This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft File: 3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json) Hash identifier: dXlyj8yAhIJ6U8X1+IJkpgDuB/o29elFCnT3yYQLPes= Subject key identifier: 8C:DD:AC:11:04:4D:46:2F:BD:2C:D0:21:2D:BF:57:ED:D7:ED:84:E5 Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22 Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322 Certificate serial: 019BF386B2C38DF8149760D5667750C6A5A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft Manifest number: 1289 Signing time: Sun 25 Jan 2026 05:00:49 +0000 Manifest this update: Sun 25 Jan 2026 05:00:49 +0000 Manifest next update: Mon 26 Jan 2026 05:00:49 +0000 Files and hashes: 1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: hnKlQBvnz958NqnDfgQQVYdByYxylKMcvldUQvthDsA=) 2: 6Eq2K8I-fGAn8TcsmA8SQ1sP8XQ.roa (hash: IMW7BuOpk5K8cLHby0V1FGlX0Kl80xH/PG0dmv5BRa0=) 3: CgyZP30Hoidin7RaMq9Ursvee0Q.roa (hash: MC1SeEHr1WVf3jRPY6r6ltykkJQUHZHDG/G5RN8vUls=) 4: Y_vUb7xxnEJ_ubUo_5ddtVYFcqE.roa (hash: K9yqS9A7xFeAsAleB3jRUr3PxaQlF2IYyX8ECmCgYiQ=) 5: qxrIUacDBXHJek6j0Nv7mnsRC1o.roa (hash: CfRfJJiJ6Hyf/sFNZprZ5Q2eEd/fc1DwfF6aEDqorAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:b2:c3:8d:f8:14:97:60:d5:66:77:50:c6:a5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322 Validity Not Before: Jan 25 05:00:49 2026 GMT Not After : Jan 26 05:00:49 2026 GMT Subject: CN=8cddac11044d462fbd2cd0212dbf57edd7ed84e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:b5:fc:ab:42:56:7d:cf:f3:25:c0:20:e4: 47:81:d1:79:86:b1:af:6e:59:49:fd:1c:5b:56:fd: 3a:eb:56:10:9f:e2:e7:18:44:66:42:fc:cc:f7:82: cc:7e:9b:ee:7b:e2:30:b3:9b:ca:7f:43:38:3a:85: c4:dd:40:2d:6b:3b:8b:1a:d5:e1:76:b1:4f:af:1f: 85:5e:91:30:c0:25:2b:55:72:88:92:ff:f8:a3:79: cc:4f:71:54:4d:cd:c8:38:bb:47:a0:9f:50:ce:45: e1:4b:20:43:87:a9:f4:d5:83:f3:6a:66:d4:bd:a1: 3f:c3:a6:0b:cd:80:28:a0:39:d1:b1:57:eb:c2:36: ff:98:eb:6e:9f:75:88:2a:5c:ba:09:ad:65:9a:0b: c3:3e:e1:e1:f4:39:31:94:ac:f1:28:c7:d0:27:7e: 5f:ed:d6:63:ab:e7:75:4d:d4:64:11:f9:73:41:d9: ee:9d:8f:b9:db:00:fd:1b:09:f9:5c:1c:cf:c2:56: 60:23:ee:82:87:50:69:62:26:e6:f8:e5:70:54:3c: a5:64:fd:e5:bf:5d:5e:b3:d5:de:e6:a6:76:85:47: b5:71:3b:d9:1e:d8:73:40:24:2e:7e:14:5f:8d:7c: 30:b2:9b:b6:db:4e:35:cf:95:e6:38:de:c8:c0:33: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DD:AC:11:04:4D:46:2F:BD:2C:D0:21:2D:BF:57:ED:D7:ED:84:E5 X509v3 Authority Key Identifier: keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:29:74:f9:f6:f7:d6:54:e7:80:fd:3d:fd:4e:62:7f:19:11: 6e:5f:a1:15:88:ef:95:8c:3c:f7:81:20:0a:b3:38:a7:62:d6: e2:f4:b8:85:72:53:45:6c:ba:b0:bd:80:75:d0:80:6b:62:f2: 13:0b:c5:3a:af:bb:0a:6d:60:77:0f:96:b0:0f:e0:3c:07:39: 35:55:d0:c9:c9:79:37:6d:b6:e1:c1:e5:7a:c5:67:e3:4c:ba: e1:51:70:00:13:68:40:36:bc:f9:b9:f8:95:85:51:86:60:4f: 48:58:21:e1:3d:20:a5:1b:dd:5f:7e:85:5b:ea:fe:7d:85:29: 32:c4:83:5a:b9:9c:9f:70:6b:0f:22:97:65:95:cf:4c:f1:f2: a7:04:9f:40:fd:b5:b1:4c:d2:d9:1f:8a:f7:40:61:05:98:c0: 6f:28:c9:85:f0:c5:a4:ce:fe:cc:e2:6a:a5:63:07:c2:fa:4b: e0:0b:23:96:17:ca:2c:ba:5a:55:cb:03:0f:70:ad:d9:ae:a7: 2d:79:18:90:8f:42:4b:ad:c7:41:e2:1c:75:92:58:1e:c4:9d: fb:89:80:6e:fb:71:35:74:89:69:ad:e0:61:35:17:9e:6e:ae: 33:84:87:8e:07:e3:d4:c0:03:11:e2:02:93:94:95:83:49:29: 46:7a:43:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhrLDjfgUl2DVZndQxqWnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0 M2IzMjIwHhcNMjYwMTI1MDUwMDQ5WhcNMjYwMTI2MDUwMDQ5WjAzMTEwLwYDVQQD Eyg4Y2RkYWMxMTA0NGQ0NjJmYmQyY2QwMjEyZGJmNTdlZGQ3ZWQ4NGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjK1/KtCVn3P8yXAIORHgdF5hrGv bllJ/RxbVv0661YQn+LnGERmQvzM94LMfpvue+Iws5vKf0M4OoXE3UAtazuLGtXh drFPrx+FXpEwwCUrVXKIkv/4o3nMT3FUTc3IOLtHoJ9QzkXhSyBDh6n01YPzambU vaE/w6YLzYAooDnRsVfrwjb/mOtun3WIKly6Ca1lmgvDPuHh9DkxlKzxKMfQJ35f 7dZjq+d1TdRkEflzQdnunY+52wD9Gwn5XBzPwlZgI+6Ch1BpYibm+OVwVDylZP3l v11es9Xe5qZ2hUe1cTvZHthzQCQufhRfjXwwspu22041z5XmON7IwDMIPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzdrBEETUYvvSzQIS2/V+3X7YTlMB8GA1UdIwQY MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct ODIwMmE0NjdkNzUzLzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCl0+fb3 1lTngP09/U5ifxkRbl+hFYjvlYw894EgCrM4p2LW4vS4hXJTRWy6sL2AddCAa2Ly EwvFOq+7Cm1gdw+WsA/gPAc5NVXQycl5N2224cHlesVn40y64VFwABNoQDa8+bn4 lYVRhmBPSFgh4T0gpRvdX36FW+r+fYUpMsSDWrmcn3BrDyKXZZXPTPHypwSfQP21 sUzS2R+K90BhBZjAbyjJhfDFpM7+zOJqpWMHwvpL4AsjlhfKLLpaVcsDD3Ct2a6n LXkYkI9CS63HQeIcdZJYHsSd+4mAbvtxNXSJaa3gYTUXnm6uM4SHjgfj1MADEeIC k5SVg0kpRnpDSQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:26:49 2026 by rpki-client