This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json) Hash identifier: tzfjBblTH2ywaI8XG34+eM2Kr7kcirR5jfQa6MlMmsM= Subject key identifier: AE:88:C4:44:25:69:72:B0:6A:A8:D5:75:EB:14:A6:09:5D:2A:77:78 Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6 Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6 Certificate serial: 019BF6BEEF8DC5D7CA2EDD4B69F47719D849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 20:01:06 +0000 Manifest this update: Sun 25 Jan 2026 20:01:06 +0000 Manifest next update: Mon 26 Jan 2026 20:01:06 +0000 Files and hashes: 1: 4XxIYwz7j2kyG3R_CD4kJYaxank.roa (hash: TLEhf+pn1t5mBsVNjIOJ9/5QAhqcShOiU6dpNlwJI8s=) 2: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: 74vy1CC7xg9WSRlqUs8nziw/dVRc8S1FSUj7+I0omxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:ef:8d:c5:d7:ca:2e:dd:4b:69:f4:77:19:d8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6 Validity Not Before: Jan 25 20:01:06 2026 GMT Not After : Jan 26 20:01:06 2026 GMT Subject: CN=ae88c444256972b06aa8d575eb14a6095d2a7778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0d:51:ad:31:6a:83:0c:f0:93:83:4e:53:91: 85:92:5d:5b:f4:28:26:b3:d1:f2:ce:3f:45:2f:e2: fa:7d:27:76:10:40:6e:f8:e4:2a:ca:2d:70:8d:43: d9:64:73:82:93:91:3d:f8:c5:cd:aa:00:b1:df:45: ee:48:38:e1:ad:e7:cb:27:a5:06:ff:a2:0b:17:a3: 34:e3:c0:86:a7:29:4f:89:46:a5:14:5b:99:39:3e: 69:0f:5c:95:c1:8e:01:db:e3:b0:18:32:47:d3:80: f2:ad:d8:99:cd:34:32:24:1c:d7:89:86:1c:0e:67: 36:95:1a:10:28:07:42:d0:8e:22:61:6d:0c:0e:cd: e0:ea:48:14:8b:13:b5:40:0e:5d:08:dc:8a:2c:3a: d9:b4:c3:12:b0:db:54:81:39:a5:f8:17:00:ba:25: 92:94:42:27:df:5b:be:83:8f:cc:96:e6:ab:1d:db: 9e:f8:74:7a:98:ba:e0:cb:f5:19:c0:93:13:1b:4a: fd:ff:af:b9:f6:58:b8:af:46:e9:63:e0:97:26:eb: 4f:2b:7b:cb:40:1d:13:65:b1:c2:f1:9a:d3:63:97: f4:9d:58:11:16:5e:ef:ae:df:d5:d7:3d:2b:1d:48: ea:1c:bb:11:38:df:20:d3:ef:97:49:17:71:64:ca: 78:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:88:C4:44:25:69:72:B0:6A:A8:D5:75:EB:14:A6:09:5D:2A:77:78 X509v3 Authority Key Identifier: keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6c:07:ab:44:f1:c8:2f:62:54:a4:92:dc:84:e4:e2:43:52: 5e:e4:47:85:46:0b:6a:d6:46:2f:96:89:b9:6b:b7:e6:7f:33: 7b:b3:f5:7f:21:7c:0c:a9:91:de:b6:be:7a:4e:bf:1a:24:cb: 8b:aa:4b:17:7a:14:2d:de:c2:6f:bd:9c:9c:81:e8:b4:0a:cf: 75:d7:8b:aa:1e:1f:2f:0f:dc:f0:c8:0d:f0:5e:bf:06:65:ce: 48:51:ad:40:4d:08:47:1d:38:fe:2a:77:d6:5b:86:b3:95:8c: d6:2a:84:ef:22:0a:19:bd:dd:b4:93:12:06:0e:2a:36:88:cc: 34:11:b5:5e:66:7f:0b:c5:8d:0b:fb:c0:f6:bf:f5:a0:54:a4: 29:db:2a:f6:01:9a:8a:2a:aa:e0:74:1a:59:2c:df:e1:59:e0: 85:71:19:04:ea:b9:e5:d0:8a:22:d5:67:9f:8a:a4:16:01:bc: 1e:fe:c0:6a:fb:f0:6b:78:de:a5:7e:e4:35:de:de:11:b2:3b: fc:e4:40:3e:b7:1f:f3:22:f7:0a:44:ff:98:2f:c1:57:9a:22: a5:fe:db:32:57:45:ac:17:12:b1:6b:ed:b4:32:e6:af:3f:68: 3d:87:55:37:ae:d5:84:4e:ef:3f:d6:0b:fe:dc:49:1e:3f:77: d4:95:82:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vu+NxdfKLt1LafR3GdhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZWRmMGI3NjE1MjkwYWVmYWNjNWY2YWE2YjQxZDlkMTg0 M2YxYjYwHhcNMjYwMTI1MjAwMTA2WhcNMjYwMTI2MjAwMTA2WjAzMTEwLwYDVQQD EyhhZTg4YzQ0NDI1Njk3MmIwNmFhOGQ1NzVlYjE0YTYwOTVkMmE3Nzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A1RrTFqgwzwk4NOU5GFkl1b9Cgm s9Hyzj9FL+L6fSd2EEBu+OQqyi1wjUPZZHOCk5E9+MXNqgCx30XuSDjhrefLJ6UG /6ILF6M048CGpylPiUalFFuZOT5pD1yVwY4B2+OwGDJH04DyrdiZzTQyJBzXiYYc Dmc2lRoQKAdC0I4iYW0MDs3g6kgUixO1QA5dCNyKLDrZtMMSsNtUgTml+BcAuiWS lEIn31u+g4/MluarHdue+HR6mLrgy/UZwJMTG0r9/6+59li4r0bpY+CXJutPK3vL QB0TZbHC8ZrTY5f0nVgRFl7vrt/V1z0rHUjqHLsRON8g0++XSRdxZMp4uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6IxEQlaXKwaqjVdesUpgldKnd4MB8GA1UdIwQY MBaAFG/t8LdhUpCu+sxfaqa0HZ0YQ/G2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEt Nzg0ZGI5YjFkYTJiLzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEtNzg0ZGI5YjFkYTJi LzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2wHq0Tx yC9iVKSS3ITk4kNSXuRHhUYLatZGL5aJuWu35n8ze7P1fyF8DKmR3ra+ek6/GiTL i6pLF3oULd7Cb72cnIHotArPddeLqh4fLw/c8MgN8F6/BmXOSFGtQE0IRx04/ip3 1luGs5WM1iqE7yIKGb3dtJMSBg4qNojMNBG1XmZ/C8WNC/vA9r/1oFSkKdsq9gGa iiqq4HQaWSzf4VnghXEZBOq55dCKItVnn4qkFgG8Hv7Aavvwa3jepX7kNd7eEbI7 /ORAPrcf8yL3CkT/mC/BV5oipf7bMldFrBcSsWvttDLmrz9oPYdVN67VhE7vP9YL /txJHj931JWCZA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:35 2026 by rpki-client