This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json) Hash identifier: 23ItUdnVUHd57QP72LpeSlfNFXAF2LTSA36qrmQ1+/E= Subject key identifier: 8B:DD:7B:BA:42:DF:E3:39:31:B1:7C:B1:D5:FF:B3:57:AC:25:65:4D Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0 Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0 Certificate serial: 019BF5AC0C32FD3D29C23096AFFE78274130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 15:00:51 +0000 Manifest this update: Sun 25 Jan 2026 15:00:51 +0000 Manifest next update: Mon 26 Jan 2026 15:00:51 +0000 Files and hashes: 1: P7j9IEWadDPaQ_nsO00HdXrOIT4.roa (hash: czQbKrK6LqGgUhK9pjsed0KgnTQUiTmpJ6IrbxHUhzM=) 2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: Eoh69QKMEuXZU4IPCjQWxnFBu9R7QPbZD9CruvzivPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:0c:32:fd:3d:29:c2:30:96:af:fe:78:27:41:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0 Validity Not Before: Jan 25 15:00:51 2026 GMT Not After : Jan 26 15:00:51 2026 GMT Subject: CN=8bdd7bba42dfe33931b17cb1d5ffb357ac25654d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b0:1e:cd:fa:7f:4d:e5:a1:f4:b6:87:54:63: 21:37:5c:61:bc:4f:98:fd:f5:2e:b3:b5:11:a5:57: 1b:77:4c:34:3b:1c:00:7c:35:65:3d:dc:59:a9:be: 11:f7:10:42:20:10:98:c8:49:b2:9c:9f:fa:4b:74: d7:e8:0c:13:46:90:c2:37:7e:40:30:0c:18:34:ad: 2c:f8:b3:a0:1e:81:fa:49:30:6a:0c:3a:fe:63:0e: 56:09:b8:bd:75:72:bf:3c:8c:db:95:5e:4f:73:1d: b1:b8:4c:5e:c3:74:f2:73:46:6b:0f:7f:d1:a1:db: 1b:d7:11:30:b3:69:2c:64:6a:dd:bc:6d:a2:9c:d6: 1c:fb:89:ee:0f:63:07:00:35:3f:cf:4e:f6:25:f6: b2:14:da:a9:28:fb:9e:8e:4f:69:14:69:ab:97:fd: 62:d6:7e:ea:3c:e6:dc:11:e2:3b:a7:3a:21:95:b9: c1:d0:21:04:ae:e0:bc:f5:c4:fa:af:14:2b:75:db: a9:bb:0b:df:e2:9e:0b:7f:25:ac:65:fa:82:cd:cd: df:5b:4d:5d:9a:21:0a:99:bb:97:3e:0d:98:c2:f4: 60:63:5b:d2:dd:66:0f:55:36:43:79:07:39:5e:7a: 8c:a7:05:b7:16:12:7b:6b:e6:fc:0c:da:69:f0:3f: 9e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DD:7B:BA:42:DF:E3:39:31:B1:7C:B1:D5:FF:B3:57:AC:25:65:4D X509v3 Authority Key Identifier: keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:da:28:11:21:c7:d6:ab:12:e6:11:20:89:57:94:7e:79:67: 07:84:8d:12:b1:83:40:0b:3a:d1:d1:58:b6:f8:07:1b:ff:2b: 9e:75:1e:52:74:c6:ac:d0:ec:df:42:ef:e8:e0:a4:1f:c7:40: d4:ec:eb:0e:5f:e9:66:09:47:ac:ed:a4:29:8c:eb:98:81:f8: 38:e3:a3:2b:71:31:6d:ab:20:11:ce:28:eb:3d:24:ff:4e:46: d7:96:f6:e7:4b:ad:3d:86:bc:b6:31:3c:0e:76:42:36:43:e6: fa:f7:ab:db:d6:2b:91:a3:57:f3:02:7f:53:86:c2:33:d7:ea: 46:33:66:2c:2b:f0:66:76:d1:42:09:d4:11:93:89:95:1c:e2: 45:21:9a:fe:aa:17:1e:78:f5:57:ea:fc:71:f0:bb:32:dc:3e: a9:95:68:ad:a2:f9:65:36:32:3b:30:ac:3f:1f:dd:49:2a:54: 43:e1:67:ca:ab:d2:5f:c3:14:44:6e:c8:1d:74:ef:bc:1a:f9: 0b:48:50:f9:5d:fe:29:b7:e7:17:24:3e:b5:07:66:fa:de:50: b5:cc:19:11:51:97:90:14:53:b6:f7:7f:ea:13:dc:d0:dd:e8: 2c:92:e2:a7:0e:13:c3:ce:fd:49:1e:b9:58:6e:5f:f2:49:4b: 43:43:8d:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rAwy/T0pwjCWr/54J0EwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNzQ5ZWExYjk5NzliZmYyY2QzMDY2OTQ4ZjgzNWRkNTRj ZWRlYzAwHhcNMjYwMTI1MTUwMDUxWhcNMjYwMTI2MTUwMDUxWjAzMTEwLwYDVQQD Eyg4YmRkN2JiYTQyZGZlMzM5MzFiMTdjYjFkNWZmYjM1N2FjMjU2NTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bAezfp/TeWh9LaHVGMhN1xhvE+Y /fUus7URpVcbd0w0OxwAfDVlPdxZqb4R9xBCIBCYyEmynJ/6S3TX6AwTRpDCN35A MAwYNK0s+LOgHoH6STBqDDr+Yw5WCbi9dXK/PIzblV5Pcx2xuExew3Tyc0ZrD3/R odsb1xEws2ksZGrdvG2inNYc+4nuD2MHADU/z072JfayFNqpKPuejk9pFGmrl/1i 1n7qPObcEeI7pzohlbnB0CEEruC89cT6rxQrddupuwvf4p4LfyWsZfqCzc3fW01d miEKmbuXPg2YwvRgY1vS3WYPVTZDeQc5XnqMpwW3FhJ7a+b8DNpp8D+e1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvde7pC3+M5MbF8sdX/s1esJWVNMB8GA1UdIwQY MBaAFLN0nqG5l5v/LNMGaUj4Nd1Uzt7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgt ZTM1OTA5MDE4YTMzLzEvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgtZTM1OTA5MDE4YTMz LzEvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9ooESHH 1qsS5hEgiVeUfnlnB4SNErGDQAs60dFYtvgHG/8rnnUeUnTGrNDs30Lv6OCkH8dA 1OzrDl/pZglHrO2kKYzrmIH4OOOjK3ExbasgEc4o6z0k/05G15b250utPYa8tjE8 DnZCNkPm+ver29YrkaNX8wJ/U4bCM9fqRjNmLCvwZnbRQgnUEZOJlRziRSGa/qoX Hnj1V+r8cfC7Mtw+qZVoraL5ZTYyOzCsPx/dSSpUQ+FnyqvSX8MURG7IHXTvvBr5 C0hQ+V3+KbfnFyQ+tQdm+t5QtcwZEVGXkBRTtvd/6hPc0N3oLJLipw4Tw879SR65 WG5f8klLQ0ONOQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:30 2026 by rpki-client