This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft File: 3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json) Hash identifier: mW336103X4dck1now6Ep3hmvtZOD40ZtTRpub9CdJUc= Subject key identifier: 43:FE:07:43:FC:09:4E:6E:76:0E:D4:FE:03:BD:3B:CF:BF:14:88:5D Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31 Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31 Certificate serial: 019BF91B102255A4E6CF87F53E649942FB6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 07:00:58 +0000 Manifest this update: Mon 26 Jan 2026 07:00:58 +0000 Manifest next update: Tue 27 Jan 2026 07:00:58 +0000 Files and hashes: 1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: 4Y1G+aI5FeJXBTX/FzclXFPhf7GmlSmA+mMDcDwQWI0=) 2: WVFWsnDyURdYEX6Y48O_tzjkAoE.roa (hash: vDQgxFeJsm3RaP7KUS8Geu388WUgzUBm4NzCZDCx6Hk=) 3: jIASpROSIV_qZhR1JMZmDWlpQjE.roa (hash: fhdz/8TRPnLedG78rrZ+dqgOjuSc/WvPYigkuKXyrVM=) 4: lPiI8Il9MUE2eIx_nJNHGSRs4eo.roa (hash: iooSXQuSxeKlub/pq2sLmYBqCV/ohUIGPMBFr7DexKw=) 5: zohxQuS5AskoBq_QI8wS3eLXlJg.roa (hash: YoRSJtnJP6z9m3eQuabiT5K2smOYe/Ori3Z7WmULeCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:10:22:55:a4:e6:cf:87:f5:3e:64:99:42:fb:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31 Validity Not Before: Jan 26 07:00:58 2026 GMT Not After : Jan 27 07:00:58 2026 GMT Subject: CN=43fe0743fc094e6e760ed4fe03bd3bcfbf14885d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:f8:a0:18:0a:f2:a6:c0:3a:3f:20:e7:10: 31:9b:51:87:3e:fa:d9:3b:3c:35:44:55:2a:50:70: 8e:f4:66:9c:42:97:0a:e6:96:38:4f:4a:a2:b5:37: 5e:09:6b:69:2c:39:01:c6:c2:c4:97:4c:89:85:bb: 7b:e3:e1:70:e3:c1:65:8b:dd:af:7f:32:e6:2a:4d: 5d:d9:4d:53:4f:13:ff:8e:0c:ba:6e:9b:cc:bd:be: 28:b5:b6:bb:97:8c:cc:21:c0:52:0b:bc:17:5c:c0: 75:d7:80:5e:bd:b3:32:d5:54:58:f7:88:ea:60:43: f8:cd:1f:da:27:b5:1e:89:45:74:49:5b:97:cd:93: a2:92:79:b1:79:1b:70:1f:a0:bf:da:d4:72:26:6e: a5:fb:b0:44:23:4d:d6:48:f0:ef:8b:c7:bb:47:0e: 84:30:29:b7:f5:0e:5a:6d:f8:aa:e6:cc:b5:2d:85: f6:fc:9b:7c:dd:e6:27:02:17:44:1a:84:c8:cc:20: a6:0a:7e:e3:81:05:d9:77:8a:f7:3f:3c:6b:8c:6a: 21:86:53:f4:85:70:ba:f6:e1:a6:d5:79:76:65:02: db:50:1b:49:cf:bc:7f:c0:a5:ba:13:31:37:cc:26: 48:25:da:5c:f4:28:63:fa:de:a7:18:74:44:e4:92: 79:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FE:07:43:FC:09:4E:6E:76:0E:D4:FE:03:BD:3B:CF:BF:14:88:5D