This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json) Hash identifier: tI9oYsOeWgFE+u0s+epGRn25aGljNovboWNPNqLaIFU= Subject key identifier: A3:0A:95:E1:AD:F0:C8:A9:9F:21:52:A2:FF:EA:0A:67:A2:87:19:09 Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee Certificate serial: 019BFC52D0AABC4DCFB20A467954C7E99465 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft Manifest number: 0E80 Signing time: Mon 26 Jan 2026 22:00:44 +0000 Manifest this update: Mon 26 Jan 2026 22:00:44 +0000 Manifest next update: Tue 27 Jan 2026 22:00:44 +0000 Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: hbUiVn6Mqgocv8XHoUVHA60UC04ZGE28v9FUR1VbtbI=) 2: QFEuDeeu4X6RvqTM-9j-vL-jCec.roa (hash: enIY13X+DtKSJonUyur86EMN51RX0wJhm2ZaFev3lAE=) 3: lGfy-skAnLgxdiq51q1vJk9OXZg.roa (hash: 905M+SG71AWuwma3AVwJNMrg+VeownsgNGw18kPIIEs=) 4: shwWHH59CwEK5l3nYzgvrpyDADs.roa (hash: Xxgj4+MGImPO/BRjCoJfEL8QyT6UC4SQ9MovxKsATjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:d0:aa:bc:4d:cf:b2:0a:46:79:54:c7:e9:94:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee Validity Not Before: Jan 26 22:00:44 2026 GMT Not After : Jan 27 22:00:44 2026 GMT Subject: CN=a30a95e1adf0c8a99f2152a2ffea0a67a2871909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6d:ed:d1:9f:96:da:c5:b3:07:0e:99:79:21: 71:48:d3:82:ba:e3:fd:1a:86:4c:90:d3:e9:4b:d8: 08:74:74:d8:70:b1:d8:8d:db:d7:59:20:92:46:ec: 97:34:a2:8a:57:f4:91:51:b4:99:d2:8c:3f:bf:b7: bb:d2:0c:54:5b:e7:53:83:01:d3:28:00:0d:e6:c7: df:50:51:13:38:ac:bf:5c:8f:e7:3f:74:93:03:9d: b0:56:53:b1:9c:42:c1:2d:8d:dc:e6:e0:77:55:fc: 52:f9:c6:5c:61:f6:1c:e5:40:66:9c:df:70:dd:6f: c0:dd:53:bb:2c:e1:63:1d:21:22:1c:09:ad:2c:1a: 7b:69:2a:85:e4:dc:a6:d4:4e:81:d4:0c:1c:29:f1: cd:69:92:c5:50:95:e7:1c:50:93:5f:c0:ca:78:8c: 59:72:69:00:66:f4:36:6d:ef:b3:30:5f:97:d2:64: 2c:0b:d2:51:bd:e8:81:15:91:a7:f0:77:9d:0d:19: 77:98:7d:0a:3c:69:f2:c0:1f:72:17:a4:fc:82:8f: d1:25:0d:41:17:a2:e7:05:58:8d:80:45:1d:61:a6: eb:a7:de:b5:c3:3c:31:22:b7:4c:9a:79:6c:53:5b: fe:d8:b2:ad:23:8d:0c:ad:d7:fd:f9:e3:98:a3:3b: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0A:95:E1:AD:F0:C8:A9:9F:21:52:A2:FF:EA:0A:67:A2:87:19:09 X509v3 Authority Key Identifier: keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:69:26:da:c7:66:42:4f:29:af:c4:21:14:09:04:f0:29:83: 0b:f8:46:26:c8:56:e5:14:b9:20:11:f2:fb:32:e9:64:aa:56: 4f:48:d9:51:0e:0d:09:38:c5:fd:15:4b:9c:0d:42:e4:77:d2: c3:37:68:21:0d:dc:27:53:6f:3c:39:ee:21:d8:5f:67:ad:d1: 53:e0:c6:a9:00:69:24:cc:22:2c:39:00:2d:be:c4:85:e6:c0: 1f:38:51:e4:1f:23:0b:0c:22:95:77:64:db:3b:9e:4f:ce:70: 76:ec:74:d5:6a:28:43:cb:a2:af:8d:b2:24:54:14:1d:db:17: 4f:c4:59:4e:78:34:b9:64:f5:2a:4a:25:12:3f:84:fa:5e:7e: 1e:6d:d0:d5:d9:57:60:e6:95:23:84:02:10:6f:1d:b0:90:8d: fa:18:d6:94:53:9f:f9:2b:e4:7e:e0:3f:b4:e1:2d:9e:f1:dd: 9c:5a:8a:7f:2f:91:d2:bd:6c:8e:3f:85:9b:5a:70:09:23:86: 5a:aa:16:1e:6d:86:d6:7d:db:d7:e1:a7:ef:d4:a1:61:bb:83: be:19:db:93:d1:f2:72:eb:66:91:b6:d4:75:b7:89:88:39:72: 19:64:02:75:3f:6d:e1:90:2a:1e:a2:db:a3:cc:19:db:f7:d0: 41:4d:e9:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UtCqvE3PsgpGeVTH6ZRlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi NWJlZWUwHhcNMjYwMTI2MjIwMDQ0WhcNMjYwMTI3MjIwMDQ0WjAzMTEwLwYDVQQD EyhhMzBhOTVlMWFkZjBjOGE5OWYyMTUyYTJmZmVhMGE2N2EyODcxOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m3t0Z+W2sWzBw6ZeSFxSNOCuuP9 GoZMkNPpS9gIdHTYcLHYjdvXWSCSRuyXNKKKV/SRUbSZ0ow/v7e70gxUW+dTgwHT KAAN5sffUFETOKy/XI/nP3STA52wVlOxnELBLY3c5uB3VfxS+cZcYfYc5UBmnN9w 3W/A3VO7LOFjHSEiHAmtLBp7aSqF5Nym1E6B1AwcKfHNaZLFUJXnHFCTX8DKeIxZ cmkAZvQ2be+zMF+X0mQsC9JRveiBFZGn8HedDRl3mH0KPGnywB9yF6T8go/RJQ1B F6LnBViNgEUdYabrp961wzwxIrdMmnlsU1v+2LKtI40Mrdf9+eOYozv1AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMKleGt8MipnyFSov/qCmeihxkJMB8GA1UdIwQY MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt NjIxMmFjNDljYTNiLzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsmkm2sdm Qk8pr8QhFAkE8CmDC/hGJshW5RS5IBHy+zLpZKpWT0jZUQ4NCTjF/RVLnA1C5HfS wzdoIQ3cJ1NvPDnuIdhfZ63RU+DGqQBpJMwiLDkALb7EhebAHzhR5B8jCwwilXdk 2zueT85wdux01WooQ8uir42yJFQUHdsXT8RZTng0uWT1KkolEj+E+l5+Hm3Q1dlX YOaVI4QCEG8dsJCN+hjWlFOf+SvkfuA/tOEtnvHdnFqKfy+R0r1sjj+Fm1pwCSOG WqoWHm2G1n3b1+Gn79ShYbuDvhnbk9HycutmkbbUdbeJiDlyGWQCdT9t4ZAqHqLb o8wZ2/fQQU3p5w== -----END CERTIFICATE-----Generated at Tue Jan 27 00:29:38 2026 by rpki-client