This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json) Hash identifier: bntN3nRpKagBz1muUsMf0b/rlBJBsF3rr2bAr8yqYkk= Subject key identifier: 9B:0D:73:22:57:5F:45:42:E2:A8:C8:7B:88:37:58:BF:9B:A6:F8:1E Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6 Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6 Certificate serial: 019BF79AD355710280F276C0C81CE42E6667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 00:01:17 +0000 Manifest this update: Mon 26 Jan 2026 00:01:17 +0000 Manifest next update: Tue 27 Jan 2026 00:01:17 +0000 Files and hashes: 1: 0zAvG8q_rQz542VLQHfI3pwn2hU.roa (hash: EpeZpmHs3b50RgbC9T7I86EOA85BMvieUCH/Qo6Mt6U=) 2: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: Hpusk5nMqoNyx6rHqL/xjg6nsmCCXRK7+GoYyNfSPxs=) 3: gozTMRP9KybW0YQlfst5QWvJTAc.roa (hash: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA=) 4: nCAbVn_gsNs4x4asBKyazyvKXR0.roa (hash: Ir2ZDg7CX0Hx7nK6/8SSzS9hwNZYvwP7LhXhdGV2tlA=) 5: s5RTg8fa0nQHIcIumLzUhuAAt24.roa (hash: cqMD2IDYqFBpxsaJVxm5d2TxnTtqRKRBltHR4geFTsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:d3:55:71:02:80:f2:76:c0:c8:1c:e4:2e:66:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6 Validity Not Before: Jan 26 00:01:17 2026 GMT Not After : Jan 27 00:01:17 2026 GMT Subject: CN=9b0d7322575f4542e2a8c87b883758bf9ba6f81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:41:b4:b5:71:e2:24:9e:fb:b2:4d:a2:49: a7:3c:22:91:79:30:47:44:bc:19:64:f0:5b:d7:a7: 98:40:53:22:69:39:02:10:c4:f7:b4:9e:c5:ac:a8: 4b:b0:03:ab:d8:95:d0:31:ba:c3:fa:35:c6:b3:87: a9:a2:39:34:d4:87:c2:41:d2:55:3d:b8:32:ee:f7: a7:02:fa:4e:fd:20:b5:3a:df:1d:21:2f:46:61:e7: 5d:1d:21:54:7c:23:c9:ea:56:d0:a8:d7:ee:c4:bb: a1:4f:31:b4:96:e3:0e:66:c4:2c:39:db:98:7c:ca: 1f:11:0f:c1:96:25:c1:63:92:72:de:d5:fb:32:10: fc:16:80:f0:13:04:d4:4d:af:98:07:dd:04:7e:e5: 57:2d:00:07:76:8f:c5:63:32:c6:56:4a:bf:4e:c9: 05:c8:40:9e:f5:2c:39:6a:8a:e7:b2:fe:7f:c7:62: 3d:88:8a:25:0e:40:ae:ab:8f:36:51:5d:47:22:26: 36:ed:54:8a:1a:5f:09:aa:76:c8:da:6e:32:56:4d: 84:2a:95:23:c5:5d:8f:07:05:f7:1d:ee:8a:18:18: b3:13:90:21:b5:43:a1:0d:e0:77:4c:cb:38:9e:61: 5e:2d:24:89:70:0b:31:21:99:79:77:5d:a8:93:1f: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0D:73:22:57:5F:45:42:E2:A8:C8:7B:88:37:58:BF:9B:A6:F8:1E X509v3 Authority Key Identifier: keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:02:22:00:36:6a:c3:39:65:4f:74:04:88:11:69:d5:f6:0d: 97:7f:06:56:f8:8f:55:57:f8:07:9b:e0:5a:67:43:a9:ad:5d: b7:b1:3f:f8:45:8d:86:4f:9b:d1:c7:21:19:eb:f0:9f:5c:14: 8a:84:e8:4a:b0:09:b8:2e:b8:7e:f6:95:ab:8c:6d:31:59:69: 27:90:6d:a5:f9:63:a2:6a:5e:ab:99:70:4f:aa:a2:03:47:27: ad:2b:72:4e:a3:a8:c7:88:11:31:75:49:23:25:de:28:05:30: 1a:c1:1d:60:a0:0c:48:8f:18:98:41:cd:d8:c4:19:93:ad:9e: 24:d4:fc:5d:c1:c4:be:e5:fc:e8:c5:a3:83:35:6e:5b:3c:ae: 8c:e5:93:af:c2:24:17:10:48:f0:5a:71:fd:34:36:bb:46:af: c0:85:ab:0d:6a:4b:52:76:c9:75:d0:17:f1:29:19:43:08:76: 19:62:16:a4:43:a9:0d:34:b9:10:d5:1f:06:57:2a:6c:42:9e: 6f:b7:77:dc:d5:46:26:0d:b3:e2:c8:9d:4e:15:50:74:1e:b0: ff:ce:d5:28:98:4a:a8:36:3f:33:69:08:0b:8f:38:43:b5:a8: 3c:03:0f:80:a5:da:05:24:62:34:59:06:05:12:a6:a4:0f:9f: ef:48:18:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mtNVcQKA8nbAyBzkLmZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMGI2NjNjNDVkN2JjMjcyNGQxNjg0ODUwODc1ODFlMTQ0 NDhmYjYwHhcNMjYwMTI2MDAwMTE3WhcNMjYwMTI3MDAwMTE3WjAzMTEwLwYDVQQD Eyg5YjBkNzMyMjU3NWY0NTQyZTJhOGM4N2I4ODM3NThiZjliYTZmODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrRBtLVx4iSe+7JNokmnPCKReTBH RLwZZPBb16eYQFMiaTkCEMT3tJ7FrKhLsAOr2JXQMbrD+jXGs4epojk01IfCQdJV Pbgy7venAvpO/SC1Ot8dIS9GYeddHSFUfCPJ6lbQqNfuxLuhTzG0luMOZsQsOduY fMofEQ/BliXBY5Jy3tX7MhD8FoDwEwTUTa+YB90EfuVXLQAHdo/FYzLGVkq/TskF yECe9Sw5aornsv5/x2I9iIolDkCuq482UV1HIiY27VSKGl8JqnbI2m4yVk2EKpUj xV2PBwX3He6KGBizE5AhtUOhDeB3TMs4nmFeLSSJcAsxIZl5d12okx+shQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsNcyJXX0VC4qjIe4g3WL+bpvgeMB8GA1UdIwQY MBaAFN0LZjxF17wnJNFoSFCHWB4URI+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQt M2I5ZTNjOGEyZmNhLzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQtM2I5ZTNjOGEyZmNh LzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQIiADZq wzllT3QEiBFp1fYNl38GVviPVVf4B5vgWmdDqa1dt7E/+EWNhk+b0cchGevwn1wU ioToSrAJuC64fvaVq4xtMVlpJ5Btpfljompeq5lwT6qiA0cnrStyTqOox4gRMXVJ IyXeKAUwGsEdYKAMSI8YmEHN2MQZk62eJNT8XcHEvuX86MWjgzVuWzyujOWTr8Ik FxBI8Fpx/TQ2u0avwIWrDWpLUnbJddAX8SkZQwh2GWIWpEOpDTS5ENUfBlcqbEKe b7d33NVGJg2z4sidThVQdB6w/87VKJhKqDY/M2kIC484Q7WoPAMPgKXaBSRiNFkG BRKmpA+f70gYyg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:16 2026 by rpki-client