This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft File: 3sTrmin0tz2fTIT5dcheB1S1a3E.mft (raw, json) Hash identifier: aFsY9knLWp0ftnVr+MxZvMBjW2H1V1r78lGA5tWmDrk= Subject key identifier: 69:15:56:FB:82:F8:E5:B8:48:B6:64:13:99:6E:71:C7:BA:FE:24:E9 Authority key identifier: DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71 Certificate issuer: /CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71 Certificate serial: 019BF8E418D7E373C263DB8FA4B8A60EA5C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft Manifest number: 36 Signing time: Mon 26 Jan 2026 06:00:56 +0000 Manifest this update: Mon 26 Jan 2026 06:00:56 +0000 Manifest next update: Tue 27 Jan 2026 06:00:56 +0000 Files and hashes: 1: 3sTrmin0tz2fTIT5dcheB1S1a3E.crl (hash: x6HIOMLrEFPJcIUxYqBEbODhLZ1Q+DrdTLjzdKioPdM=) 2: 8v-B4tBwt_nXsn0BNXUtzTao1xQ.asa (hash: c3eWcYcZ6AfSlXW2n8VDHUuk8WUaUZqoj+gBRxx0us0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:18:d7:e3:73:c2:63:db:8f:a4:b8:a6:0e:a5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71 Validity Not Before: Jan 26 06:00:56 2026 GMT Not After : Jan 27 06:00:56 2026 GMT Subject: CN=691556fb82f8e5b848b66413996e71c7bafe24e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:e4:f8:d7:9f:1d:a3:1e:a4:73:fb:98:76: 8d:13:d1:1e:99:d2:63:a7:70:ec:1d:74:6b:2d:a4: 22:0a:67:f8:fa:c6:60:b7:ee:9a:18:04:e5:92:3a: 6f:28:70:9b:fa:47:b4:32:03:2a:d2:74:90:75:51: 6d:cd:a6:57:ad:d6:70:1c:98:06:d4:c2:07:c1:3c: 64:7a:3d:33:3d:03:4b:20:1e:53:14:9a:2d:d8:c0: 03:15:ba:db:e6:f9:40:c6:b6:14:14:a6:fd:9b:e8: 04:d5:92:32:80:c9:e1:41:b7:f2:b3:d3:ea:c7:34: d9:0c:d4:4f:0b:79:e7:39:1e:99:49:26:4b:4d:05: 32:e4:d9:66:e5:7d:78:23:38:15:7e:03:fc:2c:a8: 56:38:f0:fa:25:28:de:0c:b3:12:3c:81:71:93:a1: e8:20:99:0e:2d:53:82:ef:cc:a1:be:a0:06:1f:6d: 66:df:80:a3:35:75:6d:36:a8:66:d7:41:c4:80:74: af:77:3e:55:cc:d4:95:8b:24:d7:11:ce:71:3a:52: cf:5f:d2:1e:ef:37:0b:ee:4e:ea:3b:7a:ac:f7:7a: 65:ae:06:b0:7f:ae:bc:17:b0:88:18:02:fa:d6:1c: a7:fe:09:82:ba:a7:2b:b9:69:02:45:a5:c0:77:5c: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:15:56:FB:82:F8:E5:B8:48:B6:64:13:99:6E:71:C7:BA:FE:24:E9 X509v3 Authority Key Identifier: keyid:DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f7:b8:c2:e5:17:05:0d:b1:d9:30:49:fb:77:d8:d5:86:70: a3:14:15:5d:f0:2f:9a:06:b9:d6:3c:f9:76:e2:d3:59:5b:08: 89:c9:cb:88:cf:62:f2:98:5f:ff:96:e4:1f:ab:4e:68:06:3e: 25:37:06:ce:96:29:3d:ed:80:4d:af:ae:11:1f:d5:68:8a:00: 96:bf:25:54:e0:c8:cd:cd:24:8d:5a:96:d4:dc:6c:1e:62:41: 4a:27:02:f8:7d:58:b5:46:3c:d0:08:ea:02:57:fb:93:f3:67: 86:94:6c:e7:3f:60:f9:d9:81:9f:e7:7a:1e:e7:ab:27:fb:e4: 2b:9a:5a:49:8e:73:c4:c6:35:96:0f:be:93:9c:cf:ae:15:17: e5:01:e4:6f:80:14:35:45:0a:6b:68:af:41:e1:9c:2a:72:a8: ab:1a:42:6a:f9:53:02:75:69:7a:f8:56:df:7e:fb:62:63:e8: cd:a2:02:4e:cb:cc:c1:f7:be:c3:d9:70:5c:cf:e1:2d:63:2f: d2:9c:66:1f:39:f7:ae:3b:72:a8:93:65:0c:8c:19:c2:f0:64: b4:93:84:cd:15:86:40:cc:63:68:b8:f1:02:54:f3:92:2f:74: 6a:5b:c5:70:39:08:e3:9d:ae:32:63:fc:5f:e2:43:79:03:c1: 83:9a:40:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45BjX43PCY9uPpLimDqXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYzRlYjlhMjlmNGI3M2Q5ZjRjODRmOTc1Yzg1ZTA3NTRi NTZiNzEwHhcNMjYwMTI2MDYwMDU2WhcNMjYwMTI3MDYwMDU2WjAzMTEwLwYDVQQD Eyg2OTE1NTZmYjgyZjhlNWI4NDhiNjY0MTM5OTZlNzFjN2JhZmUyNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraPk+NefHaMepHP7mHaNE9EemdJj p3DsHXRrLaQiCmf4+sZgt+6aGATlkjpvKHCb+ke0MgMq0nSQdVFtzaZXrdZwHJgG 1MIHwTxkej0zPQNLIB5TFJot2MADFbrb5vlAxrYUFKb9m+gE1ZIygMnhQbfys9Pq xzTZDNRPC3nnOR6ZSSZLTQUy5Nlm5X14IzgVfgP8LKhWOPD6JSjeDLMSPIFxk6Ho IJkOLVOC78yhvqAGH21m34CjNXVtNqhm10HEgHSvdz5VzNSViyTXEc5xOlLPX9Ie 7zcL7k7qO3qs93plrgawf668F7CIGAL61hyn/gmCuqcruWkCRaXAd1w/CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkVVvuC+OW4SLZkE5lucce6/iTpMB8GA1UdIwQY MBaAFN7E65op9Lc9n0yE+XXIXgdUtWtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xYzkwZDctZjEyYi00MjgzLThhOTMt ZTYxNzQxYjlmMjQ5LzEvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8xYzkwZDctZjEyYi00MjgzLThhOTMtZTYxNzQxYjlmMjQ5 LzEvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFve4wuUX BQ2x2TBJ+3fY1YZwoxQVXfAvmga51jz5duLTWVsIicnLiM9i8phf/5bkH6tOaAY+ JTcGzpYpPe2ATa+uER/VaIoAlr8lVODIzc0kjVqW1NxsHmJBSicC+H1YtUY80Ajq Alf7k/NnhpRs5z9g+dmBn+d6HuerJ/vkK5paSY5zxMY1lg++k5zPrhUX5QHkb4AU NUUKa2ivQeGcKnKoqxpCavlTAnVpevhW3377YmPozaICTsvMwfe+w9lwXM/hLWMv 0pxmHzn3rjtyqJNlDIwZwvBktJOEzRWGQMxjaLjxAlTzki90alvFcDkI452uMmP8 X+JDeQPBg5pA3g== -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:42 2026 by rpki-client