This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft File: P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json) Hash identifier: zEwOz02JGQN4UXTwQHTI5SLzm4PRLIOwDnolAoIGXqk= Subject key identifier: 82:10:09:4D:72:B6:55:0B:40:0C:E7:63:A6:15:D8:F5:01:85:5B:C7 Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Certificate serial: 019BF763E551629DC2FC9C6C855AA4D67AA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft Manifest number: 0347 Signing time: Sun 25 Jan 2026 23:01:17 +0000 Manifest this update: Sun 25 Jan 2026 23:01:17 +0000 Manifest next update: Mon 26 Jan 2026 23:01:17 +0000 Files and hashes: 1: 8WGCMkLHivRZtBn2lCr7Peb5fB8.roa (hash: Lec00BWr1FDj5Se46w/SW9Oe5vFyDVib4D6WgGcoj3Q=) 2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: kEdhTRnh9w1ZNBIbz//FxxY0wKkx58i9MLSrQ8kvpRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:e5:51:62:9d:c2:fc:9c:6c:85:5a:a4:d6:7a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Validity Not Before: Jan 25 23:01:17 2026 GMT Not After : Jan 26 23:01:17 2026 GMT Subject: CN=8210094d72b6550b400ce763a615d8f501855bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b0:43:ee:58:34:92:80:85:08:da:1d:86:79: b6:f7:75:ed:1b:f2:8b:04:b7:ee:68:dc:ee:b7:c2: 9b:ac:57:9e:5e:ab:d1:14:da:9a:0e:37:e2:6d:6b: 50:6b:d6:1b:41:ef:56:a1:d1:6a:e3:e1:b2:f4:b4: 18:f7:cd:9f:e8:b7:09:a3:ab:a0:3e:2b:bb:5c:db: aa:de:d2:8f:3e:3e:72:8c:d5:ae:d1:35:99:ca:b0: ec:75:ec:88:7b:31:4c:5a:c4:08:c1:35:2f:18:ab: c0:a5:db:15:a0:7a:6e:c1:c8:32:a3:ef:c7:c7:da: 73:c5:7d:4b:4f:a2:99:22:02:88:d3:bb:61:a7:c1: 7a:e0:83:6f:ad:c1:b7:39:b8:1d:01:21:aa:f0:6b: d8:38:0e:e4:d6:7f:9e:52:f3:57:11:30:1c:83:c6: ef:43:b8:88:b8:f3:8e:99:df:f0:70:52:22:bb:ec: a7:9d:fc:c8:69:ee:45:9d:16:36:ee:9f:21:e6:a2: c4:56:e4:9a:3f:9f:80:23:21:9d:c0:a2:51:53:c2: 25:db:d3:62:30:e4:b2:6a:47:52:63:49:93:57:c5: 44:27:90:2f:95:44:07:c6:bc:48:bf:ea:d6:d6:9a: d4:5f:ba:f3:4b:02:d5:d7:fa:68:23:f6:a5:ed:9c: a2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:10:09:4D:72:B6:55:0B:40:0C:E7:63:A6:15:D8:F5:01:85:5B:C7 X509v3 Authority Key Identifier: keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ee:d6:46:6b:2f:65:32:a8:69:21:57:44:da:06:47:cc:7a: 34:eb:e7:68:b1:00:3b:f8:59:ba:d9:b9:b1:29:f7:a2:7c:66: a4:9d:43:23:37:76:32:9f:f7:c5:3e:17:ed:db:ca:61:73:4b: fc:56:97:ef:6a:4a:8a:5d:dd:59:2f:3f:47:6d:c4:dd:c1:59: a8:13:c8:7c:06:6f:e0:45:e0:7b:63:7d:3e:0c:28:6f:e5:1a: 83:d9:24:cb:f1:21:33:10:12:07:df:f8:6a:6f:85:9b:80:72: 7c:4a:22:49:85:8a:b1:71:77:f8:4f:13:08:44:27:0b:7e:85: 9f:d6:31:e3:d1:4d:f0:7e:6a:b7:6a:d9:53:f5:f1:2f:c9:f8: 85:80:2b:12:c6:cf:ec:95:c5:a3:98:31:4c:ab:c0:48:8a:df: be:0e:dd:1c:e6:1c:b7:b1:12:87:4f:6b:cf:cb:d6:1c:e1:68: a3:31:3b:79:e2:eb:10:5b:70:86:ee:35:f4:c7:df:a3:d0:95: c2:25:85:bb:5d:0e:e8:53:42:6c:2f:bf:3a:31:e9:02:2d:bf: 69:d3:93:08:8b:7c:55:50:d3:c2:66:b2:fa:6b:66:6c:67:53: 06:bc:f5:36:5d:94:f7:da:d7:f5:c3:4f:e8:69:54:8d:5d:b3: 3b:66:20:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y+VRYp3C/JxshVqk1nqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNjUzNzVhNGQzNmY1Y2FlMWExZmUyNDU4YTM4MDUyNmNm ZWRiNmEwHhcNMjYwMTI1MjMwMTE3WhcNMjYwMTI2MjMwMTE3WjAzMTEwLwYDVQQD Eyg4MjEwMDk0ZDcyYjY1NTBiNDAwY2U3NjNhNjE1ZDhmNTAxODU1YmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bBD7lg0koCFCNodhnm293XtG/KL BLfuaNzut8KbrFeeXqvRFNqaDjfibWtQa9YbQe9WodFq4+Gy9LQY982f6LcJo6ug Piu7XNuq3tKPPj5yjNWu0TWZyrDsdeyIezFMWsQIwTUvGKvApdsVoHpuwcgyo+/H x9pzxX1LT6KZIgKI07thp8F64INvrcG3ObgdASGq8GvYOA7k1n+eUvNXETAcg8bv Q7iIuPOOmd/wcFIiu+ynnfzIae5FnRY27p8h5qLEVuSaP5+AIyGdwKJRU8Il29Ni MOSyakdSY0mTV8VEJ5AvlUQHxrxIv+rW1prUX7rzSwLV1/poI/al7ZyiOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIQCU1ytlULQAznY6YV2PUBhVvHMB8GA1UdIwQY MBaAFD9lN1pNNvXK4aH+JFijgFJs/ttqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTkt ZTI4MTZlZTZiYTU2LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTktZTI4MTZlZTZiYTU2 LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVe7WRmsv ZTKoaSFXRNoGR8x6NOvnaLEAO/hZutm5sSn3onxmpJ1DIzd2Mp/3xT4X7dvKYXNL /FaX72pKil3dWS8/R23E3cFZqBPIfAZv4EXge2N9Pgwob+Uag9kky/EhMxASB9/4 am+Fm4ByfEoiSYWKsXF3+E8TCEQnC36Fn9Yx49FN8H5qt2rZU/XxL8n4hYArEsbP 7JXFo5gxTKvASIrfvg7dHOYct7ESh09rz8vWHOFoozE7eeLrEFtwhu419Mffo9CV wiWFu10O6FNCbC+/OjHpAi2/adOTCIt8VVDTwmay+mtmbGdTBrz1Nl2U99rX9cNP 6GlUjV2zO2YgLA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:33:06 2026 by rpki-client