This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json) Hash identifier: AawP2j7LUCEzoJcianRGS4Jbaqrgn1TXv3j60rETKj8= Subject key identifier: 23:D0:1D:3E:C2:50:4E:BD:44:9A:FA:D0:B1:CD:7F:E4:90:4B:63:CF Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad Certificate serial: 019BDDDB044989B7263CAA38F2356F70C9E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft Manifest number: 128F Signing time: Wed 21 Jan 2026 00:01:16 +0000 Manifest this update: Wed 21 Jan 2026 00:01:16 +0000 Manifest next update: Thu 22 Jan 2026 00:01:16 +0000 Files and hashes: 1: 10zWBAG3yHk6LZ2cT_OBKxWFNWM.roa (hash: 3CyCzPInmv1M2HVwGxzJQ9jqmdcvQHPMZfCVee8QVmg=) 2: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: Fs1qr3yNNQ/1+plrzYlahG46TAeH9zV8h2yhgMPBe9c=) 3: K7-F8r5HaixUXPBxPks_drLfCLM.roa (hash: IxrS8dpVCynttuxgWbJEvLUTdnUOcVknWjS85DsyGnY=) 4: RubVNCawFmtSSykZF5XcDH3aXBc.roa (hash: pb4UIOlvmHSq695BiD6WHLwCWaB/NLP+RzVFb75tWfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:db:04:49:89:b7:26:3c:aa:38:f2:35:6f:70:c9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad Validity Not Before: Jan 21 00:01:16 2026 GMT Not After : Jan 22 00:01:16 2026 GMT Subject: CN=23d01d3ec2504ebd449afad0b1cd7fe4904b63cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:31:82:24:c2:e1:c7:ba:f1:bc:ca:89:90:89: 01:56:f0:ea:bc:0a:05:a5:95:38:71:c6:65:b0:da: 59:4a:6e:0a:ba:7d:3c:72:bd:16:4c:a6:0d:9f:03: 8b:31:42:32:5a:36:db:67:af:06:3a:6e:ae:c7:a4: cb:fc:35:ca:66:ae:e0:8c:d2:91:97:cd:1a:dd:96: aa:cc:30:42:a7:de:dd:5f:57:ad:70:91:79:d5:5c: f0:1d:4a:ab:69:3b:f2:b1:f6:2f:4b:91:84:b7:4d: ea:6c:fd:31:6a:33:d7:c7:32:2c:5b:e7:cb:9e:40: d0:1d:34:b9:b8:10:d4:1f:0e:17:ac:2e:d3:83:50: 16:8e:24:f7:42:cc:ba:fc:cc:74:31:a3:ae:f3:31: 34:bc:ac:93:a4:55:39:68:eb:b9:98:50:e4:54:2b: be:3a:51:c9:ca:f7:28:ea:ff:6b:c7:45:88:d0:ef: 77:20:e0:be:02:fa:0f:1a:90:8c:93:fc:18:0b:6b: b2:f7:2e:dd:55:d0:c8:fd:5f:91:c8:f3:6b:55:b3: 00:76:f4:bc:e7:74:f2:80:ae:0a:13:cd:13:ee:4e: 25:a1:9d:29:70:65:58:47:59:88:45:76:c2:78:9c: 84:fe:ec:e5:36:bb:bb:4b:54:d9:34:83:29:4e:cd: ee:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D0:1D:3E:C2:50:4E:BD:44:9A:FA:D0:B1:CD:7F:E4:90:4B:63:CF X509v3 Authority Key Identifier: keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:fa:3b:ca:93:8f:aa:15:30:5c:5f:2b:58:1e:45:4b:03:af: 21:fc:5b:ec:77:af:0b:35:b0:01:18:0b:f9:b2:5e:6f:bd:63: 80:fc:6f:ea:69:47:c2:dd:40:45:18:30:c4:ed:33:eb:ce:07: 23:43:0e:bc:e5:a7:bb:e4:43:87:27:0a:80:3b:f0:e2:86:3d: 5a:93:05:a3:2e:29:96:65:f6:b6:55:ad:08:4d:c4:cd:81:0f: 8a:21:a4:a6:f5:a0:bf:ec:a3:a4:cc:56:f1:69:43:1d:66:32: 7c:09:70:b6:13:e2:d4:cb:0f:00:87:c9:5d:69:9b:34:f3:ce: 10:23:8e:1e:45:6c:f1:81:34:cf:d1:d0:c4:05:af:a9:e4:b5: 7d:14:f2:3c:23:42:3e:f6:b2:c8:db:78:e5:71:38:49:5b:4d: 6d:12:aa:d0:69:26:33:d8:41:8c:e7:6d:a4:40:5e:ab:28:cf: fe:64:80:fb:e5:ec:f9:b7:9d:c3:6f:1d:63:12:e6:12:c1:d1: 7c:23:7f:49:58:ef:df:88:30:d6:53:54:e7:ca:16:6d:f4:83: 70:8e:49:bf:45:c0:e7:19:95:ef:f1:e9:68:19:0d:a7:14:cd: 89:4c:ce:1f:8a:6e:b3:63:3c:2e:ae:98:8d:2c:1e:d4:bf:4a: 34:01:fe:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvd2wRJibcmPKo48jVvcMnjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMDE5OGE3YjNhZmRjZGQ3MDAzNTYyYTA4NzE4NzhlMjM4 NzYwYWQwHhcNMjYwMTIxMDAwMTE2WhcNMjYwMTIyMDAwMTE2WjAzMTEwLwYDVQQD EygyM2QwMWQzZWMyNTA0ZWJkNDQ5YWZhZDBiMWNkN2ZlNDkwNGI2M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zGCJMLhx7rxvMqJkIkBVvDqvAoF pZU4ccZlsNpZSm4Kun08cr0WTKYNnwOLMUIyWjbbZ68GOm6ux6TL/DXKZq7gjNKR l80a3ZaqzDBCp97dX1etcJF51VzwHUqraTvysfYvS5GEt03qbP0xajPXxzIsW+fL nkDQHTS5uBDUHw4XrC7Tg1AWjiT3Qsy6/Mx0MaOu8zE0vKyTpFU5aOu5mFDkVCu+ OlHJyvco6v9rx0WI0O93IOC+AvoPGpCMk/wYC2uy9y7dVdDI/V+RyPNrVbMAdvS8 53TygK4KE80T7k4loZ0pcGVYR1mIRXbCeJyE/uzlNru7S1TZNIMpTs3uvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPQHT7CUE69RJr60LHNf+SQS2PPMB8GA1UdIwQY MBaAFN8BmKezr9zdcANWKghxh44jh2CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQt MGZjYzZjMzAxMWZjLzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQtMGZjYzZjMzAxMWZj LzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPo7ypOP qhUwXF8rWB5FSwOvIfxb7HevCzWwARgL+bJeb71jgPxv6mlHwt1ARRgwxO0z684H I0MOvOWnu+RDhycKgDvw4oY9WpMFoy4plmX2tlWtCE3EzYEPiiGkpvWgv+yjpMxW 8WlDHWYyfAlwthPi1MsPAIfJXWmbNPPOECOOHkVs8YE0z9HQxAWvqeS1fRTyPCNC PvayyNt45XE4SVtNbRKq0GkmM9hBjOdtpEBeqyjP/mSA++Xs+bedw28dYxLmEsHR fCN/SVjv34gw1lNU58oWbfSDcI5Jv0XA5xmV7/HpaBkNpxTNiUzOH4pus2M8Lq6Y jSwe1L9KNAH+1Q== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:31 2026 by rpki-client