This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft File: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json) Hash identifier: Uc14a31AQv8CF9Qcad99Rz5GfpbNpmJW3kYE6IZ61c0= Subject key identifier: 0F:08:FE:04:99:91:41:6C:4F:C7:02:22:3F:51:6B:DA:F0:AD:99:A6 Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28 Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428 Certificate serial: 019BF53E99B9617C60567B9476E9FB4DC2BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft Manifest number: 173D Signing time: Sun 25 Jan 2026 13:01:19 +0000 Manifest this update: Sun 25 Jan 2026 13:01:19 +0000 Manifest next update: Mon 26 Jan 2026 13:01:19 +0000 Files and hashes: 1: 2VjRyY35srd4tFZwYR3n2JNFpTM.roa (hash: KVtq1ksbn0eFzWJ+vieJNzHVkLQs/x4Zv2yLi0iRHw8=) 2: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: iCDHFJ8I9ofAreGaav5yoN7e3p63NlVStq+qcCMjx2I=) 3: 9BqiZznRTC9JSPLmSXD7Iy4lCmY.roa (hash: GZIDFs4jfGkO+SNPF/qf6wnC22M8x1B+nVZUJlDdzRQ=) 4: O6c_sWPEuIkptHQ9GoqxdPNGma0.roa (hash: nQDbcQ+hZgM3fnmlCao10gC2Eu9sMXU4j7YHjTJV+9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:99:b9:61:7c:60:56:7b:94:76:e9:fb:4d:c2:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428 Validity Not Before: Jan 25 13:01:19 2026 GMT Not After : Jan 26 13:01:19 2026 GMT Subject: CN=0f08fe049991416c4fc702223f516bdaf0ad99a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:3d:7c:d2:b4:10:ab:d2:8c:75:ff:99:35: 6f:1f:cd:0d:2b:53:6d:6f:71:12:2a:ff:72:96:86: 1e:cc:42:1a:f5:f7:95:c1:4c:63:73:ad:af:b3:d2: 80:1c:42:92:e9:ee:a0:7a:8d:5c:d0:21:84:b1:30: 05:0b:8a:16:26:2d:c2:90:aa:37:b8:ae:14:03:6f: 69:a9:59:01:16:91:2f:b8:18:9c:4d:c4:b4:ff:39: 0f:41:cc:1a:75:25:d1:4d:13:ea:e9:a0:37:bd:0b: 5c:d8:26:3b:bc:c3:d2:73:0f:a2:ff:24:54:ed:dc: 3b:31:11:76:bb:fa:1d:42:89:47:23:72:98:dd:ae: c7:21:83:c7:68:8d:bf:79:d1:7b:4d:32:0f:98:3b: 4d:f8:8e:11:cb:b8:63:25:27:8c:ce:1b:c4:3a:e1: 5c:80:38:83:17:6e:a8:2e:46:9a:92:d1:c3:50:25: 6f:f0:a4:a2:86:9f:1e:f6:a9:15:2f:fa:e2:33:2a: 98:7e:a4:8d:df:d0:98:0b:3f:7d:41:ff:c7:8e:0d: cf:f9:c5:46:7c:9d:76:03:8f:44:4c:7e:8e:39:6a: 74:da:fc:03:4e:cf:d6:37:82:7e:2b:1a:99:b2:da: aa:a4:ef:c6:00:ff:33:31:fa:ac:d3:9f:b7:8f:71: 87:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:08:FE:04:99:91:41:6C:4F:C7:02:22:3F:51:6B:DA:F0:AD:99:A6 X509v3 Authority Key Identifier: keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:14:c9:53:ec:58:05:4e:27:ab:2b:dc:20:da:75:49:ee:88: ab:df:de:91:47:b7:0a:41:90:ae:09:1b:7d:d8:2d:fc:d5:a7: a9:70:01:af:11:7a:3c:b2:dd:71:45:58:97:f1:2f:52:cb:97: 6a:7a:c3:ff:d4:9a:5c:32:89:87:a8:f9:91:0a:28:64:df:6b: 9c:05:a0:d5:fa:f7:7a:8c:78:97:a6:82:8b:b4:98:99:b3:4a: 66:d4:6b:b0:24:fa:95:4b:dc:4e:27:51:3b:df:99:92:52:08: ae:bc:5f:bf:bb:1a:51:66:19:59:46:0e:b7:2e:b1:90:2d:5a: 53:45:ca:64:c0:6c:17:37:aa:d9:1d:60:3c:26:76:0b:82:d2: 69:81:77:75:c6:70:77:30:66:0f:ee:f4:a3:6b:2b:ed:ee:f6: 8f:fe:24:21:eb:80:e3:7f:1b:f7:34:c1:07:b8:79:c6:31:9d: c9:c6:85:75:16:bf:2a:70:21:b1:bb:75:ac:2c:6f:5b:47:ac: 8c:6f:b0:5a:36:01:c7:60:74:c1:0b:72:d5:a5:0d:9a:08:e4: b1:00:22:4b:d0:1b:5f:2f:f0:ba:36:23:5f:d9:41:10:f9:0b: 27:cf:f7:0d:f2:d0:a7:54:13:42:cd:aa:23:77:ab:c5:a8:c2: 02:eb:7a:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Ppm5YXxgVnuUdun7TcK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNWY3MmYwZmFjZjUyNzA1NzI3YzAzOWJkYzFmYmI3Y2M5 N2Q0MjgwHhcNMjYwMTI1MTMwMTE5WhcNMjYwMTI2MTMwMTE5WjAzMTEwLwYDVQQD EygwZjA4ZmUwNDk5OTE0MTZjNGZjNzAyMjIzZjUxNmJkYWYwYWQ5OWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Q9fNK0EKvSjHX/mTVvH80NK1Nt b3ESKv9yloYezEIa9feVwUxjc62vs9KAHEKS6e6geo1c0CGEsTAFC4oWJi3CkKo3 uK4UA29pqVkBFpEvuBicTcS0/zkPQcwadSXRTRPq6aA3vQtc2CY7vMPScw+i/yRU 7dw7MRF2u/odQolHI3KY3a7HIYPHaI2/edF7TTIPmDtN+I4Ry7hjJSeMzhvEOuFc gDiDF26oLkaaktHDUCVv8KSihp8e9qkVL/riMyqYfqSN39CYCz99Qf/Hjg3P+cVG fJ12A49ETH6OOWp02vwDTs/WN4J+KxqZstqqpO/GAP8zMfqs05+3j3GH1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8I/gSZkUFsT8cCIj9Ra9rwrZmmMB8GA1UdIwQY MBaAFN1fcvD6z1JwVyfAOb3B+7fMl9QoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTIt Mjg4MDYxMjcwNWVlLzEvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTItMjg4MDYxMjcwNWVl LzEvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBTJU+xY BU4nqyvcINp1Se6Iq9/ekUe3CkGQrgkbfdgt/NWnqXABrxF6PLLdcUVYl/EvUsuX anrD/9SaXDKJh6j5kQooZN9rnAWg1fr3eox4l6aCi7SYmbNKZtRrsCT6lUvcTidR O9+ZklIIrrxfv7saUWYZWUYOty6xkC1aU0XKZMBsFzeq2R1gPCZ2C4LSaYF3dcZw dzBmD+70o2sr7e72j/4kIeuA438b9zTBB7h5xjGdycaFdRa/KnAhsbt1rCxvW0es jG+wWjYBx2B0wQty1aUNmgjksQAiS9AbXy/wujYjX9lBEPkLJ8/3DfLQp1QTQs2q I3erxajCAut67Q== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:47 2026 by rpki-client