This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json) Hash identifier: CkiGNnFvt6h1b92/zVNbB9+Cqsbfyr0CQkIPq2MPjeQ= Subject key identifier: 13:69:54:80:8B:A7:AF:54:1B:10:94:FF:74:5D:B1:A1:95:F3:BE:A3 Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48 Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48 Certificate serial: 019BF72D0B5053CCFAECFFF8F5911F4B419D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 22:01:22 +0000 Manifest this update: Sun 25 Jan 2026 22:01:22 +0000 Manifest next update: Mon 26 Jan 2026 22:01:22 +0000 Files and hashes: 1: IdCieT_FXqDI14dT8duUpcsBKXs.roa (hash: WZwdbmj4EPfIzjAKG+pkXmeMhYN6QkPRXsW2FQB2pGA=) 2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: scNV4gZ4sFbzk7Mq5ijOINLLnXqoDgPrz3Is6ewFmZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:0b:50:53:cc:fa:ec:ff:f8:f5:91:1f:4b:41:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48 Validity Not Before: Jan 25 22:01:22 2026 GMT Not After : Jan 26 22:01:22 2026 GMT Subject: CN=136954808ba7af541b1094ff745db1a195f3bea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:5c:a9:59:0f:0e:da:42:f4:6c:1b:a6:0c: f6:7a:9c:64:89:b9:e1:36:23:57:48:55:01:ce:e0: 40:46:8b:f7:70:bf:5a:ff:f5:c3:74:5f:c6:c0:3a: 2a:30:b9:b2:5e:9f:9b:62:4e:bd:76:5b:d3:eb:5b: 03:10:d9:73:4d:95:3d:af:14:cb:3e:a2:ba:7c:fb: a8:d9:28:24:67:33:fa:68:bb:18:84:c3:dd:8d:b7: de:dc:77:22:e0:81:aa:46:6c:a8:a4:56:66:54:df: 2b:d4:43:0f:0d:82:6d:8a:c9:70:3d:a0:0e:e0:be: 4c:e5:04:99:d5:1b:61:a7:3f:02:24:d9:69:c9:2a: 1a:5c:c8:b3:58:c8:78:8c:85:27:f0:ee:34:f0:1c: f6:02:34:58:a8:73:e1:b2:33:25:41:3d:af:1e:51: 3d:fa:09:49:30:ea:f8:ab:9b:a8:0b:4a:07:3a:7c: 4b:02:78:5e:fb:c4:d4:c7:3d:35:76:3e:fd:cd:c3: fe:2a:8d:39:2e:b3:16:99:b5:20:ab:21:31:f8:c7: d8:fa:7a:83:ad:4a:16:f8:b6:4c:7e:19:19:d3:cc: dd:57:e1:22:4e:60:e5:d4:1c:82:27:45:13:99:83: f5:df:42:e4:53:b1:44:b4:00:e6:ae:85:94:60:b7: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:69:54:80:8B:A7:AF:54:1B:10:94:FF:74:5D:B1:A1:95:F3:BE:A3 X509v3 Authority Key Identifier: keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:65:84:3e:23:f2:2a:32:2c:01:0a:99:d2:10:9d:95:96:58: eb:b4:7a:72:e2:0d:60:da:89:93:85:58:82:2c:47:e7:7f:a2: 89:0e:eb:8b:d6:be:f9:c5:62:7b:a0:a8:3b:b5:81:ea:0f:0b: d5:9c:c9:30:61:5f:97:4e:0d:e2:82:b1:64:d0:f1:77:16:e4: 14:54:7e:94:e6:1e:52:0b:f2:fb:a1:a9:c1:5d:a0:a1:6f:a0: de:bd:3b:fc:ed:91:81:66:2b:79:a8:5a:27:f0:17:b0:cf:9a: f7:6b:64:44:ad:7d:02:e9:26:25:61:b3:b7:c0:3c:3e:42:26: 31:ce:42:48:4a:5d:d2:3a:6a:1e:a0:5e:a1:51:00:63:c4:1f: 3a:72:18:6f:0d:49:7e:d5:94:46:8e:b1:f6:9c:58:89:8f:00: a8:53:66:a9:f6:7c:14:a5:76:ac:74:a9:8e:82:c1:78:70:01: e4:4c:af:4f:53:c3:63:5e:6b:e2:ab:9c:2b:1a:7f:3b:90:67: cb:3f:07:28:96:76:8e:87:a9:f7:f0:4a:a1:94:e1:ba:f3:16: 22:60:6b:32:a0:5e:7c:27:30:bf:1a:d5:9c:95:01:1a:dc:98: 22:e6:d8:0a:f7:c5:c0:e0:c0:98:63:d2:54:1c:1f:62:ae:e7: 01:43:01:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LQtQU8z67P/49ZEfS0GdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2ZmNThkMTlhZjEwYmRhNGZjYjBjZjMxZTU4ZGUwOTRi YmJiNDgwHhcNMjYwMTI1MjIwMTIyWhcNMjYwMTI2MjIwMTIyWjAzMTEwLwYDVQQD EygxMzY5NTQ4MDhiYTdhZjU0MWIxMDk0ZmY3NDVkYjFhMTk1ZjNiZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgVcqVkPDtpC9Gwbpgz2epxkibnh NiNXSFUBzuBARov3cL9a//XDdF/GwDoqMLmyXp+bYk69dlvT61sDENlzTZU9rxTL PqK6fPuo2SgkZzP6aLsYhMPdjbfe3Hci4IGqRmyopFZmVN8r1EMPDYJtislwPaAO 4L5M5QSZ1Rthpz8CJNlpySoaXMizWMh4jIUn8O408Bz2AjRYqHPhsjMlQT2vHlE9 +glJMOr4q5uoC0oHOnxLAnhe+8TUxz01dj79zcP+Ko05LrMWmbUgqyEx+MfY+nqD rUoW+LZMfhkZ08zdV+EiTmDl1ByCJ0UTmYP130LkU7FEtADmroWUYLfpvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNpVICLp69UGxCU/3RdsaGV876jMB8GA1UdIwQY MBaAFMd/9Y0ZrxC9pPywzzHljeCUu7tIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDY2MDctMDBjOC00MDFkLWJjZmUt MGE2ZjhiMWM2NTRkLzEveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84NDY2MDctMDBjOC00MDFkLWJjZmUtMGE2ZjhiMWM2NTRk LzEveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmWEPiPy KjIsAQqZ0hCdlZZY67R6cuINYNqJk4VYgixH53+iiQ7ri9a++cVie6CoO7WB6g8L 1ZzJMGFfl04N4oKxZNDxdxbkFFR+lOYeUgvy+6GpwV2goW+g3r07/O2RgWYreaha J/AXsM+a92tkRK19AukmJWGzt8A8PkImMc5CSEpd0jpqHqBeoVEAY8QfOnIYbw1J ftWURo6x9pxYiY8AqFNmqfZ8FKV2rHSpjoLBeHAB5EyvT1PDY15r4qucKxp/O5Bn yz8HKJZ2joep9/BKoZThuvMWImBrMqBefCcwvxrVnJUBGtyYIubYCvfFwODAmGPS VBwfYq7nAUMBLQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:51:48 2026 by rpki-client