This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json) Hash identifier: 0Afo0wiR51tVKzhnpbukwhNy99JGJ9o75oRHrjHKoek= Subject key identifier: FF:44:C0:21:D2:75:EB:12:EB:72:A1:A4:14:61:19:B5:53:CB:0E:65 Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f Certificate serial: 019BF4992299F97AAB72396F7680FACB76C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 10:00:35 +0000 Manifest this update: Sun 25 Jan 2026 10:00:35 +0000 Manifest next update: Mon 26 Jan 2026 10:00:35 +0000 Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: XY0sGs9z2cc7KsVD2c4kEuMkfEm5Lbp80oUHKaXJBwA=) 2: Wdloadg_jaSIWNimJpIr6kOshxY.roa (hash: xgmHkwMMNOck0R3y8/daNlcMrAkpPhMbZk/5vahLUtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:22:99:f9:7a:ab:72:39:6f:76:80:fa:cb:76:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f Validity Not Before: Jan 25 10:00:35 2026 GMT Not After : Jan 26 10:00:35 2026 GMT Subject: CN=ff44c021d275eb12eb72a1a4146119b553cb0e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:ad:28:61:28:6b:1f:28:bb:4e:4c:0f:4e: db:20:e1:44:a1:f3:71:e0:6f:73:aa:05:38:4c:28: 88:0d:12:19:10:4a:3f:9b:14:56:cf:b2:da:bb:7b: f0:5e:1c:44:06:bc:1a:54:67:11:26:6a:7b:18:6f: b6:a2:d4:66:e0:7d:26:08:93:ee:1b:cf:1e:1d:f7: 80:66:6e:ea:00:f4:f7:b3:3d:02:20:01:47:67:5b: ae:dc:09:82:f3:8f:8b:7a:f7:a1:ae:5a:92:c5:bd: f1:67:1c:60:e9:07:07:e6:18:2b:3a:3b:c3:aa:b5: da:87:70:02:56:3a:b0:41:cb:7a:86:03:17:3f:a4: d1:19:a8:aa:4c:3a:eb:9c:0d:d2:3b:35:1f:64:1a: 30:bd:80:ae:b1:57:c1:72:21:8b:e9:2e:cd:81:d6: 23:71:de:be:41:78:1a:38:a8:23:c1:2c:dd:65:bf: 37:3d:2c:44:23:c0:81:89:f3:7f:37:17:de:4e:18: 0c:22:90:e4:db:95:33:81:5f:11:c4:28:9e:45:5d: 16:4d:d1:bd:24:84:77:d4:66:8f:bd:08:5f:b4:47: 18:f9:f2:6a:9f:cf:f6:b7:e3:cd:a9:45:59:64:e7: e5:ff:04:03:6f:1e:01:ea:09:04:a1:7f:f8:a0:8d: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:44:C0:21:D2:75:EB:12:EB:72:A1:A4:14:61:19:B5:53:CB:0E:65 X509v3 Authority Key Identifier: keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:11:35:12:27:1c:9a:ac:d1:5a:01:d9:b4:7b:9e:46:4e:ec: a4:ee:c9:e7:04:f1:95:91:ef:e0:e3:00:d7:24:e7:23:07:83: a0:dd:25:27:d7:c2:05:3c:88:49:c1:b2:cf:3a:ce:20:50:b9: b7:94:8f:00:b7:b9:2b:f3:75:76:42:0d:21:a2:07:bc:13:9c: 3f:09:a2:69:80:8d:e2:16:cf:2d:b5:37:b0:30:d3:cb:ea:1e: 5a:11:91:bb:bb:b9:02:c5:d2:03:64:ba:b2:3a:43:ba:17:9a: cb:71:61:09:c4:2b:e4:17:cc:b4:aa:a8:15:68:88:4a:0c:ba: 5b:31:0c:e9:c8:95:89:f8:de:5a:a3:55:bd:9b:94:4c:2b:5b: 26:92:c2:4c:6f:fc:11:de:f0:71:de:83:1d:d9:fb:fb:bd:08: 70:fc:a7:83:ba:19:31:45:d5:52:92:76:c4:ef:8f:fd:bb:3f: 44:68:ea:f8:b1:1f:ad:26:ba:b6:15:d7:de:3c:53:50:eb:c2: d2:29:c0:40:8a:7b:d5:f7:0a:f9:bc:b0:a7:5d:2c:f8:e1:80: da:55:06:02:a6:7f:b7:6f:c0:fd:e8:3e:16:7c:dd:1c:27:a3: dd:a8:a3:a4:ba:ea:98:8f:8f:a5:bd:da:0e:37:e1:77:5a:77: a5:60:3a:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mSKZ+XqrcjlvdoD6y3bDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTAyZjYxMzFjZTVhNzQ2ZWI1OTgxZGQ0YzFkNmI0ZTE3 YjAzM2YwHhcNMjYwMTI1MTAwMDM1WhcNMjYwMTI2MTAwMDM1WjAzMTEwLwYDVQQD EyhmZjQ0YzAyMWQyNzVlYjEyZWI3MmExYTQxNDYxMTliNTUzY2IwZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroytKGEoax8ou05MD07bIOFEofNx 4G9zqgU4TCiIDRIZEEo/mxRWz7Lau3vwXhxEBrwaVGcRJmp7GG+2otRm4H0mCJPu G88eHfeAZm7qAPT3sz0CIAFHZ1uu3AmC84+LevehrlqSxb3xZxxg6QcH5hgrOjvD qrXah3ACVjqwQct6hgMXP6TRGaiqTDrrnA3SOzUfZBowvYCusVfBciGL6S7NgdYj cd6+QXgaOKgjwSzdZb83PSxEI8CBifN/NxfeThgMIpDk25UzgV8RxCieRV0WTdG9 JIR31GaPvQhftEcY+fJqn8/2t+PNqUVZZOfl/wQDbx4B6gkEoX/4oI080wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9EwCHSdesS63KhpBRhGbVTyw5lMB8GA1UdIwQY MBaAFNwQL2Exzlp0brWYHdTB1rThewM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQt YjA5N2Q5ZjhlYzIyLzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQtYjA5N2Q5ZjhlYzIy LzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxE1Eicc mqzRWgHZtHueRk7spO7J5wTxlZHv4OMA1yTnIweDoN0lJ9fCBTyIScGyzzrOIFC5 t5SPALe5K/N1dkINIaIHvBOcPwmiaYCN4hbPLbU3sDDTy+oeWhGRu7u5AsXSA2S6 sjpDuheay3FhCcQr5BfMtKqoFWiISgy6WzEM6ciVifjeWqNVvZuUTCtbJpLCTG/8 Ed7wcd6DHdn7+70IcPyng7oZMUXVUpJ2xO+P/bs/RGjq+LEfrSa6thXX3jxTUOvC 0inAQIp71fcK+bywp10s+OGA2lUGAqZ/t2/A/eg+FnzdHCej3aijpLrqmI+Ppb3a Djfhd1p3pWA6dA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:54 2026 by rpki-client