This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft File: 3dBY7vGdEboOq68EbnKibl5XJkM.mft (raw, json) Hash identifier: LUThEy2PiFjnDcoHJCfPi8vF5VrplJmRG0y5wD0Fhcc= Subject key identifier: 1E:45:7C:9E:C8:5A:0A:1C:1F:0C:4E:D3:E4:F9:B1:E8:A3:25:B8:D8 Authority key identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43 Certificate issuer: /CN=ddd058eef19d11ba0eabaf046e72a26e5e572643 Certificate serial: 019BFBAEE1A91E49E929A876DA45697BF6EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft Manifest number: 03 Signing time: Mon 26 Jan 2026 19:01:40 +0000 Manifest this update: Mon 26 Jan 2026 19:01:40 +0000 Manifest next update: Tue 27 Jan 2026 19:01:40 +0000 Files and hashes: 1: 3dBY7vGdEboOq68EbnKibl5XJkM.crl (hash: /dls8x1iAJZfZwlGz4VPjqwztX+sxOEqWid70GhStrw=) 2: 6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa (hash: 6W4Vav7RSMNSHDF7FWCiUK0cI2saEqhD9eRkDI4fbG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:e1:a9:1e:49:e9:29:a8:76:da:45:69:7b:f6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddd058eef19d11ba0eabaf046e72a26e5e572643 Validity Not Before: Jan 26 19:01:40 2026 GMT Not After : Jan 27 19:01:40 2026 GMT Subject: CN=1e457c9ec85a0a1c1f0c4ed3e4f9b1e8a325b8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:33:03:5c:af:01:64:ab:93:f3:c1:ab:ea: ff:e1:1b:55:bf:6a:4b:70:b1:19:99:0e:d2:54:8f: 00:b5:83:5a:86:8c:fb:d0:bd:ed:b4:fa:e5:97:61: 82:b8:82:39:3f:97:c6:65:75:0c:90:22:08:98:f8: a0:ba:a7:8d:2e:4a:80:fb:11:4d:e8:1a:3f:a1:e1: 44:9f:0e:53:7f:19:c2:77:94:85:64:a0:d3:e6:f7: 2e:d1:1a:10:12:f4:0a:db:a5:24:7b:49:ef:f5:bb: 32:5a:f0:1f:e8:42:af:93:fb:5c:1b:04:ee:41:12: 5d:5b:d3:9b:4d:da:a7:e4:27:0c:59:7d:30:e0:e3: aa:6c:8f:1d:fd:8b:df:64:6b:ca:02:3b:01:2c:24: f1:f3:e6:7b:41:62:26:d8:64:d4:65:36:9e:3f:ae: 4e:70:12:eb:d6:8b:53:09:a2:8b:fe:dd:17:d0:4e: 2d:91:c1:0d:9b:34:18:2b:0e:30:86:7e:2f:fa:06: 50:6f:59:6b:fa:a4:5c:bb:32:0b:1c:90:a6:80:15: 4d:8a:b9:55:49:3b:d6:2c:88:06:25:7d:30:1b:0d: 15:13:87:2c:ff:ed:ec:53:ab:68:88:c8:32:30:44: 5e:e8:a2:44:9e:57:e7:f4:1b:c3:a4:fb:47:49:3b: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:45:7C:9E:C8:5A:0A:1C:1F:0C:4E:D3:E4:F9:B1:E8:A3:25:B8:D8 X509v3 Authority Key Identifier: keyid:DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:25:af:3a:18:cf:ba:ec:69:5f:8c:9e:9d:eb:1a:11:b3:d8: 94:b7:46:b5:12:1b:a8:71:72:c0:c6:14:a3:20:d8:29:e9:f3: 