This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json) Hash identifier: Wsk2+Uto6bAUarSYXIQbjSPgd76+4D2SSyIeJA4NqbE= Subject key identifier: D0:FB:50:D5:8B:A8:63:1F:2A:D9:97:13:DB:30:64:7F:A3:04:EF:19 Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8 Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8 Certificate serial: 019BF2E2391815E5436470968AC697863526 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft Manifest number: 14CD Signing time: Sun 25 Jan 2026 02:01:10 +0000 Manifest this update: Sun 25 Jan 2026 02:01:10 +0000 Manifest next update: Mon 26 Jan 2026 02:01:10 +0000 Files and hashes: 1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: TFFvaaozHY2n/L9U/TSctXjeHKamzTQ1xFQYhPLIy2w=) 2: V7cnWr0yTia_O83ZQ8f1SQpxbe0.roa (hash: V0l2BUlDEC1rED6uk06tkHISjZ000fzVHFtSK8PSDC8=) 3: g6jJ9UyqD8gZUMIuEEYXLhGmn90.roa (hash: Vvh+6n3XDAJwELvj5IwGzupocif24c58GMylsOXJ+aM=) 4: i_ltRwYEioUiSqM_N0IGaAXBwww.roa (hash: i9BjibDTOdKVln71YPwL1G7OdUxiUoFhFjozV67L+Z0=) 5: wQFCgIWKeHWn0AoEBFccOjnC2TU.roa (hash: JB49W9zliA5p5Mlat2myJvjej3ubOs2xynZ5e8qh7Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:39:18:15:e5:43:64:70:96:8a:c6:97:86:35:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8 Validity Not Before: Jan 25 02:01:10 2026 GMT Not After : Jan 26 02:01:10 2026 GMT Subject: CN=d0fb50d58ba8631f2ad99713db30647fa304ef19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:37:c0:d0:47:43:13:83:cd:4a:b6:70:67:a4: 31:4e:fe:d9:61:3a:23:5a:ab:ed:3f:0b:ef:a9:f6: d8:ab:2f:8d:37:2a:70:87:ac:52:dc:b0:d6:31:e5: f4:63:0c:1a:af:6a:46:0b:e2:f8:7a:f1:51:27:8b: b2:3e:41:1d:f3:b6:05:6f:7f:1a:15:9c:06:eb:c9: 49:a3:7f:c7:b4:aa:30:7c:fe:5b:ef:bd:5f:50:db: 21:a9:50:46:9f:86:9a:fb:04:1b:62:76:c8:24:a7: d9:6b:83:19:5d:2e:33:7d:85:ab:a9:11:c9:6e:16: 11:58:d6:57:42:fa:17:3d:fa:1a:b1:be:ab:3c:5b: 55:31:e5:86:3e:98:91:cb:a8:61:81:bc:28:23:35: 7d:af:0f:3a:82:41:df:48:98:28:f2:56:07:34:6d: 26:49:a2:99:92:e3:91:72:34:34:3e:95:42:e1:65: 15:52:21:1c:cc:9f:a3:f9:20:5d:81:88:fa:ed:93: 0f:96:be:99:da:9e:ba:35:a8:02:80:19:85:35:ad: 5d:6a:f1:e2:58:ad:6d:d9:21:b2:3d:e2:fc:a5:10: 85:87:31:fd:9c:bb:3d:16:b2:f5:70:82:5d:3f:31: e7:e9:70:46:98:cd:84:33:b7:46:93:9b:53:ce:ce: b7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FB:50:D5:8B:A8:63:1F:2A:D9:97:13:DB:30:64:7F:A3:04:EF:19 X509v3 Authority Key Identifier: keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:54:2d:fc:5d:21:74:92:c9:a1:aa:53:c4:c3:45:7d:fc:14: 9a:1a:8a:55:37:87:0e:9c:df:58:2b:4d:5b:64:2a:c7:69:3d: 84:f0:df:a5:33:27:e4:c9:8d:f7:a5:88:f3:89:2f:fa:48:42: 2c:76:7b:73:6d:85:7d:29:04:3f:23:6c:22:4a:9f:f5:6f:7d: a8:37:a9:a0:77:02:52:07:9a:2e:e9:9e:db:82:ca:06:ac:da: 30:d4:48:9f:62:d4:78:40:c4:af:4a:86:8a:4d:e4:9d:8f:e3: 7d:ea:5f:20:88:b2:8e:35:b9:1b:df:13:2b:dc:f3:74:73:95: d7:5b:38:13:8a:e8:c5:b9:30:6e:23:76:90:92:96:45:42:d9: 1f:7a:4a:61:39:6b:c6:27:c4:07:16:5e:23:dc:fb:0a:15:4f: 01:18:37:f0:6c:6f:73:e2:bf:88:1e:72:7f:27:45:9b:73:ed: cf:2f:1e:cf:bb:55:58:a4:ad:3f:69:44:ed:1c:66:4b:00:c9: 4e:aa:27:93:79:b2:af:63:fe:ec:52:55:79:c6:67:24:f0:ca: c6:90:c5:b5:08:5b:b3:60:33:aa:c4:de:41:56:fb:bb:a4:04: f8:7c:45:ef:99:e9:be:9a:ed:f8:9f:42:af:69:56:90:1f:40: 31:1b:24:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4jkYFeVDZHCWisaXhjUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZmFlN2Q0ZTY5ZDQyZTRmNGM5NWQ5OWY0ODJiOWE5NDRk YmVmYzgwHhcNMjYwMTI1MDIwMTEwWhcNMjYwMTI2MDIwMTEwWjAzMTEwLwYDVQQD EyhkMGZiNTBkNThiYTg2MzFmMmFkOTk3MTNkYjMwNjQ3ZmEzMDRlZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TfA0EdDE4PNSrZwZ6QxTv7ZYToj WqvtPwvvqfbYqy+NNypwh6xS3LDWMeX0Ywwar2pGC+L4evFRJ4uyPkEd87YFb38a FZwG68lJo3/HtKowfP5b771fUNshqVBGn4aa+wQbYnbIJKfZa4MZXS4zfYWrqRHJ bhYRWNZXQvoXPfoasb6rPFtVMeWGPpiRy6hhgbwoIzV9rw86gkHfSJgo8lYHNG0m SaKZkuORcjQ0PpVC4WUVUiEczJ+j+SBdgYj67ZMPlr6Z2p66NagCgBmFNa1davHi WK1t2SGyPeL8pRCFhzH9nLs9FrL1cIJdPzHn6XBGmM2EM7dGk5tTzs63dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFND7UNWLqGMfKtmXE9swZH+jBO8ZMB8GA1UdIwQY MBaAFNz659TmnULk9MldmfSCualE2+/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYt MzcyNzNkZjM5MDFjLzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYtMzcyNzNkZjM5MDFj LzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVQt/F0h dJLJoapTxMNFffwUmhqKVTeHDpzfWCtNW2Qqx2k9hPDfpTMn5MmN96WI84kv+khC LHZ7c22FfSkEPyNsIkqf9W99qDepoHcCUgeaLume24LKBqzaMNRIn2LUeEDEr0qG ik3knY/jfepfIIiyjjW5G98TK9zzdHOV11s4E4roxbkwbiN2kJKWRULZH3pKYTlr xifEBxZeI9z7ChVPARg38Gxvc+K/iB5yfydFm3Ptzy8ez7tVWKStP2lE7RxmSwDJ Tqonk3myr2P+7FJVecZnJPDKxpDFtQhbs2AzqsTeQVb7u6QE+HxF75npvprt+J9C r2lWkB9AMRskkw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:46 2026 by rpki-client