This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft File: P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json) Hash identifier: vu+N1OkPWvOow3ALjyRdPmp0okvKmOvuFxWJaerpsyk= Subject key identifier: A3:7F:D4:57:50:55:D6:3B:47:15:BF:6A:04:62:3B:8E:1C:C6:9E:40 Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Certificate serial: 019BF574EEC69F0997113379DF3C512EA8C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft Manifest number: 0346 Signing time: Sun 25 Jan 2026 14:00:39 +0000 Manifest this update: Sun 25 Jan 2026 14:00:39 +0000 Manifest next update: Mon 26 Jan 2026 14:00:39 +0000 Files and hashes: 1: 8WGCMkLHivRZtBn2lCr7Peb5fB8.roa (hash: Lec00BWr1FDj5Se46w/SW9Oe5vFyDVib4D6WgGcoj3Q=) 2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: A278bz4jDhbb3aua1HtV8il1yNftZqTiJKkgkHpr/MI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:ee:c6:9f:09:97:11:33:79:df:3c:51:2e:a8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Validity Not Before: Jan 25 14:00:39 2026 GMT Not After : Jan 26 14:00:39 2026 GMT Subject: CN=a37fd4575055d63b4715bf6a04623b8e1cc69e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:08:6f:42:6c:0c:64:2d:6d:53:f6:50:21: 9e:5e:d1:71:32:5c:3a:e8:a2:94:e7:a8:3d:ed:96: 89:18:21:51:00:73:11:c6:59:13:bf:d6:24:27:35: dd:d0:61:27:8c:29:17:74:61:fa:80:67:e6:5b:eb: 91:8d:30:58:0c:8f:14:05:8a:cb:8c:07:68:f9:5e: 93:e3:db:74:a7:93:30:b9:c0:da:69:b3:2f:2d:54: 98:7b:bb:76:0f:16:65:e2:97:b1:d1:51:15:ac:ea: ba:bc:76:62:5a:d6:ff:60:7c:38:b2:ae:85:65:fe: 87:ac:96:af:ab:8b:3a:17:b1:e1:a7:75:88:9e:44: 35:96:c9:fb:6d:74:bd:99:c4:5c:47:8b:2d:ea:f1: 2b:e9:28:b3:02:4c:31:3d:fb:ac:9d:75:8f:4b:c8: b9:f9:60:dc:95:1e:51:dc:fc:de:68:b6:c6:51:93: c3:2c:29:bc:7a:5e:1e:c3:cd:31:08:ad:69:b5:bf: d4:63:b8:88:28:e8:40:ce:54:9e:73:cf:c9:32:b6: b6:91:4f:ad:85:0e:9d:66:9e:69:e4:10:91:5a:4f: da:ed:08:5c:ca:31:f4:77:e2:af:ca:96:f7:5a:2f: ac:94:b7:d9:a7:9b:97:1a:8f:50:e6:bc:69:08:f2: 30:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7F:D4:57:50:55:D6:3B:47:15:BF:6A:04:62:3B:8E:1C:C6:9E:40 X509v3 Authority Key Identifier: keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:37:1d:27:40:87:b2:7a:bf:7b:85:f2:0a:d2:38:ed:2e:4e: d4:43:46:c4:a5:7e:cb:02:0d:e2:00:80:73:46:cb:9e:f5:82: fe:08:c5:7d:9b:29:dd:53:15:03:00:ee:b7:ea:48:26:dc:fd: 30:35:96:74:ff:f7:02:25:c9:c6:c8:c4:1e:89:fc:60:18:b7: 26:b2:69:f2:60:35:0a:84:33:f2:42:3e:2a:bc:65:79:74:e2: 68:b9:f3:d3:37:98:ad:e3:e8:cc:e7:5e:23:dc:45:d2:6e:e2: 4f:40:49:8b:dd:5a:00:20:3d:c2:4b:e3:2e:b0:47:7b:19:fe: 92:d3:9e:50:36:44:e6:ed:81:87:43:b7:a1:64:8c:e2:0e:61: ea:a8:e8:23:72:30:c9:a2:aa:e1:92:a1:61:e1:08:0a:bb:3c: f1:f7:4a:07:7d:63:1f:30:5f:09:5c:3f:ee:83:6f:08:a0:83: db:5f:1d:37:95:dd:67:f5:48:97:60:5d:00:4c:2b:4e:71:19: 9b:e2:43:78:35:5c:08:93:e1:b2:f9:c0:f8:b2:2a:47:f0:98: 77:26:f8:45:55:56:5e:e8:0b:92:4f:b7:ed:b1:a1:46:31:cc: 4e:10:d5:f6:a6:fa:87:55:1d:c2:f7:b7:54:1b:05:52:de:09: 5c:2d:c1:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dO7GnwmXETN53zxRLqjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNjUzNzVhNGQzNmY1Y2FlMWExZmUyNDU4YTM4MDUyNmNm ZWRiNmEwHhcNMjYwMTI1MTQwMDM5WhcNMjYwMTI2MTQwMDM5WjAzMTEwLwYDVQQD EyhhMzdmZDQ1NzUwNTVkNjNiNDcxNWJmNmEwNDYyM2I4ZTFjYzY5ZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj0Ib0JsDGQtbVP2UCGeXtFxMlw6 6KKU56g97ZaJGCFRAHMRxlkTv9YkJzXd0GEnjCkXdGH6gGfmW+uRjTBYDI8UBYrL jAdo+V6T49t0p5MwucDaabMvLVSYe7t2DxZl4pex0VEVrOq6vHZiWtb/YHw4sq6F Zf6HrJavq4s6F7Hhp3WInkQ1lsn7bXS9mcRcR4st6vEr6SizAkwxPfusnXWPS8i5 +WDclR5R3PzeaLbGUZPDLCm8el4ew80xCK1ptb/UY7iIKOhAzlSec8/JMra2kU+t hQ6dZp5p5BCRWk/a7QhcyjH0d+Kvypb3Wi+slLfZp5uXGo9Q5rxpCPIwrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN/1FdQVdY7RxW/agRiO44cxp5AMB8GA1UdIwQY MBaAFD9lN1pNNvXK4aH+JFijgFJs/ttqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTkt ZTI4MTZlZTZiYTU2LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTktZTI4MTZlZTZiYTU2 LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTcdJ0CH snq/e4XyCtI47S5O1ENGxKV+ywIN4gCAc0bLnvWC/gjFfZsp3VMVAwDut+pIJtz9 MDWWdP/3AiXJxsjEHon8YBi3JrJp8mA1CoQz8kI+KrxleXTiaLnz0zeYrePozOde I9xF0m7iT0BJi91aACA9wkvjLrBHexn+ktOeUDZE5u2Bh0O3oWSM4g5h6qjoI3Iw yaKq4ZKhYeEICrs88fdKB31jHzBfCVw/7oNvCKCD218dN5XdZ/VIl2BdAEwrTnEZ m+JDeDVcCJPhsvnA+LIqR/CYdyb4RVVWXugLkk+37bGhRjHMThDV9qb6h1Udwve3 VBsFUt4JXC3BLg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:23 2026 by rpki-client