This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json) Hash identifier: 97kEaCP7lVmirCUxO9YVZs2/VgN4SNpyFWAJA60auTE= Subject key identifier: BF:0A:7B:50:1C:23:95:9B:D8:31:FC:EE:04:AE:14:62:D6:F5:5C:31 Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92 Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692 Certificate serial: 019BF5AC37F00F5FC23393BE086DD143F447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 15:01:02 +0000 Manifest this update: Sun 25 Jan 2026 15:01:02 +0000 Manifest next update: Mon 26 Jan 2026 15:01:02 +0000 Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: OuGW1LKH1XUziFll21ti/QDRdL1GYVE6Lt2S44m2y34=) 2: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (hash: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74=) 3: jnbS6eM3y8l2eIAi24P02_6sYnE.roa (hash: oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:37:f0:0f:5f:c2:33:93:be:08:6d:d1:43:f4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692 Validity Not Before: Jan 25 15:01:02 2026 GMT Not After : Jan 26 15:01:02 2026 GMT Subject: CN=bf0a7b501c23959bd831fcee04ae1462d6f55c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:bf:54:ea:60:80:79:a2:38:6e:3d:e0:19: 3b:94:97:91:17:8f:12:48:c1:54:79:36:b8:dd:7a: 22:de:45:a6:23:58:10:e5:c0:a2:1a:05:20:d1:f4: b9:04:d1:19:7f:73:75:1e:4e:6f:ec:b4:a5:50:16: 55:a3:97:a6:70:92:9a:1d:56:c1:0f:cd:1d:44:af: 98:87:19:e4:66:7a:09:4e:00:ba:50:5d:07:e7:7f: 74:3b:ad:2c:26:16:50:58:3d:67:aa:86:40:30:3b: 07:3e:db:db:46:df:6f:29:23:d9:33:1a:54:ea:5b: fd:d8:07:86:a1:33:79:41:b6:d5:ec:8e:15:8b:fe: 97:a8:4f:9a:39:67:b8:b6:a4:c2:10:1f:3c:48:9c: 61:f5:0f:bc:22:75:84:2b:08:ae:30:28:ae:f2:10: af:fe:50:31:5e:45:75:b4:fb:43:91:c0:54:fe:ae: c1:56:8f:c9:f0:6d:48:6c:23:b2:4f:8b:6e:3a:f7: 2f:02:56:aa:06:32:b2:b5:65:f2:2b:7d:2a:42:80: b0:e5:cf:eb:5c:8c:85:4d:59:5c:ec:72:6d:fd:03: 49:35:b4:2b:d2:e9:b5:7e:d6:68:58:3a:42:00:b7: 99:73:ee:c4:79:63:ad:13:e9:17:cc:fa:92:94:18: 6f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0A:7B:50:1C:23:95:9B:D8:31:FC:EE:04:AE:14:62:D6:F5:5C:31 X509v3 Authority Key Identifier: keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:48:b4:5b:d8:8a:2a:79:63:52:b0:d2:32:6b:23:8d:6d:6f: dd:b0:ee:3a:6f:70:3e:75:65:7c:e5:af:37:08:8b:6f:0c:08: 8e:ae:41:40:7f:a2:a6:6f:4a:bd:0c:57:63:ff:3b:58:ae:ee: 37:47:72:d4:9a:18:90:d7:47:2f:2a:c7:05:2d:89:ce:ac:c6: d3:34:d4:df:0f:0b:a9:c7:5c:6e:7e:46:cc:6c:3e:38:28:8f: 3b:90:a4:38:7d:2d:55:c9:52:25:2c:6c:f0:79:06:83:a5:8e: 90:d8:94:a5:e1:f0:de:2f:86:1d:23:ef:f1:53:b2:91:88:aa: 16:1f:30:8d:75:52:63:63:cb:e3:91:a3:36:d4:47:38:a7:51: d7:09:8d:3f:f4:fa:0c:7c:37:39:5a:3a:f7:4e:d9:19:06:b1: 3b:00:63:60:7d:4d:73:25:6b:cc:49:f7:97:2f:59:46:65:0a: 9d:08:e8:13:0c:94:b2:82:de:8a:ed:c8:6f:1a:83:ad:45:93: a0:08:4b:40:ce:e4:7c:8d:b3:b0:37:90:77:f3:23:e9:f9:a7: 19:4f:dd:03:47:fc:6f:44:12:44:42:63:a3:76:27:d1:9a:2f: 39:b6:fb:5d:bb:a5:64:50:1c:e7:ae:ac:9c:2f:e0:dc:08:20: 14:2f:78:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rDfwD1/CM5O+CG3RQ/RHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzAwYjk2ZTlhN2EwZjlkYjg5YmY1ZTE4MTE1YjEyYTNl ZjE2OTIwHhcNMjYwMTI1MTUwMTAyWhcNMjYwMTI2MTUwMTAyWjAzMTEwLwYDVQQD EyhiZjBhN2I1MDFjMjM5NTliZDgzMWZjZWUwNGFlMTQ2MmQ2ZjU1YzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcO/VOpggHmiOG494Bk7lJeRF48S SMFUeTa43Xoi3kWmI1gQ5cCiGgUg0fS5BNEZf3N1Hk5v7LSlUBZVo5emcJKaHVbB D80dRK+YhxnkZnoJTgC6UF0H5390O60sJhZQWD1nqoZAMDsHPtvbRt9vKSPZMxpU 6lv92AeGoTN5QbbV7I4Vi/6XqE+aOWe4tqTCEB88SJxh9Q+8InWEKwiuMCiu8hCv /lAxXkV1tPtDkcBU/q7BVo/J8G1IbCOyT4tuOvcvAlaqBjKytWXyK30qQoCw5c/r XIyFTVlc7HJt/QNJNbQr0um1ftZoWDpCALeZc+7EeWOtE+kXzPqSlBhvUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8Ke1AcI5Wb2DH87gSuFGLW9VwxMB8GA1UdIwQY MBaAFNxwC5bpp6D524m/XhgRWxKj7xaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4Yzgt NTI1MjMwZTIwNjgxLzEvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4YzgtNTI1MjMwZTIwNjgx LzEvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0i0W9iK KnljUrDSMmsjjW1v3bDuOm9wPnVlfOWvNwiLbwwIjq5BQH+ipm9KvQxXY/87WK7u N0dy1JoYkNdHLyrHBS2JzqzG0zTU3w8Lqcdcbn5GzGw+OCiPO5CkOH0tVclSJSxs 8HkGg6WOkNiUpeHw3i+GHSPv8VOykYiqFh8wjXVSY2PL45GjNtRHOKdR1wmNP/T6 DHw3OVo6907ZGQaxOwBjYH1NcyVrzEn3ly9ZRmUKnQjoEwyUsoLeiu3IbxqDrUWT oAhLQM7kfI2zsDeQd/Mj6fmnGU/dA0f8b0QSREJjo3Yn0ZovObb7XbulZFAc566s nC/g3AggFC94KQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:22 2026 by rpki-client