This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json) Hash identifier: EzHw4HUOO7RMV+NBQLQ+n0c582BvqCfqFGiAm0bZaBw= Subject key identifier: 87:41:38:E6:3C:43:43:5C:4A:BE:2D:27:01:EE:E3:F9:5A:50:B9:13 Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58 Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058 Certificate serial: 019BF7D1AD5C702561BB3D5346E9C16638C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft Manifest number: 16CA Signing time: Mon 26 Jan 2026 01:01:12 +0000 Manifest this update: Mon 26 Jan 2026 01:01:12 +0000 Manifest next update: Tue 27 Jan 2026 01:01:12 +0000 Files and hashes: 1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=) 2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: qplD4f/ZjjP2zcVqQjmrpi1vnFr22874vdFvHEr7iJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:ad:5c:70:25:61:bb:3d:53:46:e9:c1:66:38:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058 Validity Not Before: Jan 26 01:01:12 2026 GMT Not After : Jan 27 01:01:12 2026 GMT Subject: CN=874138e63c43435c4abe2d2701eee3f95a50b913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:5c:f9:6e:bc:4e:28:5f:f6:06:c2:49:71: 15:e8:75:ae:0a:98:ec:e2:7b:de:fa:40:af:06:9a: 82:25:c8:dd:e4:68:44:d8:a5:cb:c0:d2:7c:0d:06: 5f:38:8e:ac:0a:1e:cd:e9:78:5f:7f:d5:8b:61:8a: ae:11:d5:81:83:0b:d2:6e:88:41:d3:e9:31:6c:35: 5b:1c:35:0f:a5:9e:85:4c:ad:6b:d4:50:a3:9a:57: 9f:20:51:d0:b5:dc:db:72:18:d9:f5:0c:3f:59:93: df:66:98:cd:5e:3e:ad:5f:73:a0:d4:72:aa:42:e0: 67:44:04:e5:8a:dc:27:35:a1:54:00:5a:52:c6:a5: 06:b9:2d:d8:21:59:b5:67:18:11:e6:59:1a:4b:77: 01:aa:c9:16:5c:89:7b:da:54:68:2b:97:95:30:d0: 6d:cf:9b:22:46:91:fc:b0:28:87:99:86:d6:88:35: 5a:41:8f:b1:49:44:ff:87:a5:a0:11:1c:4b:52:41: 1d:5a:be:8e:7c:4e:a8:f4:ce:5e:a6:2e:c0:80:95: 84:03:13:8d:94:8a:89:e3:9d:f9:d1:17:3c:81:dd: ac:ed:ae:f4:cd:f2:a6:26:7a:1c:ce:0c:a5:b5:b8: d4:99:7f:b5:b4:c6:b3:96:8e:73:d8:f5:e6:09:90: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:41:38:E6:3C:43:43:5C:4A:BE:2D:27:01:EE:E3:F9:5A:50:B9:13 X509v3 Authority Key Identifier: keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:26:9d:18:c2:9e:95:43:e2:5f:2a:79:a9:59:1f:fe:d5:96: 1d:c2:24:00:06:34:15:f5:83:ad:a9:b2:4a:80:c7:4e:de:11: f8:17:07:10:f0:23:af:fe:52:1a:45:9d:73:47:d4:59:e8:12: 91:5c:4b:02:87:0b:cd:9b:c6:8f:8a:e1:5b:32:8b:0c:02:3f: bf:31:79:20:9e:d2:72:e1:b3:55:a9:ed:9c:69:08:54:f4:9a: 03:b7:33:de:a6:e5:86:bd:3e:fb:e7:24:da:8d:72:00:31:37: 8f:dc:3f:30:0e:4d:ed:82:0d:32:60:e0:ed:02:11:c3:99:d0: dd:c3:a8:d0:a3:47:9b:da:ec:34:db:10:88:0f:5c:95:35:85: 5b:b4:ff:53:bd:82:b9:fa:d2:be:a5:bd:f2:48:59:d9:9c:23: c6:7c:e9:ce:64:79:49:56:dd:9e:12:11:ab:3b:de:24:b1:e5: 2d:05:fa:21:02:6f:49:1b:31:0a:40:9c:7f:86:da:6d:a8:08: b8:de:f3:43:d4:83:76:3c:03:95:c6:79:59:07:36:7c:19:49: 11:8f:31:12:29:d9:37:4d:95:2e:a1:90:77:7c:cf:3b:78:88: 2a:58:26:02:5b:4c:72:c5:5e:f4:86:29:a5:7b:98:da:5f:f6: e7:90:a3:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30a1ccCVhuz1TRunBZjjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNDY3MGMyYTZmZDcyMjMzMjdmNjhiYWRiZTZkMDgzMjJi NzgwNTgwHhcNMjYwMTI2MDEwMTEyWhcNMjYwMTI3MDEwMTEyWjAzMTEwLwYDVQQD Eyg4NzQxMzhlNjNjNDM0MzVjNGFiZTJkMjcwMWVlZTNmOTVhNTBiOTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVJc+W68Tihf9gbCSXEV6HWuCpjs 4nve+kCvBpqCJcjd5GhE2KXLwNJ8DQZfOI6sCh7N6Xhff9WLYYquEdWBgwvSbohB 0+kxbDVbHDUPpZ6FTK1r1FCjmlefIFHQtdzbchjZ9Qw/WZPfZpjNXj6tX3Og1HKq QuBnRATlitwnNaFUAFpSxqUGuS3YIVm1ZxgR5lkaS3cBqskWXIl72lRoK5eVMNBt z5siRpH8sCiHmYbWiDVaQY+xSUT/h6WgERxLUkEdWr6OfE6o9M5epi7AgJWEAxON lIqJ45350Rc8gd2s7a70zfKmJnoczgyltbjUmX+1tMazlo5z2PXmCZCHWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdBOOY8Q0NcSr4tJwHu4/laULkTMB8GA1UdIwQY MBaAFN1GcMKm/XIjMn9outvm0IMit4BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUt OWNkM2M2YTE4ODY2LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUtOWNkM2M2YTE4ODY2 LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxSadGMKe lUPiXyp5qVkf/tWWHcIkAAY0FfWDramySoDHTt4R+BcHEPAjr/5SGkWdc0fUWegS kVxLAocLzZvGj4rhWzKLDAI/vzF5IJ7ScuGzVantnGkIVPSaA7cz3qblhr0+++ck 2o1yADE3j9w/MA5N7YINMmDg7QIRw5nQ3cOo0KNHm9rsNNsQiA9clTWFW7T/U72C ufrSvqW98khZ2ZwjxnzpzmR5SVbdnhIRqzveJLHlLQX6IQJvSRsxCkCcf4babagI uN7zQ9SDdjwDlcZ5WQc2fBlJEY8xEinZN02VLqGQd3zPO3iIKlgmAltMcsVe9IYp pXuY2l/255Cjdw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:39 2026 by rpki-client