This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json) Hash identifier: oXE4Kq6a1zLlfLjeE7A6BZoMxItEVCnoQxwZcn+uCaQ= Subject key identifier: C9:D3:7B:A8:58:48:A0:4B:E1:40:B7:4A:F4:F6:BD:A6:01:84:56:B8 Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71 Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71 Certificate serial: 019BF7D1C0865369A2D5918F1E90FD196755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft Manifest number: 17F3 Signing time: Mon 26 Jan 2026 01:01:17 +0000 Manifest this update: Mon 26 Jan 2026 01:01:17 +0000 Manifest next update: Tue 27 Jan 2026 01:01:17 +0000 Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: /WxmYyiFxkr3PdX1I5S2BlpXp4ADXI6SbxXksr6adwA=) 2: BkDRLAa3B4lViMgjpTtfQSFV14I.roa (hash: FjVWnkZKxfwmWvnmDOyzpHJdLPGSitKsvtBzxG3wncA=) 3: nFz68vxexIG1S-RusF1_qXkv1Yc.roa (hash: CL/0BWaI5R4mYNyzheF3UgRNXWDP8rh4d3WLBBru+lU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:c0:86:53:69:a2:d5:91:8f:1e:90:fd:19:67:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71 Validity Not Before: Jan 26 01:01:17 2026 GMT Not After : Jan 27 01:01:17 2026 GMT Subject: CN=c9d37ba85848a04be140b74af4f6bda6018456b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0c:f1:56:1d:69:83:a4:b3:46:cd:44:07:ac: e1:33:bd:1d:d5:ee:ca:3f:7e:9b:ae:9b:e4:8f:bb: de:88:eb:47:a2:74:e8:24:7f:01:da:84:fe:43:95: 4a:d9:77:29:c1:84:b9:64:0e:96:ea:c2:0b:37:25: 1b:ea:08:56:6e:06:26:13:92:67:6e:1c:d0:7e:70: 83:48:73:aa:bd:93:9c:10:3d:61:02:30:29:6b:22: 48:84:4e:be:0d:3e:99:e1:c6:83:48:2a:d3:98:39: c7:94:83:27:15:81:ba:98:d8:05:62:7f:bc:cb:e0: a2:a5:5c:db:1e:db:32:a2:9f:fd:44:7f:27:26:06: 7c:bf:96:e9:14:ce:5f:fb:65:8a:86:51:7a:cd:54: 6e:30:4f:f7:cd:48:62:ef:33:a7:af:ee:07:c7:30: 35:3e:3d:e1:85:5a:4a:a7:9b:ba:cd:b8:81:9a:c9: 97:2a:60:89:b6:8b:1c:76:36:1f:d1:a5:aa:17:ca: 42:6f:db:72:e7:7c:89:07:40:f2:24:ed:3c:14:9a: db:d9:4f:85:da:88:b4:32:86:66:49:33:4e:15:16: dd:ed:1d:20:3b:ae:d3:86:50:e9:7f:d3:1e:84:11: 25:cd:4a:7b:40:72:30:10:ad:06:97:c7:ec:9e:56: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D3:7B:A8:58:48:A0:4B:E1:40:B7:4A:F4:F6:BD:A6:01:84:56:B8 X509v3 Authority Key Identifier: keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e3:8b:e2:6c:9a:fd:2d:d6:43:d9:bd:eb:81:8e:fe:fc:c8: 71:7a:3b:ec:2f:79:7c:fa:84:84:34:96:16:f2:e2:81:59:41: 15:ce:d5:18:fd:71:14:e0:3a:7a:92:6f:ba:7e:b4:a1:a1:02: 1f:28:4c:2c:5a:d9:db:3e:ac:95:01:52:cb:9a:34:64:00:16: 2d:55:0f:3f:f0:18:b3:7c:54:91:f6:69:f5:08:7e:02:85:ca: 1d:6e:13:75:ec:5b:dd:b5:5b:be:89:53:05:36:20:8f:c4:fe: 1b:01:4b:b5:00:6c:e3:b4:ad:71:63:5f:f9:5e:c5:95:c1:c8: 36:59:30:be:c6:d1:60:e2:9b:52:aa:c2:34:a3:fd:f9:5d:ef: 47:70:ec:75:9a:7f:91:66:b8:5a:08:94:f1:01:b4:91:1f:a5: f1:1e:33:eb:84:da:92:be:f5:99:14:04:da:26:ff:19:14:cb: 4c:ce:10:94:3d:9c:a2:bd:13:5e:ea:cd:53:ed:48:13:ad:3c: e1:1a:01:53:33:4b:d9:5d:78:0b:ae:89:53:78:ad:a6:bc:3c: bd:53:3e:3b:15:b6:7a:19:c4:d4:e9:a9:c2:c1:7a:4f:10:15: b8:20:a7:6e:23:3b:1b:e0:f4:39:47:13:26:18:95:5a:dc:13: a1:47:0f:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30cCGU2mi1ZGPHpD9GWdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh MzljNzEwHhcNMjYwMTI2MDEwMTE3WhcNMjYwMTI3MDEwMTE3WjAzMTEwLwYDVQQD EyhjOWQzN2JhODU4NDhhMDRiZTE0MGI3NGFmNGY2YmRhNjAxODQ1NmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QzxVh1pg6SzRs1EB6zhM70d1e7K P36brpvkj7veiOtHonToJH8B2oT+Q5VK2XcpwYS5ZA6W6sILNyUb6ghWbgYmE5Jn bhzQfnCDSHOqvZOcED1hAjApayJIhE6+DT6Z4caDSCrTmDnHlIMnFYG6mNgFYn+8 y+CipVzbHtsyop/9RH8nJgZ8v5bpFM5f+2WKhlF6zVRuME/3zUhi7zOnr+4HxzA1 Pj3hhVpKp5u6zbiBmsmXKmCJtoscdjYf0aWqF8pCb9ty53yJB0DyJO08FJrb2U+F 2oi0MoZmSTNOFRbd7R0gO67ThlDpf9MehBElzUp7QHIwEK0Gl8fsnlau3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnTe6hYSKBL4UC3SvT2vaYBhFa4MB8GA1UdIwQY MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt NmVkNTRkM2ZlNGY0LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0 LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+OL4mya /S3WQ9m964GO/vzIcXo77C95fPqEhDSWFvLigVlBFc7VGP1xFOA6epJvun60oaEC HyhMLFrZ2z6slQFSy5o0ZAAWLVUPP/AYs3xUkfZp9Qh+AoXKHW4Tdexb3bVbvolT BTYgj8T+GwFLtQBs47StcWNf+V7FlcHINlkwvsbRYOKbUqrCNKP9+V3vR3DsdZp/ kWa4WgiU8QG0kR+l8R4z64Takr71mRQE2ib/GRTLTM4QlD2cor0TXurNU+1IE608 4RoBUzNL2V14C66JU3itprw8vVM+OxW2ehnE1OmpwsF6TxAVuCCnbiM7G+D0OUcT JhiVWtwToUcP+Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:47:21 2026 by rpki-client