This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft File: 3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft (raw, json) Hash identifier: es2NBJlhESrDlR2zd1xrbCZbmjwVvDXRzG7Vjb+/wss= Subject key identifier: 36:8E:CA:70:37:FB:97:04:20:A1:86:CD:29:A0:FB:68:36:D2:71:CC Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Certificate serial: 019BF91B85832D42675F5885C8B399A6B219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 07:01:28 +0000 Manifest this update: Mon 26 Jan 2026 07:01:28 +0000 Manifest next update: Tue 27 Jan 2026 07:01:28 +0000 Files and hashes: 1: 2JMB4vX5_LWb8Di0KSFc_SxsfMQ.roa (hash: dw7y8zA3sA5szHuqDv2uyqn6EpUQJ2K7C7ypgd+rvIE=) 2: 3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl (hash: uj1yxkhDWU3RQx4WjS8JYxirNG4QjSCbD/iOnQjqsoY=) 3: CswGKxkqLF2K56RMZcAVfe9a0EU.roa (hash: hewKf3yw07raHqllDTQ2zpeQ/c61PGbRWAmkSyR4Mm4=) 4: VWgMGoCtSQiDf6Oxqso0znZVdkg.roa (hash: cES9lyT0GA0HJi+kOwho+MFDqONbyPHoFudSfF39z3o=) 5: YASHHhVdIkN4neMHuFamS3yuAUc.roa (hash: S1iGddEvlw+wRojrklSWL7s8nzR3Q8VGgYslXWevRa8=) 6: b6n89VnFa6q8VXBafEvSx4WopXw.roa (hash: 98DSxjPdzxUaiNoEdZnwgLFO2xgbZNgVeSk7tVbYXbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:85:83:2d:42:67:5f:58:85:c8:b3:99:a6:b2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Validity Not Before: Jan 26 07:01:28 2026 GMT Not After : Jan 27 07:01:28 2026 GMT Subject: CN=368eca7037fb970420a186cd29a0fb6836d271cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ff:5c:a6:0f:bf:f8:84:77:e4:f8:0d:bd:3d: bd:ee:3c:2a:2b:70:bc:60:58:57:20:af:c4:fe:69: 1d:19:99:1e:19:06:bf:0c:28:85:d5:f8:fe:ce:dc: e0:61:44:70:bc:43:e6:b6:13:56:c2:84:1f:ec:d3: 8f:0e:60:99:92:73:ca:6d:5d:1d:0d:2f:f7:ca:e1: 22:da:cd:ce:38:d5:00:12:96:9e:b5:fa:69:8b:b6: f9:f8:65:90:c2:a7:f3:d9:f8:39:59:5b:cb:ff:89: 66:0a:cb:ab:f5:9e:ab:90:41:b5:2a:d1:c2:58:4e: ad:0e:d1:84:50:28:c3:95:ed:81:e8:4f:a7:51:08: 65:32:10:52:eb:38:76:20:bf:52:0f:09:88:5c:f3: e1:52:0e:77:1d:a8:cf:4f:f9:80:27:b8:02:5c:12: 9c:bb:e2:49:62:4d:32:bd:2d:b7:9a:b7:58:dc:ca: 17:4a:8f:32:7a:77:3c:26:32:0c:55:d7:b9:9d:dd: 37:81:f0:65:56:d0:3e:3b:21:00:c4:76:1b:93:df: 25:e7:84:a1:0b:1b:dc:54:f3:4a:ab:bc:8d:de:b5: e9:39:f8:03:4a:77:12:d9:82:13:99:22:02:5f:ab: 82:5c:f0:94:fa:57:2a:3b:4e:5c:b7:d1:65:99:d9: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8E:CA:70:37:FB:97:04:20:A1:86:CD:29:A0:FB:68:36:D2:71:CC