This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: jIkyJPlWx06F2fpDIrSQaFactUhZliFAnSDJ5jFWOqw= Subject key identifier: 59:B8:AA:B3:D0:4D:10:0D:39:FB:A5:75:43:A3:59:08:09:B0:BC:90 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019BD6C67B72C272E8CA9680759C3478557F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 13CF Signing time: Mon 19 Jan 2026 15:01:30 +0000 Manifest this update: Mon 19 Jan 2026 15:01:30 +0000 Manifest next update: Tue 20 Jan 2026 15:01:30 +0000 Files and hashes: 1: 1-IWns6QxsOijyMNGKaVT7iXkfEw.roa (hash: A41CJVmPS1Q5uW0gjKoy4/9JUQzGwAX/M2hPNpBRNpY=) 2: 3BxH_bEdWRum2rhs_55rh-xY-JE.roa (hash: L7QbNE/A+wkbmeuga30Pjc/Z4164/JddJVT41mQnxHE=) 3: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: 9bshLxyRtsPPzejk/O+Xyu22e0PKGWjE4In3aqFZ2+o=) 4: 7ejZ3K5XJXw42cK_JDpws_LBqPY.roa (hash: Y1PAS81Ngu/ibCqA+GXn0uait9upSnAxeVEYWJyyRbo=) 5: 9-ZkpJLZAxXzbNNccpqxr1yI3TQ.roa (hash: JAqKnj2bS/riQd9C2Ai/D19XD9DVFg+M8BKlm0uu5lQ=) 6: H1lS_BmZhFIayqMv6NQ8zRq3G3s.roa (hash: xRWHYaFKKn0eZ4xw1gsoIleZXv82VU8n3/sfQrSQ8Wo=) 7: Ki5lgptZeKqxkVY1rSUS3fFpdNo.roa (hash: wCDh26IbseWW9odw6/4vFdpDTBtddnVSe0afNNR63xE=) 8: Mvc6dRwMPV0p3nS-xgeT1pSks3s.roa (hash: tEWtg/ml85Q9O/bjcJjCkBkPWgRPJZDdFKAGmtBJpW8=) 9: VERhqErvTzoJmaWwzd9oPRieqWc.roa (hash: yvUoTv+LRM2YNp2zWyRLgfv04BxoZOCk2GZN1DOUqOM=) 10: XjB8pSYFTRWu3aeuPZfoCPdtSU8.roa (hash: clM1FhXerIaxDZVMbA4484QAmARB0GCCeaDtZ15BS4A=) 11: _CwOTtU3okI82pLwtmx5rCYmqBw.roa (hash: mdVcgR96055cvSGaX98e3jUXv5Q46o7z7n7mSva9LM8=) 12: lkOKxgcpueMerP3N0TSE1JR-3-E.roa (hash: p8Aw3sajOojWbWbduT12GoaxwV8onZRsDSSi/v27J4I=) 13: tgjM50ZKGP4qPI5mmTpRBmDenEE.roa (hash: RlkNfbpEPulXLuet/buo1REohnn0CiNdUQRm8qrkrJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:c6:7b:72:c2:72:e8:ca:96:80:75:9c:34:78:55:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Jan 19 15:01:30 2026 GMT Not After : Jan 20 15:01:30 2026 GMT Subject: CN=59b8aab3d04d100d39fba57543a3590809b0bc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:49:55:37:e4:68:c8:17:9a:09:43:4e:4b: f2:e7:b7:e5:b7:c4:44:d7:b1:a8:16:a8:ca:a2:fb: ae:38:35:1b:61:06:44:af:a0:1b:1a:5d:6a:44:d3: 8a:0f:b6:04:37:27:7d:20:a8:62:71:29:50:a7:d4: f1:e6:01:af:84:42:51:51:e5:dd:ae:9b:73:03:bc: ad:9f:9e:14:33:42:f0:d3:94:0c:ac:b8:0a:84:c2: 39:90:fc:70:e1:69:5a:3f:67:7e:1b:b3:7b:bd:0a: 1b:f1:60:1f:62:ed:c1:c3:91:9c:97:c0:4f:46:5c: a1:1d:b2:6b:65:cd:80:f0:ea:ca:da:11:14:fc:49: bd:ae:b2:9b:e8:fe:21:4a:14:ba:98:35:ca:e6:5a: 