This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft File: 3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json) Hash identifier: a3NlZX+/EhF2wGHa0E43rV7O0VjvUdmuIm29V8yvtc0= Subject key identifier: C4:B8:A8:E3:42:58:34:6F:29:76:96:E3:D7:9E:C8:FE:A0:05:2C:96 Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9 Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9 Certificate serial: 019BF6BF6513851CD5D7C9403DDA19FAA04F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 20:01:36 +0000 Manifest this update: Sun 25 Jan 2026 20:01:36 +0000 Manifest next update: Mon 26 Jan 2026 20:01:36 +0000 Files and hashes: 1: 1-xMK4DdvzyhB-krONEqltikgBg0.roa (hash: g4tuxw1k3rYBSc3hMJC6RVLR5yBR/1vY5hHFRctb5CY=) 2: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: VDO8Y8Y+yNqV9VIbEkCyVYo8PGUrZvETLNpSDZkKQ/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:65:13:85:1c:d5:d7:c9:40:3d:da:19:fa:a0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9 Validity Not Before: Jan 25 20:01:36 2026 GMT Not After : Jan 26 20:01:36 2026 GMT Subject: CN=c4b8a8e34258346f297696e3d79ec8fea0052c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:64:6c:7a:df:8c:4a:0b:f6:20:6d:d4:de:1d: 88:6d:ea:e1:9a:79:c8:7f:56:c6:c1:60:a2:1e:d1: 13:5e:97:6f:5c:86:03:45:8e:03:ad:b8:11:e8:87: 7b:7f:ec:9d:33:1d:d7:4d:1c:56:5f:19:a8:ca:c9: c9:04:c0:c1:03:76:b9:bc:23:a9:41:10:73:ee:3e: cc:ff:d5:98:2c:5d:ad:03:ad:40:f1:6d:be:1d:6a: 29:4f:ca:ab:b1:09:1d:3d:cc:de:76:35:e2:47:84: 9d:3b:aa:78:72:b2:d2:98:81:6e:a2:06:8c:08:0e: 91:eb:b9:5a:cd:b6:bb:a6:6a:6e:64:05:a7:b0:d0: 37:12:42:0c:99:47:dc:c9:ee:94:d8:1c:f2:30:42: a8:f6:7a:d9:50:2f:07:b3:f2:ec:2b:ce:a1:46:d0: 77:0c:ae:ef:9e:93:ae:1b:d9:dc:b2:ce:00:48:0b: a7:b1:8f:81:24:d6:45:f8:78:42:d5:d9:e1:e6:71: 22:40:47:b5:69:05:96:2f:b9:4d:25:c8:94:37:8a: 97:7b:c8:a2:4c:f8:f4:eb:19:24:be:d3:ff:4d:31: 14:68:45:33:36:05:d5:f0:e2:61:5b:9b:0f:ca:39: c7:c0:c4:0a:b9:97:41:80:89:24:a2:e9:c9:50:9a: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B8:A8:E3:42:58:34:6F:29:76:96:E3:D7:9E:C8:FE:A0:05:2C:96 X509v3 Authority Key Identifier: keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:79:e4:b6:0c:fb:7d:bc:8f:2f:97:77:a0:ab:f0:25:06:16: fd:ac:c2:bd:ab:eb:f4:70:aa:03:1f:ba:b4:0e:22:a5:8c:68: 00:ff:98:ed:b1:de:79:dc:13:5b:ac:05:6d:da:00:20:82:0e: 20:14:4f:7c:d9:ce:92:a3:15:94:18:63:75:10:7a:9a:68:54: 39:2b:9b:2e:b1:a1:62:b9:14:d1:89:ee:86:9f:31:38:53:a7: 41:8a:a9:95:3b:df:b1:39:67:2c:b7:2f:1e:57:84:16:fc:e0: 23:6e:6e:6f:cf:1d:97:f6:73:f4:f5:33:0b:5d:d3:33:82:c5: f8:26:8a:56:37:de:2e:84:0b:fc:c9:95:a5:3c:18:c4:3d:2b: c5:0b:52:2a:2d:8d:a8:2f:c6:2c:e8:26:1b:ad:41:52:5a:d2: ed:99:5c:41:4e:76:25:b3:13:7c:b9:43:e7:3f:31:59:42:3d: 3e:96:1f:4d:dd:85:39:36:25:52:78:b0:25:8f:f1:16:3d:15: 3e:fa:55:09:53:30:a1:bd:d5:9c:22:bf:3c:f3:67:a1:53:54: 50:a3:7f:ad:da:92:e9:cb:39:25:0a:09:57:a5:aa:7f:2c:f7: fb:c8:e5:25:0f:3a:a5:4c:d5:8c:84:a3:81:62:1d:ba:8c:65: 98:e7:31:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v2UThRzV18lAPdoZ+qBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYzIwMDRhMWFmMDMwYmE5OWZjZjQ1MWYzYmQ4OGVmYzUz ODQ2YTkwHhcNMjYwMTI1MjAwMTM2WhcNMjYwMTI2MjAwMTM2WjAzMTEwLwYDVQQD EyhjNGI4YThlMzQyNTgzNDZmMjk3Njk2ZTNkNzllYzhmZWEwMDUyYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomRset+MSgv2IG3U3h2IberhmnnI f1bGwWCiHtETXpdvXIYDRY4DrbgR6Id7f+ydMx3XTRxWXxmoysnJBMDBA3a5vCOp QRBz7j7M/9WYLF2tA61A8W2+HWopT8qrsQkdPczedjXiR4SdO6p4crLSmIFuogaM CA6R67lazba7pmpuZAWnsNA3EkIMmUfcye6U2BzyMEKo9nrZUC8Hs/LsK86hRtB3 DK7vnpOuG9ncss4ASAunsY+BJNZF+HhC1dnh5nEiQEe1aQWWL7lNJciUN4qXe8ii TPj06xkkvtP/TTEUaEUzNgXV8OJhW5sPyjnHwMQKuZdBgIkkounJUJrvewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS4qONCWDRvKXaW49eeyP6gBSyWMB8GA1UdIwQY MBaAFNzCAEoa8DC6mfz0UfO9iO/FOEapMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MTJiNDAtNTNhZS00OTUzLWFmZjUt NTZhMzMwNTc0OTdiLzEvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83MTJiNDAtNTNhZS00OTUzLWFmZjUtNTZhMzMwNTc0OTdi LzEvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXnktgz7 fbyPL5d3oKvwJQYW/azCvavr9HCqAx+6tA4ipYxoAP+Y7bHeedwTW6wFbdoAIIIO IBRPfNnOkqMVlBhjdRB6mmhUOSubLrGhYrkU0Ynuhp8xOFOnQYqplTvfsTlnLLcv HleEFvzgI25ub88dl/Zz9PUzC13TM4LF+CaKVjfeLoQL/MmVpTwYxD0rxQtSKi2N qC/GLOgmG61BUlrS7ZlcQU52JbMTfLlD5z8xWUI9PpYfTd2FOTYlUniwJY/xFj0V PvpVCVMwob3VnCK/PPNnoVNUUKN/rdqS6cs5JQoJV6Wqfyz3+8jlJQ86pUzVjISj gWIduoxlmOcxJQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:17 2026 by rpki-client