This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json) Hash identifier: BhFSAE7xBV5kxL7dM8SQ2xXZqUkpFPjKWRtPBS5hjLk= Subject key identifier: 33:C9:55:AD:6D:FA:E6:67:BE:65:E8:93:1D:8D:36:34:F7:C5:1F:2A Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29 Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729 Certificate serial: 019BF318F50AB1CAE25037A83DD4593F2DBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft Manifest number: 0A29 Signing time: Sun 25 Jan 2026 03:00:57 +0000 Manifest this update: Sun 25 Jan 2026 03:00:57 +0000 Manifest next update: Mon 26 Jan 2026 03:00:57 +0000 Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=) 2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=) 3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: 5DEPS2xiDQZ1C9vvQCOh9W55u4YsZXihX36eexRGzAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:f5:0a:b1:ca:e2:50:37:a8:3d:d4:59:3f:2d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729 Validity Not Before: Jan 25 03:00:57 2026 GMT Not After : Jan 26 03:00:57 2026 GMT Subject: CN=33c955ad6dfae667be65e8931d8d3634f7c51f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:19:c0:2d:ef:12:09:ca:49:a2:29:71:5b: 8a:3f:0c:2e:58:7f:cd:12:f8:89:25:81:3a:e0:18: 73:07:67:36:44:89:10:a3:9f:c8:38:49:40:70:82: a2:8b:f0:da:01:66:b5:0a:a7:a3:00:d3:de:51:1e: ef:7f:f1:2e:f8:3d:c1:43:26:c0:22:ee:00:42:6d: 16:d0:56:26:e8:7d:86:db:2b:39:1e:98:19:6b:5b: 24:7e:d4:fb:f4:9c:cd:90:ff:a0:11:f8:e5:66:2f: 34:4b:43:7d:81:47:50:58:02:63:3f:e0:44:b4:6a: f2:a9:4b:c3:2c:a1:d7:3d:d6:08:e1:cf:3c:f3:21: f2:72:11:a3:7d:c6:8d:03:80:e4:57:96:d5:23:9d: 1b:8e:ef:4b:eb:11:e3:bc:e0:c1:87:f7:c7:a6:30: 8f:ce:b7:af:c2:31:24:00:62:6c:6d:8d:e5:8e:b9: 19:22:4b:5e:9e:cd:23:90:69:36:02:25:04:50:f8: 22:8d:ed:74:7e:5b:28:ab:9c:2f:fa:dc:ab:cd:1e: df:82:f6:2a:d2:11:2f:ea:58:f0:a6:20:cd:29:5d: a8:d3:4b:b6:a5:03:9b:2c:e9:de:84:93:e8:c6:2c: ef:0f:76:20:a8:88:a4:a8:22:92:a9:2f:b6:5e:a7: 57:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C9:55:AD:6D:FA:E6:67:BE:65:E8:93:1D:8D:36:34:F7:C5:1F:2A X509v3 Authority Key Identifier: keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1b:9d:11:cf:5a:33:88:8f:7f:9c:1f:14:5b:ec:f8:0a:7d: 36:b1:f9:0d:3a:94:4d:2d:e2:3d:2a:83:be:b5:ca:c2:b8:5e: 6d:18:1c:b4:21:1a:a0:d8:a3:6e:a1:f6:b2:b1:42:44:5b:a1: a8:65:a1:22:a6:76:15:c0:2d:84:87:bf:3f:ae:d9:40:a8:af: f2:9f:f5:15:75:e4:a2:65:e8:0e:30:00:8e:83:ab:ff:6e:76: d4:67:6d:19:ff:88:f3:e2:73:28:0e:ed:17:9a:a5:d6:d9:b1: 88:8b:74:23:14:fc:9e:5b:9f:c5:b4:57:80:e6:4d:ec:72:d4: 91:2c:44:98:ba:11:95:5f:0d:df:a0:da:6b:83:3a:0c:d5:cb: fe:aa:97:25:f6:a9:c0:11:6f:21:5b:b2:d2:93:67:e8:4e:ff: 5b:6d:b9:8c:db:fe:82:94:d3:7a:7b:3e:fa:95:a5:af:2f:b6: 0a:2e:eb:be:61:a7:1c:3d:ed:be:dd:97:44:57:60:41:e6:b6: 54:77:dd:69:01:cb:31:b6:7a:d9:df:a3:5d:21:cf:70:d2:0d: b5:0d:29:b3:79:55:6c:a2:57:c8:b3:18:ee:23:8d:cb:6e:db: ac:f2:ab:43:b5:75:64:c1:01:24:06:26:ee:df:10:f2:de:a5: 5b:53:8e:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGPUKscriUDeoPdRZPy2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMDEwOTM4ZDllZjcyMTU4ZmM5OGJkNDVkZTcxYjBiMWE5 ZmY3MjkwHhcNMjYwMTI1MDMwMDU3WhcNMjYwMTI2MDMwMDU3WjAzMTEwLwYDVQQD EygzM2M5NTVhZDZkZmFlNjY3YmU2NWU4OTMxZDhkMzYzNGY3YzUxZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0wZwC3vEgnKSaIpcVuKPwwuWH/N EviJJYE64BhzB2c2RIkQo5/IOElAcIKii/DaAWa1CqejANPeUR7vf/Eu+D3BQybA Iu4AQm0W0FYm6H2G2ys5HpgZa1skftT79JzNkP+gEfjlZi80S0N9gUdQWAJjP+BE tGryqUvDLKHXPdYI4c888yHychGjfcaNA4DkV5bVI50bju9L6xHjvODBh/fHpjCP zrevwjEkAGJsbY3ljrkZIktens0jkGk2AiUEUPgije10flsoq5wv+tyrzR7fgvYq 0hEv6ljwpiDNKV2o00u2pQObLOnehJPoxizvD3YgqIikqCKSqS+2XqdXhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPJVa1t+uZnvmXokx2NNjT3xR8qMB8GA1UdIwQY MBaAFN0BCTjZ73IVj8mL1F3nGwsan/cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYt Y2VmZjU0NmM5MzNlLzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYtY2VmZjU0NmM5MzNl LzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxudEc9a M4iPf5wfFFvs+Ap9NrH5DTqUTS3iPSqDvrXKwrhebRgctCEaoNijbqH2srFCRFuh qGWhIqZ2FcAthIe/P67ZQKiv8p/1FXXkomXoDjAAjoOr/2521GdtGf+I8+JzKA7t F5ql1tmxiIt0IxT8nlufxbRXgOZN7HLUkSxEmLoRlV8N36Daa4M6DNXL/qqXJfap wBFvIVuy0pNn6E7/W225jNv+gpTTens++pWlry+2Ci7rvmGnHD3tvt2XRFdgQea2 VHfdaQHLMbZ62d+jXSHPcNINtQ0ps3lVbKJXyLMY7iONy27brPKrQ7V1ZMEBJAYm 7t8Q8t6lW1OOrA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:13 2026 by rpki-client