This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json) Hash identifier: 3LZNF1XulMafwzdF4qp9ggq5ti7a18atxnlmZtpj378= Subject key identifier: 1B:01:19:A3:D6:C1:3D:5E:76:6D:CB:6D:2B:EF:87:06:B4:F0:CE:56 Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86 Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786 Certificate serial: 019BF83FD42823BBFF6B8AF829EB542FA206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft Manifest number: 05EE Signing time: Mon 26 Jan 2026 03:01:31 +0000 Manifest this update: Mon 26 Jan 2026 03:01:31 +0000 Manifest next update: Tue 27 Jan 2026 03:01:31 +0000 Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: zoBxve6kJUzn0qAxOz9/1qt4P4nlDdOywly9eSgqBGI=) 2: WoN0CrYvueqPk1KqmXJffVK7ib4.roa (hash: 4FA6Dc/pCbAQFuPtL5vNxbuQK2/hlz7MGBa9RY6awaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:d4:28:23:bb:ff:6b:8a:f8:29:eb:54:2f:a2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786 Validity Not Before: Jan 26 03:01:31 2026 GMT Not After : Jan 27 03:01:31 2026 GMT Subject: CN=1b0119a3d6c13d5e766dcb6d2bef8706b4f0ce56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:24:b2:c7:d6:ab:32:1b:20:36:d3:be:a0: 30:5f:8a:3a:bf:5b:82:07:5e:00:bf:7f:b6:92:bf: f1:4b:55:78:9a:da:41:0b:98:9a:74:76:ff:74:99: c9:44:9e:ed:c7:92:7d:ba:61:32:f9:6c:66:9a:1f: d0:ee:49:d1:15:ae:66:61:73:0d:c5:51:25:f2:94: 65:fe:0f:6e:20:25:1d:17:4f:6f:6d:be:ca:23:2d: 11:89:54:de:bf:df:82:90:ab:2b:35:c5:9f:16:68: f1:ef:98:02:aa:09:ec:a5:9d:e1:9c:94:03:a1:ce: 1d:b5:87:25:b6:d5:96:c8:14:05:34:41:45:55:f8: 04:35:55:86:06:de:82:df:88:45:67:2f:aa:78:83: 62:08:96:dd:97:04:3f:94:d0:63:7e:83:92:62:57: 4c:cb:01:eb:45:16:cf:e9:3f:11:a9:d0:dd:1d:59: 3e:dd:34:47:59:04:b0:01:ba:59:25:d8:ee:f5:19: 55:10:79:ae:4e:b6:1e:3d:1a:96:c9:e9:56:dc:87: 36:7a:09:3c:03:d8:93:1b:c9:df:31:f5:62:02:40: 1d:a9:ca:ee:eb:16:b9:fd:71:0f:6c:2b:55:70:01: 59:71:d8:98:3e:97:81:f1:c5:4d:e4:6f:91:51:dd: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:01:19:A3:D6:C1:3D:5E:76:6D:CB:6D:2B:EF:87:06:B4:F0:CE:56 X509v3 Authority Key Identifier: keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a6:6f:fa:2d:7a:19:7b:d8:8b:04:c7:21:aa:3c:87:e0:67: d5:ae:b5:78:24:6f:a6:73:a8:28:21:b2:69:fc:2b:64:1c:ab: 03:ab:76:67:51:65:96:72:9c:33:e8:2f:60:ca:26:82:72:82: 97:3b:7a:3f:cd:96:ab:f5:13:e8:f4:e6:a4:62:41:86:79:fe: 06:df:4b:8b:53:bf:ee:bc:ee:21:86:05:79:44:81:fa:a3:86: 2d:7a:b0:f4:f3:c5:c9:e6:d2:c2:c2:09:c7:15:af:44:9d:95: a0:4a:b5:01:4c:2b:0b:03:c3:2b:2e:6a:db:46:30:eb:ff:34: 53:e3:ca:0e:0a:40:2e:4d:e7:b6:02:ec:1e:dc:71:56:9d:aa: 55:a9:9d:3d:be:fa:7f:84:8f:9c:8b:e3:d2:85:1d:7e:7b:b5: 88:65:02:d4:ff:39:b2:21:ab:80:76:a0:13:48:60:d8:e7:db: de:8a:5f:fc:51:09:01:10:d5:63:66:86:dd:f1:b6:23:6a:ac: a7:9a:41:93:dc:ae:a9:9c:7b:45:94:3d:db:e7:88:50:a7:56: be:8f:f4:69:22:85:de:af:b8:31:91:7d:0b:2d:20:0c:0e:1e: 94:f8:c9:c6:2f:de:f0:c4:5d:92:b2:6b:1d:bd:35:74:2b:7c: 2a:a2:75:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P9QoI7v/a4r4KetUL6IGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGY5MGE5M2RjOTQyNzg1NTY0NDkwM2NiNzBjMWY3NGI5 MzE3ODYwHhcNMjYwMTI2MDMwMTMxWhcNMjYwMTI3MDMwMTMxWjAzMTEwLwYDVQQD EygxYjAxMTlhM2Q2YzEzZDVlNzY2ZGNiNmQyYmVmODcwNmI0ZjBjZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5kkssfWqzIbIDbTvqAwX4o6v1uC B14Av3+2kr/xS1V4mtpBC5iadHb/dJnJRJ7tx5J9umEy+Wxmmh/Q7knRFa5mYXMN xVEl8pRl/g9uICUdF09vbb7KIy0RiVTev9+CkKsrNcWfFmjx75gCqgnspZ3hnJQD oc4dtYclttWWyBQFNEFFVfgENVWGBt6C34hFZy+qeINiCJbdlwQ/lNBjfoOSYldM ywHrRRbP6T8RqdDdHVk+3TRHWQSwAbpZJdju9RlVEHmuTrYePRqWyelW3Ic2egk8 A9iTG8nfMfViAkAdqcru6xa5/XEPbCtVcAFZcdiYPpeB8cVN5G+RUd3HpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsBGaPWwT1edm3LbSvvhwa08M5WMB8GA1UdIwQY MBaAFNxPkKk9yUJ4VWRJA8twwfdLkxeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUt NjMxNzdmYjE5YWJlLzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUtNjMxNzdmYjE5YWJl LzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaZv+i16 GXvYiwTHIao8h+Bn1a61eCRvpnOoKCGyafwrZByrA6t2Z1FllnKcM+gvYMomgnKC lzt6P82Wq/UT6PTmpGJBhnn+Bt9Li1O/7rzuIYYFeUSB+qOGLXqw9PPFyebSwsIJ xxWvRJ2VoEq1AUwrCwPDKy5q20Yw6/80U+PKDgpALk3ntgLsHtxxVp2qVamdPb76 f4SPnIvj0oUdfnu1iGUC1P85siGrgHagE0hg2Ofb3opf/FEJARDVY2aG3fG2I2qs p5pBk9yuqZx7RZQ92+eIUKdWvo/0aSKF3q+4MZF9Cy0gDA4elPjJxi/e8MRdkrJr Hb01dCt8KqJ1cA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:45 2026 by rpki-client