This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json) Hash identifier: 7pt9rhg3FWjqJMHh3sdfol7UpBG/ONUqOdomiFTKhoE= Subject key identifier: 7A:65:3C:98:07:8C:65:25:7A:CB:30:EB:55:ED:08:DD:35:B7:76:32 Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Certificate serial: 019BF4D00EA50F713EC62768787382470D6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft Manifest number: 174F Signing time: Sun 25 Jan 2026 11:00:34 +0000 Manifest this update: Sun 25 Jan 2026 11:00:34 +0000 Manifest next update: Mon 26 Jan 2026 11:00:34 +0000 Files and hashes: 1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: 5JriQbGXzgFkxHQdnnIzoH218ISb0l5fGRYUM1BzifM=) 2: f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa (hash: W6ac4Me1PrNz+AfdrWTNIVyjCCLobhnKb0ISiPAW2p8=) 3: n9DHKwk4Wny8zDrEY8_hSkrJ_RA.roa (hash: gVRzaVlrA0PT4P/eOqodE9EyzqJ1MpOnj1J5G+nWuZc=) 4: nAbHaxO3F_18HAXfxwmg-q53xPw.roa (hash: aQFQyHqG1hcOEyQibZ100kvvqbyGli2FgVSov4NcoCY=) 5: xsB8VuxguMjVGEEIoWg1RDm1ZYo.roa (hash: mQSj5E+L8Ak9ruHD0WWJ2/J6mb1ky6kbhBVPI1nZD5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:0e:a5:0f:71:3e:c6:27:68:78:73:82:47:0d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Validity Not Before: Jan 25 11:00:34 2026 GMT Not After : Jan 26 11:00:34 2026 GMT Subject: CN=7a653c98078c65257acb30eb55ed08dd35b77632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:32:65:d3:95:5a:e8:c0:e4:cd:db:d4:33: 58:41:89:80:06:cc:3e:84:18:61:c7:ae:63:3c:d5: fc:44:ee:67:b7:3d:3e:70:d3:4c:61:47:2a:d5:80: 0b:65:f6:4e:72:fc:b0:d3:4e:b7:bf:60:a7:65:c5: 58:c2:99:e7:58:4e:40:64:4d:c9:ed:14:84:cc:ab: 8a:b5:02:ee:9b:5c:b7:30:b0:fa:88:83:c9:80:63: 99:d8:d8:5a:09:a7:90:a4:d6:70:ed:0f:46:64:04: 63:2a:e7:03:f8:7a:fe:3f:53:e5:63:a3:02:31:7f: da:e4:07:d4:ca:a7:c2:49:3c:1a:b8:f1:97:7f:3c: 0a:02:04:e6:25:ac:b9:1b:24:63:dc:44:4f:4f:8c: 21:45:7a:c8:26:a2:40:2e:6d:9b:94:96:59:01:3e: 6a:98:f9:e3:ba:3c:e2:90:18:ba:28:9f:60:8c:e6: 4c:09:3d:0c:ea:16:11:e4:15:fc:5a:7b:43:5c:ef: a8:f3:be:a1:0d:54:cc:59:8a:d6:24:67:a2:8c:1b: fa:16:98:bb:fd:ce:93:a4:19:55:ac:be:43:12:3a: b6:7b:a9:d7:fa:7b:06:52:43:95:4c:0b:73:52:7e: 45:c5:63:99:3b:c5:61:11:ff:03:96:bf:43:ff:27: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:65:3C:98:07:8C:65:25:7A:CB:30:EB:55:ED:08:DD:35:B7:76:32 X509v3 Authority Key Identifier: keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:21:0e:07:f4:35:05:34:3e:d2:24:f8:1f:15:29:1e:76:d6: 69:87:b4:f5:89:6e:e9:aa:ed:d2:16:7e:1b:1d:f7:1a:50:db: 87:d2:bf:29:7f:b2:fc:5c:8a:60:e1:09:0c:6d:06:0b:fb:1e: 52:d0:0d:f6:e7:4a:92:61:98:b4:3a:7b:88:5c:25:36:ff:de: 84:9d:80:e7:8a:69:06:3b:23:8b:16:2f:ed:5a:b8:64:7c:9c: d5:e6:70:e3:2d:d0:65:e5:54:48:89:3a:98:55:59:a3:78:6a: fe:34:8c:d8:3a:8e:ab:a3:ad:16:47:11:2e:e2:5d:2b:25:67: 1b:84:6d:23:6c:5d:0d:61:e8:2c:72:71:73:07:13:f0:00:f2: 13:89:92:0a:93:76:50:2d:8b:21:a9:9e:7d:a7:90:57:1f:c5: a2:ce:88:cd:c1:0d:2b:ca:71:9d:41:4b:5a:6a:cd:f8:0b:14: b7:f2:28:fc:69:b3:ce:d6:49:3a:1e:10:11:da:87:b7:1f:87: e2:21:02:5b:25:54:3f:8c:d0:25:fa:2b:c7:89:59:f2:3e:4c: e8:17:4b:f9:93:01:dc:44:9f:d8:b7:b7:47:c6:e8:01:16:1a: a8:d7:67:04:9e:2f:2d:25:ce:56:63:d4:f0:d5:ac:4d:41:1e: df:6d:9d:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00A6lD3E+xidoeHOCRw1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk NzExNTUwHhcNMjYwMTI1MTEwMDM0WhcNMjYwMTI2MTEwMDM0WjAzMTEwLwYDVQQD Eyg3YTY1M2M5ODA3OGM2NTI1N2FjYjMwZWI1NWVkMDhkZDM1Yjc3NjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYQyZdOVWujA5M3b1DNYQYmABsw+ hBhhx65jPNX8RO5ntz0+cNNMYUcq1YALZfZOcvyw0063v2CnZcVYwpnnWE5AZE3J 7RSEzKuKtQLum1y3MLD6iIPJgGOZ2NhaCaeQpNZw7Q9GZARjKucD+Hr+P1PlY6MC MX/a5AfUyqfCSTwauPGXfzwKAgTmJay5GyRj3ERPT4whRXrIJqJALm2blJZZAT5q mPnjujzikBi6KJ9gjOZMCT0M6hYR5BX8WntDXO+o876hDVTMWYrWJGeijBv6Fpi7 /c6TpBlVrL5DEjq2e6nX+nsGUkOVTAtzUn5FxWOZO8VhEf8Dlr9D/yfVDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHplPJgHjGUlessw61XtCN01t3YyMB8GA1UdIwQY MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt NjUyNDljYmM1NzNjLzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSEOB/Q1 BTQ+0iT4HxUpHnbWaYe09Ylu6art0hZ+Gx33GlDbh9K/KX+y/FyKYOEJDG0GC/se UtAN9udKkmGYtDp7iFwlNv/ehJ2A54ppBjsjixYv7Vq4ZHyc1eZw4y3QZeVUSIk6 mFVZo3hq/jSM2DqOq6OtFkcRLuJdKyVnG4RtI2xdDWHoLHJxcwcT8ADyE4mSCpN2 UC2LIamefaeQVx/Fos6IzcENK8pxnUFLWmrN+AsUt/Io/GmzztZJOh4QEdqHtx+H 4iECWyVUP4zQJforx4lZ8j5M6BdL+ZMB3ESf2Le3R8boARYaqNdnBJ4vLSXOVmPU 8NWsTUEe322d6w== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:57 2026 by rpki-client