This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft File: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft (raw, json) Hash identifier: cs0MDafXLidvVhYVOpCtQ65meB74bay3p9e679rBHUo= Subject key identifier: 21:81:21:FF:AA:AE:B1:D6:ED:8F:E1:E0:36:FC:02:8F:88:9A:8F:73 Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0 Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0 Certificate serial: 019BF6BEA1D77C54D44451BA3EAAA164F261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft Manifest number: 177D Signing time: Sun 25 Jan 2026 20:00:46 +0000 Manifest this update: Sun 25 Jan 2026 20:00:46 +0000 Manifest next update: Mon 26 Jan 2026 20:00:46 +0000 Files and hashes: 1: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl (hash: qCJ7NXDaodMg7lTiSqfPCYkdGeQK6XzRKP5yerSKLk8=) 2: otrcKIXq_A9uaKlz_d5wq-4G144.roa (hash: 384/aWNa4g4uNh0J2+RFW9VIMxNrtEwydVkvP0K9KIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:a1:d7:7c:54:d4:44:51:ba:3e:aa:a1:64:f2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0 Validity Not Before: Jan 25 20:00:46 2026 GMT Not After : Jan 26 20:00:46 2026 GMT Subject: CN=218121ffaaaeb1d6ed8fe1e036fc028f889a8f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:fc:16:9b:12:cf:7c:59:30:74:26:b0:cc: 6a:5e:17:68:72:18:1f:5c:63:f4:e5:54:35:a0:df: ab:aa:5b:24:c6:80:c0:8a:c6:33:65:63:fe:da:56: 02:98:f6:f6:a6:50:89:60:1a:5b:bc:93:32:92:26: 73:22:bf:25:b1:f0:fe:33:f6:62:db:5d:14:4b:aa: cf:b8:24:02:b8:c8:36:a7:d5:7c:74:95:39:85:15: 68:fb:23:44:c9:43:32:a7:ae:50:53:e9:24:d1:9c: 9c:32:eb:06:7d:54:67:d8:7f:eb:7b:e8:48:37:4a: e2:76:40:f0:4c:46:b1:97:85:98:77:d1:0d:f8:63: 65:f6:17:a8:04:ea:2c:d6:17:11:5c:b5:62:cd:2d: 0e:0f:91:c8:b4:ae:2d:e5:14:3d:24:78:a5:9b:2e: 3f:d2:60:3f:4e:b6:61:ae:20:8a:77:cc:15:e4:9b: 1a:7b:c7:73:d1:39:47:f2:b6:fa:f8:68:cc:15:93: 79:1a:7e:90:ce:30:35:2a:4d:44:39:a8:a5:8f:af: b0:2a:36:40:67:d3:f7:3f:dc:a3:dc:2e:68:ae:c3: 4e:69:95:0d:1d:7a:a9:0c:36:f2:4a:31:3f:d1:b3: 38:bd:6e:be:5c:d3:46:6e:74:8c:ad:b2:d3:43:35: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:81:21:FF:AA:AE:B1:D6:ED:8F:E1:E0:36:FC:02:8F:88:9A:8F:73 X509v3 Authority Key Identifier: keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c6:31:07:91:dc:56:06:a1:7b:11:62:84:fc:8d:b2:c9:78: 0b:4c:f5:00:78:b7:8e:a4:5f:80:fd:d7:52:e2:b8:6e:10:f4: 43:c8:08:e2:24:5c:5e:7f:ab:38:73:f2:4e:f8:15:6d:ed:b6: e8:f9:33:02:e7:e8:79:3a:a1:c2:c5:b5:2a:10:9e:69:78:2c: 75:b3:8a:85:cf:d9:d7:e0:f3:94:bd:fb:35:27:b5:3b:f2:c3: 46:09:83:ea:8e:81:da:d3:95:bc:ca:8b:ec:86:67:50:55:a1: b3:74:d5:a2:19:84:da:90:fa:07:98:5f:16:74:d5:8b:13:a6: 45:d1:5d:09:61:9c:e4:04:bb:bf:93:b6:07:81:56:41:2e:ab: 22:44:de:e1:67:3c:3c:f8:b4:84:8e:e2:63:a4:8e:f0:5e:ac: c1:ab:64:f8:65:c2:b0:a4:a7:49:84:52:38:f3:ab:26:68:31: 28:bd:21:7c:58:18:dd:5e:18:0b:b5:64:82:e2:e6:b3:e7:1f: 68:3e:79:b8:c4:8e:27:6d:2c:be:61:f6:ec:f7:90:22:90:e5: fe:95:da:e9:93:08:8c:0b:0d:14:c5:4d:c9:76:9d:8a:ea:ee: 8e:64:52:8d:e0:b5:0d:60:d7:79:34:04:3c:c4:ab:71:d8:6f: 61:b1:50:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vqHXfFTURFG6PqqhZPJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTY5OTUyZjk3ZjQ5NGNmZTBmNmI1NDI3Y2E1NmU4MTBj MDVjZTAwHhcNMjYwMTI1MjAwMDQ2WhcNMjYwMTI2MjAwMDQ2WjAzMTEwLwYDVQQD EygyMTgxMjFmZmFhYWViMWQ2ZWQ4ZmUxZTAzNmZjMDI4Zjg4OWE4ZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgD8FpsSz3xZMHQmsMxqXhdochgf XGP05VQ1oN+rqlskxoDAisYzZWP+2lYCmPb2plCJYBpbvJMykiZzIr8lsfD+M/Zi 210US6rPuCQCuMg2p9V8dJU5hRVo+yNEyUMyp65QU+kk0ZycMusGfVRn2H/re+hI N0ridkDwTEaxl4WYd9EN+GNl9heoBOos1hcRXLVizS0OD5HItK4t5RQ9JHilmy4/ 0mA/TrZhriCKd8wV5Jsae8dz0TlH8rb6+GjMFZN5Gn6QzjA1Kk1EOailj6+wKjZA Z9P3P9yj3C5orsNOaZUNHXqpDDbySjE/0bM4vW6+XNNGbnSMrbLTQzUVywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGBIf+qrrHW7Y/h4Db8Ao+Imo9zMB8GA1UdIwQY MBaAFN4WmVL5f0lM/g9rVCfKVugQwFzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hhWlV2bF9TVXotRDJ0VUo4cFc2QkRBWE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lNzg5NTQtMzFmZC00ZmQwLTlmYzEt MGY0YjI4Yjg4NmY3LzEvM2hhWlV2bF9TVXotRDJ0VUo4cFc2QkRBWE9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lNzg5NTQtMzFmZC00ZmQwLTlmYzEtMGY0YjI4Yjg4NmY3 LzEvM2hhWlV2bF9TVXotRDJ0VUo4cFc2QkRBWE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8YxB5Hc VgahexFihPyNssl4C0z1AHi3jqRfgP3XUuK4bhD0Q8gI4iRcXn+rOHPyTvgVbe22 6PkzAufoeTqhwsW1KhCeaXgsdbOKhc/Z1+DzlL37NSe1O/LDRgmD6o6B2tOVvMqL 7IZnUFWhs3TVohmE2pD6B5hfFnTVixOmRdFdCWGc5AS7v5O2B4FWQS6rIkTe4Wc8 PPi0hI7iY6SO8F6swatk+GXCsKSnSYRSOPOrJmgxKL0hfFgY3V4YC7VkguLms+cf aD55uMSOJ20svmH27PeQIpDl/pXa6ZMIjAsNFMVNyXadiurujmRSjeC1DWDXeTQE PMSrcdhvYbFQQw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:13:47 2026 by rpki-client