This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft File: 3ZapfPzU67oF9hUkAJ8sFco0P8U.mft (raw, json) Hash identifier: sUevY/Nrzuwf7wXWye+nrNWXgQQ3kuEH7SAp9v3qUek= Subject key identifier: EA:58:55:FF:41:54:A0:94:99:D6:63:67:08:15:C0:5E:FC:09:E7:5A Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5 Certificate issuer: /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5 Certificate serial: 019BF6BF3C62610A585C70DFEC6A36A4927D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft Manifest number: 46 Signing time: Sun 25 Jan 2026 20:01:26 +0000 Manifest this update: Sun 25 Jan 2026 20:01:26 +0000 Manifest next update: Mon 26 Jan 2026 20:01:26 +0000 Files and hashes: 1: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (hash: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg=) 2: 3ZapfPzU67oF9hUkAJ8sFco0P8U.crl (hash: i0Ww1XxN8E/x/d1s7AN8H/zLtT324fmSX9Np11tynzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:3c:62:61:0a:58:5c:70:df:ec:6a:36:a4:92:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5 Validity Not Before: Jan 25 20:01:26 2026 GMT Not After : Jan 26 20:01:26 2026 GMT Subject: CN=ea5855ff4154a09499d663670815c05efc09e75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:be:f7:da:5e:98:21:78:8f:76:28:f2:24:17: 68:23:e7:d2:7f:46:9a:db:7e:d3:50:35:a4:36:87: b7:71:76:a2:0f:87:f5:bb:65:ef:8e:59:a7:f6:99: da:47:06:fc:50:f8:c2:58:b0:4c:71:b9:40:15:d2: 5e:da:0e:03:c7:c3:d3:4c:85:cd:73:a3:fe:38:09: e3:a7:3a:2b:20:5a:2f:28:20:e7:87:6e:d5:e3:cd: 89:e1:1b:d6:55:3e:47:be:70:81:92:92:28:4e:91: fd:d0:c1:75:58:bc:ee:dc:41:18:a0:65:5d:3a:4b: df:fa:f4:34:28:95:ad:b3:7c:00:34:b1:66:21:40: 8d:c2:d4:f1:cd:e4:f1:4b:8a:66:eb:db:9c:7c:97: f8:72:0e:6a:a2:a9:fe:65:7c:76:2c:4a:15:f9:73: 6f:70:e3:ce:9d:ab:9c:a2:36:22:ca:d9:76:8a:cf: 9e:ad:e8:7b:66:ea:21:47:72:d4:46:c1:f1:ba:8b: 2a:37:c9:bf:bc:3a:d6:30:fe:7b:d9:32:bb:10:b7: 67:e3:49:00:d5:f6:62:57:65:5a:3e:8a:91:8a:11: 84:71:cb:07:0f:49:e4:a3:46:bc:2e:94:1c:b7:96: 70:0f:a3:0d:30:71:2a:d9:16:7e:82:67:13:aa:c2: ab:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:58:55:FF:41:54:A0:94:99:D6:63:67:08:15:C0:5E:FC:09:E7:5A X509v3 Authority Key Identifier: keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7b:e1:08:92:ef:27:dd:bc:a2:22:a4:67:00:7e:fe:70:ad: 82:78:e9:ec:e5:8c:e9:ca:9f:4d:cf:7f:4b:77:dd:af:e7:fe: 1a:55:1c:c5:f0:15:df:16:14:88:6a:e4:7c:ae:36:da:43:e0: 05:6e:d5:32:89:eb:15:4b:e0:c0:ec:c5:16:26:e3:c8:d8:70: 80:7f:03:a6:7b:32:ad:5d:a1:4b:81:d5:78:1e:d1:16:f5:03: 59:6f:65:85:33:f3:5d:bc:65:c6:cb:91:94:8b:d2:22:a2:e4: 4e:3f:e2:f5:f2:d9:38:06:88:73:a7:ba:16:75:11:95:4c:49: 1f:4f:48:ac:19:3c:46:eb:70:b9:7e:ca:20:15:ca:ac:e3:ed: d2:c6:2f:b0:df:b6:3d:2b:d9:1a:ae:2b:4e:7e:81:a2:c5:bf: ae:3e:af:5d:1c:ce:fb:2b:02:40:cc:29:05:3d:20:cb:cd:b2: 2a:b7:de:6b:84:f6:16:f7:b3:f2:28:0d:ee:ba:e3:6c:9b:68: 95:2e:42:d3:b4:24:93:fe:be:a2:65:f1:ec:81:cf:59:1d:42: 22:de:99:64:5d:cd:15:b3:02:00:2b:85:38:72:52:0c:bd:ba: ab:4b:a4:0b:e0:8d:4c:a2:12:1a:32:9c:bc:fb:a4:bf:ab:e7: db:f1:f5:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vzxiYQpYXHDf7Go2pJJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTZhOTdjZmNkNGViYmEwNWY2MTUyNDAwOWYyYzE1Y2Ez NDNmYzUwHhcNMjYwMTI1MjAwMTI2WhcNMjYwMTI2MjAwMTI2WjAzMTEwLwYDVQQD EyhlYTU4NTVmZjQxNTRhMDk0OTlkNjYzNjcwODE1YzA1ZWZjMDllNzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr732l6YIXiPdijyJBdoI+fSf0aa 237TUDWkNoe3cXaiD4f1u2Xvjlmn9pnaRwb8UPjCWLBMcblAFdJe2g4Dx8PTTIXN c6P+OAnjpzorIFovKCDnh27V482J4RvWVT5HvnCBkpIoTpH90MF1WLzu3EEYoGVd Okvf+vQ0KJWts3wANLFmIUCNwtTxzeTxS4pm69ucfJf4cg5qoqn+ZXx2LEoV+XNv cOPOnaucojYiytl2is+ereh7ZuohR3LURsHxuosqN8m/vDrWMP572TK7ELdn40kA 1fZiV2VaPoqRihGEccsHD0nko0a8LpQct5ZwD6MNMHEq2RZ+gmcTqsKrNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpYVf9BVKCUmdZjZwgVwF78CedaMB8GA1UdIwQY MBaAFN2WqXz81Ou6BfYVJACfLBXKND/FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1phcGZQelU2N29GOWhVa0FKOHNGY28wUDhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MzZiMTAtOTJlMS00ZDFkLThlZmIt YzFjNTQ4NjZiNjE2LzEvM1phcGZQelU2N29GOWhVa0FKOHNGY28wUDhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80MzZiMTAtOTJlMS00ZDFkLThlZmItYzFjNTQ4NjZiNjE2 LzEvM1phcGZQelU2N29GOWhVa0FKOHNGY28wUDhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonvhCJLv J928oiKkZwB+/nCtgnjp7OWM6cqfTc9/S3fdr+f+GlUcxfAV3xYUiGrkfK422kPg BW7VMonrFUvgwOzFFibjyNhwgH8DpnsyrV2hS4HVeB7RFvUDWW9lhTPzXbxlxsuR lIvSIqLkTj/i9fLZOAaIc6e6FnURlUxJH09IrBk8RutwuX7KIBXKrOPt0sYvsN+2 PSvZGq4rTn6BosW/rj6vXRzO+ysCQMwpBT0gy82yKrfea4T2Fvez8igN7rrjbJto lS5C07Qkk/6+omXx7IHPWR1CIt6ZZF3NFbMCACuFOHJSDL26q0ukC+CNTKISGjKc vPukv6vn2/H1/A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:03 2026 by rpki-client