This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json) Hash identifier: 267n58vGYEPBFzyA/LzKtMSQm/TUCDC9/KkvkmybBbM= Subject key identifier: 50:2A:C3:88:38:AA:32:EB:1E:02:3C:1D:4A:E4:B5:D6:05:5C:62:F7 Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5 Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5 Certificate serial: 019BD9C720D17FD521FDA6E07BCE412C96B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft Manifest number: 06F2 Signing time: Tue 20 Jan 2026 05:01:04 +0000 Manifest this update: Tue 20 Jan 2026 05:01:04 +0000 Manifest next update: Wed 21 Jan 2026 05:01:04 +0000 Files and hashes: 1: 2U3Vq1QnP8ctuHADYZl7AYfrN8Q.roa (hash: aSqIWAFTh+DEyVISsUqiiF4heoz8JVrFxkyTiK/xNAk=) 2: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: n2hmBU7eTfCBrDbbzFoLeCHfcmOddRX4q3OEcfCtjdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:c7:20:d1:7f:d5:21:fd:a6:e0:7b:ce:41:2c:96:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5 Validity Not Before: Jan 20 05:01:04 2026 GMT Not After : Jan 21 05:01:04 2026 GMT Subject: CN=502ac38838aa32eb1e023c1d4ae4b5d6055c62f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:75:6b:99:e2:21:b6:97:09:0a:a2:52:ac: 43:09:5f:76:88:2b:5e:24:93:3d:4c:97:0f:07:c0: be:73:88:41:d4:50:76:a9:ad:e9:f8:bf:cf:ef:d2: 8c:04:80:04:df:af:96:7d:f5:ee:ab:f8:db:2a:41: 17:05:07:6e:da:12:a7:1e:fc:80:4d:bb:3e:a9:f3: fc:26:99:ef:6e:6f:78:95:45:84:c8:b0:22:d5:7e: c0:bc:31:50:f5:88:51:3c:0c:a8:b7:15:fc:ff:ba: ce:d0:7e:33:2a:15:1d:cf:59:52:f2:db:0b:1e:f4: 9c:65:5b:bb:24:79:95:12:11:92:44:8c:23:0e:64: d3:04:23:e3:f0:7a:27:e4:c4:f9:9b:4f:1d:ee:62: 35:c5:0e:30:4b:fa:d9:cc:a5:c0:7a:98:35:64:d3: c6:cb:6e:08:10:88:97:9c:50:71:b0:e2:fc:f3:47: b7:91:9c:7f:9d:3b:b8:c6:92:16:82:c7:c2:1f:6d: 6e:b5:7f:ea:c4:bd:9e:d1:1b:a3:1b:06:91:ad:92: dd:a1:e1:d8:9c:de:99:3d:8b:65:96:d1:7a:4c:83: 5c:70:e1:5e:74:a6:3e:a4:0f:65:65:71:fe:3a:aa: 6b:d8:5e:6f:b1:ea:88:ea:13:43:f8:92:b6:05:b3: ce:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2A:C3:88:38:AA:32:EB:1E:02:3C:1D:4A:E4:B5:D6:05:5C:62:F7 X509v3 Authority Key Identifier: keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:27:fc:e0:d5:db:77:9b:9c:ca:a1:13:c7:63:65:b6:d5:cf: e8:c6:d1:6a:ee:b8:d6:3c:e6:67:92:5c:d7:7f:e1:b5:1a:75: 4e:a0:21:3f:42:ee:fd:3d:d9:5e:8e:85:bd:77:be:20:0a:13: 43:9d:78:47:78:1c:ae:08:3c:bf:cb:41:92:07:5f:4d:13:e7: 45:6a:08:b6:2e:11:5a:23:10:5d:86:78:e5:be:50:07:67:ea: 6d:e3:04:40:68:e6:80:3a:c1:c2:8a:d7:d1:f6:0b:4c:a3:23: 9e:fb:40:66:61:fc:a3:1e:59:7b:d5:c3:25:23:f3:fe:f0:e6: 47:85:00:f9:06:42:6f:38:24:f4:ea:77:67:0f:4f:60:72:7a: d8:e7:96:0d:ad:4e:08:50:f1:b2:10:e1:8f:8a:f6:b6:72:04: 72:de:cb:76:e4:40:53:b3:a8:9e:7d:a5:72:06:49:12:42:2a: 1a:9a:90:08:aa:6c:8b:d6:d5:d5:f6:c2:18:a6:40:08:85:4d: 29:09:8b:ce:bb:76:96:3a:e0:2c:39:95:63:f9:fc:79:33:d0: 62:b0:12:a8:4e:e0:42:4e:ce:6c:1c:c5:ef:9d:af:89:a9:88: 5b:3c:93:e9:10:39:57:80:1a:74:42:14:97:cd:c0:6e:e2:1b: 8b:4a:f7:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZxyDRf9Uh/abge85BLJa5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOGFlNGQ5YWQ4NjNkZGExNDAxYjQ5MGMyOGNmZjgyZDk5 OGUzYjUwHhcNMjYwMTIwMDUwMTA0WhcNMjYwMTIxMDUwMTA0WjAzMTEwLwYDVQQD Eyg1MDJhYzM4ODM4YWEzMmViMWUwMjNjMWQ0YWU0YjVkNjA1NWM2MmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz11a5niIbaXCQqiUqxDCV92iCte JJM9TJcPB8C+c4hB1FB2qa3p+L/P79KMBIAE36+WffXuq/jbKkEXBQdu2hKnHvyA Tbs+qfP8Jpnvbm94lUWEyLAi1X7AvDFQ9YhRPAyotxX8/7rO0H4zKhUdz1lS8tsL HvScZVu7JHmVEhGSRIwjDmTTBCPj8Hon5MT5m08d7mI1xQ4wS/rZzKXAepg1ZNPG y24IEIiXnFBxsOL880e3kZx/nTu4xpIWgsfCH21utX/qxL2e0RujGwaRrZLdoeHY nN6ZPYtlltF6TINccOFedKY+pA9lZXH+Oqpr2F5vseqI6hND+JK2BbPO7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAqw4g4qjLrHgI8HUrktdYFXGL3MB8GA1UdIwQY MBaAFN2K5Nmthj3aFAG0kMKM/4LZmOO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGIt NGRlOTM0NWM4M2JmLzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGItNGRlOTM0NWM4M2Jm LzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCf84NXb d5ucyqETx2NlttXP6MbRau641jzmZ5Jc13/htRp1TqAhP0Lu/T3ZXo6FvXe+IAoT Q514R3gcrgg8v8tBkgdfTRPnRWoIti4RWiMQXYZ45b5QB2fqbeMEQGjmgDrBworX 0fYLTKMjnvtAZmH8ox5Ze9XDJSPz/vDmR4UA+QZCbzgk9Op3Zw9PYHJ62OeWDa1O CFDxshDhj4r2tnIEct7LduRAU7Oonn2lcgZJEkIqGpqQCKpsi9bV1fbCGKZACIVN KQmLzrt2ljrgLDmVY/n8eTPQYrASqE7gQk7ObBzF752viamIWzyT6RA5V4AadEIU l83AbuIbi0r3iw== -----END CERTIFICATE-----Generated at Tue Jan 20 07:37:11 2026 by rpki-client