This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json) Hash identifier: /PaliGIt4X2Pbr8n74cbGYvRvi5dSDI9exPOYPZ0R38= Subject key identifier: 2A:AA:7D:2F:4D:2D:FB:10:46:17:EC:82:23:75:57:8B:62:63:5F:90 Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c Certificate serial: 019BF42B7EC2BA2C724CA0457C559423A97E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft Manifest number: 1145 Signing time: Sun 25 Jan 2026 08:00:49 +0000 Manifest this update: Sun 25 Jan 2026 08:00:49 +0000 Manifest next update: Mon 26 Jan 2026 08:00:49 +0000 Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: AU2vGxVlMVWO3JxYSqAMO8n04HTWpAAb2GeA1X6om2Q=) 2: 7OkmnPh3ynYj5y3_NgmBm3m_TO4.roa (hash: 76UePjEP+wElQI63EJrAUQNqnmL6+mG0ZmW2QHArepk=) 3: ICKtn9FiA8o1E110emXc1Z_9SHM.roa (hash: VFWWvtCtDRylV3Kwhn/OLe+sEMZLlpEgPe5DOIGJ9cA=) 4: bRiAj1-hf7sNdEiD1YkRkRllIpg.roa (hash: QwlE0RKPjkh4vpQe1ZoXKOsV7QKRd+qV+VA/PdPxz0M=) 5: iXgvCFVYLYuWNg_lY55_1JUdv1Y.roa (hash: sekPzygHUOkEd1ly9r7LBo/JOh0iiRtcIXhoK8Xl8WU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:7e:c2:ba:2c:72:4c:a0:45:7c:55:94:23:a9:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c Validity Not Before: Jan 25 08:00:49 2026 GMT Not After : Jan 26 08:00:49 2026 GMT Subject: CN=2aaa7d2f4d2dfb104617ec822375578b62635f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:93:5f:4d:48:aa:7e:28:ff:cf:f7:71:1b:90: 2d:c8:cf:50:d8:b4:93:62:3d:6f:8c:70:6e:3d:00: ed:4e:78:93:67:66:cb:05:02:d0:8d:29:e6:9e:eb: d4:3c:14:ba:5a:02:63:e7:b1:68:69:17:07:76:67: 9f:08:61:68:60:0d:03:5f:7c:0d:d9:db:f3:e6:3b: 31:f3:57:10:b5:2c:e9:03:00:c7:6d:9d:09:28:d3: b2:35:8a:2a:41:77:5b:a1:8c:05:a9:7a:5a:97:9a: 4b:93:1d:e7:3a:41:81:e3:d3:29:dd:bc:a8:1c:76: 7d:65:a9:78:81:64:f4:ee:cd:c8:d8:f3:96:3e:49: 66:95:3b:d0:4f:c5:8d:82:f0:dc:31:1b:2f:c5:20: 74:e5:84:4b:75:e2:a1:9f:07:1a:46:6f:fe:13:3e: 3b:34:0e:5b:85:4e:80:a5:8d:71:40:a6:60:8c:e8: b3:79:a7:c2:3c:2c:c2:68:9a:8c:ba:c4:18:89:26: 62:37:3c:a7:91:69:9e:d6:61:15:a8:99:94:93:dd: 4d:f6:35:1a:f7:e2:53:bd:7b:92:c5:8c:b6:db:34: c2:a5:b5:89:9b:95:69:c9:4f:b9:02:82:4c:f6:81: 16:fb:51:3d:06:07:4e:6e:62:7c:5b:4c:28:fa:8c: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AA:7D:2F:4D:2D:FB:10:46:17:EC:82:23:75:57:8B:62:63:5F:90 X509v3 Authority Key Identifier: keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:09:0b:ac:41:96:5a:49:f8:53:4b:5d:e9:a2:0e:fe:35:a6: 90:a4:86:a8:80:86:30:1b:14:68:78:06:c6:eb:1b:b1:8d:30: e7:b0:65:52:53:85:5d:96:f6:1e:af:4c:04:e7:54:72:83:87: f8:7e:5a:d6:8b:cd:b6:83:fa:98:a6:e9:0b:d0:48:15:fb:6b: ac:d4:2d:a6:31:5e:f7:f5:27:18:ea:76:71:cb:0c:b5:04:bd: 3e:9a:45:6e:bf:14:54:b6:c4:90:05:5a:9c:4c:f3:c3:e5:2e: 03:b1:d5:de:e3:f1:bc:aa:a2:af:d6:94:2e:8b:88:17:13:5d: 37:eb:9b:1b:57:97:3b:66:6c:46:32:f1:07:fd:78:26:de:1a: be:27:90:14:6e:57:6d:5b:29:36:94:38:5a:44:90:53:c5:46: f9:ba:17:e7:f9:5a:ac:ab:a9:77:56:16:b4:ea:7d:d3:b8:d4: ce:9e:d0:e6:ee:51:4c:4b:d5:6d:34:0f:08:ea:f0:fa:d1:5c: 39:18:24:cd:8b:9b:d1:af:75:dd:32:0c:2e:01:cf:c7:fc:5c: d8:20:2f:c7:95:f5:18:c6:32:88:60:87:26:69:7c:24:f7:b3: 32:e6:05:ec:17:60:02:3d:d7:b5:d6:08:8e:5f:19:aa:f3:37: a5:34:66:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K37CuixyTKBFfFWUI6l+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDRlMTllMmJiNGU3MDIzY2MxYmExMGQ0OWI3NGVkZTRi Zjg2NWMwHhcNMjYwMTI1MDgwMDQ5WhcNMjYwMTI2MDgwMDQ5WjAzMTEwLwYDVQQD EygyYWFhN2QyZjRkMmRmYjEwNDYxN2VjODIyMzc1NTc4YjYyNjM1ZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJNfTUiqfij/z/dxG5AtyM9Q2LST Yj1vjHBuPQDtTniTZ2bLBQLQjSnmnuvUPBS6WgJj57FoaRcHdmefCGFoYA0DX3wN 2dvz5jsx81cQtSzpAwDHbZ0JKNOyNYoqQXdboYwFqXpal5pLkx3nOkGB49Mp3byo HHZ9Zal4gWT07s3I2POWPklmlTvQT8WNgvDcMRsvxSB05YRLdeKhnwcaRm/+Ez47 NA5bhU6ApY1xQKZgjOizeafCPCzCaJqMusQYiSZiNzynkWme1mEVqJmUk91N9jUa 9+JTvXuSxYy22zTCpbWJm5VpyU+5AoJM9oEW+1E9BgdObmJ8W0wo+oxouQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqqfS9NLfsQRhfsgiN1V4tiY1+QMB8GA1UdIwQY MBaAFNxE4Z4rtOcCPMG6ENSbdO3kv4ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjIt NGM4MmFjZTcyYzg1LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjItNGM4MmFjZTcyYzg1 LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAkLrEGW Wkn4U0td6aIO/jWmkKSGqICGMBsUaHgGxusbsY0w57BlUlOFXZb2Hq9MBOdUcoOH +H5a1ovNtoP6mKbpC9BIFftrrNQtpjFe9/UnGOp2ccsMtQS9PppFbr8UVLbEkAVa nEzzw+UuA7HV3uPxvKqir9aULouIFxNdN+ubG1eXO2ZsRjLxB/14Jt4avieQFG5X bVspNpQ4WkSQU8VG+boX5/larKupd1YWtOp907jUzp7Q5u5RTEvVbTQPCOrw+tFc ORgkzYub0a913TIMLgHPx/xc2CAvx5X1GMYyiGCHJml8JPezMuYF7BdgAj3XtdYI jl8ZqvM3pTRm5A== -----END CERTIFICATE-----Generated at Sun Jan 25 14:15:23 2026 by rpki-client