This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json) Hash identifier: 5OpZgJ9oZTDWoCu/qFG4IoFqMscRgoekYD7a1XIaE60= Subject key identifier: 5C:CB:90:AF:56:38:B1:AA:AB:59:05:03:87:9D:09:09:6F:61:53:34 Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c Certificate serial: 019BF9F682DE39E42CD406E9EDA2D1FFA803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft Manifest number: 17F4 Signing time: Mon 26 Jan 2026 11:00:40 +0000 Manifest this update: Mon 26 Jan 2026 11:00:40 +0000 Manifest next update: Tue 27 Jan 2026 11:00:40 +0000 Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: PROGstVRdYrkTGgVp2ubS4xJ5OwBRqvVJU+fd0YiAhU=) 2: 9zaCEl1SgGOc-A7zIR9SmhOUbCA.roa (hash: eFtzjl4+/9tlA7bC6sKrJsHMLsAxLeLlfmditC5aZTs=) 3: fsnKswSMyeM4OK2o8J_ZzwwYiiI.roa (hash: tWk+nFmUcDykdNhoUyVPw1UFkRx/3AJQMBQrLxH1g5k=) 4: lw6CByl2eIoJzy6-P0WeW49KgOI.roa (hash: 6N3/YHs+5PxRInfdIs1YdoKER3Usv1BE1gz4UpUcn9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:82:de:39:e4:2c:d4:06:e9:ed:a2:d1:ff:a8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c Validity Not Before: Jan 26 11:00:40 2026 GMT Not After : Jan 27 11:00:40 2026 GMT Subject: CN=5ccb90af5638b1aaab590503879d09096f615334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:ee:22:f9:fd:6e:9b:5a:81:c3:b1:52:50: 6d:22:4c:16:d3:d4:46:84:ca:c2:0b:cc:3d:83:64: 08:f6:5c:60:95:a4:08:76:12:1d:18:1d:d4:04:f7: 01:9f:e3:78:6d:39:53:4f:4c:bf:2a:13:ec:76:ae: 5a:17:fa:06:6c:4a:6b:15:6e:22:cf:32:47:b4:bc: 6c:d1:ef:a2:4b:6f:b1:ec:41:1e:ad:cf:98:da:df: fa:cd:03:15:dd:79:f1:8a:47:fa:92:a6:1f:ff:21: 8d:72:f6:22:62:5c:ec:22:08:82:29:f6:ca:eb:ae: 6e:6e:b1:78:5a:17:32:10:0e:bc:3a:a8:be:13:c1: d0:26:90:fc:8f:74:a6:55:52:05:8d:f3:01:69:3f: 90:5e:47:da:0c:27:8b:c7:df:ab:cd:31:75:d2:da: 97:6f:45:f7:9f:c7:0f:df:9c:08:17:1e:10:a3:8d: 56:9b:51:93:79:b7:42:62:e8:b4:8f:f5:47:4f:a5: f3:b4:d5:00:87:96:d3:bc:c5:d9:5b:bd:33:4c:2f: 65:83:a7:0a:04:fb:58:6d:43:56:d7:f9:5c:79:4d: 27:e0:de:fc:a9:aa:06:82:0c:c7:6a:cd:73:25:a5: f0:09:1c:a3:d3:ee:7a:ee:68:ca:75:3a:d6:63:a5: 9c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CB:90:AF:56:38:B1:AA:AB:59:05:03:87:9D:09:09:6F:61:53:34 X509v3 Authority Key Identifier: keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:06:ec:95:e4:28:e3:4d:83:1e:ad:a3:45:e3:43:10:57:d7: cd:53:56:ce:c7:ec:e2:ba:2c:42:e3:06:9c:29:b2:c2:21:0b: 50:c2:3f:cf:ca:2b:44:1d:6e:11:38:30:c8:cd:fa:0d:66:e2: ee:3d:67:02:ea:c2:b5:98:b6:2a:e8:eb:08:e2:29:f2:b0:b7: ec:c8:f4:8c:65:79:ce:33:1b:e1:8c:d3:ec:8f:05:61:46:45: 52:48:3c:68:5b:99:d4:62:a5:f0:e3:d3:41:43:20:19:1c:28: 5a:2f:d7:4d:19:57:0c:95:c1:1a:22:64:a9:ad:90:34:02:c9: 9d:4d:52:df:aa:d9:3c:50:71:80:b1:73:da:50:3f:a5:ee:3a: 16:4e:98:aa:d3:83:eb:48:47:af:26:58:9c:f9:a7:8b:fb:2d: 31:2d:4a:cb:a2:91:6d:09:72:19:ee:6a:75:3c:7c:8c:56:fd: 52:27:0a:61:92:71:30:f5:4e:87:b0:34:d4:a4:68:5a:91:ca: 5a:9d:b3:82:da:24:2a:ee:46:47:e0:64:29:9a:a2:e8:7b:44: 5f:3a:2a:84:ee:48:93:1e:61:c9:31:ed:3d:af:17:91:84:db: f2:62:e0:64:f5:26:d7:45:9f:f0:84:36:ac:62:4e:b6:06:15: fa:dc:f5:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59oLeOeQs1Abp7aLR/6gDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjY2IyZDVmYjI1Mzg1MmYxODIzYzY1NDM0ZThmMjc2ZDA0 ZTRlMGMwHhcNMjYwMTI2MTEwMDQwWhcNMjYwMTI3MTEwMDQwWjAzMTEwLwYDVQQD Eyg1Y2NiOTBhZjU2MzhiMWFhYWI1OTA1MDM4NzlkMDkwOTZmNjE1MzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5XuIvn9bptagcOxUlBtIkwW09RG hMrCC8w9g2QI9lxglaQIdhIdGB3UBPcBn+N4bTlTT0y/KhPsdq5aF/oGbEprFW4i zzJHtLxs0e+iS2+x7EEerc+Y2t/6zQMV3Xnxikf6kqYf/yGNcvYiYlzsIgiCKfbK 665ubrF4WhcyEA68Oqi+E8HQJpD8j3SmVVIFjfMBaT+QXkfaDCeLx9+rzTF10tqX b0X3n8cP35wIFx4Qo41Wm1GTebdCYui0j/VHT6XztNUAh5bTvMXZW70zTC9lg6cK BPtYbUNW1/lceU0n4N78qaoGggzHas1zJaXwCRyj0+567mjKdTrWY6Wc2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzLkK9WOLGqq1kFA4edCQlvYVM0MB8GA1UdIwQY MBaAFNzLLV+yU4UvGCPGVDTo8nbQTk4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQt ZTFhOGE2ZjFkNTlhLzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQtZTFhOGE2ZjFkNTlh LzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAogbsleQo 402DHq2jReNDEFfXzVNWzsfs4rosQuMGnCmywiELUMI/z8orRB1uETgwyM36DWbi 7j1nAurCtZi2KujrCOIp8rC37Mj0jGV5zjMb4YzT7I8FYUZFUkg8aFuZ1GKl8OPT QUMgGRwoWi/XTRlXDJXBGiJkqa2QNALJnU1S36rZPFBxgLFz2lA/pe46Fk6YqtOD 60hHryZYnPmni/stMS1Ky6KRbQlyGe5qdTx8jFb9UicKYZJxMPVOh7A01KRoWpHK Wp2zgtokKu5GR+BkKZqi6HtEXzoqhO5Ikx5hyTHtPa8XkYTb8mLgZPUm10Wf8IQ2 rGJOtgYV+tz1PA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:31 2026 by rpki-client