This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json) Hash identifier: HktCW4Tjzgp6XqciAzJPWzg3QIWzaXvEaJuh4keH1Gc= Subject key identifier: 0D:06:B3:47:0A:AB:62:3B:62:43:8F:13:E5:95:A7:91:80:66:F1:91 Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1 Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1 Certificate serial: 019BFA9B553F0C4F0D3A6C0A168F34D2AE3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft Manifest number: 1745 Signing time: Mon 26 Jan 2026 14:00:42 +0000 Manifest this update: Mon 26 Jan 2026 14:00:42 +0000 Manifest next update: Tue 27 Jan 2026 14:00:42 +0000 Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: REQdvX/toWCSFjfWtFdiGz7LP4KT/Friwi2r49VAXj4=) 2: lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa (hash: 9m0BkgzH4gSyZI57npmc+BY5iSf+kkTcUVRRsTUd1zs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:55:3f:0c:4f:0d:3a:6c:0a:16:8f:34:d2:ae:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1 Validity Not Before: Jan 26 14:00:42 2026 GMT Not After : Jan 27 14:00:42 2026 GMT Subject: CN=0d06b3470aab623b62438f13e595a7918066f191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:2e:16:e9:4f:26:69:32:37:76:15:a1:3f: 28:21:22:60:1b:58:50:58:8a:1c:01:fa:c0:29:24: 9d:46:98:48:19:58:ae:ee:7b:d0:2d:15:92:85:e1: 90:2a:3f:16:9d:c8:7c:39:74:fa:66:f6:18:7a:95: 2a:42:68:77:25:e8:b3:c9:fe:32:a7:c4:4b:bc:8a: d4:5f:88:c0:31:dd:97:92:40:d8:25:c4:4d:0c:ea: 1e:50:39:d9:78:19:08:14:f4:83:1c:67:4f:da:51: 2f:ac:87:48:40:33:4e:b8:5b:15:69:eb:e5:2f:4c: ff:35:d3:c3:02:1d:9d:55:06:51:30:ca:2b:16:53: d0:ad:92:ca:f5:fe:6d:18:52:3b:4d:b1:06:c4:a2: 97:b6:84:db:26:7f:77:38:bd:ef:11:84:35:bc:43: b1:3d:00:82:56:b6:c6:3c:08:50:04:21:d6:86:35: 63:5c:e6:a1:13:9a:83:f9:8a:bb:22:18:cc:2a:8b: 77:c4:f5:99:da:16:af:77:9f:c8:d6:da:2d:73:af: cc:45:f1:64:2b:cd:eb:d0:48:a2:e7:eb:4c:59:57: 2c:aa:a7:ed:f1:c7:68:1f:a3:11:91:d3:59:58:39: 57:2f:1c:2e:0e:c5:4c:c3:69:3c:99:47:78:e2:73: db:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:06:B3:47:0A:AB:62:3B:62:43:8F:13:E5:95:A7:91:80:66:F1:91 X509v3 Authority Key Identifier: keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ca:14:b4:19:24:c8:6b:13:fc:08:0b:95:a7:bb:b7:cc:6d: 1c:6c:0f:55:de:0e:dd:cd:b2:44:66:b0:3c:0e:a6:56:4c:20: 31:c5:c0:39:e4:4d:e7:ff:61:6a:f0:2a:b9:1e:72:10:94:10: 31:b0:6a:ca:c7:cd:b9:1a:3c:c7:f9:bf:6d:69:d9:69:32:04: 72:8a:a2:85:3b:d9:b3:62:e5:e0:e9:65:92:07:99:03:72:74: f7:3e:98:66:4a:95:8a:19:cd:b1:51:61:35:11:c0:d1:09:4f: 4c:ba:7c:34:ec:87:00:f6:00:3b:8a:94:cc:6c:4b:21:87:9e: 04:e7:58:85:19:a3:6d:8c:22:01:8b:a2:49:85:96:c6:27:79: 62:bd:91:16:8c:3e:8a:e0:3b:49:c0:4b:51:d5:69:a2:21:4b: 4b:83:c9:ec:51:e7:e6:54:4d:3d:99:92:71:9e:28:34:55:c4: fb:7d:71:0a:ad:5e:bd:aa:d2:04:7c:14:e7:68:31:cc:c2:94: 88:7b:4f:58:b8:2e:3a:b6:54:dc:e0:b7:c0:f4:83:87:bc:10: ae:46:91:3b:61:2c:d8:3e:a4:c0:e0:b8:15:3c:a3:f7:f1:8b: 36:a4:a0:92:31:e6:21:65:75:76:04:9f:2c:21:2d:eb:60:59: 20:77:fc:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m1U/DE8NOmwKFo800q49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDIyYzI0MTQ3ZWM3OWZhOTA2NDY0YWIxNDNmZDQ3ZTNi ZWIzYTEwHhcNMjYwMTI2MTQwMDQyWhcNMjYwMTI3MTQwMDQyWjAzMTEwLwYDVQQD EygwZDA2YjM0NzBhYWI2MjNiNjI0MzhmMTNlNTk1YTc5MTgwNjZmMTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UQuFulPJmkyN3YVoT8oISJgG1hQ WIocAfrAKSSdRphIGViu7nvQLRWSheGQKj8Wnch8OXT6ZvYYepUqQmh3Jeizyf4y p8RLvIrUX4jAMd2XkkDYJcRNDOoeUDnZeBkIFPSDHGdP2lEvrIdIQDNOuFsVaevl L0z/NdPDAh2dVQZRMMorFlPQrZLK9f5tGFI7TbEGxKKXtoTbJn93OL3vEYQ1vEOx PQCCVrbGPAhQBCHWhjVjXOahE5qD+Yq7IhjMKot3xPWZ2havd5/I1totc6/MRfFk K83r0Eii5+tMWVcsqqft8cdoH6MRkdNZWDlXLxwuDsVMw2k8mUd44nPbMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0Gs0cKq2I7YkOPE+WVp5GAZvGRMB8GA1UdIwQY MBaAFNxCLCQUfsefqQZGSrFD/UfjvrOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMt MjE2NTEzNmM5ZDlhLzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMtMjE2NTEzNmM5ZDlh LzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsoUtBkk yGsT/AgLlae7t8xtHGwPVd4O3c2yRGawPA6mVkwgMcXAOeRN5/9havAquR5yEJQQ MbBqysfNuRo8x/m/bWnZaTIEcoqihTvZs2Ll4OllkgeZA3J09z6YZkqVihnNsVFh NRHA0QlPTLp8NOyHAPYAO4qUzGxLIYeeBOdYhRmjbYwiAYuiSYWWxid5Yr2RFow+ iuA7ScBLUdVpoiFLS4PJ7FHn5lRNPZmScZ4oNFXE+31xCq1evarSBHwU52gxzMKU iHtPWLguOrZU3OC3wPSDh7wQrkaRO2Es2D6kwOC4FTyj9/GLNqSgkjHmIWV1dgSf LCEt62BZIHf8fQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:38 2026 by rpki-client