35:08:44:76:ab:4c:30:ba:02:89:44:e6:f9:08:38:74:31:cd: 62:a4:76:e8:8c:02:06:bc:7e:35:c9:3c:fb:fe:c1:d0:70:a7: c6:70:7a:41:d7:23:36:4a:59:dc:7f:f1:0e:48:bb:ad:47:89: 80:41:f1:ce:1b:af:2a:4a:a6:8c:d5:8c:23:e6:9e:c7:e2:74: 91:51:0a:cb:47:ff:4e:68:f2:f8:af:6a:cd:97:7d:2e:7c:86: cd:19:04:fc:8a:76:51:51:ca:9d:91:53:db:b7:60:40:b3:1e: 53:84:ec:a8:a6:d5:a2:45:15:4c:44:81:6d:30:22:52:dc:5a: dd:b3:03:04:a1:77:a2:ee:8b:d3:6c:6e:95:75:3a:10:b2:f6: 61:13:0f:9e:14:c0:96:a4:87:c4:c3:3b:10:de:ff:d8:b4:fb: 93:28:cf:26:fc:23:da:39:1e:71:af:43:b9:44:7c:37:04:12: e6:30:5a:74:af:51:e3:78:21:68:75:c7:5f:b0:cb:14:fb:21: fe:42:11:90:0b:7f:bb:6b:7b:09:e5:26:ed:58:04:0b:2a:56: bc:a0:4a:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7ruGpHknpKah22kVpe/brMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZDA1OGVlZjE5ZDExYmEwZWFiYWYwNDZlNzJhMjZlNWU1 NzI2NDMwHhcNMjYwMTI2MTkwMTQwWhcNMjYwMTI3MTkwMTQwWjAzMTEwLwYDVQQD EygxZTQ1N2M5ZWM4NWEwYTFjMWYwYzRlZDNlNGY5YjFlOGEzMjViOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DMzA1yvAWSrk/PBq+r/4RtVv2pL cLEZmQ7SVI8AtYNahoz70L3ttPrll2GCuII5P5fGZXUMkCIImPiguqeNLkqA+xFN 6Bo/oeFEnw5TfxnCd5SFZKDT5vcu0RoQEvQK26Uke0nv9bsyWvAf6EKvk/tcGwTu QRJdW9ObTdqn5CcMWX0w4OOqbI8d/YvfZGvKAjsBLCTx8+Z7QWIm2GTUZTaeP65O cBLr1otTCaKL/t0X0E4tkcENmzQYKw4whn4v+gZQb1lr+qRcuzILHJCmgBVNirlV STvWLIgGJX0wGw0VE4cs/+3sU6toiMgyMERe6KJEnlfn9BvDpPtHSTs8HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5FfJ7IWgocHwxO0+T5seijJbjYMB8GA1UdIwQY MBaAFN3QWO7xnRG6DquvBG5yom5eVyZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2RCWTd2R2RFYm9PcTY4RWJuS2libDVYSmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lNDgzNGYtZTVkMC00YjY0LTkyY2Ut ZjU0OTkzMzZjMmI0LzEvM2RCWTd2R2RFYm9PcTY4RWJuS2libDVYSmtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lNDgzNGYtZTVkMC00YjY0LTkyY2UtZjU0OTkzMzZjMmI0 LzEvM2RCWTd2R2RFYm9PcTY4RWJuS2libDVYSmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSWvOhjP uuxpX4yenesaEbPYlLdGtRIbqHFywMYUoyDYKenzNQhEdqtMMLoCiUTm+Qg4dDHN YqR26IwCBrx+Nck8+/7B0HCnxnB6QdcjNkpZ3H/xDki7rUeJgEHxzhuvKkqmjNWM I+aex+J0kVEKy0f/Tmjy+K9qzZd9LnyGzRkE/Ip2UVHKnZFT27dgQLMeU4TsqKbV okUVTESBbTAiUtxa3bMDBKF3ou6L02xulXU6ELL2YRMPnhTAlqSHxMM7EN7/2LT7 kyjPJvwj2jkeca9DuUR8NwQS5jBadK9R43ghaHXHX7DLFPsh/kIRkAt/u2t7CeUm 7VgECypWvKBK0w== -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:34 2026 by rpki-client