This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft File: 1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json) Hash identifier: cq9tbSYdidjxNBHV9/JHfGzFuqlw9VAvqh9eJwYXIOM= Subject key identifier: 6B:A5:2B:91:49:DD:C7:FE:7D:CF:4A:69:BA:36:4D:9D:37:71:3C:EB Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615 Certificate serial: 019BF53E471BC7DFBBC29857057AD15F2A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 13:00:57 +0000 Manifest this update: Sun 25 Jan 2026 13:00:57 +0000 Manifest next update: Mon 26 Jan 2026 13:00:57 +0000 Files and hashes: 1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: 62nPD6FtKdjwF6ymwrc0Smufxt9Oyi10ceraEEtQnhA=) 2: 5yW1J3G-SRoAia8ARctoGLWzIYc.roa (hash: X09RAO+Iokxl6DD0+XywUvUr2qss8psh9a8kzzRJ8CA=) 3: BuRUOF7mMOX9LaFv1V3QhA-5u7w.roa (hash: Jk587wQ/RfxSBQigyNcTI8jkJxFSiSHzC0v2gfYkHEo=) 4: KnVR_9VrWrMYjNqmZyI3AyOyCfQ.roa (hash: smZSmUpd6ByBf72zK69AbaDDhM3Jk9l+boOyjSHXOmU=) 5: RIk8mcO0XUHeY1yE3bLpyK41RDc.roa (hash: 7ot83Q70csEm6+GFN6TqnACE6Bsk3KoPtGK0mmsksq0=) 6: UCM287_6vaVTmxRbaeLhFXJu-zI.roa (hash: Dd8R2yXONvmf0J4ib+h5UGhtmlZ7wExXG0YcP5XCyOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:47:1b:c7:df:bb:c2:98:57:05:7a:d1:5f:2a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb79c26f31575345159c840ed278a878a9256615 Validity Not Before: Jan 25 13:00:57 2026 GMT Not After : Jan 26 13:00:57 2026 GMT Subject: CN=6ba52b9149ddc7fe7dcf4a69ba364d9d37713ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bf:c9:d7:5b:f2:1c:63:1e:90:d3:85:1c:cc: fa:b4:31:e4:cd:60:e6:49:cb:b4:bf:5d:19:2b:32: 08:b7:14:2a:06:be:2e:5d:d8:f0:b9:7f:dd:c6:b0: 56:4c:36:a0:60:09:a2:80:d5:8b:01:35:1f:76:f5: 0a:b9:f7:f1:94:20:38:16:d3:c6:71:60:ac:ab:98: cf:26:34:a8:5d:02:59:c5:bf:a3:ff:c8:aa:12:52: 00:37:fa:b9:ad:ed:04:9f:1d:8b:9b:89:36:49:06: 52:a5:1c:21:74:93:4d:03:3d:63:33:8c:06:05:31: ad:5c:c9:bd:d5:3b:b7:95:c6:ab:f9:0b:ce:d4:2a: 0e:45:5f:f6:a4:da:5d:d5:e1:30:b6:6a:7e:e9:58: 05:7c:9e:9b:52:dd:33:6d:bd:2a:50:52:ee:42:7a: 66:38:58:92:8b:56:81:fc:1d:78:2e:26:69:bc:79: 7f:1e:4f:9e:b7:38:ee:f9:c0:ce:dc:be:ad:4f:5d: f8:eb:b4:ae:90:64:46:46:90:c0:26:c4:46:93:11: c5:2f:a2:db:4f:bc:96:d0:d3:a6:63:3a:bd:91:94: 50:a4:71:39:72:ea:8f:0a:78:58:87:ac:83:26:63: 16:84:4a:18:f6:30:4e:11:92:43:c7:af:e6:92:82: be:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A5:2B:91:49:DD:C7:FE:7D:CF:4A:69:BA:36:4D:9D:37:71:3C:EB X509v3 Authority Key Identifier: keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d8:2c:34:7d:1f:19:4c:c4:04:50:61:c0:64:bf:a4:bf:d1: eb:fa:4d:58:b0:df:ce:64:e3:33:60:5b:b6:0b:fe:4f:61:68: 8b:06:ef:06:8c:2b:de:e2:b7:af:e2:c2:38:44:64:ef:33:6a: 38:57:fc:04:d1:74:30:43:0d:be:69:be:f5:a4:df:1a:2b:04: 54:b8:04:66:e8:0e:a7:59:d4:34:7c:6e:47:e0:f5:f2:77:86: 7e:88:3c:72:90:47:6c:d7:5b:11:c2:e3:98:15:c4:b4:27:83: ac:28:d3:db:ef:b8:05:c5:c1:c7:8c:16:ec:31:f3:93:d2:c2: eb:b6:41:56:ff:8e:ff:ba:99:47:84:19:54:cc:ac:38:74:f3: 80:af:a7:cc:a7:5d:b3:3f:47:20:70:84:b5:6c:c2:d4:72:8e: a6:6a:67:b2:28:6e:0a:c3:9a:46:55:7c:7b:0b:57:17:69:38: 41:4d:35:e1:bb:16:ac:40:ca:0c:90:01:1c:ab:e9:73:91:63: 83:9e:98:d1:de:6e:66:3e:7a:92:36:f3:f4:43:37:7f:f4:64: 08:75:86:aa:b0:8d:a5:29:38:c4:29:0c:36:89:71:3c:c6:02: 76:e0:13:d8:98:d9:a0:8e:98:c6:05:00:d4:cb:de:2b:a3:75: 38:d4:b4:c0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv1Pkcbx9+7wphXBXrRXyobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzljMjZmMzE1NzUzNDUxNTljODQwZWQyNzhhODc4YTky NTY2MTUwHhcNMjYwMTI1MTMwMDU3WhcNMjYwMTI2MTMwMDU3WjAzMTEwLwYDVQQD Eyg2YmE1MmI5MTQ5ZGRjN2ZlN2RjZjRhNjliYTM2NGQ5ZDM3NzEzY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47/J11vyHGMekNOFHMz6tDHkzWDm Scu0v10ZKzIItxQqBr4uXdjwuX/dxrBWTDagYAmigNWLATUfdvUKuffxlCA4FtPG cWCsq5jPJjSoXQJZxb+j/8iqElIAN/q5re0Enx2Lm4k2SQZSpRwhdJNNAz1jM4wG BTGtXMm91Tu3lcar+QvO1CoORV/2pNpd1eEwtmp+6VgFfJ6bUt0zbb0qUFLuQnpm OFiSi1aB/B14LiZpvHl/Hk+etzju+cDO3L6tT13467SukGRGRpDAJsRGkxHFL6Lb T7yW0NOmYzq9kZRQpHE5cuqPCnhYh6yDJmMWhEoY9jBOEZJDx6/mkoK+ZQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGulK5FJ3cf+fc9Kabo2TZ03cTzrMB8GA1UdIwQY MBaAFPt5wm8xV1NFFZyEDtJ4qHipJWYVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zbkNiekZYVTBVVm5JUU8wbmlvZUtrbFpoVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2Vh LWJkMzdkYTBlNDQ3Yy8xLzEtM25DYnpGWFUwVVZuSVFPMG5pb2VLa2xaaFUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzgwLzEyZDY5MS0zN2E0LTRiMTUtYTdlYS1iZDM3ZGEwZTQ0 N2MvMS8xLTNuQ2J6RlhVMFVWbklRTzBuaW9lS2tsWmhVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNgs NH0fGUzEBFBhwGS/pL/R6/pNWLDfzmTjM2Bbtgv+T2FoiwbvBowr3uK3r+LCOERk 7zNqOFf8BNF0MEMNvmm+9aTfGisEVLgEZugOp1nUNHxuR+D18neGfog8cpBHbNdb EcLjmBXEtCeDrCjT2++4BcXBx4wW7DHzk9LC67ZBVv+O/7qZR4QZVMysOHTzgK+n zKddsz9HIHCEtWzC1HKOpmpnsihuCsOaRlV8ewtXF2k4QU014bsWrEDKDJABHKvp c5Fjg56Y0d5uZj56kjbz9EM3f/RkCHWGqrCNpSk4xCkMNolxPMYCduAT2JjZoI6Y xgUA1MveK6N1ONS0wA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:49 2026 by rpki-client