X509v3 Authority Key Identifier: keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:1c:a8:97:e5:c6:31:9d:93:da:20:5e:eb:43:a4:24:30:52: 92:2e:81:0a:7c:b9:11:28:05:88:4d:f6:98:35:7e:7e:61:e5: d2:dc:22:46:f3:86:37:29:56:7f:29:2a:23:09:eb:bb:72:ad: a4:dc:06:5c:dc:87:6f:e5:d6:01:7c:f6:8b:99:d4:af:bc:b4: dd:17:3d:fa:ce:81:9d:fb:bf:5e:1b:72:90:c7:0d:b2:ab:24: fd:0c:2d:18:24:bb:a9:fa:8f:e1:b9:72:78:dd:6c:70:b6:dc: d1:9f:4a:b8:c5:61:f6:44:65:13:83:3b:4d:33:9f:60:ac:ef: 5c:48:23:ff:bd:d5:c0:db:8b:91:d7:ee:15:9a:05:ed:44:4d: 9e:2b:d4:df:07:ad:90:bb:bd:7b:34:ed:8f:27:2a:bd:6f:29: 19:76:2e:ed:44:16:0d:98:6a:1c:ad:1d:2c:59:7f:8b:3b:e8: c9:d2:97:10:19:09:b6:b5:95:ba:5e:10:ae:eb:72:df:10:3e: 56:dc:76:63:fe:28:f1:59:32:9e:7d:f7:5b:f9:8a:f3:f5:b7: 73:69:8c:51:dd:4a:65:67:3b:7c:64:d5:66:f5:03:ef:f4:d0: 6d:1b:52:33:63:f1:0e:32:8c:33:bc:f7:9c:e5:e3:53:f0:60: 1e:62:b6:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5GxAiVaTmz4f1PmSZQvtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzg4NDAyMWQxYjAyZThjMTZiNTU1NzQzZGZlYjlkYThl NDhlMzEwHhcNMjYwMTI2MDcwMDU4WhcNMjYwMTI3MDcwMDU4WjAzMTEwLwYDVQQD Eyg0M2ZlMDc0M2ZjMDk0ZTZlNzYwZWQ0ZmUwM2JkM2JjZmJmMTQ4ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthf4oBgK8qbAOj8g5xAxm1GHPvrZ Ozw1RFUqUHCO9GacQpcK5pY4T0qitTdeCWtpLDkBxsLEl0yJhbt74+Fw48Fli92v fzLmKk1d2U1TTxP/jgy6bpvMvb4otba7l4zMIcBSC7wXXMB114BevbMy1VRY94jq YEP4zR/aJ7UeiUV0SVuXzZOiknmxeRtwH6C/2tRyJm6l+7BEI03WSPDvi8e7Rw6E MCm39Q5abfiq5sy1LYX2/Jt83eYnAhdEGoTIzCCmCn7jgQXZd4r3PzxrjGohhlP0 hXC69uGm1Xl2ZQLbUBtJz7x/wKW6EzE3zCZIJdpc9Chj+t6nGHRE5JJ5VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEP+B0P8CU5udg7U/gO9O8+/FIhdMB8GA1UdIwQY MBaAFNw4hAIdGwLowWtVV0Pf652o5I4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEt ZDhiNGUwZDBkNmQ1LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEtZDhiNGUwZDBkNmQ1 LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwRyol+XG MZ2T2iBe60OkJDBSki6BCny5ESgFiE32mDV+fmHl0twiRvOGNylWfykqIwnru3Kt pNwGXNyHb+XWAXz2i5nUr7y03Rc9+s6Bnfu/XhtykMcNsqsk/QwtGCS7qfqP4bly eN1scLbc0Z9KuMVh9kRlE4M7TTOfYKzvXEgj/73VwNuLkdfuFZoF7URNnivU3wet kLu9ezTtjycqvW8pGXYu7UQWDZhqHK0dLFl/izvoydKXEBkJtrWVul4Qruty3xA+ Vtx2Y/4o8Vkynn33W/mK8/W3c2mMUd1KZWc7fGTVZvUD7/TQbRtSM2PxDjKMM7z3 nOXjU/BgHmK2uA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:41 2026 by rpki-client