This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json) Hash identifier: SW4KQzqWHNf92qvbj/myIBPJ5KNPeMKdwclY7TeGyio= Subject key identifier: DD:CE:20:F5:9C:CC:CA:C2:03:D1:F5:6A:00:51:EE:A3:E2:9D:BE:4A Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90 Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590 Certificate serial: 019BF687EA76819D1713E143D37A85FB8DDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft Manifest number: 10A5 Signing time: Sun 25 Jan 2026 19:01:00 +0000 Manifest this update: Sun 25 Jan 2026 19:01:00 +0000 Manifest next update: Mon 26 Jan 2026 19:01:00 +0000 Files and hashes: 1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=) 2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: FiGUlUdB1jgKdmC6f5Epw+9WGDpRCxLHU3srKIpxQwA=) 3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:ea:76:81:9d:17:13:e1:43:d3:7a:85:fb:8d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590 Validity Not Before: Jan 25 19:01:00 2026 GMT Not After : Jan 26 19:01:00 2026 GMT Subject: CN=ddce20f59ccccac203d1f56a0051eea3e29dbe4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:e8:41:e8:1d:c3:3b:11:8d:ee:62:d8:b3: ab:a9:d0:9e:54:8f:81:c4:a3:db:a5:09:b2:14:90: 46:fd:8a:5c:11:da:84:82:98:45:dc:b8:3f:5f:24: ac:f4:b3:4f:2a:b6:38:05:03:5f:f0:af:38:0f:f6: 1d:f7:32:6f:65:1b:ec:d9:79:60:b7:13:48:98:3b: ba:a3:fc:5b:d2:2d:c0:60:9b:1f:a6:88:ff:0f:5d: 76:1b:25:3a:6c:38:3c:c9:10:9e:37:83:79:2e:af: ee:5b:9d:c7:89:e8:fd:71:ed:d7:eb:41:be:f9:d4: 69:4d:d8:5e:15:30:43:4a:a4:eb:c5:5c:31:c8:38: 17:c1:17:1e:f2:dd:6a:74:27:07:f6:c5:54:db:16: 8e:a6:16:56:f7:a9:3e:b7:a2:8a:ee:7c:57:f5:d5: 57:07:05:1a:60:ab:bb:75:3b:e9:cd:f4:12:83:b6: 79:1e:71:6a:a9:58:6d:cc:8a:26:9b:32:a7:a6:85: 5d:99:48:78:7e:1c:ed:73:4f:b6:5f:08:e4:27:a0: 64:91:01:a4:37:d6:b9:8a:25:c6:70:39:ca:d4:be: 3a:ab:3d:1e:af:7a:5c:97:f5:6c:4b:a9:a6:23:94: d3:0c:75:ae:32:27:dd:8e:81:43:1e:5b:6d:4c:81: 0c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CE:20:F5:9C:CC:CA:C2:03:D1:F5:6A:00:51:EE:A3:E2:9D:BE:4A X509v3 Authority Key Identifier: keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:4c:9e:a4:a1:1a:f3:90:e1:4e:f3:c3:dd:da:44:4a:05:99: 14:d3:d3:dd:3a:44:55:6e:c1:38:3b:36:cb:60:ec:1b:49:95: ad:79:1a:38:9d:29:90:0c:03:24:49:3a:8d:cc:69:d9:88:84: a4:8b:48:57:10:a6:03:a0:02:af:c8:68:8c:cb:ce:c3:f3:4c: c6:3a:bc:d3:df:b5:79:5c:d0:73:ae:2d:ad:56:1a:0a:7f:6b: e0:30:a6:c0:d3:2f:15:2a:ee:32:ce:62:1a:a9:36:0b:2a:5c: ac:fc:2e:f0:6b:1b:c2:c3:06:63:c6:4c:17:f6:f6:6b:da:21: 70:83:79:8a:70:51:75:07:79:69:8b:0d:51:27:74:2d:4f:ef: aa:e5:8f:d1:71:65:f8:c8:ad:2b:ad:0c:3e:3a:d6:65:53:0a: f7:d1:7b:0b:32:df:4a:10:ba:69:a4:be:cc:4d:82:de:ff:67: 52:bb:38:0f:9a:f7:02:25:24:bf:25:b9:5f:2e:d5:e5:9a:5c: 11:94:35:c6:63:a2:1f:7a:c9:05:f0:22:cd:c1:d7:0e:06:42: 9e:3b:a5:14:18:ea:75:af:cc:22:57:ce:fd:cc:b1:26:a5:d9: 57:1c:1b:71:5e:0a:29:e6:c8:3c:dc:82:37:41:07:05:79:b7: f5:44:bc:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h+p2gZ0XE+FD03qF+43bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlM2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1 ODM1OTAwHhcNMjYwMTI1MTkwMTAwWhcNMjYwMTI2MTkwMTAwWjAzMTEwLwYDVQQD EyhkZGNlMjBmNTljY2NjYWMyMDNkMWY1NmEwMDUxZWVhM2UyOWRiZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugXoQegdwzsRje5i2LOrqdCeVI+B xKPbpQmyFJBG/YpcEdqEgphF3Lg/XySs9LNPKrY4BQNf8K84D/Yd9zJvZRvs2Xlg txNImDu6o/xb0i3AYJsfpoj/D112GyU6bDg8yRCeN4N5Lq/uW53Hiej9ce3X60G+ +dRpTdheFTBDSqTrxVwxyDgXwRce8t1qdCcH9sVU2xaOphZW96k+t6KK7nxX9dVX BwUaYKu7dTvpzfQSg7Z5HnFqqVhtzIommzKnpoVdmUh4fhztc0+2XwjkJ6BkkQGk N9a5iiXGcDnK1L46qz0er3pcl/VsS6mmI5TTDHWuMifdjoFDHlttTIEMfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3OIPWczMrCA9H1agBR7qPinb5KMB8GA1UdIwQY MBaAFN49gSEfSS7fApoizGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYt MzE0MjhiMDUwZmQ3LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3 LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwEyepKEa 85DhTvPD3dpESgWZFNPT3TpEVW7BODs2y2DsG0mVrXkaOJ0pkAwDJEk6jcxp2YiE pItIVxCmA6ACr8hojMvOw/NMxjq809+1eVzQc64trVYaCn9r4DCmwNMvFSruMs5i Gqk2CypcrPwu8GsbwsMGY8ZMF/b2a9ohcIN5inBRdQd5aYsNUSd0LU/vquWP0XFl +MitK60MPjrWZVMK99F7CzLfShC6aaS+zE2C3v9nUrs4D5r3AiUkvyW5Xy7V5Zpc EZQ1xmOiH3rJBfAizcHXDgZCnjulFBjqda/MIlfO/cyxJqXZVxwbcV4KKebIPNyC N0EHBXm39US8gg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:25 2026 by rpki-client