This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json) Hash identifier: KhzW+m9BZ2HhBwTqNuvE7gHN5YCtGYpGtmhZrghhfC0= Subject key identifier: D8:5F:E6:4E:A9:A9:77:E2:EF:DF:7F:7C:DC:3B:77:5B:FF:22:3C:70 Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89 Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89 Certificate serial: 019BFC89D48AE434E4FC88A7D24ACC7E6CAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft Manifest number: 12F3 Signing time: Mon 26 Jan 2026 23:00:49 +0000 Manifest this update: Mon 26 Jan 2026 23:00:49 +0000 Manifest next update: Tue 27 Jan 2026 23:00:49 +0000 Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: lJILAgduzl6IpersrYjm4kIe58iCJ6n8bi3YrtJ1I/s=) 2: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (hash: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:d4:8a:e4:34:e4:fc:88:a7:d2:4a:cc:7e:6c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89 Validity Not Before: Jan 26 23:00:49 2026 GMT Not After : Jan 27 23:00:49 2026 GMT Subject: CN=d85fe64ea9a977e2efdf7f7cdc3b775bff223c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:9f:0e:fc:93:6a:ac:7c:49:29:49:8c:e7: 95:85:37:41:2b:94:c0:e4:db:7e:f4:cc:0b:27:02: 93:09:8e:9c:c5:ed:54:10:e7:e7:13:2d:76:1f:e3: bf:f2:25:e3:e8:c9:af:7f:12:d1:08:da:e3:4a:78: dc:ae:0a:e5:22:6a:c8:b5:00:c7:e7:d9:b7:50:e1: 17:14:8f:07:f2:75:83:11:fc:e5:61:34:cd:f6:45: 63:cd:a3:10:c4:ae:bf:74:80:e4:af:ac:26:13:af: 2d:c9:cd:a6:fa:2e:9b:3e:11:49:8d:56:33:da:4f: 05:41:e7:87:44:ae:f2:67:cd:43:38:ab:0c:6c:3a: 7a:21:b8:13:41:34:33:54:bc:af:78:9d:85:e6:c9: 6f:32:31:57:ea:a6:ab:b6:3a:86:03:34:7e:ad:eb: c6:b8:c2:86:c1:14:02:91:75:fb:eb:93:42:3f:82: cc:d1:fa:c3:1c:9a:c0:0a:2d:b2:fe:e5:c2:29:bb: da:d0:15:23:70:d9:eb:53:1e:43:ee:3d:5d:03:ec: 2b:73:76:88:9f:09:c9:30:b9:0f:81:56:ea:71:eb: 4d:5d:f0:7a:81:fb:23:e5:d5:da:e7:42:3e:39:4b: 98:58:4c:e7:39:d9:ce:20:43:88:74:c6:5b:b7:66: 22:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5F:E6:4E:A9:A9:77:E2:EF:DF:7F:7C:DC:3B:77:5B:FF:22:3C:70 X509v3 Authority Key Identifier: keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f1:02:a4:fc:75:1d:d9:44:07:50:57:f8:30:06:90:a3:0a: 46:2f:e4:81:38:64:d2:a6:16:8c:b0:7e:a0:59:86:bf:67:c9: 65:fd:9f:96:9c:e1:3a:ef:f9:6d:cc:8d:38:46:2a:ad:da:65: 6d:31:18:17:3e:05:6c:6e:7c:a4:aa:15:4f:44:8f:60:5b:41: b6:58:c8:45:fc:f2:07:7d:d0:9c:0e:3f:ae:81:a5:03:f1:c0: 19:55:f6:c4:de:18:38:11:d3:3e:e6:65:d3:03:63:ed:f8:45: 08:be:b7:ba:fe:b6:e6:e2:47:20:53:fe:61:7d:a4:83:c2:ae: 2e:2e:58:9f:96:87:b1:8b:36:c5:1b:5d:db:35:2a:1a:1b:c6: 1b:36:31:11:fe:0c:32:73:6e:f9:31:6e:53:59:93:e0:62:c3: 0a:17:6b:13:f4:a0:06:71:ab:cb:50:ed:83:56:5a:02:a6:72: 51:db:e2:f1:96:14:6e:77:67:19:b5:5a:66:3e:26:42:fe:aa: 55:78:57:b8:00:2e:27:e0:12:53:d8:3e:36:9d:b1:0a:7f:5f: 3b:75:20:eb:3c:0b:72:85:f4:e0:6a:01:5d:d6:f2:bf:0b:bc: 0c:8e:f8:88:b6:44:2d:06:39:40:a5:2a:08:b7:77:32:cb:82: ab:e0:01:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8idSK5DTk/Iin0krMfmytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMjk2Y2Y3MDQzODM2ZWJlMTc0OWM1YzE0NTQ3Yzc5ODQx ZTFiODkwHhcNMjYwMTI2MjMwMDQ5WhcNMjYwMTI3MjMwMDQ5WjAzMTEwLwYDVQQD EyhkODVmZTY0ZWE5YTk3N2UyZWZkZjdmN2NkYzNiNzc1YmZmMjIzYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZKfDvyTaqx8SSlJjOeVhTdBK5TA 5Nt+9MwLJwKTCY6cxe1UEOfnEy12H+O/8iXj6MmvfxLRCNrjSnjcrgrlImrItQDH 59m3UOEXFI8H8nWDEfzlYTTN9kVjzaMQxK6/dIDkr6wmE68tyc2m+i6bPhFJjVYz 2k8FQeeHRK7yZ81DOKsMbDp6IbgTQTQzVLyveJ2F5slvMjFX6qartjqGAzR+revG uMKGwRQCkXX765NCP4LM0frDHJrACi2y/uXCKbva0BUjcNnrUx5D7j1dA+wrc3aI nwnJMLkPgVbqcetNXfB6gfsj5dXa50I+OUuYWEznOdnOIEOIdMZbt2Yi+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhf5k6pqXfi799/fNw7d1v/IjxwMB8GA1UdIwQY MBaAFNwpbPcEODbr4XScXBRUfHmEHhuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMt NjhhYmU1MmQzMDM0LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMtNjhhYmU1MmQzMDM0 LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPECpPx1 HdlEB1BX+DAGkKMKRi/kgThk0qYWjLB+oFmGv2fJZf2flpzhOu/5bcyNOEYqrdpl bTEYFz4FbG58pKoVT0SPYFtBtljIRfzyB33QnA4/roGlA/HAGVX2xN4YOBHTPuZl 0wNj7fhFCL63uv625uJHIFP+YX2kg8KuLi5Yn5aHsYs2xRtd2zUqGhvGGzYxEf4M MnNu+TFuU1mT4GLDChdrE/SgBnGry1Dtg1ZaAqZyUdvi8ZYUbndnGbVaZj4mQv6q VXhXuAAuJ+ASU9g+Np2xCn9fO3Ug6zwLcoX04GoBXdbyvwu8DI74iLZELQY5QKUq CLd3MsuCq+ABcg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:16 2026 by rpki-client