This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json) Hash identifier: OnQkNVdxrlJvdJ9x2GDU/kRIkzmeX0y08XTss+HJ1gk= Subject key identifier: E9:46:C9:42:4E:28:15:BA:80:10:2C:60:47:8C:2C:FE:C9:7C:14:B8 Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056 Certificate serial: 019C05564C51B16664D98EC5B5444A8CFEA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft Manifest number: 17FC Signing time: Wed 28 Jan 2026 16:01:07 +0000 Manifest this update: Wed 28 Jan 2026 16:01:07 +0000 Manifest next update: Thu 29 Jan 2026 16:01:07 +0000 Files and hashes: 1: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: R73DSw0oYTrz0RKOJuGcsToDkfCAdqQvJZxTFfM8INg=) 2: GzMjnqAMs0LUgNkkZUnPmTnsw-U.roa (hash: 6whjobpWy5AGszV3zunKjIFDrpH8oaovVR4Ks5zQelI=) 3: JezjNTAfPbdlulCLBoO7mgYw2Y4.roa (hash: DSa6N96/QE2hXNxEFptm9KXCtFZ3HWg6uWKpBPavcuk=) 4: K3NmFuOPAddd8mCVtQYOCkx1jh0.roa (hash: SrLTNGPGVS2F82EZUaVR6hJ6RB2NsvkrSon85JqFkV8=) 5: WSkrs1ltbglcOvmgNNdKDlpJVJo.roa (hash: EfPSiAnXovgs9qwouEhgN4C060q6TwU5BAOhp7sYuHU=) 6: h_4gmGFAdBbCBD4uG-WTGKZV_TU.roa (hash: P8a4xHG+/TWjE2YM8N7yyLhJbWdTBUAy0FVC8WDBUFg=) 7: oAxekyalCBJoSFCk-RiZNpTa9fI.roa (hash: fHlHdL28b0ZUhERGdLlogDNTc4sgr86ip6F/0FC9Q4o=) 8: p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa (hash: HB8efpVA3BHYu9Zn4BAQKGXl8PNjjJD4B4das4y3Wnc=) 9: pPqoqszyNflAViMWi46ZOrZTdjY.roa (hash: 9ArEQlpDxpoMCJBHKPMxnNBFpsFnEVif2wzal4CkC4Y=) 10: tY4sfWyl-B6edZnbfqS5nS-IIv0.asa (hash: YBYJQpmviGXQzwnOV8znSXyELVmQ68/wa0NM6FbOLAc=) 11: uICc5XRh06cVWGSCd3zD2mE8MyE.roa (hash: 4JsLV2oEO2910mihUaMvXNeKfCRpoSGKQU3GmEptyxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:56:4c:51:b1:66:64:d9:8e:c5:b5:44:4a:8c:fe:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Validity Not Before: Jan 28 16:01:07 2026 GMT Not After : Jan 29 16:01:07 2026 GMT Subject: CN=e946c9424e2815ba80102c60478c2cfec97c14b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4f:00:0f:03:ab:67:86:f6:f1:d8:80:1f:f9: cb:10:06:18:a4:e7:24:56:12:64:e6:09:ac:73:67: 79:d8:2a:ab:14:46:7c:f3:db:85:2b:5b:2e:b4:b0: 18:39:01:b0:6b:3e:e0:15:54:c9:b3:b7:05:6d:c8: 54:57:be:a0:1a:0f:f0:f6:a4:98:ff:50:ca:1b:51: 4f:4d:ce:6c:c0:c2:01:b7:45:f7:45:d6:90:d0:23: e1:79:32:62:94:6d:7b:16:35:50:bf:62:ab:07:8b: 6a:a2:03:b4:24:7f:dd:92:c1:ed:0a:e4:4e:14:6e: 14:81:17:28:13:6b:e3:3f:f6:76:6e:6a:f0:d8:f0: 23:24:af:6d:50:ec:92:0e:6b:56:2e:ce:03:ac:01: 73:fc:d2:69:6b:f4:90:4f:c3:03:7b:d6:2d:03:d7: 80:d4:72:6c:33:77:3f:75:02:e1:20:12:a1:e5:4c: 