This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json) Hash identifier: P1Cg6YvQTBJh53ALNosqcCbkGC/FB+vQOFwFcLeOgXo= Subject key identifier: ED:67:A5:E5:07:3E:76:A4:D5:D9:BB:31:53:00:4C:FD:AA:8F:82:97 Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef Certificate serial: 019BF2AAB430A13A983CA384D54F7281397B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 01:00:32 +0000 Manifest this update: Sun 25 Jan 2026 01:00:32 +0000 Manifest next update: Mon 26 Jan 2026 01:00:32 +0000 Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=) 2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: 3NzuOUxGvHaJegIWl5Rj/Ch0ZUwdcusRR1A2EEBKjMA=) 3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:aa:b4:30:a1:3a:98:3c:a3:84:d5:4f:72:81:39:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef Validity Not Before: Jan 25 01:00:32 2026 GMT Not After : Jan 26 01:00:32 2026 GMT Subject: CN=ed67a5e5073e76a4d5d9bb3153004cfdaa8f8297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:d6:de:8a:39:e0:ba:24:32:ea:a0:81:4d: 61:bf:94:e7:ad:84:9c:c0:66:2a:ad:2d:13:4f:c0: f4:6d:e0:70:3f:4b:67:e5:1a:eb:bb:3c:11:5c:aa: 70:90:fa:2d:7f:5c:ca:11:71:3c:44:11:83:a9:10: f4:3b:36:f6:a6:5d:9e:b2:c5:1b:86:8e:e8:12:7b: b3:20:59:52:ab:5b:73:11:f3:56:a8:32:19:62:f7: e7:3f:6a:d9:49:67:1b:bd:ee:fc:6d:26:2b:78:27: f3:71:0c:44:e2:c9:a4:13:ea:84:c3:c6:fb:35:4c: 0a:a8:f3:2b:1d:df:81:5e:c2:06:ad:37:39:a4:8d: b3:a6:6c:c3:8a:84:f7:ea:c7:4e:ad:49:8e:a1:f1: 68:00:2e:c0:48:05:a3:69:80:72:9e:20:c1:e8:8c: 4a:77:7e:39:77:76:40:2e:39:da:53:cf:9b:5d:06: 4e:f8:34:97:7f:d7:5b:1d:36:b4:82:dd:35:5e:66: ac:f5:da:5a:9c:06:74:6a:32:35:32:19:da:bf:1d: 89:21:2c:1c:ff:0c:ba:43:fe:1f:4c:22:81:56:13: fe:ca:05:34:07:86:8c:9b:79:9f:40:52:2e:fd:1f: 0b:00:08:c6:ac:9a:34:0e:33:50:d7:eb:72:8d:95: fc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:67:A5:E5:07:3E:76:A4:D5:D9:BB:31:53:00:4C:FD:AA:8F:82:97 X509v3 Authority Key Identifier: keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1d:9c:80:f7:a2:5a:a4:3a:29:28:4c:ab:10:12:b0:52:89: 9a:7b:4e:4d:46:67:ba:b0:0a:b8:6d:0f:7e:38:7c:de:7b:4c: e4:4d:46:68:7d:28:3f:17:e9:ed:33:9c:27:97:e1:cf:cd:52: fb:ce:b6:aa:a4:ff:c6:47:95:8d:fc:33:13:ec:2c:45:55:47: 6b:e8:5a:9d:75:85:3f:25:ab:5a:6c:25:e4:59:f3:fc:ed:b9: 93:b8:28:5e:6e:c5:6f:9c:f9:cb:9a:fd:61:ae:45:9c:88:5e: 15:34:cc:30:c4:c3:97:4f:8d:69:2e:3b:cf:ec:cb:2e:80:f4: 20:ad:e7:fc:94:32:b3:f3:a3:75:fc:c6:08:c2:a6:b3:c4:f0: 8e:f0:e2:0d:d5:58:ce:60:f6:4f:3b:36:ed:d0:4c:1f:54:90: 0c:7f:87:55:70:56:f7:8f:bf:7d:30:da:67:40:d2:70:49:58: a5:60:bc:e6:d2:c1:2f:a9:ce:24:d9:ba:f2:01:60:fe:a7:08: 90:4e:28:da:fe:f6:3b:16:89:a3:35:ac:f3:dc:0d:c2:66:4e: d0:3f:88:80:f0:5b:06:24:6e:d9:3a:58:eb:16:58:e4:93:4c: bd:cd:1d:93:4e:86:fd:d1:b9:71:7f:23:4e:4f:18:e9:b4:2c: c9:2e:b2:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqrQwoTqYPKOE1U9ygTl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTliYWE4Yzg4MGE5NDU5ZGM1ZjQ0ZDY3NWRlYTRlZjk2 ZGJkZWYwHhcNMjYwMTI1MDEwMDMyWhcNMjYwMTI2MDEwMDMyWjAzMTEwLwYDVQQD EyhlZDY3YTVlNTA3M2U3NmE0ZDVkOWJiMzE1MzAwNGNmZGFhOGY4Mjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVbW3oo54LokMuqggU1hv5TnrYSc wGYqrS0TT8D0beBwP0tn5RrruzwRXKpwkPotf1zKEXE8RBGDqRD0Ozb2pl2essUb ho7oEnuzIFlSq1tzEfNWqDIZYvfnP2rZSWcbve78bSYreCfzcQxE4smkE+qEw8b7 NUwKqPMrHd+BXsIGrTc5pI2zpmzDioT36sdOrUmOofFoAC7ASAWjaYByniDB6IxK d345d3ZALjnaU8+bXQZO+DSXf9dbHTa0gt01Xmas9dpanAZ0ajI1Mhnavx2JISwc /wy6Q/4fTCKBVhP+ygU0B4aMm3mfQFIu/R8LAAjGrJo0DjNQ1+tyjZX8zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1npeUHPnak1dm7MVMATP2qj4KXMB8GA1UdIwQY MBaAFN4ZuqjIgKlFncX0TWdd6k75bb3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjct ODk0OWU3NTFiMjE5LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjctODk0OWU3NTFiMjE5 LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlx2cgPei WqQ6KShMqxASsFKJmntOTUZnurAKuG0Pfjh83ntM5E1GaH0oPxfp7TOcJ5fhz81S +862qqT/xkeVjfwzE+wsRVVHa+hanXWFPyWrWmwl5Fnz/O25k7goXm7Fb5z5y5r9 Ya5FnIheFTTMMMTDl0+NaS47z+zLLoD0IK3n/JQys/OjdfzGCMKms8TwjvDiDdVY zmD2Tzs27dBMH1SQDH+HVXBW94+/fTDaZ0DScElYpWC85tLBL6nOJNm68gFg/qcI kE4o2v72OxaJozWs89wNwmZO0D+IgPBbBiRu2TpY6xZY5JNMvc0dk06G/dG5cX8j Tk8Y6bQsyS6yBg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:49:10 2026 by rpki-client