This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json) Hash identifier: Y4jRwW7nMWygY2HGC4+9MJkwUqhDIn8IkU2MpJKwm3I= Subject key identifier: 79:BD:E5:C7:38:9D:38:95:52:95:6D:34:5D:B1:54:78:B2:3F:70:24 Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5 Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5 Certificate serial: 019BF876ABDB78EC0076D360A7245A395AC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft Manifest number: 17E7 Signing time: Mon 26 Jan 2026 04:01:25 +0000 Manifest this update: Mon 26 Jan 2026 04:01:25 +0000 Manifest next update: Tue 27 Jan 2026 04:01:25 +0000 Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: ot+gZV5KJe/kMP1accD4hTm0s9OwX2B7JDVu8AFsv9w=) 2: gF9egdIcd91P1OP4RPz2DkEHDD8.roa (hash: JDz8GS+aZf4wXrBiyWB1Bck1IR0dmoeHU/KEMVi1Ghc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:ab:db:78:ec:00:76:d3:60:a7:24:5a:39:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5 Validity Not Before: Jan 26 04:01:25 2026 GMT Not After : Jan 27 04:01:25 2026 GMT Subject: CN=79bde5c7389d389552956d345db15478b23f7024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2c:73:0b:fa:a3:b4:af:e3:51:9a:3c:d5:83: d2:86:a0:7e:40:d2:3c:81:a1:11:9b:a5:dc:3c:42: 38:90:6c:f0:3f:d1:6f:b9:f4:d3:f8:08:20:df:b1: c2:4e:33:08:42:c2:15:a6:3f:9a:ff:ff:3c:9e:7c: 1c:e4:bd:5a:90:25:63:8e:aa:30:c3:6e:80:4d:07: 4f:a9:df:b5:cd:f2:80:c8:10:d9:cd:68:ea:ab:85: e8:83:c1:be:bc:a2:2c:c8:9f:29:d3:7b:87:1a:19: e9:4a:e7:50:80:c8:50:d3:67:df:4e:ac:d2:07:72: 86:5a:59:f8:f4:08:dc:ca:e9:18:a2:65:11:44:54: 76:77:48:e6:b4:fa:09:85:f4:e4:a4:ba:ec:b8:0e: 1c:56:61:0e:7b:ed:b4:1d:61:74:14:72:a1:8d:c5: ff:3d:4f:1b:32:e8:61:00:91:1c:65:b1:94:3c:68: 75:54:9d:7f:09:c7:31:3c:c3:f5:de:24:f1:26:e2: 1a:97:42:b0:df:5c:9c:48:0c:14:f7:8e:7e:4d:e3: 1b:59:6d:af:2b:26:cc:33:39:9b:15:d0:75:54:22: 11:c6:f6:ef:47:43:ed:98:ff:3e:eb:60:f4:26:02: fb:61:56:bc:50:ff:f1:a5:42:a9:f5:e6:27:83:98: d1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BD:E5:C7:38:9D:38:95:52:95:6D:34:5D:B1:54:78:B2:3F:70:24 X509v3 Authority Key Identifier: keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b1:eb:50:62:32:f5:6d:17:63:a9:92:2d:6b:fe:d8:78:9e: 2d:40:6d:d0:44:0d:bd:79:79:84:01:c7:2d:60:19:ea:c2:b6: ce:ab:d0:ab:e9:1c:1a:5f:d7:bb:0c:47:bc:0d:9e:97:27:40: ca:79:8a:90:80:2a:80:92:d1:8d:bb:71:bd:d4:4a:53:ab:36: c0:78:27:e3:a5:0d:17:5e:e4:f5:17:0f:fa:0c:26:a8:bd:0e: 24:2b:22:6e:28:57:40:29:24:0d:70:56:68:92:27:62:b7:af: d7:7b:4c:c6:fc:7c:e2:9c:65:02:80:1a:aa:21:90:b2:ac:7a: d3:44:76:18:dc:b3:84:5e:ef:43:48:56:b1:52:ec:10:12:e2: ac:90:d9:e4:bc:00:49:3d:d9:08:5c:6e:aa:95:8a:c9:15:75: f9:dd:7d:46:59:7a:d2:ea:cd:1f:e3:19:b1:3d:bf:d2:8d:44: 41:e9:c5:a9:a5:ea:82:da:5c:1e:ac:a8:47:42:05:c7:1f:cc: 3a:c0:0c:fc:6d:aa:fb:46:d2:aa:c0:79:5e:66:a4:8b:5b:8b: ec:81:bc:7d:65:ba:25:91:7d:86:f9:5a:aa:0d:cd:7c:f1:83: c0:77:54:10:7f:6d:19:c1:fc:a0:7e:d9:3a:6c:ea:19:76:93: 1c:4e:8c:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dqvbeOwAdtNgpyRaOVrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTRhNGM0ODQwZmM5YTVmZDIxNGE2MTlhYTg4N2I1Yjc2 MjRiZjUwHhcNMjYwMTI2MDQwMTI1WhcNMjYwMTI3MDQwMTI1WjAzMTEwLwYDVQQD Eyg3OWJkZTVjNzM4OWQzODk1NTI5NTZkMzQ1ZGIxNTQ3OGIyM2Y3MDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SxzC/qjtK/jUZo81YPShqB+QNI8 gaERm6XcPEI4kGzwP9FvufTT+Agg37HCTjMIQsIVpj+a//88nnwc5L1akCVjjqow w26ATQdPqd+1zfKAyBDZzWjqq4Xog8G+vKIsyJ8p03uHGhnpSudQgMhQ02ffTqzS B3KGWln49AjcyukYomURRFR2d0jmtPoJhfTkpLrsuA4cVmEOe+20HWF0FHKhjcX/ PU8bMuhhAJEcZbGUPGh1VJ1/CccxPMP13iTxJuIal0Kw31ycSAwU945+TeMbWW2v KybMMzmbFdB1VCIRxvbvR0PtmP8+62D0JgL7YVa8UP/xpUKp9eYng5jRxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm95cc4nTiVUpVtNF2xVHiyP3AkMB8GA1UdIwQY MBaAFNzkpMSED8ml/SFKYZqoh7W3Ykv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMTQwYTgtMDFjMC00ZTM2LWJkMDEt MmI3YWU3MjIwMTFmLzEvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMTQwYTgtMDFjMC00ZTM2LWJkMDEtMmI3YWU3MjIwMTFm LzEvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7HrUGIy 9W0XY6mSLWv+2HieLUBt0EQNvXl5hAHHLWAZ6sK2zqvQq+kcGl/XuwxHvA2elydA ynmKkIAqgJLRjbtxvdRKU6s2wHgn46UNF17k9RcP+gwmqL0OJCsibihXQCkkDXBW aJInYrev13tMxvx84pxlAoAaqiGQsqx600R2GNyzhF7vQ0hWsVLsEBLirJDZ5LwA ST3ZCFxuqpWKyRV1+d19Rll60urNH+MZsT2/0o1EQenFqaXqgtpcHqyoR0IFxx/M OsAM/G2q+0bSqsB5Xmaki1uL7IG8fWW6JZF9hvlaqg3NfPGDwHdUEH9tGcH8oH7Z OmzqGXaTHE6MBQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:04 2026 by rpki-client