7b:45:c5:af:38:93:1b:c2:17:7e:4c:ca:83:de:c4: 35:55:ea:52:13:8d:37:0d:28:9e:0f:cc:4c:a7:84: 6e:0e:d7:f6:c7:dc:de:52:f0:a2:09:72:19:d7:69: 42:6e:09:be:5d:75:a0:a8:d4:e3:41:93:8e:35:2e: 34:23:46:3c:89:f2:4e:95:26:c0:79:36:c1:70:7f: c9:72:08:4b:bb:98:cb:67:74:ab:a2:75:01:e9:55: a5:5b:bc:65:f4:3e:66:45:cf:68:15:5e:bd:f8:8e: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B8:AA:B3:D0:4D:10:0D:39:FB:A5:75:43:A3:59:08:09:B0:BC:90 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:90:6b:d7:a1:64:44:16:b2:bf:28:c9:b6:b4:18:75:c6:cc: 4e:42:cf:e8:19:04:96:68:ee:52:48:72:f0:72:00:24:bc:97: 28:84:9b:79:82:b2:60:76:f2:32:a9:77:ac:8a:0b:88:23:06: 64:3c:9d:0e:43:1c:cb:ff:0a:83:0a:71:f2:7b:1d:c3:ab:c0: b0:df:3b:9f:96:0b:ed:95:47:29:d5:58:ca:e0:ea:5a:2b:1b: a3:7c:20:ee:78:54:49:71:19:2b:6a:5a:e3:6c:b3:c7:18:9c: d2:3a:53:3d:66:40:1e:d2:50:9b:7f:8f:c9:84:97:71:0c:74: c9:23:02:c1:b3:98:16:e9:73:49:81:26:48:5f:ed:b3:45:93: a8:2a:b7:0c:5f:5d:25:4f:69:2a:48:4a:7f:e8:85:c4:a2:45: 32:f6:21:af:76:5e:ad:3e:63:cb:84:21:82:cc:ee:45:d4:16: 78:6c:f7:8e:f7:8e:58:de:d3:5b:ea:3c:9d:e4:9a:e4:08:79: 21:36:92:a5:e4:ea:ed:1c:8e:6c:9c:8a:49:10:84:3f:db:03: f9:ce:50:0d:58:b9:12:f2:9e:87:aa:a2:cc:73:4e:28:da:af: 8d:69:5c:36:de:3f:23:a2:39:98:0b:08:c1:2d:5c:5d:d7:fc: f6:76:fb:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvWxntywnLoypaAdZw0eFV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjYwMTE5MTUwMTMwWhcNMjYwMTIwMTUwMTMwWjAzMTEwLwYDVQQD Eyg1OWI4YWFiM2QwNGQxMDBkMzlmYmE1NzU0M2EzNTkwODA5YjBiYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMNJVTfkaMgXmglDTkvy57flt8RE 17GoFqjKovuuODUbYQZEr6AbGl1qRNOKD7YENyd9IKhicSlQp9Tx5gGvhEJRUeXd rptzA7ytn54UM0Lw05QMrLgKhMI5kPxw4WlaP2d+G7N7vQob8WAfYu3Bw5Gcl8BP RlyhHbJrZc2A8OrK2hEU/Em9rrKb6P4hShS6mDXK5lp7RcWvOJMbwhd+TMqD3sQ1 VepSE403DSieD8xMp4RuDtf2x9zeUvCiCXIZ12lCbgm+XXWgqNTjQZOONS40I0Y8 ifJOlSbAeTbBcH/JcghLu5jLZ3SronUB6VWlW7xl9D5mRc9oFV69+I6v7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFm4qrPQTRANOfuldUOjWQgJsLyQMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5Br16Fk RBayvyjJtrQYdcbMTkLP6BkElmjuUkhy8HIAJLyXKISbeYKyYHbyMql3rIoLiCMG ZDydDkMcy/8Kgwpx8nsdw6vAsN87n5YL7ZVHKdVYyuDqWisbo3wg7nhUSXEZK2pa 42yzxxic0jpTPWZAHtJQm3+PyYSXcQx0ySMCwbOYFulzSYEmSF/ts0WTqCq3DF9d JU9pKkhKf+iFxKJFMvYhr3ZerT5jy4QhgszuRdQWeGz3jveOWN7TW+o8neSa5Ah5 ITaSpeTq7RyObJyKSRCEP9sD+c5QDVi5EvKeh6qizHNOKNqvjWlcNt4/I6I5mAsI wS1cXdf89nb7Uw== -----END CERTIFICATE-----Generated at Mon Jan 19 20:19:36 2026 by rpki-client