68:b4:a8:e6:08:b7:5d:b0:0c:33:84:25:1d:58:6c: 4f:01:5c:e3:e9:90:b1:8b:5e:e3:6a:db:1b:0a:20: ef:20:05:90:2d:6c:21:32:fe:22:21:51:27:51:68: 2d:4e:13:54:65:0f:6b:28:70:6e:17:b8:06:4a:c6: ae:9b:19:2a:1b:b4:63:0c:c0:96:7d:59:29:14:be: 19:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:46:C9:42:4E:28:15:BA:80:10:2C:60:47:8C:2C:FE:C9:7C:14:B8 X509v3 Authority Key Identifier: keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:90:84:7f:2d:44:d2:a7:36:e3:69:09:c2:76:f0:d9:e3:f9: 90:b3:60:d6:c5:df:33:0d:0a:88:23:f3:fe:7d:78:a3:fa:62: 77:55:a2:29:45:d9:c1:00:5a:df:c3:af:ae:3c:ca:fb:72:ac: 30:28:17:91:c9:8b:03:82:a0:c5:5a:50:dc:e7:f2:dd:9e:c8: 23:bc:03:f3:19:75:7f:50:92:0a:37:45:05:b6:b3:67:bf:6c: a1:16:e2:18:e0:83:58:48:1f:4f:6a:9d:c5:e5:4c:71:2b:33: 32:24:8c:1c:9d:46:76:d7:2e:89:54:65:47:23:9b:1e:4d:dc: fa:cc:4b:87:65:70:42:10:5c:a9:c2:96:16:23:ca:15:e5:64: 66:35:7d:92:dc:08:78:a4:f7:bc:a6:ca:3f:cd:f1:a4:46:86: d6:6e:b8:9a:02:a2:5c:06:d8:a2:0c:23:68:ca:14:2d:ab:4e: 57:6e:2f:ab:2b:3e:dd:10:4e:b5:81:49:3c:6f:04:03:2a:84: f8:bf:8d:83:bd:c7:bb:f5:d6:4e:03:06:80:e0:73:54:fa:16: a3:9d:6d:e8:e0:b1:8d:07:95:57:8d:f8:54:a6:d9:55:db:5d: 62:42:a1:1a:0d:97:f3:d6:42:dc:38:3b:de:73:88:60:3b:4c: 6c:6e:cb:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFVkxRsWZk2Y7FtURKjP6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0 ZDkwNTYwHhcNMjYwMTI4MTYwMTA3WhcNMjYwMTI5MTYwMTA3WjAzMTEwLwYDVQQD EyhlOTQ2Yzk0MjRlMjgxNWJhODAxMDJjNjA0NzhjMmNmZWM5N2MxNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU8ADwOrZ4b28diAH/nLEAYYpOck VhJk5gmsc2d52CqrFEZ889uFK1sutLAYOQGwaz7gFVTJs7cFbchUV76gGg/w9qSY /1DKG1FPTc5swMIBt0X3RdaQ0CPheTJilG17FjVQv2KrB4tqogO0JH/dksHtCuRO FG4UgRcoE2vjP/Z2bmrw2PAjJK9tUOySDmtWLs4DrAFz/NJpa/SQT8MDe9YtA9eA 1HJsM3c/dQLhIBKh5UxotKjmCLddsAwzhCUdWGxPAVzj6ZCxi17jatsbCiDvIAWQ LWwhMv4iIVEnUWgtThNUZQ9rKHBuF7gGSsaumxkqG7RjDMCWfVkpFL4ZFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlGyUJOKBW6gBAsYEeMLP7JfBS4MB8GA1UdIwQY MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt NmNjMWQzZWE4MzJlLzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5CEfy1E 0qc242kJwnbw2eP5kLNg1sXfMw0KiCPz/n14o/pid1WiKUXZwQBa38OvrjzK+3Ks MCgXkcmLA4KgxVpQ3Ofy3Z7II7wD8xl1f1CSCjdFBbazZ79soRbiGOCDWEgfT2qd xeVMcSszMiSMHJ1GdtcuiVRlRyObHk3c+sxLh2VwQhBcqcKWFiPKFeVkZjV9ktwI eKT3vKbKP83xpEaG1m64mgKiXAbYogwjaMoULatOV24vqys+3RBOtYFJPG8EAyqE +L+Ng73Hu/XWTgMGgOBzVPoWo51t6OCxjQeVV434VKbZVdtdYkKhGg2X89ZC3Dg7 3nOIYDtMbG7LuA== -----END CERTIFICATE-----Generated at Thu Jan 29 01:41:44 2026 by rpki-client