This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json) Hash identifier: 8ChxkcXnKeR8zUNNfBL+MAZFa5jRdNFvlhxX3usZln0= Subject key identifier: BC:88:FF:41:F0:83:6E:A1:3F:21:89:B6:8D:7E:35:E3:B9:E0:C6:E6 Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Certificate serial: 019BF87684F4F51FF6837645D4069F142291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft Manifest number: 0675 Signing time: Mon 26 Jan 2026 04:01:15 +0000 Manifest this update: Mon 26 Jan 2026 04:01:15 +0000 Manifest next update: Tue 27 Jan 2026 04:01:15 +0000 Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: 1vFubyaDsuJ2SSr55mtsax0OzvkM9VXohqQIeIzqFn8=) 2: NQ95q7_fBq4hFcM7C69i14yhMnM.roa (hash: ejJOBDnYVVoI5WWCPtoXZfJQheFohOE2AVvhuxDWrtI=) 3: pUGXrda-5CwDfT8dIuT70gU_mF0.roa (hash: erT2OQfqvKXCpo5RhfMrTrP52PKYM1WR0OlhH7BXo1s=) 4: zJpEN2ijfRgiPpGHtFsEVOdxvB4.roa (hash: q/PuTzWdeYcrIsP9D1aXyxve/lRb4cTeCB+ZsL9JRf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:84:f4:f5:1f:f6:83:76:45:d4:06:9f:14:22:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Validity Not Before: Jan 26 04:01:15 2026 GMT Not After : Jan 27 04:01:15 2026 GMT Subject: CN=bc88ff41f0836ea13f2189b68d7e35e3b9e0c6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e5:8e:23:e3:4a:b7:fe:d9:a5:a6:8f:0a:b4: 9f:75:6c:85:de:60:9a:d0:a7:3e:a5:df:43:92:50: a9:ca:9d:3e:40:fd:d6:d4:16:73:2a:81:a9:9c:f2: d3:dd:30:da:52:28:11:2f:ac:84:e8:31:59:69:75: 19:8f:34:80:b6:f0:f9:bc:da:1a:63:de:b8:21:74: 5a:fc:0c:aa:e1:16:6c:9b:58:5a:e1:8e:96:29:53: 71:fc:df:0d:e0:1e:1f:22:d0:54:b9:71:99:10:bd: 21:00:4a:9a:de:22:7d:62:55:f6:45:58:43:5b:c8: 83:c9:a9:62:4f:61:9f:a7:e3:12:72:70:55:1c:d3: 51:05:7f:fa:6c:fb:5c:8a:00:f4:f1:59:7b:3e:1f: 35:02:c8:06:74:75:96:fb:e5:71:93:5a:e8:8a:35: 21:68:4f:72:c2:5f:f3:69:51:78:73:b7:b3:4f:80: c4:fc:96:bc:87:d6:ab:5f:0d:68:21:45:1a:64:f4: cc:d2:4c:ac:29:c0:71:a7:0a:fa:89:f7:d2:dd:fe: fc:21:34:44:fc:07:35:d4:61:f1:4a:8a:81:f3:58: f8:7a:24:db:96:ef:51:eb:7e:cf:f3:8e:c3:cd:f1: 3c:27:7a:8a:13:ec:f8:e1:10:27:bd:aa:3f:30:f0: 1e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:88:FF:41:F0:83:6E:A1:3F:21:89:B6:8D:7E:35:E3:B9:E0:C6:E6 X509v3 Authority Key Identifier: keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:eb:12:d9:19:59:46:d4:3b:47:12:2c:46:50:5a:28:41:f5: 09:50:33:ac:c7:ee:e0:3c:5d:db:c1:b1:29:32:97:f2:6c:01: b9:85:95:ef:40:c4:26:5d:d4:7e:57:1f:bf:ae:a4:6f:25:35: 3b:c9:f6:8b:25:67:f4:d1:a8:44:a9:57:61:7c:be:01:aa:6f: e7:64:8e:c3:2d:ae:a0:86:53:b9:30:c9:07:32:cf:cf:ef:5f: df:70:0b:40:89:5a:84:4e:24:4b:63:2d:fd:2e:34:f3:e9:05: 67:dc:11:ba:68:9c:00:71:68:a9:77:02:3b:6d:34:87:1c:67: a3:2d:5f:a6:ea:e1:24:fe:e2:27:53:82:d0:a9:85:6a:17:aa: 3a:7f:b7:70:90:55:58:3d:f5:2b:43:ed:68:d3:60:4f:f1:fd: 0d:91:2b:c9:c6:d3:ef:16:33:ff:ae:0a:eb:e7:42:f0:b5:d3: 99:aa:a7:78:88:c4:77:3d:71:96:ea:37:4f:ec:ea:53:c0:e2: e8:5c:6f:4c:70:f5:ea:71:5c:27:45:6c:94:00:e6:7d:f7:ef: 10:1d:11:d1:c9:d8:64:83:27:24:99:9c:b6:ff:86:93:f9:ea: 7b:0f:92:26:5f:40:36:c1:20:c2:ce:10:d7:07:97:f9:93:6b: 38:f3:aa:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4doT09R/2g3ZF1AafFCKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGJkZTE0Njc4OTVjNmYzYTQ3MTk3ZWFjNThjYTEzYWU0 YmI3OGQwHhcNMjYwMTI2MDQwMTE1WhcNMjYwMTI3MDQwMTE1WjAzMTEwLwYDVQQD EyhiYzg4ZmY0MWYwODM2ZWExM2YyMTg5YjY4ZDdlMzVlM2I5ZTBjNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eWOI+NKt/7ZpaaPCrSfdWyF3mCa 0Kc+pd9DklCpyp0+QP3W1BZzKoGpnPLT3TDaUigRL6yE6DFZaXUZjzSAtvD5vNoa Y964IXRa/Ayq4RZsm1ha4Y6WKVNx/N8N4B4fItBUuXGZEL0hAEqa3iJ9YlX2RVhD W8iDyaliT2Gfp+MScnBVHNNRBX/6bPtcigD08Vl7Ph81AsgGdHWW++Vxk1roijUh aE9ywl/zaVF4c7ezT4DE/Ja8h9arXw1oIUUaZPTM0kysKcBxpwr6iffS3f78ITRE /Ac11GHxSoqB81j4eiTblu9R637P847DzfE8J3qKE+z44RAnvao/MPAeGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyI/0Hwg26hPyGJto1+NeO54MbmMB8GA1UdIwQY MBaAFNwL3hRniVxvOkcZfqxYyhOuS7eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEt MzFjN2ZiNDcxNWY2LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEtMzFjN2ZiNDcxNWY2 LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+sS2RlZ RtQ7RxIsRlBaKEH1CVAzrMfu4Dxd28GxKTKX8mwBuYWV70DEJl3Uflcfv66kbyU1 O8n2iyVn9NGoRKlXYXy+Aapv52SOwy2uoIZTuTDJBzLPz+9f33ALQIlahE4kS2Mt /S408+kFZ9wRumicAHFoqXcCO200hxxnoy1fpurhJP7iJ1OC0KmFaheqOn+3cJBV WD31K0PtaNNgT/H9DZErycbT7xYz/64K6+dC8LXTmaqneIjEdz1xluo3T+zqU8Di 6FxvTHD16nFcJ0VslADmfffvEB0R0cnYZIMnJJmctv+Gk/nqew+SJl9ANsEgws4Q 1weX+ZNrOPOq3A== -----END CERTIFICATE-----Generated at Mon Jan 26 12:36:41 2026 by rpki-client