This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json) Hash identifier: B33uQUpPxdS3r3p6wonPr5Dujdk4uSoZVUjzM6/+8cQ= Subject key identifier: CA:EA:E9:E3:61:E6:11:3A:98:62:EA:56:F7:B5:11:A9:3D:3D:95:29 Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4 Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4 Certificate serial: 019BF6BF187D89440344661EDE77A50D0A3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft Manifest number: 01F9 Signing time: Sun 25 Jan 2026 20:01:17 +0000 Manifest this update: Sun 25 Jan 2026 20:01:17 +0000 Manifest next update: Mon 26 Jan 2026 20:01:17 +0000 Files and hashes: 1: KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa (hash: o5WS9YslZM8q1hJsdQvxqXUe/XHXOBVv8w7uYi5QnmY=) 2: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: JJsk1Mf73ryq/BqzbJ1RRyoTRcdAPWH68A0f5b/iMNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:18:7d:89:44:03:44:66:1e:de:77:a5:0d:0a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4 Validity Not Before: Jan 25 20:01:17 2026 GMT Not After : Jan 26 20:01:17 2026 GMT Subject: CN=caeae9e361e6113a9862ea56f7b511a93d3d9529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:da:bb:f9:b0:ef:f4:37:13:17:6b:e1:b0: 9c:10:7b:06:03:2b:18:ac:f8:5a:f3:09:9a:40:38: 0d:d6:e4:f4:90:6b:23:fa:0e:ac:4e:72:0d:7f:48: 7f:b0:5e:41:8f:a9:bb:86:da:94:a0:56:58:ef:c3: 33:bd:be:4a:e5:1f:04:f0:8f:bd:46:65:d6:dd:00: ba:12:eb:52:ff:38:79:b4:4f:69:23:65:82:35:71: 29:1a:e2:11:35:46:5c:4f:38:61:56:28:1b:29:a8: 15:2c:ca:15:a1:2c:8e:65:d3:7b:ca:53:8f:aa:a7: 50:fe:7b:86:89:13:18:d8:a5:01:b7:d8:71:92:65: 61:d2:8c:fb:ee:ff:4b:b5:45:f6:b6:f9:46:f3:ed: 8d:78:d0:2b:d3:d7:3c:6c:45:b7:60:af:67:3c:f2: b1:31:c2:50:7d:a3:95:7c:ae:79:5e:dc:ab:79:ca: 97:ab:be:d9:6d:a0:27:14:ee:fb:3b:24:09:35:ff: c0:3d:79:39:da:34:dc:6a:74:c5:15:65:15:be:99: 7f:e4:56:24:f3:4f:9a:8e:26:c1:ae:e0:4e:92:0d: 55:9d:28:a5:2b:36:d6:d5:cc:99:ee:20:25:80:17: e8:c2:73:36:d4:8b:8b:d8:e0:0b:38:de:f9:93:2a: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EA:E9:E3:61:E6:11:3A:98:62:EA:56:F7:B5:11:A9:3D:3D:95:29 X509v3 Authority Key Identifier: keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3d:a5:a6:66:96:0b:fa:1c:91:80:07:b8:af:d3:5a:3e:a2: 9d:91:2c:7c:10:1b:24:de:29:36:69:c3:8c:f4:0e:7f:ad:c3: d5:d5:28:c1:92:a6:43:28:21:31:df:c3:ba:11:88:9f:63:b4: 44:c1:c6:22:59:08:6a:e2:b7:65:f4:07:de:b9:1f:ec:66:f5: c0:a8:6b:9a:f2:aa:9f:dd:8b:48:5e:fa:8c:5d:bc:69:fe:e0: ef:54:34:a3:16:c9:be:58:2c:bf:99:df:f8:f1:13:16:35:b7: 45:66:19:38:59:fe:5c:23:b1:e9:be:4d:04:69:ef:2a:d4:16: 37:9e:1a:af:cb:16:d7:b5:1a:cc:86:ec:89:f6:fd:7e:41:b0: 56:3a:0d:ad:6c:c2:f8:b0:42:3d:cd:7e:61:ff:8c:16:32:4f: f5:4a:69:22:1e:a5:1a:1d:bf:0f:4e:b7:95:71:52:ed:5a:b9: 4a:0b:4d:a1:95:c5:be:d1:4f:42:27:d3:55:30:39:00:41:5b: e6:1c:bd:8c:73:c8:03:83:0c:b2:6a:60:89:2a:44:07:69:5d: bf:1c:5a:36:e7:ad:7f:25:8e:e3:74:34:2c:a3:ac:e8:8d:41: 56:0a:cd:e6:ac:38:6c:37:7a:72:2c:d8:f4:04:63:55:09:80: db:03:cb:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vxh9iUQDRGYe3nelDQo7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzMyNDMwODFlYWRjMWVmNGFlMzIzNGY4NmIyYmQ3MjYy MmI1YzQwHhcNMjYwMTI1MjAwMTE3WhcNMjYwMTI2MjAwMTE3WjAzMTEwLwYDVQQD EyhjYWVhZTllMzYxZTYxMTNhOTg2MmVhNTZmN2I1MTFhOTNkM2Q5NTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXjau/mw7/Q3Exdr4bCcEHsGAysY rPha8wmaQDgN1uT0kGsj+g6sTnINf0h/sF5Bj6m7htqUoFZY78Mzvb5K5R8E8I+9 RmXW3QC6EutS/zh5tE9pI2WCNXEpGuIRNUZcTzhhVigbKagVLMoVoSyOZdN7ylOP qqdQ/nuGiRMY2KUBt9hxkmVh0oz77v9LtUX2tvlG8+2NeNAr09c8bEW3YK9nPPKx McJQfaOVfK55XtyrecqXq77ZbaAnFO77OyQJNf/APXk52jTcanTFFWUVvpl/5FYk 80+ajibBruBOkg1VnSilKzbW1cyZ7iAlgBfownM21IuL2OALON75kyr84wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrq6eNh5hE6mGLqVve1Eak9PZUpMB8GA1UdIwQY MBaAFEdzJDCB6twe9K4yNPhrK9cmIrXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2It MzRhOTQ5YzkyMDc0LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2ItMzRhOTQ5YzkyMDc0 LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjT2lpmaW C/ockYAHuK/TWj6inZEsfBAbJN4pNmnDjPQOf63D1dUowZKmQyghMd/DuhGIn2O0 RMHGIlkIauK3ZfQH3rkf7Gb1wKhrmvKqn92LSF76jF28af7g71Q0oxbJvlgsv5nf +PETFjW3RWYZOFn+XCOx6b5NBGnvKtQWN54ar8sW17UazIbsifb9fkGwVjoNrWzC +LBCPc1+Yf+MFjJP9UppIh6lGh2/D063lXFS7Vq5SgtNoZXFvtFPQifTVTA5AEFb 5hy9jHPIA4MMsmpgiSpEB2ldvxxaNuetfyWO43Q0LKOs6I1BVgrN5qw4bDd6cizY 9ARjVQmA2wPLUA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:43 2026 by rpki-client