This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json) Hash identifier: Yvxny3+wDbpE9GirvhAhYDCwGDuVJ1PxXyMsh36IKso= Subject key identifier: 35:8B:BB:CE:73:07:10:B2:14:65:68:12:78:73:B0:13:0A:66:79:22 Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Certificate serial: 019BF5E3A1396B122A8A519EE47BA63B68B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 16:01:34 +0000 Manifest this update: Sun 25 Jan 2026 16:01:34 +0000 Manifest next update: Mon 26 Jan 2026 16:01:34 +0000 Files and hashes: 1: 9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa (hash: fz+aHYS4V1XMTw/yqh5CSzgcqzKaI+dTHoaVrbzBaVs=) 2: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: go9mnfqyWRtnAZ1SJNiJ4whpUJehvAdgzQZRLTX16pg=) 3: x2_izSBmWmdLTS9fNjX2mfjFlPM.roa (hash: 3ob8odmwEnrugyVikE+TbFdzGSmxmii1yJoYbGejTds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:a1:39:6b:12:2a:8a:51:9e:e4:7b:a6:3b:68:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Validity Not Before: Jan 25 16:01:34 2026 GMT Not After : Jan 26 16:01:34 2026 GMT Subject: CN=358bbbce730710b2146568127873b0130a667922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:35:66:48:ec:c1:39:c5:bd:43:78:81:db:66: e1:31:e2:3c:c8:d7:2a:38:e6:f6:b4:de:21:0f:34: a4:5a:ca:1c:79:23:42:cb:9b:9d:dd:e4:ef:6a:06: b1:b1:f9:09:3f:e1:d5:47:d0:4d:64:db:fe:82:b1: 83:9a:8d:3a:23:2d:73:97:eb:73:23:df:24:86:c6: ae:3f:96:61:4f:f1:65:b0:f7:63:80:6b:e6:ff:e4: 9f:90:f8:b3:85:da:8f:57:9b:0e:46:e1:6a:04:96: 92:eb:ff:84:81:88:e7:a1:fa:bb:9b:2d:0e:dc:d8: e7:a5:f8:f2:c9:25:2b:fb:db:44:49:a2:c0:95:bc: 1a:b9:fb:c0:15:12:23:ee:21:6b:96:8d:12:ef:3b: 9b:d1:2b:14:00:cd:5e:be:d8:03:f4:d9:3f:17:af: fa:b1:c9:34:27:ed:c1:6d:8d:04:fa:55:7e:10:c8: 7c:b8:39:a5:b0:33:ab:21:3d:4b:b8:1a:e7:19:54: 10:d3:56:96:2f:cf:93:0f:94:b1:f6:71:3c:c2:82: b0:0b:79:d1:b2:c1:f7:f6:a4:92:0f:71:b3:a4:fe: 4a:22:b5:7f:f3:75:98:87:db:9d:a2:d1:bf:53:8c: 0b:c5:2d:b7:7a:a8:a5:93:85:d5:1a:2a:09:01:1a: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8B:BB:CE:73:07:10:B2:14:65:68:12:78:73:B0:13:0A:66:79:22 X509v3 Authority Key Identifier: keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:0a:e1:e3:f5:bf:9a:73:0a:9d:95:86:4d:bb:58:5c:60:4b: 34:a6:69:87:c2:0f:d4:a7:a7:ed:bc:40:25:e1:43:4c:05:4f: d8:b6:26:ad:1d:93:36:66:5a:03:0f:08:e0:09:0d:c2:91:78: 93:67:c8:ca:91:ba:34:97:92:76:f3:0e:1f:0f:de:98:a9:62: 95:64:ba:d6:61:6a:c6:02:a4:98:20:ab:50:fc:b9:be:14:d1: 61:be:16:17:89:19:26:32:05:00:49:27:a7:88:2c:df:31:45: ed:3e:cf:14:35:b5:58:3b:50:31:92:53:a9:2f:a4:6f:39:fd: 9d:60:87:4a:6a:e5:14:c5:e1:6a:6f:00:b5:c6:23:c7:63:b9: f4:45:92:02:f7:5f:80:af:9e:72:f2:07:03:21:5c:d6:4b:fc: ae:fa:a6:1b:f6:06:4f:0d:84:7a:b0:3d:6e:92:87:c2:d5:19: 9f:a9:fc:4c:bc:d0:a3:c4:c7:21:37:3a:5c:7b:22:f8:a3:b3: ba:a6:60:ae:16:44:b3:59:c5:a4:97:fa:90:c2:f5:3d:17:31: f8:ab:14:00:84:10:fd:8d:44:b5:a7:43:38:4e:1d:21:92:56: 6e:11:7a:f6:4f:ff:1c:12:ea:8e:e6:a7:ed:f6:e3:ed:ba:63: db:43:46:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv146E5axIqilGe5HumO2i4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWRjMThhNGIxZmJmZTJjMmJhYmQ4YmJiNDdmZTFmZDFj ZjIyZjgwHhcNMjYwMTI1MTYwMTM0WhcNMjYwMTI2MTYwMTM0WjAzMTEwLwYDVQQD EygzNThiYmJjZTczMDcxMGIyMTQ2NTY4MTI3ODczYjAxMzBhNjY3OTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjVmSOzBOcW9Q3iB22bhMeI8yNcq OOb2tN4hDzSkWsoceSNCy5ud3eTvagaxsfkJP+HVR9BNZNv+grGDmo06Iy1zl+tz I98khsauP5ZhT/FlsPdjgGvm/+SfkPizhdqPV5sORuFqBJaS6/+EgYjnofq7my0O 3NjnpfjyySUr+9tESaLAlbwaufvAFRIj7iFrlo0S7zub0SsUAM1evtgD9Nk/F6/6 sck0J+3BbY0E+lV+EMh8uDmlsDOrIT1LuBrnGVQQ01aWL8+TD5Sx9nE8woKwC3nR ssH39qSSD3GzpP5KIrV/83WYh9udotG/U4wLxS23eqilk4XVGioJARquUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWLu85zBxCyFGVoEnhzsBMKZnkiMB8GA1UdIwQY MBaAFK4dwYpLH7/iwrq9i7tH/h/RzyL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMt OGU3MTQ5ZjA0YTRlLzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMtOGU3MTQ5ZjA0YTRl LzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswrh4/W/ mnMKnZWGTbtYXGBLNKZph8IP1Ken7bxAJeFDTAVP2LYmrR2TNmZaAw8I4AkNwpF4 k2fIypG6NJeSdvMOHw/emKlilWS61mFqxgKkmCCrUPy5vhTRYb4WF4kZJjIFAEkn p4gs3zFF7T7PFDW1WDtQMZJTqS+kbzn9nWCHSmrlFMXham8AtcYjx2O59EWSAvdf gK+ecvIHAyFc1kv8rvqmG/YGTw2EerA9bpKHwtUZn6n8TLzQo8THITc6XHsi+KOz uqZgrhZEs1nFpJf6kML1PRcx+KsUAIQQ/Y1EtadDOE4dIZJWbhF69k//HBLqjuan 7fbj7bpj20NG8A== -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:42 2026 by rpki-client