This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json) Hash identifier: LXoj0cle83uk2ZnVHC2J0O+7rtW9VxQTOtb2oadGulU= Subject key identifier: 1D:D8:D4:A6:F8:54:45:CB:8E:0C:47:47:16:91:EA:BA:2D:27:A6:AB Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55 Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55 Certificate serial: 019BF5E3871819686B487C800A14653993CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft Manifest number: 0E80 Signing time: Sun 25 Jan 2026 16:01:27 +0000 Manifest this update: Sun 25 Jan 2026 16:01:27 +0000 Manifest next update: Mon 26 Jan 2026 16:01:27 +0000 Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: KfG866ZsQiN7w2hjjXgr2j8oVCFMzNjsQjNT+pWKZnU=) 2: 58GFDuus_tVD8dh1HAcQzm6Bd5s.roa (hash: pyGHBxobR5Y4/oQZr4EFtkYZAaS4T1/SsoP9evw4DUA=) 3: D7CjrTPEmaFgX5q30EgqridM6Ks.roa (hash: 6VDTLT0bKAkkx8WWVo+B1/Z/i7C3vrJBLQ7Xx0A+EvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:87:18:19:68:6b:48:7c:80:0a:14:65:39:93:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55 Validity Not Before: Jan 25 16:01:27 2026 GMT Not After : Jan 26 16:01:27 2026 GMT Subject: CN=1dd8d4a6f85445cb8e0c47471691eaba2d27a6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:ab:14:6e:98:b1:cb:2d:bf:b9:f2:ca:e0: e3:52:49:d0:e4:5a:6b:22:6e:cc:d7:8e:4d:e2:7a: ab:5a:28:97:20:f3:2a:b8:1f:52:a7:80:24:b4:da: ad:78:73:1b:a5:ea:e7:7c:5d:a7:48:40:62:5f:66: 90:89:47:fd:d0:c0:56:98:8b:0b:b2:99:d9:25:f0: 22:23:c5:81:3e:3f:55:22:e8:33:77:83:91:6b:cc: 6c:a0:fd:76:a7:b0:95:c5:a6:3e:9d:be:b0:09:27: 0c:31:8b:93:24:b3:d7:6a:ff:be:29:00:7d:d0:f5: 41:9f:31:5f:ed:83:92:f5:b9:22:4f:b6:d6:07:10: 73:79:a4:9b:77:19:d2:4a:51:91:df:9d:14:ba:4e: 07:b8:a5:b6:16:30:7f:2b:ae:24:ed:85:f7:14:8f: 13:60:ea:75:33:b8:38:32:a9:d4:cb:f7:6d:ad:7a: b8:1c:7e:ec:02:37:ce:8d:10:17:92:f1:e9:1f:2c: f8:d0:65:f9:e0:69:1f:cc:9e:bd:88:9b:10:32:d2: 02:64:10:aa:7e:b8:55:04:54:0c:d5:80:be:f3:d8: ef:45:95:f8:5d:ac:9b:58:e6:59:42:fc:14:56:a2: 9d:ae:81:c7:c0:aa:8a:6e:72:75:33:c4:00:64:8d: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D8:D4:A6:F8:54:45:CB:8E:0C:47:47:16:91:EA:BA:2D:27:A6:AB X509v3 Authority Key Identifier: keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:10:2e:89:6b:ed:79:bd:87:09:e8:00:80:b1:ba:95:3e:e1: 6e:ca:ba:f5:c7:05:2e:a2:18:3e:4d:49:6b:8f:7d:28:d2:39: 4f:6c:8e:73:a8:4d:25:82:72:5f:b1:79:fc:0f:4a:f9:88:f6: 72:e0:e5:eb:51:f0:51:92:58:de:cb:e4:cf:1c:f9:69:36:6e: e2:7d:97:9b:f8:e5:c2:6d:55:fb:23:e6:4f:df:a0:5a:72:b0: bf:dc:32:8a:3e:76:78:c6:6e:0b:6a:a2:0a:22:af:d5:13:2e: d9:0c:2a:8d:14:a7:78:28:28:36:8c:ad:fd:5a:3a:5a:90:18: 72:b5:41:33:49:32:b9:dd:52:8d:f6:ee:2f:af:85:10:03:f0: c1:16:9c:2c:8f:44:18:b8:fe:c3:5e:b9:61:75:65:29:eb:1a: 93:95:56:eb:b4:77:31:5f:fc:e0:c7:b4:82:3f:50:ed:4c:a3: d4:08:5c:8c:72:ca:74:81:17:28:1a:23:1b:00:10:14:da:20: 6a:e2:78:e4:2d:2a:aa:fc:9f:e1:e7:e3:3f:51:94:90:7e:d9: 6b:94:c5:b4:5d:3c:30:c8:be:21:a8:32:df:05:e2:7d:2e:79: f6:d9:ff:59:c0:79:cb:2f:ac:04:fd:25:7e:7a:56:df:ce:e3: 47:4e:ea:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv144cYGWhrSHyAChRlOZPLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOGNiNGExMWNhYmFjMjA0YWRmYjhhNWI1ODdlMzJmZWU0 YTFiNTUwHhcNMjYwMTI1MTYwMTI3WhcNMjYwMTI2MTYwMTI3WjAzMTEwLwYDVQQD EygxZGQ4ZDRhNmY4NTQ0NWNiOGUwYzQ3NDcxNjkxZWFiYTJkMjdhNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxGrFG6Yscstv7nyyuDjUknQ5Fpr Im7M145N4nqrWiiXIPMquB9Sp4AktNqteHMbpernfF2nSEBiX2aQiUf90MBWmIsL spnZJfAiI8WBPj9VIugzd4ORa8xsoP12p7CVxaY+nb6wCScMMYuTJLPXav++KQB9 0PVBnzFf7YOS9bkiT7bWBxBzeaSbdxnSSlGR350Uuk4HuKW2FjB/K64k7YX3FI8T YOp1M7g4MqnUy/dtrXq4HH7sAjfOjRAXkvHpHyz40GX54GkfzJ69iJsQMtICZBCq frhVBFQM1YC+89jvRZX4XaybWOZZQvwUVqKdroHHwKqKbnJ1M8QAZI3J7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3Y1Kb4VEXLjgxHRxaR6rotJ6arMB8GA1UdIwQY MBaAFNyMtKEcq6wgSt+4pbWH4y/uShtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDIt OTlkNWUwN2JhZTc2LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDItOTlkNWUwN2JhZTc2 LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRAuiWvt eb2HCegAgLG6lT7hbsq69ccFLqIYPk1Ja499KNI5T2yOc6hNJYJyX7F5/A9K+Yj2 cuDl61HwUZJY3svkzxz5aTZu4n2Xm/jlwm1V+yPmT9+gWnKwv9wyij52eMZuC2qi CiKv1RMu2QwqjRSneCgoNoyt/Vo6WpAYcrVBM0kyud1SjfbuL6+FEAPwwRacLI9E GLj+w165YXVlKesak5VW67R3MV/84Me0gj9Q7Uyj1AhcjHLKdIEXKBojGwAQFNog auJ45C0qqvyf4efjP1GUkH7Za5TFtF08MMi+Iagy3wXifS559tn/WcB5yy+sBP0l fnpW387jR07q0w== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:53 2026 by rpki-client