This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: uu4Df76/YIr3nV+/ISalIJmiI0bqbb6+z4XSg1gtTG8= Subject key identifier: CD:D7:BE:91:DC:92:8B:A3:04:1B:A9:3B:4C:A1:A6:60:35:B4:E0:FE Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019BF462C9B9E03BBCF9B117A4E23AEBDB80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 022E Signing time: Sun 25 Jan 2026 09:01:13 +0000 Manifest this update: Sun 25 Jan 2026 09:01:13 +0000 Manifest next update: Mon 26 Jan 2026 09:01:13 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: 8f1dTr8SqEVKNZn1cJfZ/xcLozgki5Loxk38w7nqpno=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 5: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 6: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 7: Ygsxykf3uzMluirmVMegyVoFLS0.roa (hash: oylu68VFzffinxutX7NTVCDb+jA6Sp7DjuwzucIVKqw=) 8: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 9: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 10: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:c9:b9:e0:3b:bc:f9:b1:17:a4:e2:3a:eb:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jan 25 09:01:13 2026 GMT Not After : Jan 26 09:01:13 2026 GMT Subject: CN=cdd7be91dc928ba3041ba93b4ca1a66035b4e0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:f8:46:07:ba:1b:e2:e0:29:29:ce:a5:59: 86:20:3e:a3:fe:99:e1:8d:e3:92:66:22:9d:ea:ff: 1e:ba:7c:5b:9e:02:0d:b3:66:bf:32:42:53:f6:a2: bb:9d:36:52:7c:f2:d9:eb:e2:94:bf:eb:3b:96:31: 6e:5a:d5:2e:7c:d2:38:fa:d9:02:8d:a0:c9:ba:9b: 48:c9:6c:ba:67:ee:f3:4a:77:14:6a:50:14:c3:31: 00:57:dc:f9:2f:e7:0e:aa:86:e4:38:a9:c8:7a:29: 6b:20:79:5e:76:01:0e:95:80:e6:4b:e2:e9:12:29: b9:ba:1e:0c:4f:93:b9:79:0d:ce:8e:98:b0:81:6b: b1:ab:7f:99:19:b9:96:e6:36:bf:d4:bf:bb:23:6c: 9b:25:76:86:d8:2a:ca:05:0f:3b:60:74:57:16:64: 5c:5c:86:c1:42:b5:55:81:e9:d5:e0:29:f9:f1:ee: 9a:79:c6:d5:45:4b:b6:28:c7:1c:8c:97:b0:7b:ac: 02:e3:b1:e6:53:cc:96:e0:8a:82:de:0f:f1:2d:a9: 04:22:75:78:88:d3:e8:c4:ff:3f:2b:e3:da:66:eb: 4a:ed:46:c9:99:2f:69:6d:f8:73:6b:7f:a2:40:ac: b4:e8:60:75:b4:a0:4e:e0:20:6f:cb:1e:40:f3:b6: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D7:BE:91:DC:92:8B:A3:04:1B:A9:3B:4C:A1:A6:60:35:B4:E0:FE X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:86:a5:13:ad:46:63:6e:f7:50:d6:c0:4f:cc:a9:0e:8a:27: 4a:a0:fe:d5:34:f4:20:9b:12:b1:28:f0:24:8b:1d:89:d6:3e: 7e:82:0f:8d:86:6a:2f:ac:e3:55:93:c8:45:43:1f:7c:13:46: ae:d9:df:59:20:5d:de:54:b3:c1:56:7f:ef:7b:69:df:4b:da: da:b8:39:18:39:b4:6b:7b:1f:78:be:21:0b:cd:0f:b6:cf:28: fd:26:c1:3f:f3:fc:94:ff:a0:b6:5e:32:3b:18:f9:20:7c:a7: bb:fb:09:a7:2f:08:aa:bc:0b:8b:d2:64:a9:df:c8:05:ae:85: c8:f8:de:c3:b5:2a:6b:9e:f5:8e:c9:4a:a0:e3:f0:21:17:46: 46:c1:36:a1:ee:ea:41:ee:44:ef:64:3b:34:e4:24:c4:36:e2: 3a:9a:ed:84:6b:31:82:f4:42:58:7d:16:5a:ac:aa:1d:20:a5: 9c:93:5d:22:c0:7c:8d:f8:13:58:75:fc:c7:d8:0d:d3:45:7c: 9f:d4:84:25:21:8d:8b:cd:38:26:db:7d:02:72:e4:ee:b5:3d: b5:e4:9d:06:7a:bb:d7:a9:0a:50:55:a0:03:8f:3a:c2:71:2e: ae:d9:40:54:a1:11:a2:88:cd:c5:e1:48:8a:57:fa:2d:c5:bf: 4b:b4:74:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Ysm54Du8+bEXpOI669uAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMTI1MDkwMTEzWhcNMjYwMTI2MDkwMTEzWjAzMTEwLwYDVQQD EyhjZGQ3YmU5MWRjOTI4YmEzMDQxYmE5M2I0Y2ExYTY2MDM1YjRlMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplL4Rge6G+LgKSnOpVmGID6j/pnh jeOSZiKd6v8eunxbngINs2a/MkJT9qK7nTZSfPLZ6+KUv+s7ljFuWtUufNI4+tkC jaDJuptIyWy6Z+7zSncUalAUwzEAV9z5L+cOqobkOKnIeilrIHledgEOlYDmS+Lp Eim5uh4MT5O5eQ3OjpiwgWuxq3+ZGbmW5ja/1L+7I2ybJXaG2CrKBQ87YHRXFmRc XIbBQrVVgenV4Cn58e6aecbVRUu2KMccjJewe6wC47HmU8yW4IqC3g/xLakEInV4 iNPoxP8/K+PaZutK7UbJmS9pbfhza3+iQKy06GB1tKBO4CBvyx5A87Y1AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3XvpHckoujBBupO0yhpmA1tOD+MB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoalE61G Y273UNbAT8ypDoonSqD+1TT0IJsSsSjwJIsdidY+foIPjYZqL6zjVZPIRUMffBNG rtnfWSBd3lSzwVZ/73tp30va2rg5GDm0a3sfeL4hC80Pts8o/SbBP/P8lP+gtl4y Oxj5IHynu/sJpy8IqrwLi9Jkqd/IBa6FyPjew7Uqa571jslKoOPwIRdGRsE2oe7q Qe5E72Q7NOQkxDbiOprthGsxgvRCWH0WWqyqHSClnJNdIsB8jfgTWHX8x9gN00V8 n9SEJSGNi804Jtt9AnLk7rU9teSdBnq716kKUFWgA486wnEurtlAVKERoojNxeFI ilf6LcW/S7R0zw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:36 2026 by rpki-client