This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json) Hash identifier: dNvRPbawkyhMYWrLO50VkZX9MVYcZX2j0E6zHAbuDIE= Subject key identifier: 2F:F6:94:AA:16:98:B8:D0:9F:D5:06:32:EB:2F:29:56:7A:35:6F:6D Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b Certificate serial: 019BFC52E570C2A88998BCCCAB26EF4B4A2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 22:00:49 +0000 Manifest this update: Mon 26 Jan 2026 22:00:49 +0000 Manifest next update: Tue 27 Jan 2026 22:00:49 +0000 Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=) 2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: fP0WdY+s+yUKwwUexJoKMI3I4i3NvUWqKFMqP4MXkAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:e5:70:c2:a8:89:98:bc:cc:ab:26:ef:4b:4a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b Validity Not Before: Jan 26 22:00:49 2026 GMT Not After : Jan 27 22:00:49 2026 GMT Subject: CN=2ff694aa1698b8d09fd50632eb2f29567a356f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:92:16:b6:a1:82:e6:dd:8c:07:93:75:80:4d: 10:cd:65:4d:fb:af:f4:77:55:bb:54:94:6e:68:cf: 8c:2c:95:54:6f:a4:b5:53:1a:1c:7b:f5:9c:b3:4e: 04:db:f6:9b:ba:c7:6e:38:40:71:17:9c:9f:77:bb: aa:39:f4:79:ea:c6:ae:65:94:b2:45:f1:0c:6b:61: 01:ed:bf:43:81:97:25:e5:2e:b3:d7:28:6e:97:d4: 36:09:c2:64:9e:79:fe:a1:4b:05:11:e9:4d:0c:07: 85:ce:52:72:9f:5b:92:c5:dc:3f:de:a0:05:a6:fa: 20:cf:21:24:1b:32:3e:ca:fa:65:28:07:c0:ae:b7: 4f:c1:19:8a:b1:0f:f6:e1:2d:c4:54:94:b9:64:61: 9d:4a:c6:bb:85:b8:7e:66:ec:6e:ae:d4:72:eb:b2: d1:f9:e0:4a:f7:5e:91:75:9f:1c:05:58:ce:15:05: 04:52:49:7d:39:a4:d5:a7:c4:46:e6:0f:96:fe:88: fc:7a:fe:cc:67:5c:9a:cf:de:24:0b:fc:d9:64:f5: aa:ae:a4:96:43:a0:d5:eb:ff:d1:85:f0:c0:74:40: 57:bd:e6:c6:cd:63:36:76:46:4c:a9:dc:b2:19:df: 7a:86:f0:2d:58:43:15:0b:08:61:f3:ee:76:64:c6: a9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F6:94:AA:16:98:B8:D0:9F:D5:06:32:EB:2F:29:56:7A:35:6F:6D X509v3 Authority Key Identifier: keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:0d:a9:bf:b7:8c:94:b2:86:ce:6a:f9:14:10:d8:ba:2a:d3: 75:cd:f3:46:54:b7:d6:e7:4c:2c:21:64:41:9e:38:95:5b:cf: 7a:25:8d:07:d6:73:aa:56:ce:4b:60:2c:ce:8b:7a:6f:ff:81: 0c:87:e9:5c:46:47:87:08:ee:4d:df:cf:20:d0:4e:b3:91:fb: 65:18:73:a3:89:d4:b4:90:98:ef:fb:e3:9f:aa:f1:0f:29:65: 50:c4:e3:f4:26:77:21:e0:52:a0:38:9f:bd:07:26:a3:d8:8b: 0f:b6:1d:68:33:fa:c2:00:1e:8d:7e:4f:1f:4f:e1:23:6a:24: 31:f5:b7:53:c3:75:40:5e:c2:2b:1c:f0:34:83:a3:0f:6c:27: 37:06:69:db:97:55:43:b7:68:ff:a7:74:6e:62:7f:c2:c7:37: e4:f1:67:79:c8:1b:ba:08:b8:76:91:54:c3:82:41:a3:b1:4e: 03:b4:97:27:6d:7f:3a:b0:84:49:65:08:b7:59:75:ed:c5:da: 78:86:8d:db:94:68:cb:c7:13:13:e8:bb:af:f8:c8:aa:4f:8f: 06:e4:97:e1:a3:34:91:e3:ba:84:20:8d:3f:90:ba:72:3b:1a: 13:62:01:61:2a:d5:4f:17:a7:7b:fb:b5:96:4e:1c:01:8e:83: 63:68:28:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UuVwwqiJmLzMqybvS0osMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2E3NjM5MjU1NjExOGEwY2VlYjU0MTMwNjY5YzhlNjk2 ZjE1NWIwHhcNMjYwMTI2MjIwMDQ5WhcNMjYwMTI3MjIwMDQ5WjAzMTEwLwYDVQQD EygyZmY2OTRhYTE2OThiOGQwOWZkNTA2MzJlYjJmMjk1NjdhMzU2ZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpIWtqGC5t2MB5N1gE0QzWVN+6/0 d1W7VJRuaM+MLJVUb6S1Uxoce/Wcs04E2/abusduOEBxF5yfd7uqOfR56sauZZSy RfEMa2EB7b9DgZcl5S6z1yhul9Q2CcJknnn+oUsFEelNDAeFzlJyn1uSxdw/3qAF pvogzyEkGzI+yvplKAfArrdPwRmKsQ/24S3EVJS5ZGGdSsa7hbh+ZuxurtRy67LR +eBK916RdZ8cBVjOFQUEUkl9OaTVp8RG5g+W/oj8ev7MZ1yaz94kC/zZZPWqrqSW Q6DV6//RhfDAdEBXvebGzWM2dkZMqdyyGd96hvAtWEMVCwhh8+52ZMapkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/2lKoWmLjQn9UGMusvKVZ6NW9tMB8GA1UdIwQY MBaAFMd6djklVhGKDO61QTBmnI5pbxVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQt ZmZiM2E5NjUzOGFkLzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQtZmZiM2E5NjUzOGFk LzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhA2pv7eM lLKGzmr5FBDYuirTdc3zRlS31udMLCFkQZ44lVvPeiWNB9ZzqlbOS2Aszot6b/+B DIfpXEZHhwjuTd/PINBOs5H7ZRhzo4nUtJCY7/vjn6rxDyllUMTj9CZ3IeBSoDif vQcmo9iLD7YdaDP6wgAejX5PH0/hI2okMfW3U8N1QF7CKxzwNIOjD2wnNwZp25dV Q7do/6d0bmJ/wsc35PFnecgbugi4dpFUw4JBo7FOA7SXJ21/OrCESWUIt1l17cXa eIaN25Roy8cTE+i7r/jIqk+PBuSX4aM0keO6hCCNP5C6cjsaE2IBYSrVTxene/u1 lk4cAY6DY2goWw== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:15 2026 by rpki-client