This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json) Hash identifier: Ezh526RaY8sw0pNCkuGzj1qUxfT0RZZertNrBNFjED4= Subject key identifier: 4A:08:35:D6:45:6B:9F:46:B7:9B:1B:58:FB:A0:1B:8B:82:23:F3:2C Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10 Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10 Certificate serial: 019C0DEB57C3E188FC92D76B0F45EF4AEEC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft Manifest number: 1809 Signing time: Fri 30 Jan 2026 08:00:52 +0000 Manifest this update: Fri 30 Jan 2026 08:00:52 +0000 Manifest next update: Sat 31 Jan 2026 08:00:52 +0000 Files and hashes: 1: 2W3yWm1HMzPskIDqOBKTk5NLDnk.roa (hash: zkzysD/L4UIm9OcLl6P6Mv4weJO+FXhHhd0t2XLROjI=) 2: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: bIeb+FKBtAKalWwNVLkYyy8ff8v2Bzw0BgdyNlh1gRU=) 3: K3l-f-R4fzp0JNI40Ow_kAwQElE.roa (hash: lzT7cfBjG064YjxJ7JvC+eelDCQdNhykEA7ZwxG3cvA=) 4: PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa (hash: a8KnYbin0YfzPy81a2Ft5OJRitrpc3uTgAStWm8odkA=) 5: WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa (hash: IB5UKLk0ZZT7DbiIeOg9ZlXwRRXDT147MF0fykJ8TKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0d:eb:57:c3:e1:88:fc:92:d7:6b:0f:45:ef:4a:ee:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10 Validity Not Before: Jan 30 08:00:52 2026 GMT Not After : Jan 31 08:00:52 2026 GMT Subject: CN=4a0835d6456b9f46b79b1b58fba01b8b8223f32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:88:d6:a8:e9:3a:33:1c:00:9d:b2:98:ee: 60:c9:23:de:c1:d7:ac:93:ab:5c:8b:4c:b6:ba:3b: a9:4b:ee:19:68:f5:32:1a:98:7e:af:8d:d7:c4:79: 5e:7e:06:af:61:65:bd:1f:8c:6e:b6:6e:ce:0b:f4: af:ff:9a:39:83:99:c9:9b:ec:21:35:d3:e2:c6:54: ca:ce:4b:59:f6:1b:75:8e:7b:bb:bd:c1:83:d1:76: 21:53:a5:31:03:23:66:74:d2:b1:bd:c7:1c:22:5d: b5:5f:ae:d8:09:bd:84:a8:1c:42:d9:f7:7b:4f:6e: 73:fe:63:3f:1e:43:86:f0:e1:fe:00:45:5c:f6:d6: aa:4a:3c:a6:b9:fa:41:cc:27:f8:db:0b:5d:60:2d: 93:44:06:da:98:c4:9b:83:8c:9f:35:76:ca:5b:a3: 93:84:99:33:76:ba:8a:89:26:fe:fe:c9:b4:9d:6a: 7f:21:7d:5e:17:ba:82:27:0d:f3:90:0c:b9:56:f0: ae:75:c2:e2:d2:f3:01:1f:4d:af:15:14:70:eb:b9: c0:c7:0d:c0:30:63:ff:a0:fa:f0:43:4a:6b:06:38: 34:9f:db:f0:01:ab:68:6d:ea:5f:c5:ed:7d:dd:71: 7c:3c:55:60:ae:f4:ac:e2:68:e3:67:59:6f:0f:2d: 5e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:08:35:D6:45:6B:9F:46:B7:9B:1B:58:FB:A0:1B:8B:82:23:F3:2C