw5txdtM6pe2ai7PqY98ck5Oj/u5k5L5o4O9LU477ZeD43zkGslAaSHH dcYvDXHlVM9nbD2ne9/eZ9YVZSu5IEDKXLFP+tWAB2mQJ/p2cVvwtgGJgUcbrePa 7iYxbuWMIKjLlQCNCbOoyVtNqQdrcm1RcaUCE6O9AIDqF4WgjZWqK+5cd9yj0EM2 uQFR/HIoJ0FGRhoSHA83sU6KAfG1ckJT0v9XN11FxiBnwYIeeZmOGaDnWZAnzLmc Qr/Qx4/SAq1u7Q== -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:34 2026 by rpki-client