This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json) Hash identifier: OW0zfWZpPp7dkYC7qKaa618YZbXr6Gasdxjuvk1Sg9Q= Subject key identifier: E2:E2:D2:27:87:F5:0D:7D:E1:39:DC:7B:6F:BD:0E:17:01:B3:A0:A4 Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5 Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5 Certificate serial: 019C04B2771D792DE0311720CED6F71D5595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft Manifest number: 0C7F Signing time: Wed 28 Jan 2026 13:02:10 +0000 Manifest this update: Wed 28 Jan 2026 13:02:10 +0000 Manifest next update: Thu 29 Jan 2026 13:02:10 +0000 Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: Vt8dBnklKxnAk6N2BoAGzBNX1FF06qvrAUNjBgOZB10=) 2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:b2:77:1d:79:2d:e0:31:17:20:ce:d6:f7:1d:55:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce6e13e413baf381b625131e924e947843436f5 Validity Not Before: Jan 28 13:02:10 2026 GMT Not After : Jan 29 13:02:10 2026 GMT Subject: CN=e2e2d22787f50d7de139dc7b6fbd0e1701b3a0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3e:9e:89:c6:40:a1:fa:c6:e4:5c:23:19:3f: 24:9e:65:3c:53:d1:ae:1a:fe:07:6f:1f:01:0a:08: ec:cb:f3:2c:2c:2a:f6:09:c4:4a:48:96:ca:f8:eb: 36:8f:37:f9:92:03:77:be:fa:ca:6e:d7:7c:2a:60: 5a:d7:0a:81:79:2c:7c:db:fc:81:0f:43:c1:14:86: 8f:36:59:18:11:9b:8a:82:1f:7e:f4:a9:b8:2b:ef: 65:38:c3:17:cd:9a:f5:a9:ce:7e:83:4a:ac:56:d1: 56:3b:b1:71:0a:ac:1b:0f:6f:4c:9c:ef:1d:07:77: 4d:74:b6:c7:86:ed:2e:29:ed:9e:ed:54:f2:51:11: 22:41:a2:5d:df:73:c4:e6:0e:0f:35:1f:2a:8b:bd: df:54:c0:20:a7:c8:49:5f:40:c7:1f:25:b6:4a:b6: 9e:9e:9f:f4:a9:65:28:44:14:77:51:cc:5a:49:41: 41:1e:61:e3:f4:d2:c5:85:83:31:86:34:79:3d:a4: d2:82:95:33:9a:b2:6e:61:c5:ca:84:27:d3:1e:4f: 6a:7a:d9:6b:81:75:b5:a1:03:c1:f4:eb:55:10:fa: a2:9f:f8:a2:94:c3:be:ea:35:36:6e:90:21:f1:d1: 6b:32:09:54:44:e9:03:f3:94:c6:be:f3:db:fd:f5: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E2:D2:27:87:F5:0D:7D:E1:39:DC:7B:6F:BD:0E:17:01:B3:A0:A4 X509v3 Authority Key Identifier: keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:de:ae:e3:73:7c:5e:32:f2:97:7f:1e:4a:88:9c:a3:50:78: 66:1c:8f:62:ee:a3:ed:bb:e5:9c:48:15:6b:5c:eb:39:2b:45: 47:af:cc:3a:49:a9:93:ea:dc:fc:e3:3a:8e:53:28:ae:33:25: 88:34:75:98:f2:75:db:8d:f2:bc:25:c2:f0:0c:0a:b8:37:29: 17:90:24:97:ce:96:6d:c3:d1:90:fc:f7:d8:17:92:9e:09:2d: 32:1d:7f:7d:59:8d:75:0c:e7:36:91:ec:77:eb:1c:55:13:a8: 30:37:a5:3d:85:5f:18:94:cf:27:08:7b:c6:5a:d2:83:3a:ed: a8:57:4f:20:84:a4:cc:bf:a7:e4:60:88:72:6d:cc:02:48:89: 5a:5f:0a:10:41:04:06:8c:9c:9a:ca:4d:51:d1:e5:a1:fa:cd: 41:42:d2:8a:ab:4f:d7:a1:16:2b:a0:dc:19:14:6d:a7:b8:f5: 52:db:94:ef:8c:2f:78:35:75:3b:e1:bf:8a:d4:1a:58:47:99: 25:8a:e9:45:48:bb:4f:32:6e:4c:8d:43:83:66:41:8b:db:d6: 94:b8:49:55:08:8c:17:dc:3f:11:61:74:31:00:61:e5:f1:36: e3:2b:4c:21:85:c7:fc:c2:2c:fa:9f:53:a0:14:a0:63:5b:4f: 9e:bb:27:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEsncdeS3gMRcgztb3HVWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTZlMTNlNDEzYmFmMzgxYjYyNTEzMWU5MjRlOTQ3ODQz NDM2ZjUwHhcNMjYwMTI4MTMwMjEwWhcNMjYwMTI5MTMwMjEwWjAzMTEwLwYDVQQD EyhlMmUyZDIyNzg3ZjUwZDdkZTEzOWRjN2I2ZmJkMGUxNzAxYjNhMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T6eicZAofrG5FwjGT8knmU8U9Gu Gv4Hbx8BCgjsy/MsLCr2CcRKSJbK+Os2jzf5kgN3vvrKbtd8KmBa1wqBeSx82/yB D0PBFIaPNlkYEZuKgh9+9Km4K+9lOMMXzZr1qc5+g0qsVtFWO7FxCqwbD29MnO8d B3dNdLbHhu0uKe2e7VTyUREiQaJd33PE5g4PNR8qi73fVMAgp8hJX0DHHyW2Srae np/0qWUoRBR3UcxaSUFBHmHj9NLFhYMxhjR5PaTSgpUzmrJuYcXKhCfTHk9qetlr gXW1oQPB9OtVEPqin/iilMO+6jU2bpAh8dFrMglUROkD85TGvvPb/fXZ0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLi0ieH9Q194Tnce2+9DhcBs6CkMB8GA1UdIwQY MBaAFNzm4T5BO684G2JRMekk6UeENDb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85YTRlZjUtNDJmYS00MzVmLWE4ZmUt YjFmNGZjNzUyMmEwLzEvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi85YTRlZjUtNDJmYS00MzVmLWE4ZmUtYjFmNGZjNzUyMmEw LzEvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnd6u43N8 XjLyl38eSoico1B4ZhyPYu6j7bvlnEgVa1zrOStFR6/MOkmpk+rc/OM6jlMorjMl iDR1mPJ1243yvCXC8AwKuDcpF5Akl86WbcPRkPz32BeSngktMh1/fVmNdQznNpHs d+scVROoMDelPYVfGJTPJwh7xlrSgzrtqFdPIISkzL+n5GCIcm3MAkiJWl8KEEEE BoycmspNUdHlofrNQULSiqtP16EWK6DcGRRtp7j1UtuU74wveDV1O+G/itQaWEeZ JYrpRUi7TzJuTI1Dg2ZBi9vWlLhJVQiMF9w/EWF0MQBh5fE24ytMIYXH/MIs+p9T oBSgY1tPnrsnOw== -----END CERTIFICATE-----Generated at Wed Jan 28 17:55:16 2026 by rpki-client