This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json) Hash identifier: AHpShk+Wxb5WgKLvu0vm0nWhYIk0HxmlwfYpLP4CSKM= Subject key identifier: 3E:36:38:84:BB:AE:25:CA:68:C5:42:F9:B4:12:60:79:AF:FA:AF:1C Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71 Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71 Certificate serial: 019BF3194E3174A0AE0CABDFA24A6FC03C74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft Manifest number: 04EE Signing time: Sun 25 Jan 2026 03:01:20 +0000 Manifest this update: Sun 25 Jan 2026 03:01:20 +0000 Manifest next update: Mon 26 Jan 2026 03:01:20 +0000 Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=) 2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=) 3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: oYZEBOXcSYCYReJgsMR+JkLXrqvEKmwNMDBaCff1X8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:4e:31:74:a0:ae:0c:ab:df:a2:4a:6f:c0:3c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71 Validity Not Before: Jan 25 03:01:20 2026 GMT Not After : Jan 26 03:01:20 2026 GMT Subject: CN=3e363884bbae25ca68c542f9b4126079affaaf1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:92:c5:b1:3c:2b:9b:ee:43:c8:90:2f:c8: 20:8d:d4:88:11:d9:56:68:e8:f8:ea:5c:77:ad:1d: 9e:f7:b3:ba:a1:3b:0c:a5:31:a3:76:75:75:27:a7: 4e:1d:84:0d:10:d0:0d:51:d9:22:35:63:8b:17:5f: f9:92:03:cf:f8:c6:ba:cd:90:f4:bd:31:41:2f:2d: 90:35:bb:21:5b:d2:3c:6a:63:3c:99:63:4d:d2:f8: a6:6d:ed:11:32:c6:0a:c8:78:76:6f:e1:b5:c9:ae: 0f:2e:57:0c:e2:ff:24:d9:ce:88:ab:b2:db:92:bb: 34:c7:d9:02:51:a2:c5:19:61:1c:de:c5:31:05:10: 1a:ea:87:c2:0e:00:71:90:b8:c9:89:84:1e:75:e6: a2:3e:85:38:f5:86:93:a6:cc:fb:bc:88:f5:b2:77: 80:5b:a1:95:7b:51:b7:0d:f7:02:d1:a0:c3:77:11: 24:5a:97:6e:32:4b:2f:16:8a:55:94:2b:72:53:96: 5b:53:02:be:33:c8:af:67:77:7b:2e:77:b1:c6:d3: e5:f5:85:6a:a1:46:7d:71:c4:07:5b:a8:55:5b:fd: 52:88:12:c1:92:1f:a0:92:9d:3d:c4:df:8b:db:ce: 2d:90:25:f8:75:c4:27:6a:40:41:1d:b4:6c:86:21: 00:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:36:38:84:BB:AE:25:CA:68:C5:42:F9:B4:12:60:79:AF:FA:AF:1C X509v3 Authority Key Identifier: keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:67:9a:c0:c2:12:8f:da:67:d1:0a:45:32:49:fa:9f:93:b1: b2:b3:38:c7:c1:21:b1:59:87:76:64:1f:d7:c9:49:f0:3c:cb: 05:89:86:30:6d:3f:85:98:fc:ef:30:c7:34:ba:da:fb:ef:2b: 5a:df:be:c1:a1:73:e5:aa:43:a6:3c:65:72:d2:cb:5e:90:e3: e1:2c:0e:f3:20:cf:cb:60:64:f4:42:bc:d3:75:0d:6f:d4:92: 83:0e:93:2e:c1:b1:58:68:91:c9:76:3b:df:cb:fb:a4:37:bd: 97:32:98:8e:69:d4:6d:a1:0c:62:20:35:13:10:03:b7:33:fe: 7f:15:da:67:20:18:9c:35:39:4f:b9:89:9b:1b:2a:24:26:f9: 20:21:68:fb:94:4e:a3:a8:8d:92:ef:0e:82:52:a7:2e:26:4c: 8b:2e:76:ea:06:fd:90:dd:35:64:0f:3b:9f:e1:d9:cd:57:74: 8e:18:ee:c8:24:6a:cc:75:8f:62:91:d8:5f:19:ba:b1:f1:0b: 66:6a:2d:65:60:55:fa:a5:6c:4a:6a:ae:9b:f8:d8:d5:81:63: e9:97:fb:ad:9f:17:85:cf:36:c6:1c:98:72:91:f3:41:7b:e7: 83:44:6b:30:c2:b0:b8:9c:bf:64:e1:b4:e0:64:8a:9d:c7:91: 98:fc:5f:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGU4xdKCuDKvfokpvwDx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWRlODczMmIxMDE3MTM4Zjg3MDMyYjcwZmEzYjdiODc3 NmVmNzEwHhcNMjYwMTI1MDMwMTIwWhcNMjYwMTI2MDMwMTIwWjAzMTEwLwYDVQQD EygzZTM2Mzg4NGJiYWUyNWNhNjhjNTQyZjliNDEyNjA3OWFmZmFhZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tmSxbE8K5vuQ8iQL8ggjdSIEdlW aOj46lx3rR2e97O6oTsMpTGjdnV1J6dOHYQNENANUdkiNWOLF1/5kgPP+Ma6zZD0 vTFBLy2QNbshW9I8amM8mWNN0vimbe0RMsYKyHh2b+G1ya4PLlcM4v8k2c6Iq7Lb krs0x9kCUaLFGWEc3sUxBRAa6ofCDgBxkLjJiYQedeaiPoU49YaTpsz7vIj1sneA W6GVe1G3DfcC0aDDdxEkWpduMksvFopVlCtyU5ZbUwK+M8ivZ3d7LnexxtPl9YVq oUZ9ccQHW6hVW/1SiBLBkh+gkp09xN+L284tkCX4dcQnakBBHbRshiEAiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD42OIS7riXKaMVC+bQSYHmv+q8cMB8GA1UdIwQY MBaAFIRd6HMrEBcTj4cDK3D6O3uHdu9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQt YTg4NWZiNDBkOTBkLzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQtYTg4NWZiNDBkOTBk LzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWeawMIS j9pn0QpFMkn6n5OxsrM4x8EhsVmHdmQf18lJ8DzLBYmGMG0/hZj87zDHNLra++8r Wt++waFz5apDpjxlctLLXpDj4SwO8yDPy2Bk9EK803UNb9SSgw6TLsGxWGiRyXY7 38v7pDe9lzKYjmnUbaEMYiA1ExADtzP+fxXaZyAYnDU5T7mJmxsqJCb5ICFo+5RO o6iNku8OglKnLiZMiy526gb9kN01ZA87n+HZzVd0jhjuyCRqzHWPYpHYXxm6sfEL ZmotZWBV+qVsSmqum/jY1YFj6Zf7rZ8Xhc82xhyYcpHzQXvng0RrMMKwuJy/ZOG0 4GSKnceRmPxflQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:50 2026 by rpki-client