This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json) Hash identifier: krro746/iSlJXX50RI6QYQbv6jg/RbWJyq4paY23BGc= Subject key identifier: 74:6A:62:7C:D2:AE:9B:AF:3B:4D:65:F6:8F:48:66:90:30:20:10:22 Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44 Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44 Certificate serial: 019BFC52C7B78AA7B5DA1771A61BA37F9862 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft Manifest number: 07B3 Signing time: Mon 26 Jan 2026 22:00:41 +0000 Manifest this update: Mon 26 Jan 2026 22:00:41 +0000 Manifest next update: Tue 27 Jan 2026 22:00:41 +0000 Files and hashes: 1: 2v9j4cmRBKthQd69OeXDYpcV_J4.roa (hash: JIWzi0oTuF2fjfMhf5T0o4dEjhsNJCahQ3YsDnDQF/k=) 2: hpn4nKhBKlsinaN3vVc_HD13KvY.roa (hash: bzhO685+Hi3OxhZho3Lpnq5Kf5KsQHXcp5yXWuPUGs4=) 3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: wVVyQhiZIbXcnU1F3xnSg8fVKIkZcS7g+XEcd7rAtkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:c7:b7:8a:a7:b5:da:17:71:a6:1b:a3:7f:98:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44 Validity Not Before: Jan 26 22:00:41 2026 GMT Not After : Jan 27 22:00:41 2026 GMT Subject: CN=746a627cd2ae9baf3b4d65f68f48669030201022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:05:82:72:b7:f2:98:26:d7:85:ba:dc:0a: 29:e9:ff:9e:f2:d3:d0:84:e1:29:10:cf:d2:f6:ac: bf:3e:a8:91:e7:f5:35:44:fa:a5:89:b1:c1:f4:86: 1e:8c:6c:be:c8:b7:2b:38:91:1a:8f:e6:3c:20:f8: 1c:69:43:a7:e1:f1:a9:1c:7c:68:fb:80:c1:09:d7: 96:35:fc:52:7f:c3:ed:7c:d4:f2:c9:1e:3a:ce:c0: 6b:37:c3:8a:81:eb:67:f9:ae:48:44:35:f4:1d:e0: 13:0f:7d:df:31:39:c4:de:07:3f:68:2e:ba:3b:fe: 99:44:ca:8f:28:c2:25:26:ec:d6:86:3d:43:1c:c3: 79:0f:60:c7:77:80:3e:62:21:e9:1b:44:37:f9:cf: 9d:93:7e:e9:48:fd:12:19:81:15:2f:38:4b:ea:23: 60:61:66:dd:1e:6b:d6:c1:91:2b:33:80:e4:49:88: b2:fd:2e:ab:74:24:d9:7d:47:d2:4f:2e:ac:84:ea: 9f:f2:ef:3f:e2:85:16:16:c6:03:87:4b:a1:aa:2a: 5b:99:3c:f8:c9:88:5e:60:88:85:cc:b0:cc:93:20: d3:1d:1d:5c:94:3f:21:39:09:06:b8:16:23:23:c7: cc:a5:5c:0f:c5:68:4b:ed:f5:80:b7:ce:e6:1c:cc: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6A:62:7C:D2:AE:9B:AF:3B:4D:65:F6:8F:48:66:90:30:20:10:22 X509v3 Authority Key Identifier: keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e4:9e:b7:13:a6:7c:c2:39:fc:a8:7f:44:21:c1:bd:c2:56: bf:09:34:bc:71:07:06:57:b3:78:75:f7:a6:2a:a2:e2:fd:15: e4:64:24:fd:2e:91:17:fe:0f:be:83:7f:d2:8e:d8:64:48:8d: 5e:63:ce:f1:5e:dc:95:f9:58:10:96:02:0d:e3:91:bc:31:70: 24:10:b5:41:c7:c0:ad:6e:8a:6b:ed:7c:44:a4:8f:90:7b:11: 23:9b:4f:02:a0:20:1c:69:fe:08:7c:51:db:90:25:99:2e:a5: 7b:66:65:84:a6:c2:35:3c:30:df:bc:29:69:69:d6:70:f1:37: b1:3b:98:e5:42:46:4f:b7:6e:79:d9:53:39:4f:ec:45:fa:02: b1:e9:e5:5c:23:b6:8d:b2:bb:72:76:cc:60:4a:49:5d:67:f5: 53:27:d6:6f:ef:44:95:b1:0e:ce:08:45:91:c0:95:ae:e7:c8: ea:96:79:cc:6e:c8:6f:bd:36:22:88:6b:68:f7:08:92:e0:89: d8:9d:89:32:c8:bc:cc:35:9f:23:a2:af:49:10:f7:d4:69:44: 8a:4f:06:9c:75:b6:7f:7f:65:88:c0:02:c5:81:d4:80:ad:db: e0:ee:6e:03:e3:32:c6:a9:49:8e:d1:f5:c7:da:b7:8c:be:df: 2b:e2:83:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8Use3iqe12hdxphujf5hiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNzRiODUzZGZkOTk3M2YyY2Q5OTRiMmUzYjc1NDYxZDlh M2ZjNDQwHhcNMjYwMTI2MjIwMDQxWhcNMjYwMTI3MjIwMDQxWjAzMTEwLwYDVQQD Eyg3NDZhNjI3Y2QyYWU5YmFmM2I0ZDY1ZjY4ZjQ4NjY5MDMwMjAxMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u8FgnK38pgm14W63Aop6f+e8tPQ hOEpEM/S9qy/PqiR5/U1RPqlibHB9IYejGy+yLcrOJEaj+Y8IPgcaUOn4fGpHHxo +4DBCdeWNfxSf8PtfNTyyR46zsBrN8OKgetn+a5IRDX0HeATD33fMTnE3gc/aC66 O/6ZRMqPKMIlJuzWhj1DHMN5D2DHd4A+YiHpG0Q3+c+dk37pSP0SGYEVLzhL6iNg YWbdHmvWwZErM4DkSYiy/S6rdCTZfUfSTy6shOqf8u8/4oUWFsYDh0uhqipbmTz4 yYheYIiFzLDMkyDTHR1clD8hOQkGuBYjI8fMpVwPxWhL7fWAt87mHMxzwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRqYnzSrpuvO01l9o9IZpAwIBAiMB8GA1UdIwQY MBaAFJN0uFPf2Zc/LNmUsuO3VGHZo/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQt NjViY2M4Y2VmZGQyLzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQtNjViY2M4Y2VmZGQy LzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuSetxOm fMI5/Kh/RCHBvcJWvwk0vHEHBlezeHX3piqi4v0V5GQk/S6RF/4PvoN/0o7YZEiN XmPO8V7clflYEJYCDeORvDFwJBC1QcfArW6Ka+18RKSPkHsRI5tPAqAgHGn+CHxR 25AlmS6le2ZlhKbCNTww37wpaWnWcPE3sTuY5UJGT7duedlTOU/sRfoCsenlXCO2 jbK7cnbMYEpJXWf1UyfWb+9ElbEOzghFkcCVrufI6pZ5zG7Ib702IohraPcIkuCJ 2J2JMsi8zDWfI6KvSRD31GlEik8GnHW2f39liMACxYHUgK3b4O5uA+MyxqlJjtH1 x9q3jL7fK+KDag== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:43 2026 by rpki-client