This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft File: 3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json) Hash identifier: /FtBWr5hrhA7kX4f70o61eMoM7xdwYsgGGO3IJoC/R4= Subject key identifier: 13:5E:10:92:FF:FF:E4:46:31:18:46:B8:8A:80:E0:DA:64:00:B1:C1 Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30 Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30 Certificate serial: 019BFB40099BA0C8C79BE02C00F783788259 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 17:00:36 +0000 Manifest this update: Mon 26 Jan 2026 17:00:36 +0000 Manifest next update: Tue 27 Jan 2026 17:00:36 +0000 Files and hashes: 1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: +770JgiePioSy7a1oy8Tbw1R5TETEeQklWW6YNmiNbk=) 2: G1YzAyoTqBUhk978zdE01evKfXA.roa (hash: FUm9Ag5yprn8A12AZl7Cxr6X93qzvWsGdd9NMsdM1no=) 3: Nf3EsHLwWqodxJ1QM1KI7OGVqOk.roa (hash: S6vfOvH5sVJE28SQyXolc/taEC8cUDhQ4fTQO3bdy+0=) 4: fmp7hO-27waiWiX41nn06vkmebs.roa (hash: 7KG1oGecoEOfjNrGnz8LESldQIXGIpPrLgtXE2XlsMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:09:9b:a0:c8:c7:9b:e0:2c:00:f7:83:78:82:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30 Validity Not Before: Jan 26 17:00:36 2026 GMT Not After : Jan 27 17:00:36 2026 GMT Subject: CN=135e1092ffffe446311846b88a80e0da6400b1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:e6:51:9f:23:df:39:97:fa:55:13:ad:93: 8f:c5:ea:c9:b2:76:31:cd:23:30:6b:c8:bb:7b:b7: 4a:66:b4:77:5a:07:74:3a:79:2e:40:f7:74:bc:ef: 7b:e1:b1:4c:35:81:ff:71:48:27:ac:e8:a6:38:11: d5:d7:0d:63:44:d1:43:72:fe:66:b5:f4:a0:92:43: 53:09:55:01:82:6a:16:7f:05:0e:db:f6:5f:51:ed: ae:74:00:c6:40:70:67:21:b1:74:c9:a8:37:d0:ab: 83:ad:40:8d:05:00:c5:c7:ca:62:cd:ab:78:c8:c7: 18:fa:37:9c:c3:0a:07:ae:61:13:a6:55:d9:8e:f1: 6a:ae:62:09:e2:b9:cd:da:68:b0:f3:89:54:ad:63: ab:9c:55:a0:30:a4:a7:d1:27:95:33:f3:44:dd:fc: cb:d7:5e:f8:33:04:d1:85:4d:82:ed:8f:4a:92:ea: da:dc:a7:5d:ae:7f:db:39:36:bd:ba:fb:1a:91:9b: 58:f3:62:83:04:4a:a9:51:0f:46:8f:de:4f:be:f0: a6:3f:f7:e8:9f:ec:58:c8:84:53:2e:4d:b2:4e:b4: 9d:66:90:82:e5:1c:3b:6b:a3:00:83:aa:5e:05:ae: 99:a6:93:60:05:44:4a:17:e6:84:ab:0c:a6:f2:d1: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5E:10:92:FF:FF:E4:46:31:18:46:B8:8A:80:E0:DA:64:00:B1:C1 X509v3 Authority Key Identifier: keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:25:33:cc:f5:3d:51:db:1a:82:fb:a3:24:02:cb:e3:65:2c: 3e:30:7f:5a:b6:0c:60:9e:f1:f4:3b:c5:22:12:83:7a:3a:c0: 4b:07:5b:c2:92:47:ff:a2:82:31:00:55:6f:cf:0c:81:57:ae: 26:ae:c7:6b:54:4e:ec:4a:e1:e6:0f:c7:2e:71:23:11:a0:59: ee:5c:fa:03:08:09:9f:19:51:da:48:3d:60:c3:70:9e:e6:c4: 5e:b7:49:9d:06:72:ca:b1:1a:70:45:13:66:a9:5d:ea:25:9a: 1f:cc:08:5c:b3:cc:2c:ba:f3:2a:80:a7:a5:f3:43:1c:3b:7e: 99:e6:49:6c:cd:ed:f9:27:65:28:e4:ea:a8:2e:31:09:c7:cf: 4b:35:d7:4a:fd:68:39:0d:2d:f5:8c:46:5c:32:15:bd:69:84: 2e:6d:0d:b7:52:04:77:97:5d:3d:4b:24:eb:77:2d:eb:4f:be: 7a:78:1f:45:18:73:58:78:15:b0:bd:41:8b:8b:f3:32:eb:d9: 7e:27:71:ee:06:d7:a3:e9:31:98:91:45:2c:62:cc:0f:aa:93: 05:fa:13:77:15:ed:de:80:28:57:67:9c:29:11:4a:2a:34:fe: fe:6f:79:8c:62:cb:f0:02:b6:e6:e1:5b:b3:cd:12:00:62:68: c8:3b:c1:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QAmboMjHm+AsAPeDeIJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDcyMzlkYjgxZDYxZjk4ZDU4NjM4M2NjYzEyNWQ2NjEw NmNiMzAwHhcNMjYwMTI2MTcwMDM2WhcNMjYwMTI3MTcwMDM2WjAzMTEwLwYDVQQD EygxMzVlMTA5MmZmZmZlNDQ2MzExODQ2Yjg4YTgwZTBkYTY0MDBiMWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/PmUZ8j3zmX+lUTrZOPxerJsnYx zSMwa8i7e7dKZrR3Wgd0OnkuQPd0vO974bFMNYH/cUgnrOimOBHV1w1jRNFDcv5m tfSgkkNTCVUBgmoWfwUO2/ZfUe2udADGQHBnIbF0yag30KuDrUCNBQDFx8pizat4 yMcY+jecwwoHrmETplXZjvFqrmIJ4rnN2miw84lUrWOrnFWgMKSn0SeVM/NE3fzL 1174MwTRhU2C7Y9Kkura3Kddrn/bOTa9uvsakZtY82KDBEqpUQ9Gj95PvvCmP/fo n+xYyIRTLk2yTrSdZpCC5Rw7a6MAg6peBa6ZppNgBURKF+aEqwym8tGG3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNeEJL//+RGMRhGuIqA4NpkALHBMB8GA1UdIwQY MBaAFN7XI524HWH5jVhjg8zBJdZhBsswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iNmM0MjYtNzZkNS00YTgyLTliNWYt ODU2YjY1Yzc1YzI2LzEvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iNmM0MjYtNzZkNS00YTgyLTliNWYtODU2YjY1Yzc1YzI2 LzEvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiUzzPU9 UdsagvujJALL42UsPjB/WrYMYJ7x9DvFIhKDejrASwdbwpJH/6KCMQBVb88MgVeu Jq7Ha1RO7Erh5g/HLnEjEaBZ7lz6AwgJnxlR2kg9YMNwnubEXrdJnQZyyrEacEUT Zqld6iWaH8wIXLPMLLrzKoCnpfNDHDt+meZJbM3t+SdlKOTqqC4xCcfPSzXXSv1o OQ0t9YxGXDIVvWmELm0Nt1IEd5ddPUsk63ct60++engfRRhzWHgVsL1Bi4vzMuvZ fidx7gbXo+kxmJFFLGLMD6qTBfoTdxXt3oAoV2ecKRFKKjT+/m95jGLL8AK25uFb s80SAGJoyDvBqA== -----END CERTIFICATE-----Generated at Mon Jan 26 19:15:20 2026 by rpki-client