This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json) Hash identifier: KoU7HTIkao08GckH2S5XKS/LjQfSazElpDfQqXmyThg= Subject key identifier: 98:AB:A0:81:DC:23:78:F6:14:6C:7C:D8:C8:B3:33:17:10:94:C8:1B Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3 Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3 Certificate serial: 019BF763BFD8A7E0CF2FA23E96E21BCBFD2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft Manifest number: EC Signing time: Sun 25 Jan 2026 23:01:07 +0000 Manifest this update: Sun 25 Jan 2026 23:01:07 +0000 Manifest next update: Mon 26 Jan 2026 23:01:07 +0000 Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: Awm+KW7Pc+WRm7oQp/HmbCLhMmLaiqgK2oYCI2xsL0Y=) 2: SuJb0HpRFGi9UuUXaLPYJ4R7Poo.roa (hash: FRsrBMpWirVSEHhW/WJJlI37os8wGABewXuo9qZuhxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:bf:d8:a7:e0:cf:2f:a2:3e:96:e2:1b:cb:fd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3 Validity Not Before: Jan 25 23:01:07 2026 GMT Not After : Jan 26 23:01:07 2026 GMT Subject: CN=98aba081dc2378f6146c7cd8c8b333171094c81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7a:af:db:81:b7:52:90:81:95:29:46:20:a4: 33:88:39:0f:75:49:42:50:8a:63:6f:9e:15:8d:84: 9c:6c:08:25:64:93:61:e0:86:18:7c:5b:30:17:33: a3:ee:2d:b2:d0:ee:09:c3:3e:73:54:47:d2:05:cd: 14:a2:6f:58:00:be:33:4e:45:d1:51:a5:1b:9d:63: 45:6b:72:6e:f8:14:a9:6f:ba:7d:77:f8:91:91:ad: ba:a5:c9:11:30:bd:a5:0e:9e:d4:c6:f3:37:47:3a: 4e:7d:8f:a3:20:c7:e9:e8:d1:98:96:99:b2:ab:e4: 0e:f5:a4:16:1b:c2:a5:98:d9:09:6d:0a:48:0a:30: 72:c3:6f:e8:44:1c:71:56:a5:64:73:7e:b1:b2:92: 0e:d2:96:33:99:1c:40:78:4a:19:7e:ca:ad:15:85: 29:8c:34:2b:bd:26:51:20:50:90:97:02:fc:55:fa: 17:41:65:b2:02:29:0d:1f:5d:50:7b:0c:d4:d2:76: 38:83:74:5a:bb:7d:44:6a:a9:00:3a:b6:2b:45:fe: ca:d6:8a:5c:64:f9:d5:75:54:a2:4a:91:5d:0b:80: a8:1f:a6:3a:aa:4b:8b:6b:5e:5c:24:bb:6d:44:19: e7:da:ea:67:32:04:1e:0b:8a:1a:ed:81:0a:80:85: 06:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AB:A0:81:DC:23:78:F6:14:6C:7C:D8:C8:B3:33:17:10:94:C8:1B X509v3 Authority Key Identifier: keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:13:8a:de:28:e2:39:3f:1a:c1:0f:05:98:79:53:05:29:a2: 21:83:84:bf:23:ff:c5:78:4d:40:53:5a:bb:0c:94:14:65:4c: 5c:f3:72:61:81:77:68:a6:fc:e2:92:17:4e:09:64:7f:5d:de: 0f:4e:80:56:a6:b7:d3:b0:43:11:fd:92:d5:a0:dc:63:b5:0d: 93:3f:0d:ba:70:27:f1:0a:f8:b4:e2:9b:cc:99:6d:ee:fd:db: 98:bf:23:93:29:81:c2:25:3e:6b:f7:07:2e:ca:1a:85:24:7f: 5f:e5:23:bb:4c:2c:89:e2:66:3b:30:ff:f3:58:0f:65:3e:50: bb:68:be:e3:68:84:64:10:76:4f:0f:e1:b9:7f:23:8a:1a:b1: 51:f9:a8:a4:9e:c3:0d:2e:fd:8c:d9:13:d5:5d:81:54:85:a6: 2f:0d:93:4d:43:39:d2:e6:80:f8:be:c6:cb:98:ba:d9:b4:09: 4d:93:e0:f5:49:97:7d:a9:d3:31:52:98:04:ee:45:a3:4d:be: f9:ea:ee:f1:77:ff:3f:e2:ee:a7:ff:5d:af:aa:ce:d5:4c:8f: 6f:5b:6a:75:a0:28:28:76:3e:7d:7e:aa:30:cc:47:f7:45:35: 9e:5b:92:74:c9:0e:0c:97:80:f1:e1:ae:8f:ec:be:ac:6f:63: 0a:22:98:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y7/Yp+DPL6I+luIby/0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMmExMjE3NjczZWIxMWNhOThhMzUxMzk1MjA0MDdjOTc2 OGRmYzMwHhcNMjYwMTI1MjMwMTA3WhcNMjYwMTI2MjMwMTA3WjAzMTEwLwYDVQQD Eyg5OGFiYTA4MWRjMjM3OGY2MTQ2YzdjZDhjOGIzMzMxNzEwOTRjODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHqv24G3UpCBlSlGIKQziDkPdUlC UIpjb54VjYScbAglZJNh4IYYfFswFzOj7i2y0O4Jwz5zVEfSBc0Uom9YAL4zTkXR UaUbnWNFa3Ju+BSpb7p9d/iRka26pckRML2lDp7UxvM3RzpOfY+jIMfp6NGYlpmy q+QO9aQWG8KlmNkJbQpICjByw2/oRBxxVqVkc36xspIO0pYzmRxAeEoZfsqtFYUp jDQrvSZRIFCQlwL8VfoXQWWyAikNH11QewzU0nY4g3Rau31EaqkAOrYrRf7K1opc ZPnVdVSiSpFdC4CoH6Y6qkuLa15cJLttRBnn2upnMgQeC4oa7YEKgIUGhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiroIHcI3j2FGx82MizMxcQlMgbMB8GA1UdIwQY MBaAFN0qEhdnPrEcqYo1E5UgQHyXaN/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80YTkzYzYtMTcwYS00YWEyLThkZmMt NmI5NjQxODIzY2E0LzEvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80YTkzYzYtMTcwYS00YWEyLThkZmMtNmI5NjQxODIzY2E0 LzEvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahOK3iji OT8awQ8FmHlTBSmiIYOEvyP/xXhNQFNauwyUFGVMXPNyYYF3aKb84pIXTglkf13e D06AVqa307BDEf2S1aDcY7UNkz8NunAn8Qr4tOKbzJlt7v3bmL8jkymBwiU+a/cH LsoahSR/X+Uju0wsieJmOzD/81gPZT5Qu2i+42iEZBB2Tw/huX8jihqxUfmopJ7D DS79jNkT1V2BVIWmLw2TTUM50uaA+L7Gy5i62bQJTZPg9UmXfanTMVKYBO5Fo02+ +eru8Xf/P+Lup/9dr6rO1UyPb1tqdaAoKHY+fX6qMMxH90U1nluSdMkODJeA8eGu j+y+rG9jCiKYkw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:01 2026 by rpki-client