X509v3 Authority Key Identifier: keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:77:9f:0d:4e:4b:82:1c:eb:8a:56:14:b3:ba:26:18:fc:ad: 8f:ad:b1:d2:5a:41:fe:f2:0e:93:b1:6c:10:45:4f:7e:09:01: df:da:8e:1a:49:fa:a4:a5:c5:07:f5:61:4a:bf:2b:2c:81:46: 0a:d3:8c:d6:b7:82:83:d6:ee:95:54:2d:d9:62:16:69:6f:d8: c9:a9:fd:21:07:4b:7a:c6:03:90:fa:89:27:a5:57:84:3f:5d: 4d:86:db:49:7e:5f:57:ad:77:77:a3:c1:8d:16:f8:04:b0:db: 11:04:36:b0:a2:61:8e:47:c9:98:c9:2e:bd:6a:0b:3f:0e:7f: 77:3c:e2:34:38:16:65:48:64:32:07:34:6c:29:2d:03:d5:ee: de:7c:de:6e:66:94:9d:68:46:f3:d8:a9:6e:6a:12:ed:4e:52: 9a:e6:15:b1:bb:f8:13:99:ed:69:02:bb:93:95:8e:41:82:b1: 77:e2:4c:3c:02:72:5c:45:bb:99:59:18:3f:37:54:71:44:01: 56:25:25:1c:ad:dd:a9:74:a6:17:09:6f:c7:23:8c:62:32:24: 0b:00:02:28:39:33:39:a5:cd:9b:6b:21:b0:8b:db:8d:43:41: 28:9e:52:db:25:6d:49:fb:4b:87:30:8d:93:d8:04:c0:12:d7: b2:e4:cf:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G4WDLUJnX1iFyLOZprIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNmVkMDU3OWMzZmQyNTM1OTdlYzgyZjA5MzkxMTFiYTlk OGM4OGQwHhcNMjYwMTI2MDcwMTI4WhcNMjYwMTI3MDcwMTI4WjAzMTEwLwYDVQQD EygzNjhlY2E3MDM3ZmI5NzA0MjBhMTg2Y2QyOWEwZmI2ODM2ZDI3MWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8f9cpg+/+IR35PgNvT297jwqK3C8 YFhXIK/E/mkdGZkeGQa/DCiF1fj+ztzgYURwvEPmthNWwoQf7NOPDmCZknPKbV0d DS/3yuEi2s3OONUAEpaetfppi7b5+GWQwqfz2fg5WVvL/4lmCsur9Z6rkEG1KtHC WE6tDtGEUCjDle2B6E+nUQhlMhBS6zh2IL9SDwmIXPPhUg53HajPT/mAJ7gCXBKc u+JJYk0yvS23mrdY3MoXSo8yenc8JjIMVde5nd03gfBlVtA+OyEAxHYbk98l54Sh CxvcVPNKq7yN3rXpOfgDSncS2YITmSICX6uCXPCU+lcqO05ct9FlmdlagQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaOynA3+5cEIKGGzSmg+2g20nHMMB8GA1UdIwQY MBaAFN5u0FecP9JTWX7ILwk5ERup2MiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAt ODM4NmU3MGJkYzU4LzEvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAtODM4NmU3MGJkYzU4 LzEvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnefDU5L ghzrilYUs7omGPytj62x0lpB/vIOk7FsEEVPfgkB39qOGkn6pKXFB/VhSr8rLIFG CtOM1reCg9bulVQt2WIWaW/Yyan9IQdLesYDkPqJJ6VXhD9dTYbbSX5fV613d6PB jRb4BLDbEQQ2sKJhjkfJmMkuvWoLPw5/dzziNDgWZUhkMgc0bCktA9Xu3nzebmaU nWhG89ipbmoS7U5SmuYVsbv4E5ntaQK7k5WOQYKxd+JMPAJyXEW7mVkYPzdUcUQB ViUlHK3dqXSmFwlvxyOMYjIkCwACKDkzOaXNm2shsIvbjUNBKJ5S2yVtSftLhzCN k9gEwBLXsuTPdA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:39 2026 by rpki-client