This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json) Hash identifier: xlT9qpCoCBEbNPZ67whOfASgk/MsMQsP0sAa7NUZLjo= Subject key identifier: 07:D8:A6:CB:C9:D9:D3:F3:70:AE:EE:D4:93:03:38:41:F1:B5:2F:32 Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c Certificate serial: 019BF7635BC250970D1C4570699C34A4A2AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft Manifest number: 172A Signing time: Sun 25 Jan 2026 23:00:42 +0000 Manifest this update: Sun 25 Jan 2026 23:00:42 +0000 Manifest next update: Mon 26 Jan 2026 23:00:42 +0000 Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: J9hGJyycTt7CuDJFXyNnFs+/55iHcM+Obe+GRQ0vxSs=) 2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:5b:c2:50:97:0d:1c:45:70:69:9c:34:a4:a2:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c Validity Not Before: Jan 25 23:00:42 2026 GMT Not After : Jan 26 23:00:42 2026 GMT Subject: CN=07d8a6cbc9d9d3f370aeeed493033841f1b52f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:70:74:54:8f:09:20:12:be:9e:27:ef:74: 9e:e7:b0:9b:c6:5a:19:fc:7c:b3:e8:ee:f2:ba:ea: c6:80:c8:ba:3c:8a:b9:5c:5b:bb:d7:e0:d5:94:ea: 35:25:18:0b:27:a8:ef:35:95:18:e3:d8:e9:e1:77: d7:55:52:8c:a9:6a:19:fa:e0:df:bf:b5:e6:c6:63: aa:16:f5:e2:17:49:d9:a8:e2:1e:8c:1c:d0:13:be: 1e:f3:d4:54:24:74:22:ba:f2:a2:64:9f:9a:9f:68: 53:ed:8a:3f:e6:00:f7:f0:10:26:11:1e:bc:9d:e6: d9:9f:69:5b:74:54:27:d4:17:e9:a0:0e:98:a2:f5: bf:28:d2:1f:cd:ff:f5:3f:a7:f7:4d:03:f4:4c:c5: 90:fc:2d:cc:99:eb:2d:de:13:97:4f:4a:4e:f9:88: 24:84:d8:86:88:8f:14:a9:c0:a3:11:98:8d:db:47: b4:06:7d:e5:97:ad:d3:43:78:f1:59:45:0f:9c:85: 2d:43:0f:42:39:5c:7a:56:a6:99:56:f7:7e:1a:e4: 88:d5:b8:d3:dc:b4:f4:0b:d5:b0:34:87:7b:fb:f3: 9a:12:80:87:21:49:4e:c5:fa:7c:96:7b:72:61:9c: 4f:63:9a:ce:95:76:4f:a8:5a:08:94:bc:0b:8f:86: 1c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D8:A6:CB:C9:D9:D3:F3:70:AE:EE:D4:93:03:38:41:F1:B5:2F:32 X509v3 Authority Key Identifier: keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:bd:62:52:44:ab:ca:34:4f:db:b4:93:58:89:e9:fc:69:69: 6a:5d:f0:8e:48:cc:52:b9:13:42:3a:d5:c3:b4:59:a9:68:60: 97:07:c3:9e:85:75:3b:c7:9e:40:ff:f5:0a:62:18:57:d1:57: f3:37:3d:9e:86:2d:9e:04:15:cd:85:db:0c:cb:ab:41:03:44: b1:d3:37:d5:63:46:5f:3c:e2:e0:54:84:f4:96:7c:7c:93:9e: dd:b7:7a:06:24:f7:58:ce:96:52:0a:b0:89:90:44:bc:f4:40: 69:c4:e5:ac:b0:05:a7:bf:7d:f8:7f:b4:56:4d:f8:5f:bd:9e: a8:f2:2a:ae:e1:42:58:a4:84:c3:8a:4f:03:7e:33:b4:55:91: 65:1f:19:d6:bf:a8:2e:b7:19:47:98:67:f7:6f:50:d0:22:3f: 42:9e:93:2f:79:0f:0b:21:ce:0f:c5:e2:94:6e:33:ea:69:1e: 61:ee:12:ce:30:27:27:6c:f4:bd:01:d3:f3:fc:71:55:89:8e: 1a:34:ae:bb:d5:72:4a:e7:eb:b6:fa:fb:9c:79:b1:b9:62:a5: fd:73:1d:bb:e0:3b:a2:71:3d:71:49:f1:62:3b:40:a3:bb:f7: f7:76:6b:40:96:33:69:d6:a6:9a:13:81:84:d2:96:dc:e2:ef: 0d:76:32:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y1vCUJcNHEVwaZw0pKKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZmY4NWJiOGEzNzU5NTIzZTBjYzlmOGE5MWRiZGFmNDc0 ZDZiN2MwHhcNMjYwMTI1MjMwMDQyWhcNMjYwMTI2MjMwMDQyWjAzMTEwLwYDVQQD EygwN2Q4YTZjYmM5ZDlkM2YzNzBhZWVlZDQ5MzAzMzg0MWYxYjUyZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRRwdFSPCSASvp4n73Se57CbxloZ /Hyz6O7yuurGgMi6PIq5XFu71+DVlOo1JRgLJ6jvNZUY49jp4XfXVVKMqWoZ+uDf v7XmxmOqFvXiF0nZqOIejBzQE74e89RUJHQiuvKiZJ+an2hT7Yo/5gD38BAmER68 nebZn2lbdFQn1BfpoA6YovW/KNIfzf/1P6f3TQP0TMWQ/C3Mmest3hOXT0pO+Ygk hNiGiI8UqcCjEZiN20e0Bn3ll63TQ3jxWUUPnIUtQw9COVx6VqaZVvd+GuSI1bjT 3LT0C9WwNId7+/OaEoCHIUlOxfp8lntyYZxPY5rOlXZPqFoIlLwLj4YcAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfYpsvJ2dPzcK7u1JMDOEHxtS8yMB8GA1UdIwQY MBaAFNz/hbuKN1lSPgzJ+Kkdva9HTWt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYt NWJjMzAyYjRiNWZjLzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYtNWJjMzAyYjRiNWZj LzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR71iUkSr yjRP27STWInp/Glpal3wjkjMUrkTQjrVw7RZqWhglwfDnoV1O8eeQP/1CmIYV9FX 8zc9noYtngQVzYXbDMurQQNEsdM31WNGXzzi4FSE9JZ8fJOe3bd6BiT3WM6WUgqw iZBEvPRAacTlrLAFp799+H+0Vk34X72eqPIqruFCWKSEw4pPA34ztFWRZR8Z1r+o LrcZR5hn929Q0CI/Qp6TL3kPCyHOD8XilG4z6mkeYe4SzjAnJ2z0vQHT8/xxVYmO GjSuu9VySufrtvr7nHmxuWKl/XMdu+A7onE9cUnxYjtAo7v393ZrQJYzadammhOB hNKW3OLvDXYyag== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:33 2026 by rpki-client