This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json) Hash identifier: 9uE8b990Wxrf5rN8cUcBcHkbnMtWkrpAZOcRZloWdFs= Subject key identifier: 2E:E4:43:F2:44:A2:21:01:DE:C0:23:9B:69:E8:8E:18:DD:A9:49:CB Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52 Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52 Certificate serial: 019BF68786D57E0F1B0D6B63273168D8E318 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft Manifest number: 0442 Signing time: Sun 25 Jan 2026 19:00:35 +0000 Manifest this update: Sun 25 Jan 2026 19:00:35 +0000 Manifest next update: Mon 26 Jan 2026 19:00:35 +0000 Files and hashes: 1: oMb2k7Oz9unm3siEKObsvSGOu5s.roa (hash: pGiHyUdRro6M/TUFejm603qJXDKgL9TMHqLZBCWVjz4=) 2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: eUkMmswd1l0YlePgfCtLZZcA8BURyGZQquNU0vqF/H4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:86:d5:7e:0f:1b:0d:6b:63:27:31:68:d8:e3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52 Validity Not Before: Jan 25 19:00:35 2026 GMT Not After : Jan 26 19:00:35 2026 GMT Subject: CN=2ee443f244a22101dec0239b69e88e18dda949cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:20:90:43:7a:1e:7f:ae:aa:bd:4f:de:4d:43: 1c:7b:f7:1e:bd:2f:ac:58:31:66:10:10:6d:f3:57: d5:18:47:20:e6:6c:a5:43:34:fb:fb:cb:64:8f:02: be:83:7c:cd:f1:48:17:f8:fa:94:db:7b:cc:03:e9: 0c:91:ce:5d:69:6b:c9:52:1d:94:1f:7d:a3:31:14: 35:2d:43:20:75:55:9b:62:bc:3d:f6:37:88:71:3c: 1f:8a:0d:c4:61:87:18:e6:fa:83:b0:e1:7d:3a:d1: 0c:81:7d:eb:ec:4f:c4:be:62:a2:45:43:d8:ab:73: 3d:35:d0:82:cd:df:bb:d7:b5:ec:fb:a4:20:ea:9e: ab:f2:5f:1c:54:dd:95:ab:67:e8:5f:04:87:99:d3: 3d:ca:4f:2f:cc:40:96:a0:e8:a8:f8:50:da:1f:03: bc:3e:94:c7:ca:27:f9:a4:6f:21:54:8a:13:88:83: ac:82:ea:7e:c6:20:59:7b:d5:18:98:b4:e7:8f:eb: 94:b4:b9:2c:d8:c5:ad:1a:e2:56:fa:f0:c4:de:6e: f0:49:05:14:9e:72:64:97:80:60:6f:f9:ff:5a:28: 7e:33:c4:8b:3d:cf:dc:18:af:0b:e5:bf:9e:7c:c8: 4d:1f:77:de:b3:47:bb:47:83:2d:78:27:3a:e1:07: a9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E4:43:F2:44:A2:21:01:DE:C0:23:9B:69:E8:8E:18:DD:A9:49:CB X509v3 Authority Key Identifier: keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:50:9b:ac:d8:ea:a4:70:73:a2:cf:51:ec:56:bb:e8:b0:77: 92:54:a8:02:20:df:f6:f0:bb:70:b3:2f:53:0f:63:b6:3a:b0: 74:b7:53:16:15:7a:e1:45:8b:0b:17:6b:0c:91:5b:20:e9:11: cc:1b:ca:32:c3:c8:06:8e:b1:76:86:3d:5e:85:34:e1:50:16: 64:3e:af:9b:da:4e:b5:d8:0f:bc:ad:66:47:e5:31:e8:56:64: 80:72:9f:32:7d:f8:0e:08:43:23:7e:01:e5:95:e2:ff:3e:c3: d6:eb:66:0e:8d:ad:84:a7:8a:c8:26:e0:9a:10:ef:91:48:04: 32:d3:40:97:43:51:6c:67:dc:e5:6f:2a:46:e1:d7:03:34:3c: c2:19:d4:41:89:c8:47:c6:22:cb:0e:e7:05:51:fc:e0:14:b4: 11:f1:84:d1:e0:70:41:ff:74:09:40:dd:44:12:6c:2c:3f:f7: 7a:96:c5:7f:46:18:45:e7:62:e7:f6:db:a4:64:50:fe:3a:45: 04:76:2e:59:c8:03:9f:5e:cd:63:29:7a:63:9c:c1:b7:72:f3: 88:65:05:92:5a:23:23:eb:1d:13:33:d2:4c:dd:d7:8e:8d:3d: 55:aa:c2:e2:a4:41:81:11:ed:db:ea:93:95:38:b2:44:c8:b8: fd:a2:47:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h4bVfg8bDWtjJzFo2OMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZGRjNzNiNTlhMWZjZGVlMjJlMjU4MjRkNDBhY2MyNzI4 NmFhNTIwHhcNMjYwMTI1MTkwMDM1WhcNMjYwMTI2MTkwMDM1WjAzMTEwLwYDVQQD EygyZWU0NDNmMjQ0YTIyMTAxZGVjMDIzOWI2OWU4OGUxOGRkYTk0OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CCQQ3oef66qvU/eTUMce/cevS+s WDFmEBBt81fVGEcg5mylQzT7+8tkjwK+g3zN8UgX+PqU23vMA+kMkc5daWvJUh2U H32jMRQ1LUMgdVWbYrw99jeIcTwfig3EYYcY5vqDsOF9OtEMgX3r7E/EvmKiRUPY q3M9NdCCzd+717Xs+6Qg6p6r8l8cVN2Vq2foXwSHmdM9yk8vzECWoOio+FDaHwO8 PpTHyif5pG8hVIoTiIOsgup+xiBZe9UYmLTnj+uUtLks2MWtGuJW+vDE3m7wSQUU nnJkl4Bgb/n/Wih+M8SLPc/cGK8L5b+efMhNH3fes0e7R4MteCc64QepCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7kQ/JEoiEB3sAjm2nojhjdqUnLMB8GA1UdIwQY MBaAFKzdxztZofze4i4lgk1ArMJyhqpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84Nzg4ZTUtOGFiOC00M2U5LTlkYWIt YTBlYzg0YTMxMzkzLzEvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS84Nzg4ZTUtOGFiOC00M2U5LTlkYWItYTBlYzg0YTMxMzkz LzEvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVCbrNjq pHBzos9R7Fa76LB3klSoAiDf9vC7cLMvUw9jtjqwdLdTFhV64UWLCxdrDJFbIOkR zBvKMsPIBo6xdoY9XoU04VAWZD6vm9pOtdgPvK1mR+Ux6FZkgHKfMn34DghDI34B 5ZXi/z7D1utmDo2thKeKyCbgmhDvkUgEMtNAl0NRbGfc5W8qRuHXAzQ8whnUQYnI R8Yiyw7nBVH84BS0EfGE0eBwQf90CUDdRBJsLD/3epbFf0YYRedi5/bbpGRQ/jpF BHYuWcgDn17NYyl6Y5zBt3LziGUFklojI+sdEzPSTN3Xjo09VarC4qRBgRHt2+qT lTiyRMi4/aJHGQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:49 2026 by rpki-client