This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json) Hash identifier: w0eElP2jv2gHqLjQRV87b2gJ4q7yEQTwMEKXysSLc1c= Subject key identifier: 5A:4B:8C:0A:A0:BF:7D:6A:5C:89:95:2B:4A:2D:81:68:B2:95:14:84 Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee Certificate serial: 019BF6884DB02F9E787BD73412D385FB823F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft Manifest number: 0E7D Signing time: Sun 25 Jan 2026 19:01:26 +0000 Manifest this update: Sun 25 Jan 2026 19:01:26 +0000 Manifest next update: Mon 26 Jan 2026 19:01:26 +0000 Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: YuDoLewdNhdvRyPlGiYc7X6fcuadjzS9VTgnopYrZyM=) 2: QFEuDeeu4X6RvqTM-9j-vL-jCec.roa (hash: enIY13X+DtKSJonUyur86EMN51RX0wJhm2ZaFev3lAE=) 3: lGfy-skAnLgxdiq51q1vJk9OXZg.roa (hash: 905M+SG71AWuwma3AVwJNMrg+VeownsgNGw18kPIIEs=) 4: shwWHH59CwEK5l3nYzgvrpyDADs.roa (hash: Xxgj4+MGImPO/BRjCoJfEL8QyT6UC4SQ9MovxKsATjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:4d:b0:2f:9e:78:7b:d7:34:12:d3:85:fb:82:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee Validity Not Before: Jan 25 19:01:26 2026 GMT Not After : Jan 26 19:01:26 2026 GMT Subject: CN=5a4b8c0aa0bf7d6a5c89952b4a2d8168b2951484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f6:82:c9:00:af:f1:4d:14:13:06:73:bf:e3: 00:12:eb:5c:41:cf:9f:3f:be:0a:e6:2a:5f:7e:39: 6f:de:74:8f:5f:62:1e:41:74:a1:88:19:b8:c9:42: b7:4d:7c:f3:c9:42:d4:a1:04:e9:a2:bd:c8:12:b8: 62:fa:55:55:fa:25:51:2a:16:0e:85:6a:65:b2:42: a0:6a:35:d5:60:16:5d:dc:98:a9:b0:2f:80:fe:61: 1a:5a:f6:66:2b:fb:02:29:80:59:4e:01:b3:e4:25: 5d:da:cd:64:aa:9a:78:fc:be:d9:72:01:8b:2b:3c: 57:4d:81:86:a0:62:fa:91:c3:b6:af:ff:2b:b4:b1: 71:9d:78:6b:b1:83:fd:a2:65:ce:0d:1d:94:94:1f: 2a:73:95:46:61:d1:a4:39:1b:d4:96:5b:7f:8b:9f: 22:5e:90:91:e0:2f:18:61:fa:cd:8e:f2:b7:42:f3: f5:a1:b8:24:67:bc:7a:f1:56:65:45:81:5e:fb:ef: 17:09:2e:83:35:4d:8e:78:6c:08:a8:82:e5:a3:da: 31:e1:96:f0:15:7d:6a:09:68:f6:47:05:a0:3c:56: 36:8c:53:2d:79:86:48:14:a5:4f:b8:48:6d:48:ed: 84:d6:09:ad:73:20:0e:94:b7:81:3a:30:fc:1a:de: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4B:8C:0A:A0:BF:7D:6A:5C:89:95:2B:4A:2D:81:68:B2:95:14:84 X509v3 Authority Key Identifier: keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ac:91:d7:80:41:14:3d:38:07:96:92:75:b5:0c:7f:0a:1f: 54:0e:82:f2:2b:99:71:d2:a0:4e:dc:d8:49:ac:6a:3d:64:38: 13:0e:c7:ec:40:19:7a:5b:4b:67:a2:92:5b:16:b8:1a:84:fe: 5e:e2:58:54:84:42:23:a1:c3:66:ab:16:9d:e0:42:5b:81:e7: 19:13:95:29:95:27:d7:78:16:d1:ec:62:bd:78:52:80:55:40: 02:8f:51:8b:b3:2b:ec:53:d0:23:30:13:38:b5:88:a8:3f:aa: ff:1f:fc:73:f6:55:d8:2d:73:39:4a:9e:d7:96:b7:63:bf:b7: b6:45:42:2a:d4:a8:2c:6c:c9:e1:05:c7:b5:f3:59:03:7e:08: ab:68:6e:fa:d1:d9:09:b7:dc:1e:04:e2:a1:20:c3:d4:7d:3f: 52:92:79:31:31:bd:34:b5:e6:67:5c:0d:75:61:4e:74:e6:75: 87:69:89:54:f4:a5:18:32:f6:02:50:b6:f4:fb:16:ce:33:19: e5:01:69:48:55:28:ae:50:fb:84:79:64:1f:c7:b8:a4:2a:8d: 67:22:eb:0a:a6:75:5b:89:b6:a0:8b:02:b7:41:01:f8:17:19: 55:f5:70:a7:c2:f3:24:cc:f6:72:96:f4:fe:1a:59:19:b4:94: 26:fe:34:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iE2wL554e9c0EtOF+4I/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi NWJlZWUwHhcNMjYwMTI1MTkwMTI2WhcNMjYwMTI2MTkwMTI2WjAzMTEwLwYDVQQD Eyg1YTRiOGMwYWEwYmY3ZDZhNWM4OTk1MmI0YTJkODE2OGIyOTUxNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/aCyQCv8U0UEwZzv+MAEutcQc+f P74K5ipffjlv3nSPX2IeQXShiBm4yUK3TXzzyULUoQTpor3IErhi+lVV+iVRKhYO hWplskKgajXVYBZd3JipsC+A/mEaWvZmK/sCKYBZTgGz5CVd2s1kqpp4/L7ZcgGL KzxXTYGGoGL6kcO2r/8rtLFxnXhrsYP9omXODR2UlB8qc5VGYdGkORvUllt/i58i XpCR4C8YYfrNjvK3QvP1obgkZ7x68VZlRYFe++8XCS6DNU2OeGwIqILlo9ox4Zbw FX1qCWj2RwWgPFY2jFMteYZIFKVPuEhtSO2E1gmtcyAOlLeBOjD8Gt4obwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpLjAqgv31qXImVK0otgWiylRSEMB8GA1UdIwQY MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt NjIxMmFjNDljYTNiLzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqyR14BB FD04B5aSdbUMfwofVA6C8iuZcdKgTtzYSaxqPWQ4Ew7H7EAZeltLZ6KSWxa4GoT+ XuJYVIRCI6HDZqsWneBCW4HnGROVKZUn13gW0exivXhSgFVAAo9Ri7Mr7FPQIzAT OLWIqD+q/x/8c/ZV2C1zOUqe15a3Y7+3tkVCKtSoLGzJ4QXHtfNZA34Iq2hu+tHZ CbfcHgTioSDD1H0/UpJ5MTG9NLXmZ1wNdWFOdOZ1h2mJVPSlGDL2AlC29PsWzjMZ 5QFpSFUorlD7hHlkH8e4pCqNZyLrCqZ1W4m2oIsCt0EB+BcZVfVwp8LzJMz2cpb0 /hpZGbSUJv40nw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:23 2026 by rpki-client