This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json) Hash identifier: iLfGf5JFZ6yRYArMr0uE2HuaJtowakg6XSat+Igxd5Y= Subject key identifier: A9:1B:04:75:C9:55:D1:84:84:CE:E3:D6:0F:04:AE:8E:BD:60:52:98 Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad Certificate serial: 019BF50773D664A582ACD87031F0A8591090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft Manifest number: 129B Signing time: Sun 25 Jan 2026 12:01:04 +0000 Manifest this update: Sun 25 Jan 2026 12:01:04 +0000 Manifest next update: Mon 26 Jan 2026 12:01:04 +0000 Files and hashes: 1: 10zWBAG3yHk6LZ2cT_OBKxWFNWM.roa (hash: 3CyCzPInmv1M2HVwGxzJQ9jqmdcvQHPMZfCVee8QVmg=) 2: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: hK61b+gVAEqIzYzOgkwkQT7zMYy7Y4o2lZEUmA5dByg=) 3: K7-F8r5HaixUXPBxPks_drLfCLM.roa (hash: IxrS8dpVCynttuxgWbJEvLUTdnUOcVknWjS85DsyGnY=) 4: RubVNCawFmtSSykZF5XcDH3aXBc.roa (hash: pb4UIOlvmHSq695BiD6WHLwCWaB/NLP+RzVFb75tWfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:73:d6:64:a5:82:ac:d8:70:31:f0:a8:59:10:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad Validity Not Before: Jan 25 12:01:04 2026 GMT Not After : Jan 26 12:01:04 2026 GMT Subject: CN=a91b0475c955d18484cee3d60f04ae8ebd605298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0d:5a:05:50:a6:40:6a:28:36:f7:80:fc:28: f7:25:ed:b7:ee:fe:30:9f:bb:05:fd:d1:84:94:7c: c0:23:da:5d:54:7c:50:40:16:85:97:5f:34:72:ff: 57:63:11:35:f2:2e:9d:1b:32:49:82:d9:95:92:77: 05:35:cd:69:34:27:49:82:14:90:01:ba:49:ab:89: b0:16:82:b1:79:03:97:af:25:6b:ee:4b:be:6a:71: 13:88:96:76:24:15:77:56:52:5c:33:69:b9:5a:df: d8:0e:28:24:a3:75:00:ab:57:6a:08:2b:c8:32:39: d7:30:2d:db:d2:4f:55:7d:c4:51:59:dc:9f:71:09: 10:39:ca:28:86:6f:53:30:b1:7e:f9:1f:25:88:35: da:ed:c5:5e:e5:f9:2f:34:2a:f5:8e:c5:e6:05:7c: a6:48:13:97:03:09:dd:d1:c7:03:95:a8:fb:15:72: 20:f1:b6:30:a6:ff:6a:4a:08:f7:3d:7b:37:3a:36: 07:0b:b1:15:b5:87:d7:3e:d3:d1:c5:71:ee:4b:17: e7:e4:2a:3d:29:07:a3:b4:7a:fc:58:dd:04:24:ab: 4a:4c:e1:2f:7a:7d:7a:1c:8e:9b:6d:11:2e:29:9e: 4d:f7:a4:e6:94:ca:15:37:0c:0f:56:8e:52:e5:54: 9d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1B:04:75:C9:55:D1:84:84:CE:E3:D6:0F:04:AE:8E:BD:60:52:98 X509v3 Authority Key Identifier: keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1b:42:d7:19:e8:a8:71:ec:04:91:06:7a:5f:b3:96:ec:75: b3:18:cd:fe:e4:e3:88:61:d9:63:ea:90:52:a3:f3:a1:32:4b: 15:79:92:d6:82:8e:c3:24:bf:72:ce:22:c3:a9:2c:0a:6e:81: c5:06:52:ab:c1:c5:46:4b:0e:e1:1e:ce:0c:89:2b:8e:eb:6c: 82:18:87:dc:4c:a5:3a:aa:76:fa:d6:cf:ad:8c:81:c0:6b:67: ef:58:d5:69:aa:1a:d1:db:eb:2e:d8:ad:68:c6:b5:f6:2d:d7: c2:18:3a:fb:82:bb:94:78:d8:1b:a2:5a:ee:01:ee:44:e8:e5: 65:ee:7f:f5:b8:32:0c:51:f1:2f:36:ef:2d:58:75:61:88:d5: d2:7e:8c:9c:34:c6:f8:80:b9:11:e8:11:4a:09:61:36:fc:82: 8a:88:19:46:36:3d:c3:2e:1c:ea:43:18:d5:29:93:4f:49:75: ec:1d:fc:09:72:56:66:ce:f7:30:ed:90:eb:65:fa:8b:dd:40: bd:13:15:b1:c7:a9:5d:7a:28:ee:c1:a4:2f:78:77:01:16:ad: 41:08:14:ef:b5:5a:93:f9:18:c5:cd:48:f0:c2:71:5c:52:44: 5c:ce:45:9f:e9:b2:6d:f7:c7:b0:f6:91:cd:43:d5:6d:2d:9d: 42:99:50:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B3PWZKWCrNhwMfCoWRCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMDE5OGE3YjNhZmRjZGQ3MDAzNTYyYTA4NzE4NzhlMjM4 NzYwYWQwHhcNMjYwMTI1MTIwMTA0WhcNMjYwMTI2MTIwMTA0WjAzMTEwLwYDVQQD EyhhOTFiMDQ3NWM5NTVkMTg0ODRjZWUzZDYwZjA0YWU4ZWJkNjA1Mjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA1aBVCmQGooNveA/Cj3Je237v4w n7sF/dGElHzAI9pdVHxQQBaFl180cv9XYxE18i6dGzJJgtmVkncFNc1pNCdJghSQ AbpJq4mwFoKxeQOXryVr7ku+anETiJZ2JBV3VlJcM2m5Wt/YDigko3UAq1dqCCvI MjnXMC3b0k9VfcRRWdyfcQkQOcoohm9TMLF++R8liDXa7cVe5fkvNCr1jsXmBXym SBOXAwnd0ccDlaj7FXIg8bYwpv9qSgj3PXs3OjYHC7EVtYfXPtPRxXHuSxfn5Co9 KQejtHr8WN0EJKtKTOEven16HI6bbREuKZ5N96TmlMoVNwwPVo5S5VSdnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkbBHXJVdGEhM7j1g8Ero69YFKYMB8GA1UdIwQY MBaAFN8BmKezr9zdcANWKghxh44jh2CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQt MGZjYzZjMzAxMWZjLzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQtMGZjYzZjMzAxMWZj LzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBtC1xno qHHsBJEGel+zlux1sxjN/uTjiGHZY+qQUqPzoTJLFXmS1oKOwyS/cs4iw6ksCm6B xQZSq8HFRksO4R7ODIkrjutsghiH3EylOqp2+tbPrYyBwGtn71jVaaoa0dvrLtit aMa19i3Xwhg6+4K7lHjYG6Ja7gHuROjlZe5/9bgyDFHxLzbvLVh1YYjV0n6MnDTG +IC5EegRSglhNvyCiogZRjY9wy4c6kMY1SmTT0l17B38CXJWZs73MO2Q62X6i91A vRMVscepXXoo7sGkL3h3ARatQQgU77Vak/kYxc1I8MJxXFJEXM5Fn+mybffHsPaR zUPVbS2dQplQGA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:54 2026 by rpki-client