This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft File: 3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json) Hash identifier: USDduI3K9b9uy5g13YlWqeeIPFi6chKHn2q+g5hp4MI= Subject key identifier: A5:C2:3A:D6:D7:E0:8D:B4:6F:0C:2D:DD:8E:01:49:0F:08:85:EC:82 Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64 Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64 Certificate serial: 019BF574D45AAB2E3885CA8962F90F954539 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft Manifest number: 17F9 Signing time: Sun 25 Jan 2026 14:00:32 +0000 Manifest this update: Sun 25 Jan 2026 14:00:32 +0000 Manifest next update: Mon 26 Jan 2026 14:00:32 +0000 Files and hashes: 1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: qPSxf8KVc7Vaht+NJYWMjs2gcyKIwLtvealIpYr04q8=) 2: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (hash: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw=) 3: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (hash: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI=) 4: g0mhvAZsLExNosr94fQnamWzRDY.roa (hash: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:d4:5a:ab:2e:38:85:ca:89:62:f9:0f:95:45:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64 Validity Not Before: Jan 25 14:00:32 2026 GMT Not After : Jan 26 14:00:32 2026 GMT Subject: CN=a5c23ad6d7e08db46f0c2ddd8e01490f0885ec82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:eb:40:8a:2b:d2:04:4b:5d:cb:b9:b1:fb: 21:0f:c7:83:67:e2:b9:db:87:02:dc:0f:b9:c8:0e: 27:2a:85:fc:2f:a9:44:96:8e:b6:b9:77:2a:fa:37: 31:61:f6:d8:0b:d4:fb:51:8b:9a:1b:cd:65:70:b1: a0:26:66:85:54:35:86:6b:61:c5:8a:75:3a:b5:29: a6:f4:23:74:ed:1b:71:e1:f0:6c:c8:36:f8:9f:27: 77:65:ee:fe:24:f3:f5:57:c0:c2:da:1d:9f:fc:19: ce:61:3e:fb:af:3a:03:56:25:72:d0:b3:33:ec:fd: b6:56:50:4f:69:44:e6:5f:f4:6b:20:67:7c:aa:59: ab:f8:9d:f8:85:15:da:ea:d0:05:f4:be:8d:0b:51: 78:4c:55:b2:83:c3:d9:87:5a:21:f2:d1:d8:c3:09: 39:35:06:4d:d1:14:23:2f:8a:3c:db:c9:f5:45:2a: 4e:fb:f9:4a:cc:5f:ee:4c:b0:77:09:3a:e0:d9:74: df:45:62:c8:39:a1:05:b6:6a:ae:cb:6a:b1:96:35: e3:3d:2c:53:4a:94:ef:61:ef:81:22:c6:70:b5:a1: 9a:f4:10:4b:05:7a:5c:44:62:14:26:a2:c6:5c:c7: 5b:59:6d:f4:c0:d1:98:ef:9a:fc:21:fb:c2:6a:66: db:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C2:3A:D6:D7:E0:8D:B4:6F:0C:2D:DD:8E:01:49:0F:08:85:EC:82 X509v3 Authority Key Identifier: keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:fd:0c:1c:e1:6e:78:40:86:10:8b:ed:97:60:63:4d:5f:dd: 7f:4a:74:27:29:18:7a:06:db:eb:1a:bc:f8:58:24:ed:74:c7: 68:79:2d:60:45:8e:8b:47:8a:eb:1b:be:bf:b8:5e:73:c9:3c: 7a:f0:cf:1a:41:e2:84:17:ab:4a:47:0f:36:0d:09:3b:30:61: 42:f0:d4:39:e7:a5:5a:b4:78:1e:26:4b:e7:a4:09:18:de:a1: a0:28:da:0d:68:94:63:42:f2:1c:01:16:20:12:72:f4:a0:6a: 8b:94:4f:fb:fb:ef:ca:b9:1d:bf:66:1a:c9:ac:78:bf:da:06: 59:fc:29:58:1e:70:e7:48:14:b0:f7:63:75:05:cf:82:5d:dd: ac:75:2b:75:a1:1a:88:67:5b:c8:89:0a:5e:7e:12:3f:b6:6c: 3b:2f:bd:b2:48:40:e5:77:46:ac:95:45:d0:9c:21:3a:4f:71: 7e:d9:1d:58:17:af:d9:59:c4:a5:22:a0:8e:91:dc:2f:0a:db: a3:fb:ba:98:28:68:a4:d6:56:d9:cf:c3:57:5e:db:3b:bd:a0: f1:e7:1b:fd:74:e7:a6:5e:80:6b:48:2f:d0:9a:a6:5c:f7:7f: 8e:ae:51:fc:d7:75:1d:4c:38:2f:4b:5b:c1:1e:51:93:db:c8: bb:46:60:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dNRaqy44hcqJYvkPlUU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNWYyZTdjYzJjNjg3ZjU4YzBkMWY2MTMyYmIyZGNmZGYz OGNiNjQwHhcNMjYwMTI1MTQwMDMyWhcNMjYwMTI2MTQwMDMyWjAzMTEwLwYDVQQD EyhhNWMyM2FkNmQ3ZTA4ZGI0NmYwYzJkZGQ4ZTAxNDkwZjA4ODVlYzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZfrQIor0gRLXcu5sfshD8eDZ+K5 24cC3A+5yA4nKoX8L6lElo62uXcq+jcxYfbYC9T7UYuaG81lcLGgJmaFVDWGa2HF inU6tSmm9CN07Rtx4fBsyDb4nyd3Ze7+JPP1V8DC2h2f/BnOYT77rzoDViVy0LMz 7P22VlBPaUTmX/RrIGd8qlmr+J34hRXa6tAF9L6NC1F4TFWyg8PZh1oh8tHYwwk5 NQZN0RQjL4o828n1RSpO+/lKzF/uTLB3CTrg2XTfRWLIOaEFtmquy2qxljXjPSxT SpTvYe+BIsZwtaGa9BBLBXpcRGIUJqLGXMdbWW30wNGY75r8IfvCambbEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXCOtbX4I20bwwt3Y4BSQ8IheyCMB8GA1UdIwQY MBaAFN1fLnzCxof1jA0fYTK7Lc/fOMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMt OWRjZmQyZWYzMDIzLzEvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMtOWRjZmQyZWYzMDIz LzEvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxP0MHOFu eECGEIvtl2BjTV/df0p0JykYegbb6xq8+Fgk7XTHaHktYEWOi0eK6xu+v7hec8k8 evDPGkHihBerSkcPNg0JOzBhQvDUOeelWrR4HiZL56QJGN6hoCjaDWiUY0LyHAEW IBJy9KBqi5RP+/vvyrkdv2Yayax4v9oGWfwpWB5w50gUsPdjdQXPgl3drHUrdaEa iGdbyIkKXn4SP7ZsOy+9skhA5XdGrJVF0JwhOk9xftkdWBev2VnEpSKgjpHcLwrb o/u6mChopNZW2c/DV17bO72g8ecb/XTnpl6Aa0gv0JqmXPd/jq5R/Nd1HUw4L0tb wR5Rk9vIu0ZgSA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:24 2026 by rpki-client