This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json) Hash identifier: XZspDLe9qdIoRC2mY9v6hwfRTZczu4+QGLBNjzzvE/Y= Subject key identifier: B8:18:4E:B8:99:54:E3:71:E3:3B:D9:35:CA:89:1D:95:F2:EA:E1:C6 Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20 Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120 Certificate serial: 019BF4D06E4CAA342D49EE150298D92792CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 11:00:59 +0000 Manifest this update: Sun 25 Jan 2026 11:00:59 +0000 Manifest next update: Mon 26 Jan 2026 11:00:59 +0000 Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: voPHXS2rhkGmVDXuaR6zJDdUJ+Web+2TVgIJRvFoMrU=) 2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:6e:4c:aa:34:2d:49:ee:15:02:98:d9:27:92:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120 Validity Not Before: Jan 25 11:00:59 2026 GMT Not After : Jan 26 11:00:59 2026 GMT Subject: CN=b8184eb89954e371e33bd935ca891d95f2eae1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:a8:46:12:35:b2:60:3b:42:61:de:c4:6c: 1b:90:69:f8:bb:d8:61:2f:fb:70:c7:41:49:55:a8: 7c:5c:10:18:1e:3c:03:2e:cc:2a:e6:2e:01:a5:ba: 4e:c6:7c:44:0a:f3:dc:89:01:46:6c:f6:45:66:aa: c0:89:c9:3f:68:2d:ed:8a:7b:5e:95:b3:91:76:40: bf:37:8e:11:bc:a1:44:47:65:a1:8d:fd:9f:01:68: ae:db:c6:9e:32:56:37:32:de:c9:4b:fc:ca:c9:f0: 3c:ff:8f:bd:95:21:77:14:0f:09:02:58:ec:5a:fc: 65:3e:7b:fb:fb:bc:d6:02:1f:17:c7:ba:4a:7d:42: 12:5e:a4:9d:80:11:9a:dd:44:dd:54:1f:70:1a:62: 08:75:43:c8:01:df:1d:d0:da:04:12:a2:cf:0f:18: 9a:27:7c:e6:27:2b:e1:13:82:8c:bd:46:9e:eb:b9: a7:45:66:4c:79:e7:5c:9f:fc:ac:01:a9:48:0a:ba: 51:cf:13:66:c7:05:c9:ea:2d:50:de:86:b1:c9:16: 1d:73:de:45:18:91:fa:16:c9:75:aa:73:16:fa:b0: 17:fb:03:91:6f:8e:d8:d8:50:d5:ae:f5:72:18:07: e7:f0:76:9e:72:a4:d1:08:dc:f1:b4:b7:f8:e1:4f: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:18:4E:B8:99:54:E3:71:E3:3B:D9:35:CA:89:1D:95:F2:EA:E1:C6 X509v3 Authority Key Identifier: keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2b:d2:4c:45:6f:70:67:ac:ab:b3:c4:e1:0e:a9:f1:48:f7: 2d:9b:fc:a3:4f:94:d7:17:58:ee:31:69:a8:99:3b:ed:19:14: be:b9:92:ac:1e:4e:34:b0:44:0f:eb:f4:1e:c4:64:52:af:ab: c0:c5:59:ed:c5:e8:b7:9e:e8:aa:8d:67:1d:dd:45:ab:ef:29: 7c:13:bd:4e:92:52:86:37:c9:04:94:50:56:e6:91:13:77:01: 6c:95:cc:df:c9:c9:e7:f9:38:47:19:2f:4b:2e:0c:8c:cb:0e: 07:24:f6:d4:66:bb:ff:9c:29:46:08:fa:68:2e:ab:21:88:4c: bf:90:5a:30:5c:76:e3:c8:3d:3f:4a:3d:bd:4b:68:6c:6b:e3: f8:01:1d:aa:91:5b:a8:f3:8f:28:bc:8f:33:59:5f:01:b4:a1: 28:26:14:16:e8:76:82:78:8d:9b:ed:a3:2c:92:61:3a:42:94: 66:da:a2:b2:8f:87:02:b1:b6:a4:36:c7:75:d1:bc:1e:0b:d7: 25:46:c9:c2:3b:81:c7:1d:69:a6:e2:23:56:4f:73:34:33:82: 88:b2:e5:6e:2e:07:1e:80:be:a2:bc:a5:41:ce:26:2c:0f:2f: b3:e3:3c:62:87:a5:6e:24:e8:af:00:4c:f7:3b:a6:ee:49:7c: 1c:c3:fa:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00G5MqjQtSe4VApjZJ5LLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDVkZjZlNDA0ZWY5MjBlNmE1OTI4ZDg5NjNlNmE1Zjhk NjExMjAwHhcNMjYwMTI1MTEwMDU5WhcNMjYwMTI2MTEwMDU5WjAzMTEwLwYDVQQD EyhiODE4NGViODk5NTRlMzcxZTMzYmQ5MzVjYTg5MWQ5NWYyZWFlMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXuoRhI1smA7QmHexGwbkGn4u9hh L/twx0FJVah8XBAYHjwDLswq5i4BpbpOxnxECvPciQFGbPZFZqrAick/aC3tinte lbORdkC/N44RvKFER2Whjf2fAWiu28aeMlY3Mt7JS/zKyfA8/4+9lSF3FA8JAljs WvxlPnv7+7zWAh8Xx7pKfUISXqSdgBGa3UTdVB9wGmIIdUPIAd8d0NoEEqLPDxia J3zmJyvhE4KMvUae67mnRWZMeedcn/ysAalICrpRzxNmxwXJ6i1Q3oaxyRYdc95F GJH6Fsl1qnMW+rAX+wORb47Y2FDVrvVyGAfn8HaecqTRCNzxtLf44U/P7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgYTriZVONx4zvZNcqJHZXy6uHGMB8GA1UdIwQY MBaAFNwF325ATvkg5qWSjYlj5qX41hEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQt YmNlOTM0MjA1YWU4LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQtYmNlOTM0MjA1YWU4 LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbivSTEVv cGesq7PE4Q6p8Uj3LZv8o0+U1xdY7jFpqJk77RkUvrmSrB5ONLBED+v0HsRkUq+r wMVZ7cXot57oqo1nHd1Fq+8pfBO9TpJShjfJBJRQVuaRE3cBbJXM38nJ5/k4Rxkv Sy4MjMsOByT21Ga7/5wpRgj6aC6rIYhMv5BaMFx248g9P0o9vUtobGvj+AEdqpFb qPOPKLyPM1lfAbShKCYUFuh2gniNm+2jLJJhOkKUZtqiso+HArG2pDbHddG8HgvX JUbJwjuBxx1ppuIjVk9zNDOCiLLlbi4HHoC+orylQc4mLA8vs+M8YoelbiTorwBM 9zum7kl8HMP6Bg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:08 2026 by rpki-client