This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json) Hash identifier: 1EE3Zn3IDFja3889gwSA5NUzUMwoILlBT/jPAt88bvs= Subject key identifier: 87:0E:F9:37:FD:AC:91:A5:B5:67:30:D7:C5:EE:EF:59:D9:C8:FE:2C Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93 Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93 Certificate serial: 019BF7637BD9C8705D5359D042950E390363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft Manifest number: 0792 Signing time: Sun 25 Jan 2026 23:00:50 +0000 Manifest this update: Sun 25 Jan 2026 23:00:50 +0000 Manifest next update: Mon 26 Jan 2026 23:00:50 +0000 Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: 9hF1Udo5GKQcr//myWP7inO6xYNSRJUltto6LLFf6vw=) 2: 43ymdr3K3iMs6v29pEnuXTGVVTU.roa (hash: T6YtebG+rID15qUGedeSqtw1F5/D7XsYg2ZcZB9ldO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:7b:d9:c8:70:5d:53:59:d0:42:95:0e:39:03:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93 Validity Not Before: Jan 25 23:00:50 2026 GMT Not After : Jan 26 23:00:50 2026 GMT Subject: CN=870ef937fdac91a5b56730d7c5eeef59d9c8fe2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:91:dc:30:70:52:b4:04:ab:eb:92:ee:64:b2: a4:7d:f1:04:7f:cb:3d:1d:6c:e5:4e:66:60:55:76: 80:22:d8:8d:8d:c0:d6:64:34:2a:2e:ba:38:15:e6: f4:83:33:a1:1f:a1:2d:5a:c8:4e:3a:6a:ac:8a:1f: b6:44:15:6c:a6:f2:ee:c7:c5:4c:df:a6:87:31:c3: d6:fc:db:7d:ce:17:d0:1f:bf:29:e7:81:b8:a2:5b: 7f:0b:53:3a:1a:6d:ce:eb:be:65:2c:4d:20:46:40: 8e:66:18:90:af:13:6b:b5:06:7f:da:78:ac:3b:f2: a4:d2:64:1c:54:9d:07:a4:2f:85:57:d6:d0:4b:14: 45:fb:27:b9:92:83:3f:3a:32:45:56:7c:e3:c3:3a: 2d:87:86:7c:d2:3d:ff:c4:5d:59:09:16:16:32:7b: ba:4b:35:08:3d:de:39:80:81:7d:9d:bc:3d:c1:81: 61:fb:90:90:9e:ee:08:96:5b:ef:f9:80:9a:49:6f: 01:a3:64:8e:46:e0:11:ab:29:91:a3:e0:cf:cf:ae: 33:04:59:c9:0c:24:34:95:e7:84:af:e4:27:79:0b: bc:d1:19:3c:d4:00:6d:b6:9f:ba:52:bf:9c:5f:47: 49:60:b7:19:77:c9:47:f3:10:40:bf:26:18:04:58: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0E:F9:37:FD:AC:91:A5:B5:67:30:D7:C5:EE:EF:59:D9:C8:FE:2C X509v3 Authority Key Identifier: keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:11:75:60:6e:79:66:6d:cf:54:77:1d:af:96:ef:f8:c0:de: 08:7e:77:1b:e2:9a:f3:8c:03:08:29:a4:b0:dd:73:94:8c:c7: b9:23:1e:44:50:49:7f:4b:5e:5a:f3:85:aa:90:d3:77:f0:56: 0c:96:eb:60:8c:07:ee:6d:4d:bc:98:81:80:13:8d:f0:99:21: d0:b6:f6:12:44:49:52:e5:5d:52:8b:d1:c3:e2:47:2e:2a:43: 92:22:2b:c3:9a:fb:bb:5a:9a:9d:27:61:9e:05:f9:a1:c4:14: da:a2:74:a2:28:ce:a1:52:63:70:e7:36:a3:51:fe:ae:ba:a0: 34:34:f8:8b:8e:7c:ab:c2:5d:0e:9c:68:74:f3:87:84:bd:eb: b7:d1:1b:0d:5f:e0:77:9c:de:98:e8:00:6e:ac:28:c9:df:d6: ba:ca:0e:25:fe:64:6e:39:99:ec:9f:52:b5:75:95:c1:ab:6d: d8:59:c9:93:bc:f5:32:b9:df:6d:01:6a:89:12:c3:0f:39:83: 8a:d3:81:fe:fb:b2:23:3d:6b:83:78:84:b6:17:71:bb:ac:d8: 38:99:6f:eb:2e:04:dc:17:9b:d8:7d:1e:8c:f8:60:b5:9c:32: cb:ca:46:12:bc:cf:ec:d8:4d:cf:d4:a9:e8:fc:25:7b:09:3f: e6:4e:f5:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y3vZyHBdU1nQQpUOOQNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGI0YTE4YTdlMTUxYTM3ZGE1ZTRjY2RhYTllN2RiZDg4 ZTlkOTMwHhcNMjYwMTI1MjMwMDUwWhcNMjYwMTI2MjMwMDUwWjAzMTEwLwYDVQQD Eyg4NzBlZjkzN2ZkYWM5MWE1YjU2NzMwZDdjNWVlZWY1OWQ5YzhmZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5HcMHBStASr65LuZLKkffEEf8s9 HWzlTmZgVXaAItiNjcDWZDQqLro4Feb0gzOhH6EtWshOOmqsih+2RBVspvLux8VM 36aHMcPW/Nt9zhfQH78p54G4olt/C1M6Gm3O675lLE0gRkCOZhiQrxNrtQZ/2nis O/Kk0mQcVJ0HpC+FV9bQSxRF+ye5koM/OjJFVnzjwzoth4Z80j3/xF1ZCRYWMnu6 SzUIPd45gIF9nbw9wYFh+5CQnu4Illvv+YCaSW8Bo2SORuARqymRo+DPz64zBFnJ DCQ0leeEr+QneQu80Rk81ABttp+6Ur+cX0dJYLcZd8lH8xBAvyYYBFhDQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcO+Tf9rJGltWcw18Xu71nZyP4sMB8GA1UdIwQY MBaAFNxLShin4VGjfaXkzNqp59vYjp2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUt M2RkMjkzZjc0ZTVlLzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUtM2RkMjkzZjc0ZTVl LzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRF1YG55 Zm3PVHcdr5bv+MDeCH53G+Ka84wDCCmksN1zlIzHuSMeRFBJf0teWvOFqpDTd/BW DJbrYIwH7m1NvJiBgBON8Jkh0Lb2EkRJUuVdUovRw+JHLipDkiIrw5r7u1qanSdh ngX5ocQU2qJ0oijOoVJjcOc2o1H+rrqgNDT4i458q8JdDpxodPOHhL3rt9EbDV/g d5zemOgAbqwoyd/WusoOJf5kbjmZ7J9StXWVwatt2FnJk7z1MrnfbQFqiRLDDzmD itOB/vuyIz1rg3iEthdxu6zYOJlv6y4E3Beb2H0ejPhgtZwyy8pGErzP7NhNz9Sp 6Pwlewk/5k71kQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:23 2026 by rpki-client