This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json) Hash identifier: 2BXUMFcxSBQCyV1L8bzjpOl6Lws6z2/WIMVuz5WPrnc= Subject key identifier: CB:C4:60:6D:A6:D3:E8:02:DB:A2:C8:D0:BF:DA:53:9B:EE:76:AA:BF Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Certificate serial: 019BFA649146B7F51EB147DEA6BED98660AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft Manifest number: 17F3 Signing time: Mon 26 Jan 2026 13:00:53 +0000 Manifest this update: Mon 26 Jan 2026 13:00:53 +0000 Manifest next update: Tue 27 Jan 2026 13:00:53 +0000 Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: tiSa2aSeq2FeikLXoEM8oK/EpIDvnoH918h0+WfcjwI=) 2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=) 3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:91:46:b7:f5:1e:b1:47:de:a6:be:d9:86:60:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Validity Not Before: Jan 26 13:00:53 2026 GMT Not After : Jan 27 13:00:53 2026 GMT Subject: CN=cbc4606da6d3e802dba2c8d0bfda539bee76aabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:e1:d4:49:f8:e5:3e:21:31:58:6f:2a:2f: 41:3c:ef:ff:b7:38:9c:f1:54:9a:6a:c7:d3:98:cf: 4d:f1:9a:9c:c7:55:84:a5:2d:67:7f:48:38:f2:e9: 69:41:20:3a:b8:86:cb:49:90:01:3e:fb:bd:fa:c3: 3d:b2:0e:58:80:14:d3:db:9d:b8:99:66:0a:b7:e9: 97:9a:70:24:e1:dc:4f:e8:8c:d1:7e:67:69:af:03: 73:19:1e:27:0c:d1:83:08:81:5c:44:33:31:c0:b6: 9b:74:57:37:6a:bc:f9:27:8d:ff:69:99:af:1a:22: ea:d3:17:99:7e:8a:67:e2:f2:78:d7:f9:16:fc:e6: ae:93:81:52:5d:85:52:b1:9b:2e:41:ec:57:5e:bd: 7a:9e:da:47:20:0b:79:25:bb:b2:8a:d7:fa:29:8f: 76:4d:86:05:9e:27:94:d9:3c:f4:d8:15:cf:98:e3: a9:9b:3a:21:50:1e:a5:41:6b:6a:77:4e:ab:6d:62: cf:88:d7:4d:00:e0:4f:10:6b:7b:8b:db:3e:d0:20: 21:ac:f0:26:82:46:74:94:4d:1e:24:44:21:41:7e: 2d:09:a6:0a:20:36:fb:a6:76:44:c2:cd:10:66:16: c2:20:09:46:c5:67:4b:4e:67:f5:b8:49:b0:73:27: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C4:60:6D:A6:D3:E8:02:DB:A2:C8:D0:BF:DA:53:9B:EE:76:AA:BF X509v3 Authority Key Identifier: keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:1a:7b:62:0c:1e:67:18:a4:42:01:df:cb:64:35:8f:fd:59: d3:63:40:d3:05:64:fb:d2:cf:4b:ff:73:c1:c7:3c:9c:ee:5a: 1e:09:00:c7:43:03:08:42:e5:64:e4:e2:5f:5a:a4:f2:6c:e3: 41:d6:ea:21:b3:82:b7:7d:cd:bb:f7:af:e5:18:37:c2:ce:c6: 13:a2:b0:54:40:fa:c8:60:18:90:62:10:e2:3d:88:c8:55:00: d9:2b:25:7f:60:27:51:b3:dc:78:93:7e:9e:27:ba:21:d4:64: 13:27:6b:f6:bf:1d:ac:7c:34:2c:8c:fe:d9:0a:32:b8:17:f8: a5:70:c1:75:a8:52:35:6d:19:17:16:8f:c7:53:c2:b4:1c:7c: 76:5e:62:55:7f:90:5e:93:22:87:ad:a7:ec:7f:c5:68:9a:5e: 22:10:fe:18:06:c7:b8:ce:58:89:1c:d7:06:ac:7a:79:ca:4b: 7c:64:18:89:27:f3:52:5e:71:e8:61:09:75:a5:f9:77:8f:e2: ac:23:ea:3f:03:1c:2f:dd:42:5c:a4:3c:20:d6:86:5e:08:12: 97:1e:da:cd:0e:13:9b:0b:86:0c:a0:1a:6a:be:ec:9f:f5:b1: 93:f7:3f:e1:e9:0f:14:00:08:02:18:0d:79:16:37:94:70:56: 1d:b5:bb:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZJFGt/UesUfepr7ZhmCrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTBkNDMyOTNjZmViZjg3ZTdlYWIyYjBkNTUzZmQyMWE2 ZTk2NDEwHhcNMjYwMTI2MTMwMDUzWhcNMjYwMTI3MTMwMDUzWjAzMTEwLwYDVQQD EyhjYmM0NjA2ZGE2ZDNlODAyZGJhMmM4ZDBiZmRhNTM5YmVlNzZhYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX7h1En45T4hMVhvKi9BPO//tzic 8VSaasfTmM9N8Zqcx1WEpS1nf0g48ulpQSA6uIbLSZABPvu9+sM9sg5YgBTT2524 mWYKt+mXmnAk4dxP6IzRfmdprwNzGR4nDNGDCIFcRDMxwLabdFc3arz5J43/aZmv GiLq0xeZfopn4vJ41/kW/Oauk4FSXYVSsZsuQexXXr16ntpHIAt5Jbuyitf6KY92 TYYFnieU2Tz02BXPmOOpmzohUB6lQWtqd06rbWLPiNdNAOBPEGt7i9s+0CAhrPAm gkZ0lE0eJEQhQX4tCaYKIDb7pnZEws0QZhbCIAlGxWdLTmf1uEmwcydPqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvEYG2m0+gC26LI0L/aU5vudqq/MB8GA1UdIwQY MBaAFN6Q1DKTz+v4fn6rKw1VP9IabpZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODkt NTNlZGM2MjZiMjg3LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODktNTNlZGM2MjZiMjg3 LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRp7Ygwe ZxikQgHfy2Q1j/1Z02NA0wVk+9LPS/9zwcc8nO5aHgkAx0MDCELlZOTiX1qk8mzj QdbqIbOCt33Nu/ev5Rg3ws7GE6KwVED6yGAYkGIQ4j2IyFUA2Sslf2AnUbPceJN+ nie6IdRkEydr9r8drHw0LIz+2QoyuBf4pXDBdahSNW0ZFxaPx1PCtBx8dl5iVX+Q XpMih62n7H/FaJpeIhD+GAbHuM5YiRzXBqx6ecpLfGQYiSfzUl5x6GEJdaX5d4/i rCPqPwMcL91CXKQ8INaGXggSlx7azQ4TmwuGDKAaar7sn/Wxk/c/4ekPFAAIAhgN eRY3lHBWHbW7xg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:25 2026 by rpki-client