This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json) Hash identifier: rQfwgzGSypzQ4NuaeIaa+88Mpq1L3zqw3dNtyjnhyb4= Subject key identifier: A9:88:27:38:65:81:EE:1A:08:2E:67:B5:8D:0B:1E:D6:F5:92:76:96 Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb Certificate serial: 019BF72D897E70F1271B1DE43EA1CD1843F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft Manifest number: 02AF Signing time: Sun 25 Jan 2026 22:01:55 +0000 Manifest this update: Sun 25 Jan 2026 22:01:55 +0000 Manifest next update: Mon 26 Jan 2026 22:01:55 +0000 Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: qysPxXqQ7AsHALHZlQMRLhpISinLiOl7PxJPDexqd08=) 2: j9kxk_tAwUgeNl7TqWWToAuo7-I.roa (hash: zHNTjJflclZYXilnm9iiED1a7nYrKcFrqoiJZmNUrRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:89:7e:70:f1:27:1b:1d:e4:3e:a1:cd:18:43:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb Validity Not Before: Jan 25 22:01:55 2026 GMT Not After : Jan 26 22:01:55 2026 GMT Subject: CN=a98827386581ee1a082e67b58d0b1ed6f5927696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a4:65:70:5f:d5:1f:f0:1b:c2:30:b0:ef:7c: 4d:c2:fa:80:e3:34:2d:33:a9:be:e4:84:01:4e:b1: d5:93:f0:8d:b5:9c:8d:b4:b3:fd:a2:7f:fd:f4:b7: e3:b9:30:c1:fc:0c:9a:f6:25:4e:5a:9a:5e:a4:13: 39:ce:fa:00:a7:fc:50:28:d4:fb:6b:70:4e:cd:22: 43:9b:26:ff:f1:16:73:af:e9:33:59:7a:11:91:1c: 3e:40:7e:33:be:da:5f:99:ce:de:97:33:15:60:30: 06:58:df:31:a9:af:b0:07:e1:a4:dd:b4:3b:a4:e5: 74:ac:b1:f7:05:32:30:a5:e4:26:09:cc:94:a3:17: a2:53:44:17:62:40:d4:71:de:56:8c:47:93:ce:03: 97:e6:18:dc:62:38:b5:89:6d:98:07:87:c0:d6:60: f8:b1:f9:9d:7a:02:ef:b3:cd:83:38:1e:aa:bc:ee: 39:a2:30:77:9d:d8:27:23:f9:c3:ef:09:ac:99:33: 39:ba:15:89:e6:cc:57:83:a8:12:a2:c9:8f:09:2f: d2:75:7e:08:c6:43:cf:71:ef:ff:94:69:9b:a7:37: 9e:e1:e3:0f:f4:7d:f9:05:2c:72:f0:81:3a:d6:65: 4b:1f:ce:1d:1d:c9:7e:3d:58:5e:e8:17:12:3d:8c: 00:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:88:27:38:65:81:EE:1A:08:2E:67:B5:8D:0B:1E:D6:F5:92:76:96 X509v3 Authority Key Identifier: keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e7:63:ad:fe:4b:a3:26:67:87:fc:00:7f:38:c1:d7:72:90: 93:10:1e:b8:6b:94:8c:4d:90:9c:cc:5b:31:e5:c6:77:5d:c6: 4a:09:d2:f4:63:54:81:2f:93:ba:14:c5:aa:b1:72:67:a7:2b: 15:7e:45:30:71:a6:f2:b1:09:d6:0f:73:dd:f9:da:5b:95:9e: e1:3e:91:56:21:d3:81:27:dd:80:10:5a:0e:90:e5:ff:01:65: 23:d4:07:8c:d6:d6:30:85:93:cd:1a:cb:12:68:cb:09:57:95: d6:f1:b9:43:1d:eb:4d:81:7d:2f:62:3a:a5:75:3e:31:e2:a2: a6:8d:cf:48:fd:72:6b:3a:cf:73:83:cc:13:56:89:9f:a4:67: 82:8b:97:6a:c3:52:27:75:45:c0:5e:d3:0a:d3:11:03:d1:33: ff:76:9f:0c:d2:13:a4:0d:a1:69:89:d5:87:b1:7d:39:87:3f: a3:6b:cc:b7:65:88:35:2a:29:29:f1:81:a2:81:ef:0e:2f:18: f1:b6:47:18:f4:0e:6b:42:1a:d2:58:55:8e:69:8a:e2:0d:b7: 3f:2b:e5:7d:cd:bf:9c:ac:c5:9a:c7:a2:9b:91:fb:27:6c:62: 44:31:6c:b5:d2:85:0b:98:a6:0f:a7:0d:74:bf:6e:5f:62:f2: 3e:1f:7b:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LYl+cPEnGx3kPqHNGEP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMDA2ZWQ4NzFhNWNlMDBkMmJiZjk2OGJjMDk0MGVlNTg2 YTNjZWIwHhcNMjYwMTI1MjIwMTU1WhcNMjYwMTI2MjIwMTU1WjAzMTEwLwYDVQQD EyhhOTg4MjczODY1ODFlZTFhMDgyZTY3YjU4ZDBiMWVkNmY1OTI3Njk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aRlcF/VH/AbwjCw73xNwvqA4zQt M6m+5IQBTrHVk/CNtZyNtLP9on/99LfjuTDB/Aya9iVOWppepBM5zvoAp/xQKNT7 a3BOzSJDmyb/8RZzr+kzWXoRkRw+QH4zvtpfmc7elzMVYDAGWN8xqa+wB+Gk3bQ7 pOV0rLH3BTIwpeQmCcyUoxeiU0QXYkDUcd5WjEeTzgOX5hjcYji1iW2YB4fA1mD4 sfmdegLvs82DOB6qvO45ojB3ndgnI/nD7wmsmTM5uhWJ5sxXg6gSosmPCS/SdX4I xkPPce//lGmbpzee4eMP9H35BSxy8IE61mVLH84dHcl+PVhe6BcSPYwAxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmIJzhlge4aCC5ntY0LHtb1knaWMB8GA1UdIwQY MBaAFN8Abthxpc4A0rv5aLwJQO5YajzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYt OTViOWUzNjJmMDc3LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYtOTViOWUzNjJmMDc3 LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+djrf5L oyZnh/wAfzjB13KQkxAeuGuUjE2QnMxbMeXGd13GSgnS9GNUgS+TuhTFqrFyZ6cr FX5FMHGm8rEJ1g9z3fnaW5We4T6RViHTgSfdgBBaDpDl/wFlI9QHjNbWMIWTzRrL EmjLCVeV1vG5Qx3rTYF9L2I6pXU+MeKipo3PSP1yazrPc4PME1aJn6RngouXasNS J3VFwF7TCtMRA9Ez/3afDNITpA2haYnVh7F9OYc/o2vMt2WINSopKfGBooHvDi8Y 8bZHGPQOa0Ia0lhVjmmK4g23Pyvlfc2/nKzFmseim5H7J2xiRDFstdKFC5imD6cN dL9uX2LyPh976A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:42 2026 by rpki-client