This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json) Hash identifier: tUKKY3YY7ksb/WIKM48NWPZNzpxnsTWRRDMPi3iRm7Q= Subject key identifier: E0:1D:1F:FA:71:91:A0:79:EC:DE:8B:12:7C:3F:3A:1E:D9:B8:06:9E Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f Certificate serial: 019BF53F02839A572EE5C32FE04AA13A4D6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft Manifest number: 06D7 Signing time: Sun 25 Jan 2026 13:01:45 +0000 Manifest this update: Sun 25 Jan 2026 13:01:45 +0000 Manifest next update: Mon 26 Jan 2026 13:01:45 +0000 Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: 3phgxg87nyCnvEp8RV2xJiNKrhF852qKMSRvJAcnpk4=) 2: TTHpThh0WFBegnNfmmfbon5C7Nk.roa (hash: XL1bQibK3g0HnLkkJsFNT1Xil79v588WbG0+6ygTsbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3f:02:83:9a:57:2e:e5:c3:2f:e0:4a:a1:3a:4d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f Validity Not Before: Jan 25 13:01:45 2026 GMT Not After : Jan 26 13:01:45 2026 GMT Subject: CN=e01d1ffa7191a079ecde8b127c3f3a1ed9b8069e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6e:d4:05:3b:55:63:ce:75:a8:b1:ee:30:5c: d5:a1:a4:6c:43:42:d5:2c:a2:96:1f:62:9a:ac:32: 61:8a:72:fb:f8:49:94:e8:2d:85:05:6c:ab:32:2f: 79:7f:5f:24:4d:67:9b:dd:b1:2c:92:8a:09:1f:ee: 0b:c5:c5:72:bd:ab:d4:0d:bc:cd:02:1f:45:88:0b: a7:a3:9e:c8:2f:a3:2d:0e:a3:2f:75:6e:c3:53:fd: f7:f9:11:90:c1:c9:5f:2a:f0:65:eb:ab:bd:48:f5: a7:1a:5a:6c:11:5e:9c:3f:0d:b6:0f:22:04:27:6a: fc:0a:6d:cb:4c:d2:38:80:2b:c1:fd:1e:4a:ce:3a: 42:96:f5:a6:92:3a:17:04:9b:f3:2c:8f:64:08:da: a8:32:28:b6:b3:68:1b:df:f7:5c:68:07:a0:f0:46: 25:17:22:9d:0e:4f:fc:88:3d:98:ad:30:a5:3e:e6: cd:64:22:9e:ed:78:2a:86:aa:af:80:4d:2d:72:27: a5:77:3c:d4:21:27:4f:17:23:ba:cf:5f:74:ef:c2: a6:a1:dd:cf:48:c6:25:16:cf:4f:c6:3f:86:d0:a1: 18:89:67:cb:3f:3f:4d:97:6f:b4:4e:28:58:c0:5a: 61:ca:80:5f:10:e4:2c:de:40:9f:3e:9a:8c:29:c4: 49:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1D:1F:FA:71:91:A0:79:EC:DE:8B:12:7C:3F:3A:1E:D9:B8:06:9E X509v3 Authority Key Identifier: keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:42:44:05:cc:05:c2:fd:26:b8:dd:35:fe:81:a3:86:14:b0: d8:e0:13:32:a5:6a:94:08:87:5e:a6:6d:9f:76:52:51:84:2c: 96:36:f8:5f:b8:a4:68:2d:d4:08:b3:51:6e:e1:8c:ef:a6:8d: f5:4b:73:3a:28:3c:dd:4d:04:2f:73:11:35:fb:81:04:80:ce: b8:90:f8:78:ab:e9:f1:c4:21:ec:ea:ca:ad:b8:b7:3c:d3:5f: 64:84:e3:4e:7b:8d:1f:e1:90:28:86:c0:89:45:e1:f3:e6:3e: 9a:ec:52:fb:b6:af:9c:df:62:48:3b:bc:d5:c9:5e:23:15:aa: 8b:29:2f:9a:e0:dc:60:23:92:66:21:37:b8:61:fc:50:c5:ed: f4:f9:1f:2d:b7:11:7a:85:c7:06:1b:9b:34:50:29:2e:98:8c: a9:32:57:19:69:f8:7a:af:b2:46:68:8d:6a:cc:b7:5a:44:51: e2:ba:6e:78:5e:77:f2:5a:9f:ee:9a:0d:7c:6c:46:99:69:d7: a6:66:6a:ea:8f:2e:4e:fc:4d:56:e4:e8:a0:20:25:42:cf:a5: fe:ed:cc:bf:03:12:6d:0a:93:bc:09:29:93:58:86:04:31:5b: 92:8f:ba:0d:0d:64:10:95:db:d8:fe:cc:78:f1:b6:3c:3f:c3: 7e:57:8b:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PwKDmlcu5cMv4EqhOk1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYWZhZGExMGUyY2UyMGUxYzk2Zjg5NWJiOGVjMzJhNTgw OGY2M2YwHhcNMjYwMTI1MTMwMTQ1WhcNMjYwMTI2MTMwMTQ1WjAzMTEwLwYDVQQD EyhlMDFkMWZmYTcxOTFhMDc5ZWNkZThiMTI3YzNmM2ExZWQ5YjgwNjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7G7UBTtVY851qLHuMFzVoaRsQ0LV LKKWH2KarDJhinL7+EmU6C2FBWyrMi95f18kTWeb3bEskooJH+4LxcVyvavUDbzN Ah9FiAuno57IL6MtDqMvdW7DU/33+RGQwclfKvBl66u9SPWnGlpsEV6cPw22DyIE J2r8Cm3LTNI4gCvB/R5KzjpClvWmkjoXBJvzLI9kCNqoMii2s2gb3/dcaAeg8EYl FyKdDk/8iD2YrTClPubNZCKe7XgqhqqvgE0tcieldzzUISdPFyO6z19078Kmod3P SMYlFs9Pxj+G0KEYiWfLPz9Nl2+0TihYwFphyoBfEOQs3kCfPpqMKcRJuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAdH/pxkaB57N6LEnw/Oh7ZuAaeMB8GA1UdIwQY MBaAFNyvraEOLOIOHJb4lbuOwypYCPY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQt YTY2Zjg0ZWRiZDZkLzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQtYTY2Zjg0ZWRiZDZk LzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3UJEBcwF wv0muN01/oGjhhSw2OATMqVqlAiHXqZtn3ZSUYQsljb4X7ikaC3UCLNRbuGM76aN 9UtzOig83U0EL3MRNfuBBIDOuJD4eKvp8cQh7OrKrbi3PNNfZITjTnuNH+GQKIbA iUXh8+Y+muxS+7avnN9iSDu81cleIxWqiykvmuDcYCOSZiE3uGH8UMXt9PkfLbcR eoXHBhubNFApLpiMqTJXGWn4eq+yRmiNasy3WkRR4rpueF538lqf7poNfGxGmWnX pmZq6o8uTvxNVuTooCAlQs+l/u3MvwMSbQqTvAkpk1iGBDFbko+6DQ1kEJXb2P7M ePG2PD/DfleLhQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:47 2026 by rpki-client