This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: iNuDVr7St6rlt5TCsT1OT3lUCXwhvWAYPmseVQfKxCI= Subject key identifier: 7A:23:1C:51:80:35:68:2F:CC:FA:21:98:1C:A5:BA:6E:18:6A:D5:2B Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019BF34F945C9A7F7625B8C349C3CAA94EAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 06D3 Signing time: Sun 25 Jan 2026 04:00:36 +0000 Manifest this update: Sun 25 Jan 2026 04:00:36 +0000 Manifest next update: Mon 26 Jan 2026 04:00:36 +0000 Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: FnlvhSjqDeFY/9NB9DQ8y4ia5O57JHoEZAY0h25aVso=) 2: HgNHcMq7NIa8W_Oie54BpJeBOb4.roa (hash: +M17r4uc13A/CN+iJDH8M4JfdOZqtI02WSgDMbtnpJo=) 3: bSrLj4dk7vC2yPiiS4puv6QDMCg.roa (hash: b2kWSMTdmZr8cROp9MUUr9c5xUNnNn9tLEdsg0Fja3c=) 4: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=) 5: gshxbhBitWunn7XnxdgbU8rd8sQ.roa (hash: yVxOcZA6PG9vRRylQFUG5bd57Ctzru9SJRfVr2IqaGg=) 6: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=) 7: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=) 8: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:94:5c:9a:7f:76:25:b8:c3:49:c3:ca:a9:4e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Jan 25 04:00:36 2026 GMT Not After : Jan 26 04:00:36 2026 GMT Subject: CN=7a231c518035682fccfa21981ca5ba6e186ad52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:35:7a:a0:a4:e5:2b:c7:f3:97:c4:0d:24: b3:0d:6c:65:a7:f6:6c:3d:55:2e:7d:4a:ed:20:87: b1:5b:3a:1b:cf:77:3b:f5:84:55:ff:53:ce:a7:3d: 7b:82:66:b7:62:dd:45:6b:c7:a1:6f:2c:9d:55:32: 6b:8b:c3:e5:84:9a:09:af:b0:59:2a:21:b7:57:01: f7:94:9a:91:68:d4:d5:ef:96:57:0e:86:17:fd:ad: 58:71:cb:bf:01:1d:40:3c:a1:bf:07:69:9a:52:48: 45:e5:98:93:ff:db:3b:89:9e:e5:47:45:93:48:fc: 00:28:7b:48:e6:2f:b2:54:7c:74:bf:99:dd:3c:92: 40:a8:5c:a9:db:98:fd:56:60:d6:cd:13:45:e9:e6: 04:cf:b4:84:0d:bf:3c:71:14:53:a9:61:3e:e5:1e: 1e:08:44:c9:50:27:02:4d:ec:f9:4c:57:f9:df:fc: 5b:95:c4:74:5f:ea:e7:39:5a:64:8c:e6:d0:2b:5e: 7c:df:5f:bb:1f:aa:d0:b9:41:6a:ee:21:9e:98:ea: ba:36:1d:6e:d8:73:5e:68:1e:50:ef:44:76:dc:f8: ae:2f:fc:61:48:a8:9c:ef:2f:3a:fc:1d:43:33:15: 13:f6:d0:c8:36:3f:c1:aa:39:c3:b0:c4:d0:e5:52: 7b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:23:1C:51:80:35:68:2F:CC:FA:21:98:1C:A5:BA:6E:18:6A:D5:2B X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:24:4a:21:60:37:ca:11:d4:1a:f1:79:cf:77:5b:42:9d:76: da:3a:a9:af:56:06:70:6c:29:cf:6f:89:2a:5b:6d:f7:e2:eb: 05:1b:a5:b4:cc:1a:d6:3a:57:37:0a:9f:d0:5f:9d:23:f5:b2: 32:59:c1:ee:8e:3c:eb:0c:58:b4:b3:80:94:47:a0:14:cd:23: 18:72:9d:9e:7a:db:a7:d4:af:21:8a:92:64:bc:6b:a1:df:45: 51:b1:9d:e5:1e:18:39:67:4f:7b:d9:09:28:6f:24:bc:d8:7d: 48:96:7c:03:17:3a:fd:54:2b:b3:9f:a0:d5:ca:ab:59:53:01: 07:fc:85:95:f0:44:03:8a:ea:fd:e3:d4:45:22:ba:da:4d:2a: 77:59:fa:41:d3:18:c1:5e:fa:68:f2:d8:9d:02:99:06:3d:97: e4:b9:6c:1a:38:b4:19:c8:c4:34:b3:02:4c:24:41:9a:86:46: f9:5b:ab:1a:5e:cc:1c:cd:4d:54:52:f6:90:67:3a:25:83:f7: b7:b9:ba:60:27:85:ec:73:25:68:ad:59:65:7f:62:78:6d:2e: 08:78:f8:8f:f1:9c:b4:35:d5:68:3e:0f:63:8e:80:e4:c5:91: 19:6b:1f:e6:66:ba:4f:4f:9a:d5:05:ae:58:d9:2d:36:59:a2: dd:57:da:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT5Rcmn92JbjDScPKqU6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYwMTI1MDQwMDM2WhcNMjYwMTI2MDQwMDM2WjAzMTEwLwYDVQQD Eyg3YTIzMWM1MTgwMzU2ODJmY2NmYTIxOTgxY2E1YmE2ZTE4NmFkNTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34M1eqCk5SvH85fEDSSzDWxlp/Zs PVUufUrtIIexWzobz3c79YRV/1POpz17gma3Yt1Fa8ehbyydVTJri8PlhJoJr7BZ KiG3VwH3lJqRaNTV75ZXDoYX/a1Yccu/AR1APKG/B2maUkhF5ZiT/9s7iZ7lR0WT SPwAKHtI5i+yVHx0v5ndPJJAqFyp25j9VmDWzRNF6eYEz7SEDb88cRRTqWE+5R4e CETJUCcCTez5TFf53/xblcR0X+rnOVpkjObQK15831+7H6rQuUFq7iGemOq6Nh1u 2HNeaB5Q70R23PiuL/xhSKic7y86/B1DMxUT9tDINj/BqjnDsMTQ5VJ7FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHojHFGANWgvzPohmBylum4YatUrMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCRKIWA3 yhHUGvF5z3dbQp122jqpr1YGcGwpz2+JKltt9+LrBRultMwa1jpXNwqf0F+dI/Wy MlnB7o486wxYtLOAlEegFM0jGHKdnnrbp9SvIYqSZLxrod9FUbGd5R4YOWdPe9kJ KG8kvNh9SJZ8Axc6/VQrs5+g1cqrWVMBB/yFlfBEA4rq/ePURSK62k0qd1n6QdMY wV76aPLYnQKZBj2X5LlsGji0GcjENLMCTCRBmoZG+VurGl7MHM1NVFL2kGc6JYP3 t7m6YCeF7HMlaK1ZZX9ieG0uCHj4j/GctDXVaD4PY46A5MWRGWsf5ma6T0+a1QWu WNktNlmi3Vfa6w== -----END CERTIFICATE-----Generated at Sun Jan 25 12:33:07 2026 by rpki-client