X509v3 Authority Key Identifier: keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:90:d4:ab:59:8f:10:f9:8d:fd:eb:a7:2c:36:79:74:67:29: 3c:67:08:5f:bf:6d:28:2c:eb:4f:ea:24:52:89:fc:ea:a8:8c: f3:3b:f3:02:b2:a2:33:48:73:fb:72:70:94:0d:3e:54:d9:1a: c9:1d:fe:27:de:fe:19:a6:f7:e4:18:0d:04:8d:7c:eb:34:20: bf:01:84:67:9c:3d:ea:38:88:f6:e5:e5:40:ac:69:30:b7:67: 85:37:9c:99:2e:c2:85:82:df:37:5b:c3:74:b7:60:f9:a8:38: e8:4d:01:db:64:46:77:cf:9f:4b:aa:dc:5e:31:c1:e5:05:90: f4:c5:d7:4d:3e:32:17:04:66:c3:04:ce:6c:ea:3a:3c:7c:47: ea:74:c1:64:08:80:f1:9f:2f:d0:61:89:1c:b7:56:ca:1b:d9: 74:60:3d:9c:80:fe:a4:c5:c6:db:53:ec:dd:48:9f:43:29:0d: 2c:19:d2:03:27:44:99:5f:ec:e7:f6:3a:96:e9:36:45:2d:76: 4d:be:ff:51:f2:07:ae:34:60:60:0b:cc:59:a6:c0:5c:23:be: 1f:81:41:82:19:7a:88:38:43:da:db:ca:b3:79:1a:ff:d6:18: d9:21:2d:ac:43:09:c5:94:9c:01:d1:18:a4:54:84:93:af:88: 95:2c:21:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwN61fD4Yj8ktdrD0XvSu7HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYjY1YTkwZWQzY2Y0YWUwNDUyNTU0ZWUzNGI5MmE4NDc2 ZGNmMTAwHhcNMjYwMTMwMDgwMDUyWhcNMjYwMTMxMDgwMDUyWjAzMTEwLwYDVQQD Eyg0YTA4MzVkNjQ1NmI5ZjQ2Yjc5YjFiNThmYmEwMWI4YjgyMjNmMzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtuI1qjpOjMcAJ2ymO5gySPewdes k6tci0y2ujupS+4ZaPUyGph+r43XxHlefgavYWW9H4xutm7OC/Sv/5o5g5nJm+wh NdPixlTKzktZ9ht1jnu7vcGD0XYhU6UxAyNmdNKxvcccIl21X67YCb2EqBxC2fd7 T25z/mM/HkOG8OH+AEVc9taqSjymufpBzCf42wtdYC2TRAbamMSbg4yfNXbKW6OT hJkzdrqKiSb+/sm0nWp/IX1eF7qCJw3zkAy5VvCudcLi0vMBH02vFRRw67nAxw3A MGP/oPrwQ0prBjg0n9vwAatobepfxe193XF8PFVgrvSs4mjjZ1lvDy1e8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoINdZFa59Gt5sbWPugG4uCI/MsMB8GA1UdIwQY MBaAFNy2WpDtPPSuBFJVTuNLkqhHbc8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEt ODVhOTU1ZjIxNjNiLzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEtODVhOTU1ZjIxNjNi LzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApDUq1mP EPmN/eunLDZ5dGcpPGcIX79tKCzrT+okUon86qiM8zvzArKiM0hz+3JwlA0+VNka yR3+J97+Gab35BgNBI186zQgvwGEZ5w96jiI9uXlQKxpMLdnhTecmS7ChYLfN1vD dLdg+ag46E0B22RGd8+fS6rcXjHB5QWQ9MXXTT4yFwRmwwTObOo6PHxH6nTBZAiA 8Z8v0GGJHLdWyhvZdGA9nID+pMXG21Ps3UifQykNLBnSAydEmV/s5/Y6luk2RS12 Tb7/UfIHrjRgYAvMWabAXCO+H4FBghl6iDhD2tvKs3ka/9YY2SEtrEMJxZScAdEY pFSEk6+IlSwhzA== -----END CERTIFICATE-----Generated at Fri Jan 30 17:20:54 2026 by rpki-client