This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json) Hash identifier: UGm6uiu23gkv8WN7JiVehJ9eO6h0rq1iST6H+5UHCL8= Subject key identifier: 4E:C6:B6:2C:04:6E:F3:72:49:56:8C:A5:0E:DF:C5:30:CC:DB:F7:77 Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4 Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4 Certificate serial: 019BF574F2076F7299378C4A5C8F955284C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft Manifest number: 140E Signing time: Sun 25 Jan 2026 14:00:40 +0000 Manifest this update: Sun 25 Jan 2026 14:00:40 +0000 Manifest next update: Mon 26 Jan 2026 14:00:40 +0000 Files and hashes: 1: 1-SU5TbgAHR8MgakYLaYjjUFQf8c.roa (hash: +sShATexn1CpGL3qVUaN2Cdv5TDMeXUkKBe7OdFbvpU=) 2: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: 35yniv2Ue09LfDNi/GWbHS+Pufv2jsGxo9Iyx7fsjfk=) 3: z92krxSw-hPFAOTzqyVkWwbmwSQ.roa (hash: UmaQR3RHLDeTPrQrX1Vr4JMThGImksq/AjUcliH2e2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:f2:07:6f:72:99:37:8c:4a:5c:8f:95:52:84:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4 Validity Not Before: Jan 25 14:00:40 2026 GMT Not After : Jan 26 14:00:40 2026 GMT Subject: CN=4ec6b62c046ef37249568ca50edfc530ccdbf777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:5a:94:2f:93:1c:d2:e5:b7:de:7a:6e:55: c6:19:ef:1b:ba:36:1d:ad:14:86:81:a8:90:f3:e7: f1:7f:91:58:af:43:16:1f:ad:52:73:62:09:d9:f8: 56:e5:19:a9:95:e3:74:59:1e:b9:f9:af:1f:15:8b: 9a:6c:a5:4a:f9:ce:9d:24:c7:f4:8f:32:07:f1:56: b0:70:d0:0e:7e:c6:05:4a:f0:b1:06:38:f5:20:f3: 79:a6:f2:b7:dd:2d:bc:14:44:f9:90:60:1e:ca:50: 3c:34:7b:6f:8b:aa:1f:ce:23:77:99:ca:8e:62:93: bc:81:9a:97:7e:da:2f:5a:11:85:e9:52:a8:9e:c7: d8:c4:c3:81:b7:e1:fd:ce:87:c2:f5:65:56:f6:00: c6:4e:d7:73:8f:45:15:0d:8e:0e:ad:20:d3:fc:08: db:ec:07:bd:ce:ed:8a:be:36:6f:68:d0:76:2c:fc: 0b:1c:b2:c9:d2:63:bc:e0:4c:d9:5e:7d:c6:74:eb: 4e:8d:4d:73:39:ed:88:e9:57:8c:97:ed:55:46:9e: 92:eb:d4:9b:60:1b:21:5c:d2:b7:a5:5a:55:c9:b2: cb:8e:69:25:b6:1a:ba:92:24:8c:e6:82:99:36:52: b7:22:d8:c3:27:5a:cd:e8:9e:93:3c:cd:01:2a:2f: f2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C6:B6:2C:04:6E:F3:72:49:56:8C:A5:0E:DF:C5:30:CC:DB:F7:77 X509v3 Authority Key Identifier: keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c9:a1:cd:3c:22:d2:15:05:7d:60:8c:d5:3a:7e:33:df:45: 10:df:b1:df:1e:fa:31:33:93:13:71:e7:54:b4:b4:3d:75:d5: 27:e2:ec:63:43:16:ff:2c:82:94:15:72:ee:8f:d0:93:ce:06: 45:a9:40:23:57:4c:88:6c:3b:39:50:83:4e:c0:52:88:a6:a6: 30:93:27:b4:94:de:41:d8:e8:6c:65:1a:d8:0e:c4:d1:a4:a2: e9:12:d9:e2:63:29:6e:15:bd:82:0c:6d:5f:5f:0c:3b:a8:3b: 09:e7:a8:23:5d:5c:17:20:50:01:2f:61:3d:c8:9a:b1:03:1a: 19:21:70:28:69:a6:d1:82:44:78:19:3c:ed:e2:e7:b9:9f:d9: 79:43:7b:02:9a:9f:81:5b:94:c1:79:3b:32:91:fd:cc:d8:ee: d3:a1:ff:d1:39:ed:87:bf:a3:da:46:05:96:d2:af:09:7e:a6: 68:b7:7b:a0:5c:2a:bb:e0:8c:2f:3f:7a:f2:5d:a4:3a:1c:fb: 19:9d:17:bc:5f:22:5c:44:33:c1:83:e6:26:5d:3b:f8:82:ce: 35:aa:93:a3:8b:6a:fe:91:6c:42:99:c5:b6:ff:ec:d4:8e:51: 13:8d:bd:b5:e8:0d:59:8e:dc:40:34:95:1d:da:f9:da:c5:99: 26:df:fd:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dPIHb3KZN4xKXI+VUoTGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOTA0MTU1ZWUzYWNmZTNmZWE4YmJmZWU4NmU5N2M1OGM4 OTkxZjQwHhcNMjYwMTI1MTQwMDQwWhcNMjYwMTI2MTQwMDQwWjAzMTEwLwYDVQQD Eyg0ZWM2YjYyYzA0NmVmMzcyNDk1NjhjYTUwZWRmYzUzMGNjZGJmNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6NalC+THNLlt956blXGGe8bujYd rRSGgaiQ8+fxf5FYr0MWH61Sc2IJ2fhW5RmpleN0WR65+a8fFYuabKVK+c6dJMf0 jzIH8VawcNAOfsYFSvCxBjj1IPN5pvK33S28FET5kGAeylA8NHtvi6ofziN3mcqO YpO8gZqXftovWhGF6VKonsfYxMOBt+H9zofC9WVW9gDGTtdzj0UVDY4OrSDT/Ajb 7Ae9zu2KvjZvaNB2LPwLHLLJ0mO84EzZXn3GdOtOjU1zOe2I6VeMl+1VRp6S69Sb YBshXNK3pVpVybLLjmklthq6kiSM5oKZNlK3ItjDJ1rN6J6TPM0BKi/y8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7GtiwEbvNySVaMpQ7fxTDM2/d3MB8GA1UdIwQY MBaAFN+QQVXuOs/j/qi7/uhul8WMiZH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80NDJlMTctNDE5OC00MzViLTk2ZjQt NjQ2N2Y0NGI0M2JmLzEvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS80NDJlMTctNDE5OC00MzViLTk2ZjQtNjQ2N2Y0NGI0M2Jm LzEvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcmhzTwi 0hUFfWCM1Tp+M99FEN+x3x76MTOTE3HnVLS0PXXVJ+LsY0MW/yyClBVy7o/Qk84G RalAI1dMiGw7OVCDTsBSiKamMJMntJTeQdjobGUa2A7E0aSi6RLZ4mMpbhW9ggxt X18MO6g7CeeoI11cFyBQAS9hPciasQMaGSFwKGmm0YJEeBk87eLnuZ/ZeUN7Apqf gVuUwXk7MpH9zNju06H/0Tnth7+j2kYFltKvCX6maLd7oFwqu+CMLz968l2kOhz7 GZ0XvF8iXEQzwYPmJl07+ILONaqTo4tq/pFsQpnFtv/s1I5RE429tegNWY7cQDSV Hdr52sWZJt/92Q== -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:42 2026 by rpki-client