This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json) Hash identifier: RSfAeiv/pyrPaf0lLnd8V667IBWTrgVBdzzJQAqCork= Subject key identifier: 26:27:7A:CD:53:6F:F0:57:DF:18:B3:28:4B:0E:C1:60:E8:63:63:A7 Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Certificate serial: 019BF79ABAE9376B930488044FB52EAE1222 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 00:01:11 +0000 Manifest this update: Mon 26 Jan 2026 00:01:11 +0000 Manifest next update: Tue 27 Jan 2026 00:01:11 +0000 Files and hashes: 1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=) 2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: roxKXLZoeQXLvb6Caks0dGaP3pYG1AIKiTly/w6vfNU=) 3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=) 4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:ba:e9:37:6b:93:04:88:04:4f:b5:2e:ae:12:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Validity Not Before: Jan 26 00:01:11 2026 GMT Not After : Jan 27 00:01:11 2026 GMT Subject: CN=26277acd536ff057df18b3284b0ec160e86363a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:f2:09:00:5a:a0:7e:63:83:9b:25:46:90: 74:c3:b5:3e:b9:f5:67:b0:fb:97:ec:3f:d6:7c:b0: 1c:c4:30:7d:4b:39:7b:49:f7:f1:6c:bf:11:9d:b4: c4:a0:cd:00:16:69:ef:7b:04:90:79:0c:2f:f3:4f: 58:47:05:ae:a3:d7:30:01:de:7d:3d:75:fb:98:be: e1:01:a2:2e:a2:f3:4a:1c:58:ec:f0:4c:d0:7a:79: f3:6c:5c:72:3e:eb:73:dc:46:a0:eb:45:a5:21:db: c4:7c:f4:16:f7:e5:1d:61:a6:58:db:57:df:f5:34: fd:c0:0a:88:8a:63:45:f6:8c:3e:68:8a:18:7c:c5: 91:18:1b:13:c3:e6:c3:17:ef:b9:00:e4:36:f3:51: 99:79:c4:e6:f7:5c:81:18:53:26:77:06:db:56:9a: 0d:5a:47:2a:09:26:26:2c:88:72:8c:ff:d5:6e:06: d2:f5:2c:5b:14:2c:69:6b:0c:31:40:2c:f7:2a:16: 99:fd:2b:a8:e3:79:93:c2:b9:e2:8d:b0:d7:0b:de: 47:ec:13:e1:e5:8e:5c:01:72:37:76:f8:ae:f7:94: 20:b8:72:6c:30:ad:d1:4c:80:43:68:45:ee:42:fa: 9f:63:2b:a2:16:2e:cc:a0:88:4d:76:40:2f:fc:79: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:27:7A:CD:53:6F:F0:57:DF:18:B3:28:4B:0E:C1:60:E8:63:63:A7 X509v3 Authority Key Identifier: keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:30:b9:11:02:db:85:db:fc:73:67:45:4e:c6:e8:65:3e:d7: 0c:09:52:28:1d:2e:81:25:d0:d7:00:52:f8:38:0c:c4:57:35: 58:bf:34:48:2a:01:2b:ac:72:6d:76:7f:75:bc:c9:66:9d:cd: e7:ed:e1:62:c4:e4:19:74:9f:85:76:c2:49:f3:8e:4d:0b:45: e8:47:58:14:a2:43:9a:47:5e:11:86:c2:c7:5e:67:7e:d7:82: 92:e3:15:98:a0:44:72:29:97:d8:21:b7:28:84:0f:8b:c3:c6: 56:01:34:bc:28:4a:4a:64:94:90:4f:26:53:8b:03:ef:8a:bd: 4a:3c:d9:35:c4:15:34:6f:b9:9e:11:43:a2:5e:ae:0d:42:e3: d3:9f:e2:be:fd:9d:39:16:16:e7:62:24:d1:c8:8d:d6:db:44: ce:47:f4:9f:48:15:ad:84:4f:c1:cb:0c:c9:db:dc:ac:11:13: d6:85:01:3c:9d:0a:b3:a0:4d:21:71:6c:87:8f:a2:04:53:86: c5:2d:56:8b:8c:f9:c9:85:0c:36:cf:f0:18:02:cd:07:a2:36: 2f:b6:75:f6:ae:3c:8b:af:2b:90:92:b4:6b:89:a4:c4:9e:ff: 65:a5:90:ed:4e:26:52:b3:75:8c:32:de:37:42:2c:0a:e4:67: 11:b9:e3:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mrrpN2uTBIgET7UurhIiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx OTBjNTMwHhcNMjYwMTI2MDAwMTExWhcNMjYwMTI3MDAwMTExWjAzMTEwLwYDVQQD EygyNjI3N2FjZDUzNmZmMDU3ZGYxOGIzMjg0YjBlYzE2MGU4NjM2M2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvPyCQBaoH5jg5slRpB0w7U+ufVn sPuX7D/WfLAcxDB9Szl7SffxbL8RnbTEoM0AFmnvewSQeQwv809YRwWuo9cwAd59 PXX7mL7hAaIuovNKHFjs8EzQennzbFxyPutz3Eag60WlIdvEfPQW9+UdYaZY21ff 9TT9wAqIimNF9ow+aIoYfMWRGBsTw+bDF++5AOQ281GZecTm91yBGFMmdwbbVpoN WkcqCSYmLIhyjP/VbgbS9SxbFCxpawwxQCz3KhaZ/Suo43mTwrnijbDXC95H7BPh 5Y5cAXI3dviu95QguHJsMK3RTIBDaEXuQvqfYyuiFi7MoIhNdkAv/HklqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYnes1Tb/BX3xizKEsOwWDoY2OnMB8GA1UdIwQY MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt NTJmZTEwNTEzMTI5LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5 LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjC5EQLb hdv8c2dFTsboZT7XDAlSKB0ugSXQ1wBS+DgMxFc1WL80SCoBK6xybXZ/dbzJZp3N 5+3hYsTkGXSfhXbCSfOOTQtF6EdYFKJDmkdeEYbCx15nfteCkuMVmKBEcimX2CG3 KIQPi8PGVgE0vChKSmSUkE8mU4sD74q9SjzZNcQVNG+5nhFDol6uDULj05/ivv2d ORYW52Ik0ciN1ttEzkf0n0gVrYRPwcsMydvcrBET1oUBPJ0Ks6BNIXFsh4+iBFOG xS1Wi4z5yYUMNs/wGALNB6I2L7Z19q48i68rkJK0a4mkxJ7/ZaWQ7U4mUrN1jDLe N0IsCuRnEbnjpw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:30 2026 by rpki-client