This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json) Hash identifier: 8Xk28eaI7zMfabY1KiGO+e9uvgjp5WSBJEosxOBn0MM= Subject key identifier: 2E:F5:3B:F0:DC:CE:85:07:72:83:CE:0D:6C:98:26:D4:C4:D9:13:E7 Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a Certificate serial: 019BF875EC8DE72F2A47EC5A66DAA2E9634A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft Manifest number: 112A Signing time: Mon 26 Jan 2026 04:00:36 +0000 Manifest this update: Mon 26 Jan 2026 04:00:36 +0000 Manifest next update: Tue 27 Jan 2026 04:00:36 +0000 Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: xgLmEi/lePpF6PTzKWAGgk9jkisSD0UkSJ65a2G7FUU=) 2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:ec:8d:e7:2f:2a:47:ec:5a:66:da:a2:e9:63:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a Validity Not Before: Jan 26 04:00:36 2026 GMT Not After : Jan 27 04:00:36 2026 GMT Subject: CN=2ef53bf0dcce85077283ce0d6c9826d4c4d913e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:e1:85:8e:b6:89:56:9f:b8:8a:a6:b9:63: 35:10:6b:d4:36:39:34:48:57:67:32:0c:e7:19:90: 26:4c:7e:e2:81:7b:3f:d8:c2:aa:15:7c:47:7c:1e: 3e:9f:2e:4c:eb:5b:4d:3e:39:fb:eb:85:bd:7b:f4: 1d:61:da:0e:1f:fb:d3:0f:fa:49:13:b3:2e:db:85: dd:7b:d7:c7:bd:70:8a:33:f8:dc:08:c5:6e:0b:77: ad:67:43:f8:3f:0b:ae:3f:98:51:4b:a2:7d:54:45: ef:c6:97:ea:f7:c5:ab:3b:ea:44:29:8e:92:01:3b: d6:3e:e6:5c:33:7a:4c:a8:f7:27:68:9d:4a:08:0f: 49:75:bc:3e:39:fa:29:9b:55:87:22:a9:5a:15:98: 02:ae:56:e5:02:56:c4:d8:3a:47:db:59:1a:e3:28: 7a:3c:3f:e7:c6:a4:00:7c:1d:fd:1f:49:74:97:15: 65:18:d6:a6:b7:e5:4e:1e:11:e1:66:e2:15:8f:29: df:78:fc:7f:b0:09:b9:a4:6d:0d:69:2c:cb:6a:9e: 36:ff:43:f5:c2:c0:7f:76:24:42:28:cb:bb:c3:77: a0:0f:eb:71:7b:08:ea:9d:a8:10:9e:e6:a6:59:f0: 1a:a3:94:4e:89:d8:71:91:c9:af:ba:31:38:b3:96: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F5:3B:F0:DC:CE:85:07:72:83:CE:0D:6C:98:26:D4:C4:D9:13:E7 X509v3 Authority Key Identifier: keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d0:17:11:56:d6:e6:3a:a5:4b:f3:ac:b7:ea:9f:b9:03:72: a0:90:39:4b:c3:58:c2:3d:3f:1d:fd:f6:ac:24:44:51:ac:a6: e2:43:2a:24:04:71:a5:fa:08:91:5e:ef:78:46:b9:de:e1:30: d4:4b:26:76:80:8f:52:7b:6e:20:d7:a0:35:0b:89:3f:ad:10: e5:27:93:ce:bb:25:a9:47:32:8f:23:7c:6d:33:de:4d:e8:31: 48:10:2d:d1:67:17:87:40:59:63:89:31:cc:4f:e5:61:0f:b9: 1f:12:f6:82:ae:bb:ae:96:c4:7d:de:3a:52:0a:a9:42:ac:9e: c2:bf:86:02:04:56:39:39:73:32:50:6b:c7:21:72:49:39:68: da:7d:50:af:02:5d:93:ba:25:a7:d5:d0:ec:bd:1e:d6:0f:5e: f8:68:60:04:3c:88:d0:cc:6c:87:8f:43:ec:c1:b2:cd:fd:d1: bd:66:63:91:7f:f1:e1:56:e2:80:cc:0b:4e:91:ec:d4:08:d4: aa:d4:1a:b4:d9:98:af:11:00:6d:d0:d3:c9:9e:c6:db:5c:03: 55:89:de:c7:24:26:fb:56:f4:7d:c1:42:49:cb:28:68:13:fb: b2:7a:f6:2f:99:b0:b6:1d:87:6f:23:6c:fd:84:4d:92:43:7d: 21:9c:27:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4deyN5y8qR+xaZtqi6WNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYjE0NTc1NjA4MGFmZjFiYjAwZjVmOTBmZDlmMmYyN2Nj NTczMmEwHhcNMjYwMTI2MDQwMDM2WhcNMjYwMTI3MDQwMDM2WjAzMTEwLwYDVQQD EygyZWY1M2JmMGRjY2U4NTA3NzI4M2NlMGQ2Yzk4MjZkNGM0ZDkxM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9LhhY62iVafuIqmuWM1EGvUNjk0 SFdnMgznGZAmTH7igXs/2MKqFXxHfB4+ny5M61tNPjn764W9e/QdYdoOH/vTD/pJ E7Mu24Xde9fHvXCKM/jcCMVuC3etZ0P4PwuuP5hRS6J9VEXvxpfq98WrO+pEKY6S ATvWPuZcM3pMqPcnaJ1KCA9Jdbw+Ofopm1WHIqlaFZgCrlblAlbE2DpH21ka4yh6 PD/nxqQAfB39H0l0lxVlGNamt+VOHhHhZuIVjynfePx/sAm5pG0NaSzLap42/0P1 wsB/diRCKMu7w3egD+txewjqnagQnuamWfAao5ROidhxkcmvujE4s5Z0lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC71O/DczoUHcoPODWyYJtTE2RPnMB8GA1UdIwQY MBaAFN6xRXVggK/xuwD1+Q/Z8vJ8xXMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1Njgt M2ZmOTY0NTUwM2U5LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1NjgtM2ZmOTY0NTUwM2U5 LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNAXEVbW 5jqlS/Ost+qfuQNyoJA5S8NYwj0/Hf32rCREUaym4kMqJARxpfoIkV7veEa53uEw 1EsmdoCPUntuINegNQuJP60Q5SeTzrslqUcyjyN8bTPeTegxSBAt0WcXh0BZY4kx zE/lYQ+5HxL2gq67rpbEfd46UgqpQqyewr+GAgRWOTlzMlBrxyFySTlo2n1QrwJd k7olp9XQ7L0e1g9e+GhgBDyI0Mxsh49D7MGyzf3RvWZjkX/x4VbigMwLTpHs1AjU qtQatNmYrxEAbdDTyZ7G21wDVYnexyQm+1b0fcFCScsoaBP7snr2L5mwth2HbyNs /YRNkkN9IZwnCw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:46 2026 by rpki-client