This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json) Hash identifier: yLl71ltJK1EXrRZZt+s5JbHAuoNjLOd9CkXMHDKys4w= Subject key identifier: 21:76:59:D4:EA:0A:BC:25:A0:3F:33:FC:43:07:1A:E6:08:C1:AB:40 Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03 Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703 Certificate serial: 019BF80846928DDD37DF91D03E94EF2B30AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 02:00:50 +0000 Manifest this update: Mon 26 Jan 2026 02:00:50 +0000 Manifest next update: Tue 27 Jan 2026 02:00:50 +0000 Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: F1UdsHTgaIwqhuCTMeJGHAM9VeK2l0bqlzbiDmpLZEI=) 2: diKa-1w5ElMvlcPYjK3PRVqYmi4.roa (hash: ZihAuU6a+sRKBgVaTd6H1m0T3csQ2DHl/3OILvkWxBE=) 3: j0K5a5Z0hTedR5qChUo6JzL_b6Q.roa (hash: /ijeXiA6vOxG/JGy8aSyn4OKLrNeshDbn0KxzTiZZAM=) 4: wU3iW5s2Ju-Cxxy3PZUMfWT9ScI.roa (hash: KlkmKudvSISHMidCA5kmAHX0SSabbFTuv3ZobbBf/XI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:46:92:8d:dd:37:df:91:d0:3e:94:ef:2b:30:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703 Validity Not Before: Jan 26 02:00:50 2026 GMT Not After : Jan 27 02:00:50 2026 GMT Subject: CN=217659d4ea0abc25a03f33fc43071ae608c1ab40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:ad:c0:af:4b:64:3a:4d:1f:a8:81:af:a9: e3:d5:87:89:13:af:69:10:eb:d6:38:90:1c:4b:ba: 64:46:97:e3:da:8f:0b:49:01:38:b7:69:e4:09:7b: c6:05:96:df:d5:46:9b:dd:b4:c6:6a:29:34:09:9a: 47:10:5c:37:71:31:45:4f:07:f2:0a:5d:4b:15:a6: 40:36:0c:0b:22:d4:c6:2f:dc:59:f4:3f:05:a8:26: 69:50:e6:5f:e1:35:01:c1:c4:6c:1b:77:b7:88:c2: 1e:f6:62:6e:5e:51:8a:7e:b3:8b:82:a9:98:8e:af: 18:94:50:5c:e5:25:8c:ef:ac:cd:67:4c:18:ae:f7: 21:34:65:f8:39:df:ce:f4:17:22:38:4e:54:6b:e8: 73:46:e9:2e:be:4f:de:81:7b:99:1a:e0:f5:38:dd: 85:b9:bd:b0:80:15:a7:36:9a:90:9c:df:33:04:d7: 97:e0:a7:ee:9c:08:10:5b:a6:42:11:6a:6c:f4:f5: 75:21:04:b4:e1:a7:66:3c:a4:e5:e3:af:d7:5e:d4: 6f:3b:33:51:44:ae:f0:a8:5f:78:51:33:b5:ed:02: 69:fd:0a:2f:68:85:78:26:65:89:cd:db:1c:c4:db: 4e:f2:75:86:78:71:32:6a:62:95:a9:a8:db:83:5f: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:76:59:D4:EA:0A:BC:25:A0:3F:33:FC:43:07:1A:E6:08:C1:AB:40 X509v3 Authority Key Identifier: keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:67:ec:16:f2:96:db:b9:81:b4:ff:7b:a1:6f:2c:33:db:ba: 3f:92:62:22:7d:e1:2c:7a:08:59:79:06:23:d1:bd:e5:50:64: 59:52:e8:b2:51:fd:3e:1c:61:b5:b5:6f:bb:61:14:b6:96:a1: c3:d3:7f:35:8a:9b:c5:bc:ee:c5:38:33:cd:1f:e9:f9:67:5b: 17:54:cb:3b:b1:9b:80:dc:4b:c3:6a:48:8d:42:2f:9a:fd:a4: c5:7f:bb:e0:63:5a:a7:97:13:a5:0b:09:7d:fb:59:72:8a:2e: d4:02:c8:38:ec:12:f5:d5:53:73:5f:b3:c4:89:bb:13:e8:d8: 80:53:85:f4:66:30:e5:fa:04:00:c5:bd:5b:ed:cb:40:26:3b: b8:e4:f9:e9:16:4a:c4:b9:8f:ed:39:b2:f0:e2:9e:22:46:19: d4:6e:7e:28:ca:ff:6d:e3:87:a6:e4:8d:ef:e1:19:6e:11:ee: 3b:d1:4b:47:59:42:c3:24:c6:1f:c9:4f:38:76:8f:1b:a0:4f: 1b:e8:7c:e1:7e:bd:cf:9c:6f:90:ba:76:dd:df:4e:09:10:7d: 6a:05:40:8c:73:29:8c:76:97:cc:cf:d9:19:6c:72:10:4f:66: 5c:15:5d:7f:d6:84:af:d8:23:4b:b4:a6:85:b0:79:f7:4f:6f: 91:56:c5:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CEaSjd0335HQPpTvKzCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYmZiMDA0OGE4ZGE1NTZmZDlkM2RmMTA3NzQwMmY4NDNm NWQ3MDMwHhcNMjYwMTI2MDIwMDUwWhcNMjYwMTI3MDIwMDUwWjAzMTEwLwYDVQQD EygyMTc2NTlkNGVhMGFiYzI1YTAzZjMzZmM0MzA3MWFlNjA4YzFhYjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUStwK9LZDpNH6iBr6nj1YeJE69p EOvWOJAcS7pkRpfj2o8LSQE4t2nkCXvGBZbf1Uab3bTGaik0CZpHEFw3cTFFTwfy Cl1LFaZANgwLItTGL9xZ9D8FqCZpUOZf4TUBwcRsG3e3iMIe9mJuXlGKfrOLgqmY jq8YlFBc5SWM76zNZ0wYrvchNGX4Od/O9BciOE5Ua+hzRukuvk/egXuZGuD1ON2F ub2wgBWnNpqQnN8zBNeX4KfunAgQW6ZCEWps9PV1IQS04admPKTl46/XXtRvOzNR RK7wqF94UTO17QJp/QovaIV4JmWJzdscxNtO8nWGeHEyamKVqajbg1/ErQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCF2WdTqCrwloD8z/EMHGuYIwatAMB8GA1UdIwQY MBaAFNy/sASKjaVW/Z098Qd0AvhD9dcDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQt ZTA2MGI0ZmNiY2NiLzEvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQtZTA2MGI0ZmNiY2Ni LzEvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2fsFvKW 27mBtP97oW8sM9u6P5JiIn3hLHoIWXkGI9G95VBkWVLoslH9PhxhtbVvu2EUtpah w9N/NYqbxbzuxTgzzR/p+WdbF1TLO7GbgNxLw2pIjUIvmv2kxX+74GNap5cTpQsJ fftZcoou1ALIOOwS9dVTc1+zxIm7E+jYgFOF9GYw5foEAMW9W+3LQCY7uOT56RZK xLmP7Tmy8OKeIkYZ1G5+KMr/beOHpuSN7+EZbhHuO9FLR1lCwyTGH8lPOHaPG6BP G+h84X69z5xvkLp23d9OCRB9agVAjHMpjHaXzM/ZGWxyEE9mXBVdf9aEr9gjS7Sm hbB5909vkVbFPA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:25 2026 by rpki-client