This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json) Hash identifier: /ZAIn7+tPw0PkdsR112+n8T4jwGxz9AedjeBuZzPOq0= Subject key identifier: 83:FA:A3:D9:01:B9:88:F2:BE:AD:0E:94:5E:BE:79:BF:01:ED:0E:08 Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9 Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9 Certificate serial: 019BF650AA69518D2DF7853F8867F4570677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft Manifest number: 0B1A Signing time: Sun 25 Jan 2026 18:00:40 +0000 Manifest this update: Sun 25 Jan 2026 18:00:40 +0000 Manifest next update: Mon 26 Jan 2026 18:00:40 +0000 Files and hashes: 1: TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa (hash: gr5IW23RFNN3IAOqTCUEX95vD/VGxJTWiQyqhzBx/Xc=) 2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: nHdptwyW5/02GZErNBcioc3NGZyHueWQsFOU7VR2IjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:aa:69:51:8d:2d:f7:85:3f:88:67:f4:57:06:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9 Validity Not Before: Jan 25 18:00:40 2026 GMT Not After : Jan 26 18:00:40 2026 GMT Subject: CN=83faa3d901b988f2bead0e945ebe79bf01ed0e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:72:90:2a:46:59:e1:d9:b3:40:21:9f:d2: 50:f3:48:27:8c:29:48:64:5d:b3:88:da:98:46:b1: 00:84:d3:05:8e:35:8e:e4:36:64:31:43:be:46:35: 68:66:32:fd:88:b5:41:bf:c2:99:92:1e:7d:92:4e: b7:ed:34:e1:ba:da:99:01:76:38:a8:87:2d:86:c7: f1:99:4a:3d:61:b2:4e:d3:b2:00:d6:7c:8e:d0:62: e9:b3:bf:61:ef:37:03:54:26:aa:5e:e1:03:43:fe: 7c:85:85:61:94:18:23:c0:7e:02:99:a1:06:c1:21: d2:70:e5:c0:5e:cd:5f:ac:55:ca:7a:0b:bb:ef:17: e4:aa:cf:44:9b:7a:c3:db:87:70:f9:5e:e4:d2:1a: 4a:c1:ae:25:1e:07:03:e5:b9:5d:f7:26:1b:fe:2d: fa:03:63:bb:8a:18:60:ac:3e:32:40:62:c5:4e:06: 4f:03:1a:21:18:fe:4e:6f:aa:41:5b:93:db:9e:d3: f9:0b:a5:cb:e0:04:12:c4:11:62:12:a0:f5:56:fe: 9f:95:bf:93:03:6b:ec:0b:04:e9:01:ae:d4:e1:ef: 8a:93:ff:e9:44:73:42:04:01:2f:04:a6:db:eb:0a: 19:5f:14:34:e0:7c:72:d7:23:4f:f7:e9:7d:de:20: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FA:A3:D9:01:B9:88:F2:BE:AD:0E:94:5E:BE:79:BF:01:ED:0E:08 X509v3 Authority Key Identifier: keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:70:68:77:14:9a:b4:fe:b1:bd:fb:63:de:16:30:dc:e7:9a: 3d:d4:fb:b3:1d:ac:18:6c:2c:62:cf:ef:a2:52:45:d5:bd:10: 93:e8:ef:57:de:c3:e9:e7:c6:6f:41:bd:28:b8:12:5c:80:e8: d4:59:e2:a4:9d:70:03:c5:df:e3:58:d4:59:91:9d:80:df:30: 0f:e0:12:7b:54:6e:76:21:e3:7d:27:aa:23:64:26:ed:ea:8f: e7:1b:95:36:85:4c:cf:e6:d1:8f:c9:3a:70:44:90:53:14:4e: 48:ae:2e:1f:2b:f1:a3:d1:32:36:2b:db:6e:39:1d:bc:37:dc: 2d:66:28:44:5e:46:18:15:f1:70:b7:c4:57:72:c6:49:41:b1: 1d:31:50:5f:d9:88:92:78:c3:1e:c1:09:30:2e:ee:2f:81:94: 6b:44:3d:8a:ad:cc:c1:48:07:16:6d:ef:07:ea:bd:34:3d:d0: 1a:39:67:e2:fa:6e:f1:18:71:17:46:61:3d:73:98:f0:3f:64: 99:a0:e7:16:82:0a:84:4a:f8:bb:95:31:43:30:c3:e2:a2:10: 1a:b8:a4:9b:df:88:95:32:5c:c1:83:ec:b7:94:66:4d:3e:42: 1e:cc:e3:a1:86:0e:cf:6f:25:8e:c5:19:8d:3a:a9:b7:92:4e: 09:54:01:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UKppUY0t94U/iGf0VwZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzBiODkyODFjZGI3NjFhMDRhZGNiYzBhYzQxNzA1NDEz MTUwZTkwHhcNMjYwMTI1MTgwMDQwWhcNMjYwMTI2MTgwMDQwWjAzMTEwLwYDVQQD Eyg4M2ZhYTNkOTAxYjk4OGYyYmVhZDBlOTQ1ZWJlNzliZjAxZWQwZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFJykCpGWeHZs0Ahn9JQ80gnjClI ZF2ziNqYRrEAhNMFjjWO5DZkMUO+RjVoZjL9iLVBv8KZkh59kk637TThutqZAXY4 qIcthsfxmUo9YbJO07IA1nyO0GLps79h7zcDVCaqXuEDQ/58hYVhlBgjwH4CmaEG wSHScOXAXs1frFXKegu77xfkqs9Em3rD24dw+V7k0hpKwa4lHgcD5bld9yYb/i36 A2O7ihhgrD4yQGLFTgZPAxohGP5Ob6pBW5PbntP5C6XL4AQSxBFiEqD1Vv6flb+T A2vsCwTpAa7U4e+Kk//pRHNCBAEvBKbb6woZXxQ04Hxy1yNP9+l93iAd+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP6o9kBuYjyvq0OlF6+eb8B7Q4IMB8GA1UdIwQY MBaAFLtwuJKBzbdhoErcvArEFwVBMVDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2Yjgt NDE3MzIwY2JhZTU1LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2YjgtNDE3MzIwY2JhZTU1 LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3BodxSa tP6xvftj3hYw3OeaPdT7sx2sGGwsYs/volJF1b0Qk+jvV97D6efGb0G9KLgSXIDo 1FnipJ1wA8Xf41jUWZGdgN8wD+ASe1RudiHjfSeqI2Qm7eqP5xuVNoVMz+bRj8k6 cESQUxROSK4uHyvxo9EyNivbbjkdvDfcLWYoRF5GGBXxcLfEV3LGSUGxHTFQX9mI knjDHsEJMC7uL4GUa0Q9iq3MwUgHFm3vB+q9ND3QGjln4vpu8RhxF0ZhPXOY8D9k maDnFoIKhEr4u5UxQzDD4qIQGrikm9+IlTJcwYPst5RmTT5CHszjoYYOz28ljsUZ jTqpt5JOCVQBSA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:54 2026 by rpki-client