This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json) Hash identifier: FVXGdSC0Mhiu/yyy/+927z765epxokt/X1bhruEeL6I= Subject key identifier: 2C:89:B9:16:87:58:D0:52:48:35:C0:C8:18:16:69:65:49:48:DD:4E Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Certificate serial: 019BF6BEAD752A0C77DFE44F457588031FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 20:00:49 +0000 Manifest this update: Sun 25 Jan 2026 20:00:49 +0000 Manifest next update: Mon 26 Jan 2026 20:00:49 +0000 Files and hashes: 1: 7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa (hash: +MmvrOl97e3DA2vv+SK8o06jDjKb06tuUhtauO+J0DA=) 2: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: 8zy05pcNiK92tgBJG0MCYK0CoI+7fegZvmFFGJarRdQ=) 3: e73gsHaWTejzTyfXW5UdzDUTXQs.roa (hash: 9j92RNoJBabv7foYLIaPsDGRKKARMwRj5sIk41buBpE=) 4: nExWLodTy66s6nOpw-IuXiduwOc.roa (hash: xQ9/3XOQzACu7Vie8ibe6dTF70DY7qx3P6HKsR8oJRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:ad:75:2a:0c:77:df:e4:4f:45:75:88:03:1f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Validity Not Before: Jan 25 20:00:49 2026 GMT Not After : Jan 26 20:00:49 2026 GMT Subject: CN=2c89b9168758d0524835c0c8181669654948dd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:2e:d3:bb:20:3a:ff:74:4a:99:1b:dc:ec: 68:13:58:d5:8b:29:eb:63:73:96:ac:72:bf:41:fb: 02:5f:c4:17:33:ee:b0:0a:91:a0:63:a2:74:5d:c5: 97:03:e9:23:30:b6:13:1b:35:8b:62:36:17:2d:1d: a9:f2:2c:58:07:e3:8c:62:7c:12:cc:75:7c:d6:0b: 19:4e:d1:c1:12:95:ae:71:97:99:c3:a5:3a:c9:8e: 9d:e0:56:57:cb:c1:4d:d1:3e:44:7f:8b:5e:c7:85: ac:44:72:f2:fb:28:e2:d4:5f:ed:2c:10:52:fd:5b: ce:86:f8:30:ff:51:10:79:76:cb:49:9f:61:3c:0c: aa:85:23:bc:57:63:ac:5b:4d:4f:92:19:d7:ab:23: 56:e2:68:cc:1f:07:94:ee:9b:b1:b9:1f:d6:35:62: e7:f6:17:41:a6:8d:a8:72:72:a7:cd:e2:9c:78:0e: f3:c8:d0:8c:9c:0a:46:67:aa:4f:24:63:04:63:92: 73:94:b9:db:d4:7c:76:76:bd:03:e5:48:67:13:37: e7:84:d8:50:6b:cf:7f:5e:ce:e0:10:ab:7a:d9:c5: 65:83:11:4b:96:f5:bc:7f:61:5d:3e:bb:ff:06:e8: b4:74:b6:1d:ee:e9:52:79:eb:47:d7:95:d9:a4:b8: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:89:B9:16:87:58:D0:52:48:35:C0:C8:18:16:69:65:49:48:DD:4E X509v3 Authority Key Identifier: keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:20:cb:ce:c8:3f:6c:fa:b0:f8:db:59:39:14:e8:7b:68:67: b5:1b:26:3e:df:d1:1b:ae:06:8a:4f:62:f5:10:74:84:f8:1d: 6c:14:f5:12:dd:df:a5:61:c8:3f:d1:a1:8a:16:20:95:a4:19: c3:0a:b7:be:8e:ef:7d:8b:ab:8f:d8:50:e7:27:61:0f:64:03: 84:49:53:03:87:b9:b7:65:5e:b8:c0:36:a6:4e:cb:ad:0c:ca: 8e:ab:2c:d7:16:72:dc:58:e6:14:8a:60:53:0a:69:8d:14:ca: a8:fb:bd:d8:81:21:a1:ef:3b:42:4a:05:c4:54:9f:83:a4:26: f9:ec:21:7b:24:7c:cf:8b:fa:28:18:fd:0a:07:55:51:e5:f2: c4:86:d4:d0:7b:29:fa:25:ac:4c:b8:4c:ba:21:98:ba:2f:1e: c6:93:30:75:25:a3:51:e1:73:08:13:62:dc:ca:a7:92:e2:46: 32:e2:02:1e:f9:73:cb:21:fa:b5:29:00:28:89:ef:01:9f:6f: b5:5b:7f:5c:ba:7c:cf:68:25:d3:e3:a2:c1:d1:55:77:52:78: bd:7b:3c:ae:cc:ee:22:a5:1e:a4:e1:f5:f8:a8:9f:39:44:c0: e7:63:7f:dd:06:ce:69:a0:a1:65:69:54:89:04:b0:33:0b:9f: 43:f7:6e:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vq11Kgx33+RPRXWIAx/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5 Y2MyNDIwHhcNMjYwMTI1MjAwMDQ5WhcNMjYwMTI2MjAwMDQ5WjAzMTEwLwYDVQQD EygyYzg5YjkxNjg3NThkMDUyNDgzNWMwYzgxODE2Njk2NTQ5NDhkZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVEu07sgOv90Spkb3OxoE1jViynr Y3OWrHK/QfsCX8QXM+6wCpGgY6J0XcWXA+kjMLYTGzWLYjYXLR2p8ixYB+OMYnwS zHV81gsZTtHBEpWucZeZw6U6yY6d4FZXy8FN0T5Ef4tex4WsRHLy+yji1F/tLBBS /VvOhvgw/1EQeXbLSZ9hPAyqhSO8V2OsW01PkhnXqyNW4mjMHweU7puxuR/WNWLn 9hdBpo2ocnKnzeKceA7zyNCMnApGZ6pPJGMEY5JzlLnb1Hx2dr0D5UhnEzfnhNhQ a89/Xs7gEKt62cVlgxFLlvW8f2FdPrv/Bui0dLYd7ulSeetH15XZpLjoVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyJuRaHWNBSSDXAyBgWaWVJSN1OMB8GA1UdIwQY MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt YmRmNmU0Mjk0YzJlLzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSDLzsg/ bPqw+NtZORToe2hntRsmPt/RG64Gik9i9RB0hPgdbBT1Et3fpWHIP9GhihYglaQZ wwq3vo7vfYurj9hQ5ydhD2QDhElTA4e5t2VeuMA2pk7LrQzKjqss1xZy3FjmFIpg UwppjRTKqPu92IEhoe87QkoFxFSfg6Qm+ewheyR8z4v6KBj9CgdVUeXyxIbU0Hsp +iWsTLhMuiGYui8expMwdSWjUeFzCBNi3MqnkuJGMuICHvlzyyH6tSkAKInvAZ9v tVt/XLp8z2gl0+OiwdFVd1J4vXs8rszuIqUepOH1+KifOUTA52N/3QbOaaChZWlU iQSwMwufQ/ducg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:11:36 2026 by rpki-client