This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json) Hash identifier: bGJxL8fQzLOdQ8GS0edYCf7NEQGNuc0xWGlQrfaW3Bg= Subject key identifier: 62:E7:82:C0:79:CE:B2:DB:89:65:98:C6:CF:D6:8A:9B:AB:54:D1:58 Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a Certificate serial: 019BF462A68E84593005B5D34ABF7ED09D6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft Manifest number: 077A Signing time: Sun 25 Jan 2026 09:01:04 +0000 Manifest this update: Sun 25 Jan 2026 09:01:04 +0000 Manifest next update: Mon 26 Jan 2026 09:01:04 +0000 Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: m05FbSeEsnWYgCTWVT5rWXpCBfTQA/BN+xsG5xbmZL0=) 2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=) 3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:a6:8e:84:59:30:05:b5:d3:4a:bf:7e:d0:9d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a Validity Not Before: Jan 25 09:01:04 2026 GMT Not After : Jan 26 09:01:04 2026 GMT Subject: CN=62e782c079ceb2db896598c6cfd68a9bab54d158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:80:2d:95:78:9d:a5:64:51:81:70:61:31:91: 97:b9:9e:a3:13:90:fb:a2:c0:5c:f8:b4:47:54:d1: 57:5b:ac:1b:ac:5b:b6:b2:ab:56:37:98:6a:3c:d0: c1:a7:8a:48:55:9d:3e:9f:67:f8:7c:d2:e2:74:28: e8:f6:f3:51:f7:0c:cb:0a:b5:ec:8d:9b:14:d3:81: 09:ad:cd:e8:bc:a3:c6:ce:d3:45:b2:e9:6a:7b:98: 72:69:8f:e4:d7:cf:47:80:a7:aa:ed:55:ad:e3:30: b7:81:be:05:6a:ab:ac:05:d6:64:48:6d:57:a8:ae: 7e:10:4e:c4:76:53:0a:55:da:2a:24:af:ee:b9:d2: 75:1e:78:75:5f:d2:95:b1:74:f9:6f:46:c7:17:d6: 83:44:8d:86:dd:10:a7:73:21:22:da:00:21:82:13: 9b:68:1d:85:55:fa:5c:47:3b:9b:09:e7:27:ef:35: d0:7a:1f:49:1d:ce:26:af:06:1f:90:b9:5b:a8:7c: 23:44:ff:a1:73:d6:90:81:be:cc:37:0a:0b:d0:f8: 77:9a:b2:be:35:b4:33:ff:82:79:e3:9e:86:ef:e1: a9:36:fe:d0:d6:48:18:f4:6d:0d:53:f2:88:cc:30: 0e:54:cf:28:9c:28:47:c9:5b:5e:34:b6:1a:b7:f9: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E7:82:C0:79:CE:B2:DB:89:65:98:C6:CF:D6:8A:9B:AB:54:D1:58 X509v3 Authority Key Identifier: keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9c:48:2a:d1:34:d2:e4:1c:63:e4:40:82:76:1d:e3:dd:8b: 35:d9:16:1c:56:43:7d:09:6a:12:cf:8d:2e:01:32:05:07:04: 70:98:c3:2f:6a:7a:47:ef:9f:3f:e3:66:8c:3b:cf:d9:8e:16: 4e:c6:81:da:a2:ad:95:97:d1:58:26:33:83:00:ce:2d:ed:e5: 15:a0:a1:cf:a3:68:d9:78:18:4a:c1:3a:e9:b7:63:73:19:0f: 4e:0c:a3:20:39:d1:bd:b9:3f:d6:05:4c:72:3e:eb:fc:92:ac: 29:26:46:03:d7:c3:78:ae:a8:8d:a7:7e:e1:38:fc:7b:8d:6b: 17:0c:3f:e6:72:86:cc:e6:7f:af:68:b0:9a:e4:1e:f4:54:da: 4d:14:65:4e:8c:19:9c:26:e0:f5:18:13:98:47:79:74:a0:4c: b9:c7:03:04:91:05:35:08:ff:95:dc:5a:a2:19:68:86:de:7d: 30:b3:6a:14:14:57:5a:f9:eb:78:86:f4:cd:1b:57:cb:fd:1e: 90:84:1e:21:80:e9:f5:9d:e3:3f:c6:f6:a6:cd:f5:6e:2b:a5: 88:2d:25:e9:7b:d0:3a:18:79:d5:83:dc:b6:e4:0b:68:2c:69: cb:ff:81:27:39:17:a1:5d:1e:e6:12:28:64:6d:b4:f8:86:0f: 35:ba:eb:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YqaOhFkwBbXTSr9+0J1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNzVmYzhjNDVkMzYxMDEwMDg4MzcxMTljYmZhODRhZWUx OWUyOWEwHhcNMjYwMTI1MDkwMTA0WhcNMjYwMTI2MDkwMTA0WjAzMTEwLwYDVQQD Eyg2MmU3ODJjMDc5Y2ViMmRiODk2NTk4YzZjZmQ2OGE5YmFiNTRkMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54AtlXidpWRRgXBhMZGXuZ6jE5D7 osBc+LRHVNFXW6wbrFu2sqtWN5hqPNDBp4pIVZ0+n2f4fNLidCjo9vNR9wzLCrXs jZsU04EJrc3ovKPGztNFsulqe5hyaY/k189HgKeq7VWt4zC3gb4FaqusBdZkSG1X qK5+EE7EdlMKVdoqJK/uudJ1Hnh1X9KVsXT5b0bHF9aDRI2G3RCncyEi2gAhghOb aB2FVfpcRzubCecn7zXQeh9JHc4mrwYfkLlbqHwjRP+hc9aQgb7MNwoL0Ph3mrK+ NbQz/4J5456G7+GpNv7Q1kgY9G0NU/KIzDAOVM8onChHyVteNLYat/mjYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLngsB5zrLbiWWYxs/WipurVNFYMB8GA1UdIwQY MBaAFN11/IxF02EBAIg3EZy/qEruGeKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMt MGNjNTE2OGVhMTVhLzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMtMGNjNTE2OGVhMTVh LzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpxIKtE0 0uQcY+RAgnYd492LNdkWHFZDfQlqEs+NLgEyBQcEcJjDL2p6R++fP+NmjDvP2Y4W TsaB2qKtlZfRWCYzgwDOLe3lFaChz6No2XgYSsE66bdjcxkPTgyjIDnRvbk/1gVM cj7r/JKsKSZGA9fDeK6ojad+4Tj8e41rFww/5nKGzOZ/r2iwmuQe9FTaTRRlTowZ nCbg9RgTmEd5dKBMuccDBJEFNQj/ldxaohloht59MLNqFBRXWvnreIb0zRtXy/0e kIQeIYDp9Z3jP8b2ps31biuliC0l6XvQOhh51YPctuQLaCxpy/+BJzkXoV0e5hIo ZG20+IYPNbrr8A== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:26 2026 by rpki-client