This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json) Hash identifier: J6AMn+c9RV57czOBhtdYtBw5Bmkzm5fzrxstdzbNewc= Subject key identifier: B1:E5:B0:F2:38:04:32:9E:8A:BE:3A:28:5D:18:0E:41:66:A3:84:F2 Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06 Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06 Certificate serial: 019BF72CE25093D5EFE6A1002D703C628FD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft Manifest number: 0E18 Signing time: Sun 25 Jan 2026 22:01:12 +0000 Manifest this update: Sun 25 Jan 2026 22:01:12 +0000 Manifest next update: Mon 26 Jan 2026 22:01:12 +0000 Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: K9MO+SIhVIxUBFB4LmLtc8XLepWW+BJnHMLwkOI8Dck=) 2: x3j0YXNfrQ1uoL9p2fnHwDo4Voo.roa (hash: +HeOEQXq41iJ7S0nO2qqAI09YN5UE1e6xIQ3R8exCoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:e2:50:93:d5:ef:e6:a1:00:2d:70:3c:62:8f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06 Validity Not Before: Jan 25 22:01:12 2026 GMT Not After : Jan 26 22:01:12 2026 GMT Subject: CN=b1e5b0f23804329e8abe3a285d180e4166a384f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:90:f1:25:c2:96:57:e1:d1:d1:fd:dd:bf:65: 66:ec:b5:9a:23:fe:af:2c:2a:11:be:42:4e:f4:7c: a9:ce:e4:da:5d:ca:58:2b:d6:cb:fe:a9:13:35:89: ac:6f:b0:36:79:a0:13:35:19:76:fb:ca:5b:38:87: 2f:49:44:21:b9:91:93:a3:7c:06:5a:f9:a3:de:a7: cd:08:c6:e6:83:cc:dd:af:9f:44:ed:52:72:f0:0b: a9:72:74:49:fa:de:fc:e8:ca:3e:ba:36:15:24:2e: d7:83:b5:26:4e:9f:76:6f:bd:e9:90:82:4f:8a:7b: b3:79:29:f4:e3:f2:ca:62:10:56:8e:a8:21:42:df: 36:0c:e9:f6:61:8f:d5:ac:24:1b:28:d8:d2:e2:6a: a8:f3:b5:24:38:c9:d4:5b:1a:6b:e1:87:9a:50:d6: cf:20:dd:97:9c:2d:e5:d7:d1:a7:c1:27:e5:b1:99: 8c:7c:be:7a:d6:bf:57:2b:44:57:8e:e7:ed:0d:23: 98:5a:9e:47:79:88:21:e1:4b:c0:e2:47:58:54:ec: 46:69:5e:67:87:02:e2:fd:be:15:25:7a:0e:fb:b6: 3c:b1:1b:2a:49:a4:42:8c:cd:dd:34:8b:82:8c:4d: c4:c3:75:2e:8d:40:70:88:dc:e6:0b:90:a2:b0:7e: 2d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E5:B0:F2:38:04:32:9E:8A:BE:3A:28:5D:18:0E:41:66:A3:84:F2 X509v3 Authority Key Identifier: keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6b:d1:cb:2e:9f:15:91:bb:16:67:ac:f8:22:24:49:87:d3: 67:26:d1:7a:89:1d:03:95:7b:b9:1a:c1:aa:f5:11:fd:a3:b9: a3:1c:fc:b4:a6:a2:a3:71:a6:f0:a3:be:d3:6a:5e:44:bd:72: 54:09:ed:58:b2:f2:b2:ad:8a:d5:d8:ad:3b:d4:04:da:d2:3f: 51:c8:15:ac:88:e5:b9:9d:69:15:8e:ce:98:3e:a8:72:2e:9d: 80:a7:95:ee:9b:82:09:94:4b:97:0f:b3:35:4b:23:18:c6:99: 56:68:c1:89:01:3e:50:23:f0:b4:d9:25:a1:63:9f:e2:f5:56: 6f:e9:6f:10:9c:9b:08:98:e3:4b:ae:2d:17:77:7c:c7:cc:3e: 99:6c:24:4f:7f:a4:8c:30:98:1b:fe:42:26:85:9b:b1:f6:b4: 02:9b:b8:f0:b0:0e:ad:10:d3:b7:7d:93:30:50:9c:82:56:41: a6:0b:f8:e8:cf:a6:d5:94:5f:c4:05:9f:33:da:4f:2d:02:cd: a2:73:88:06:dc:d2:10:bf:c7:b0:99:26:a2:33:08:3d:8f:be: 72:e7:da:5b:b8:b2:a9:8d:e5:ad:e6:c9:d8:d5:23:48:f3:53: 3e:dc:88:eb:5b:bb:64:00:f2:31:1f:88:44:f2:73:6d:76:e8: f5:76:8c:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LOJQk9Xv5qEALXA8Yo/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNzJmNWQxMThhYmQxMjkxYWUyNDhlNmM2OWQ2NGE5OWE5 YWVmMDYwHhcNMjYwMTI1MjIwMTEyWhcNMjYwMTI2MjIwMTEyWjAzMTEwLwYDVQQD EyhiMWU1YjBmMjM4MDQzMjllOGFiZTNhMjg1ZDE4MGU0MTY2YTM4NGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JDxJcKWV+HR0f3dv2Vm7LWaI/6v LCoRvkJO9HypzuTaXcpYK9bL/qkTNYmsb7A2eaATNRl2+8pbOIcvSUQhuZGTo3wG Wvmj3qfNCMbmg8zdr59E7VJy8AupcnRJ+t786Mo+ujYVJC7Xg7UmTp92b73pkIJP inuzeSn04/LKYhBWjqghQt82DOn2YY/VrCQbKNjS4mqo87UkOMnUWxpr4YeaUNbP IN2XnC3l19GnwSflsZmMfL561r9XK0RXjuftDSOYWp5HeYgh4UvA4kdYVOxGaV5n hwLi/b4VJXoO+7Y8sRsqSaRCjM3dNIuCjE3Ew3UujUBwiNzmC5CisH4tYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHlsPI4BDKeir46KF0YDkFmo4TyMB8GA1UdIwQY MBaAFDNy9dEYq9EpGuJI5sadZKmamu8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMt ZDJkOTI0MWVjNWRiLzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMtZDJkOTI0MWVjNWRi LzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGvRyy6f FZG7Fmes+CIkSYfTZybReokdA5V7uRrBqvUR/aO5oxz8tKaio3Gm8KO+02peRL1y VAntWLLysq2K1ditO9QE2tI/UcgVrIjluZ1pFY7OmD6oci6dgKeV7puCCZRLlw+z NUsjGMaZVmjBiQE+UCPwtNkloWOf4vVWb+lvEJybCJjjS64tF3d8x8w+mWwkT3+k jDCYG/5CJoWbsfa0Apu48LAOrRDTt32TMFCcglZBpgv46M+m1ZRfxAWfM9pPLQLN onOIBtzSEL/HsJkmojMIPY++cufaW7iyqY3lrebJ2NUjSPNTPtyI61u7ZADyMR+I RPJzbXbo9XaMFg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:59 2026 by rpki-client