This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json) Hash identifier: kykHW1bHFA6N7NYrknxOmiBcKORzPqg/Obik4g6RWOo= Subject key identifier: 2E:41:2B:47:FE:15:F6:FB:24:A1:8C:6E:35:3E:0D:B8:70:F2:20:A7 Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33 Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933 Certificate serial: 019BF8AD05310C602D109386F7518A7DAFC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 05:00:47 +0000 Manifest this update: Mon 26 Jan 2026 05:00:47 +0000 Manifest next update: Tue 27 Jan 2026 05:00:47 +0000 Files and hashes: 1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=) 2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: Obhv4aoNztGTlQ6grvRpOJg6fwd2Gwxn+WgX4Yj6sd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:05:31:0c:60:2d:10:93:86:f7:51:8a:7d:af:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af782dae3d40caf2223262541c4054e62945d933 Validity Not Before: Jan 26 05:00:47 2026 GMT Not After : Jan 27 05:00:47 2026 GMT Subject: CN=2e412b47fe15f6fb24a18c6e353e0db870f220a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:43:e0:31:53:e1:1c:1e:72:3c:89:82:bd:2b: 3b:4f:f2:84:9d:95:14:af:79:0b:b0:7c:5f:41:a5: dc:52:57:de:e0:af:af:26:d6:d9:0b:91:19:3a:36: d5:7f:aa:74:72:d7:e9:ef:1a:cf:e1:a2:4e:bd:92: aa:25:d7:10:14:e7:b2:51:35:37:c3:27:59:ae:ac: 05:6e:22:fd:32:00:8d:c6:50:0b:ff:08:b4:27:3b: ab:82:3f:1d:f8:e2:64:24:2b:88:1d:8f:cb:09:5f: ca:f6:2b:eb:ae:aa:9d:71:6a:a2:97:7a:b6:23:b0: b1:d4:48:f6:f4:94:ff:fb:35:34:85:4e:9a:99:a3: 19:ad:0b:47:88:96:ee:39:0a:69:c4:bb:ce:36:eb: ea:35:ac:b3:2d:04:c1:c3:00:e2:f4:9c:3c:ef:13: b0:4a:c8:94:e9:a9:e7:c7:7a:5e:59:c2:0b:33:5b: c8:f6:e5:19:1f:05:5c:c5:fe:e9:cc:fb:53:dc:97: 36:8b:9c:c0:17:13:6f:c5:60:1a:50:2c:d2:75:70: c2:c2:ad:00:c3:5d:61:f1:c3:b4:1f:f7:52:4c:10: bc:f9:1c:2e:64:fc:58:2e:33:86:bf:58:5c:aa:4a: 19:6d:19:51:f5:56:fe:a5:a5:55:05:b3:81:91:a5: 14:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:41:2B:47:FE:15:F6:FB:24:A1:8C:6E:35:3E:0D:B8:70:F2:20:A7 X509v3 Authority Key Identifier: keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:29:f5:2c:2a:23:2c:f5:10:29:e5:56:a0:36:68:c4:0c:da: 77:15:ef:33:48:b1:2b:f7:76:51:d2:83:37:2f:b5:12:5f:e1: 33:c6:84:96:e2:db:0b:3f:81:70:19:0c:c4:57:8e:77:bd:b9: d9:19:34:42:54:7b:0c:37:74:c2:17:c1:9d:ca:ea:3f:02:29: 3b:10:9e:da:6b:a1:f6:1f:7d:80:49:87:6a:5a:c3:a6:a8:64: 70:b2:10:98:a5:d2:52:7a:8a:5e:31:5a:3b:50:57:4d:df:c5: 31:e0:cb:cd:2d:df:71:c3:b5:41:4b:82:1d:2d:c9:d5:7d:06: 8c:3c:2d:82:20:ec:84:c3:fb:88:8b:a6:75:cc:40:ea:73:59: de:a7:95:5b:82:5e:3e:a3:26:a5:67:b0:7c:2b:ea:ea:a5:f8: 32:d2:17:6b:8c:92:7c:60:5c:2f:53:b1:dd:44:92:25:e0:9b: 93:ba:b8:56:68:df:b0:76:89:b0:d0:ac:73:4a:07:ea:1e:c6: 43:c6:2b:c1:4e:52:33:ce:8f:7d:73:2e:7b:93:35:70:93:4d: e7:0d:a0:78:f8:13:98:b2:fd:5d:5f:8b:4c:fd:37:2a:82:cc: 48:5b:6d:44:40:68:bd:da:83:3a:e3:e3:db:1a:5f:46:78:d4: f7:1b:bc:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rQUxDGAtEJOG91GKfa/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzgyZGFlM2Q0MGNhZjIyMjMyNjI1NDFjNDA1NGU2Mjk0 NWQ5MzMwHhcNMjYwMTI2MDUwMDQ3WhcNMjYwMTI3MDUwMDQ3WjAzMTEwLwYDVQQD EygyZTQxMmI0N2ZlMTVmNmZiMjRhMThjNmUzNTNlMGRiODcwZjIyMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70PgMVPhHB5yPImCvSs7T/KEnZUU r3kLsHxfQaXcUlfe4K+vJtbZC5EZOjbVf6p0ctfp7xrP4aJOvZKqJdcQFOeyUTU3 wydZrqwFbiL9MgCNxlAL/wi0Jzurgj8d+OJkJCuIHY/LCV/K9ivrrqqdcWqil3q2 I7Cx1Ej29JT/+zU0hU6amaMZrQtHiJbuOQppxLvONuvqNayzLQTBwwDi9Jw87xOw SsiU6annx3peWcILM1vI9uUZHwVcxf7pzPtT3Jc2i5zAFxNvxWAaUCzSdXDCwq0A w11h8cO0H/dSTBC8+RwuZPxYLjOGv1hcqkoZbRlR9Vb+paVVBbOBkaUUnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5BK0f+Ffb7JKGMbjU+Dbhw8iCnMB8GA1UdIwQY MBaAFK94La49QMryIjJiVBxAVOYpRdkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMt ZjAxMjVkMDJlMjYyLzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMtZjAxMjVkMDJlMjYy LzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryn1LCoj LPUQKeVWoDZoxAzadxXvM0ixK/d2UdKDNy+1El/hM8aEluLbCz+BcBkMxFeOd725 2Rk0QlR7DDd0whfBncrqPwIpOxCe2muh9h99gEmHalrDpqhkcLIQmKXSUnqKXjFa O1BXTd/FMeDLzS3fccO1QUuCHS3J1X0GjDwtgiDshMP7iIumdcxA6nNZ3qeVW4Je PqMmpWewfCvq6qX4MtIXa4ySfGBcL1Ox3USSJeCbk7q4VmjfsHaJsNCsc0oH6h7G Q8YrwU5SM86PfXMue5M1cJNN5w2gePgTmLL9XV+LTP03KoLMSFttREBovdqDOuPj 2xpfRnjU9xu82A== -----END CERTIFICATE-----Generated at Mon Jan 26 07:13:00 2026 by rpki-client