This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json) Hash identifier: ynH/R+BDT1Qp/kJuJFy8PDgnK+ymWnvfgKdCKBctiUE= Subject key identifier: 3B:06:8F:60:65:F9:90:FA:E9:F1:CB:0E:5D:B5:48:A8:27:6F:34:CC Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b Certificate serial: 019BF53E799BC7C8DF2ECF046176486B38BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft Manifest number: 17FA Signing time: Sun 25 Jan 2026 13:01:10 +0000 Manifest this update: Sun 25 Jan 2026 13:01:10 +0000 Manifest next update: Mon 26 Jan 2026 13:01:10 +0000 Files and hashes: 1: 4xhhokGYPFsmhBRT1vQea8P0Hn8.roa (hash: 0+HSxndFh8kDQtQnDwZD2bYMHa+v2whr10ZvzoQDNlg=) 2: MZj_YrNpHHNyxm4tBIi3oXc2Vqc.roa (hash: J42B6M8uvbvqBHYzoglUfGMoE5jRgrE3TAObhro1N94=) 3: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: rUCUQExOEwDDV/W5pNNcCupzZFAjyZC5JO2lEPM4ay4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:79:9b:c7:c8:df:2e:cf:04:61:76:48:6b:38:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b Validity Not Before: Jan 25 13:01:10 2026 GMT Not After : Jan 26 13:01:10 2026 GMT Subject: CN=3b068f6065f990fae9f1cb0e5db548a8276f34cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bd:bd:84:c9:65:ee:66:08:cb:f1:14:c4:b8: 6d:0b:9c:60:47:f7:f5:5e:b4:5c:da:59:78:5f:13: 5f:e3:9e:2e:60:9b:d7:6d:15:c5:2f:3f:e6:f9:3a: f3:d6:44:49:d8:c2:78:35:b8:37:a4:8f:3b:f6:5a: ce:b8:46:82:26:a9:3e:33:76:56:66:c6:f4:f4:7d: ac:30:6c:2d:45:b9:e0:ab:27:e9:f6:3d:dc:3d:0e: 27:dd:9d:74:67:9d:59:d8:80:bc:26:eb:05:53:25: e1:17:f0:f6:a2:87:ad:3b:58:cf:60:cd:13:e4:ff: 92:a7:00:33:2f:cc:d8:79:8c:f6:9d:3a:f7:3e:bb: a9:1d:6a:cd:c8:b2:a3:3b:31:0c:80:9b:fb:f6:2d: 11:3b:b8:da:2a:be:bd:51:a2:4a:45:06:a3:33:e5: 59:61:6b:8a:bb:b6:ac:99:60:4b:b8:1b:bb:85:12: a8:d1:e4:49:a9:a0:cf:b6:49:c5:ee:8c:46:d7:02: 42:87:9a:a6:e6:e9:59:b9:46:62:9b:d4:a7:c2:ab: fe:ae:72:17:4e:70:25:91:f9:2c:3e:92:10:ea:04: a5:a1:a5:b1:22:11:0b:d1:b6:50:13:cb:d6:52:5d: 9b:e8:de:99:01:c0:8e:f5:a4:0b:25:a7:ad:56:99: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:06:8F:60:65:F9:90:FA:E9:F1:CB:0E:5D:B5:48:A8:27:6F:34:CC X509v3 Authority Key Identifier: keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d8:3d:b3:7d:c2:9f:25:af:d2:8b:c2:c5:86:e1:e1:2d:72: cf:c1:8e:df:b1:5e:1c:cb:8c:2d:1a:c2:f4:36:55:22:eb:0d: fc:65:76:d5:be:b8:83:da:1c:77:b0:97:49:8d:c9:55:e0:0c: 80:54:d8:24:90:1b:86:5e:bd:8c:c6:31:b1:10:2a:e4:90:71: 2f:21:56:7c:e5:d6:5e:13:d9:af:25:43:20:91:08:a2:b1:89: 56:0a:01:ca:92:1a:7a:6e:e3:76:d2:30:30:47:17:d9:ae:b9: 17:ae:df:fd:95:c6:ba:c5:5e:73:7a:76:23:c1:b0:45:23:26: cb:55:11:6e:27:9b:82:eb:d2:a6:1d:d5:22:ca:98:af:aa:e8: 9e:73:6f:94:84:3c:3b:e5:d9:6c:a4:56:b0:bc:1b:94:dd:a1: 7a:51:6c:45:d8:89:51:4c:54:50:07:cb:59:95:d6:78:14:56: e2:cb:bd:b1:dd:79:b2:f4:0a:00:c5:d0:9d:6e:7e:8d:ab:de: f9:f0:74:9e:70:db:b6:23:85:33:69:03:fc:7f:2f:49:81:05: 82:19:73:9d:ff:4f:fa:8b:54:99:a8:55:81:06:65:de:c4:a4: 24:a2:3f:f9:c2:7b:1a:64:66:c8:63:e4:df:f9:c5:e5:57:27: 34:76:21:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pnmbx8jfLs8EYXZIazi7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzMzZTlkZTk0ODViNDQ2NzFjOGU1MTFkYTIyMWU0MTUz YzcxMWIwHhcNMjYwMTI1MTMwMTEwWhcNMjYwMTI2MTMwMTEwWjAzMTEwLwYDVQQD EygzYjA2OGY2MDY1Zjk5MGZhZTlmMWNiMGU1ZGI1NDhhODI3NmYzNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0729hMll7mYIy/EUxLhtC5xgR/f1 XrRc2ll4XxNf454uYJvXbRXFLz/m+Trz1kRJ2MJ4Nbg3pI879lrOuEaCJqk+M3ZW Zsb09H2sMGwtRbngqyfp9j3cPQ4n3Z10Z51Z2IC8JusFUyXhF/D2ooetO1jPYM0T 5P+SpwAzL8zYeYz2nTr3PrupHWrNyLKjOzEMgJv79i0RO7jaKr69UaJKRQajM+VZ YWuKu7asmWBLuBu7hRKo0eRJqaDPtknF7oxG1wJCh5qm5ulZuUZim9Snwqv+rnIX TnAlkfksPpIQ6gSloaWxIhEL0bZQE8vWUl2b6N6ZAcCO9aQLJaetVplSFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsGj2Bl+ZD66fHLDl21SKgnbzTMMB8GA1UdIwQY MBaAFLdzPp3pSFtEZxyOUR2iIeQVPHEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUt NTE4Y2QxNDcxM2ViLzEvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUtNTE4Y2QxNDcxM2Vi LzEvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNg9s33C nyWv0ovCxYbh4S1yz8GO37FeHMuMLRrC9DZVIusN/GV21b64g9ocd7CXSY3JVeAM gFTYJJAbhl69jMYxsRAq5JBxLyFWfOXWXhPZryVDIJEIorGJVgoBypIaem7jdtIw MEcX2a65F67f/ZXGusVec3p2I8GwRSMmy1URbiebguvSph3VIsqYr6ronnNvlIQ8 O+XZbKRWsLwblN2helFsRdiJUUxUUAfLWZXWeBRW4su9sd15svQKAMXQnW5+jave +fB0nnDbtiOFM2kD/H8vSYEFghlznf9P+otUmahVgQZl3sSkJKI/+cJ7GmRmyGPk 3/nF5VcnNHYhzg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:56:39 2026 by rpki-client