This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json) Hash identifier: KARPAhj37gsrNYrHBa9xKkwM4Qz3j+K0fHjAB/KRrw4= Subject key identifier: 23:1C:B0:A3:44:FD:9E:C0:C0:92:3D:2C:19:1C:90:9B:99:D6:26:7A Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2 Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2 Certificate serial: 019BF763DF3BEB6FC0FE8E3726ECBBDB594E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft Manifest number: 0861 Signing time: Sun 25 Jan 2026 23:01:15 +0000 Manifest this update: Sun 25 Jan 2026 23:01:15 +0000 Manifest next update: Mon 26 Jan 2026 23:01:15 +0000 Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: khErI2+H6vMuotuSzw//yF0kk0CPmV4beNgf0OwLCBQ=) 2: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (hash: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:df:3b:eb:6f:c0:fe:8e:37:26:ec:bb:db:59:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2 Validity Not Before: Jan 25 23:01:15 2026 GMT Not After : Jan 26 23:01:15 2026 GMT Subject: CN=231cb0a344fd9ec0c0923d2c191c909b99d6267a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:db:bc:a7:b3:30:68:be:41:30:0d:e5:ca:16: b3:35:42:5a:ad:e9:68:14:f1:82:f2:fb:18:14:86: 48:32:0a:53:6f:31:1a:b4:a3:b9:df:95:70:b5:a5: 99:1c:2e:79:e5:c6:c0:3f:b7:5f:75:6f:f3:ba:12: 79:59:94:7b:f0:d7:f5:cb:9e:f7:5b:ef:c7:06:53: 85:bd:b1:fc:84:c7:45:16:61:25:d7:fc:f8:a5:de: 8e:d5:fa:77:f5:92:b7:64:15:83:1b:09:e2:80:bf: 35:67:07:b6:c5:64:fa:0c:dc:30:38:c6:a0:b8:bd: ba:e3:77:c1:94:cf:43:cb:f4:d1:aa:16:67:3e:e4: 86:29:b8:f1:1a:0a:0a:a9:e2:6b:f8:50:31:5f:d7: 5c:83:9f:ee:37:79:1a:3a:9e:fa:54:15:2d:ee:de: 8c:a0:de:80:c0:08:4f:46:09:07:88:7f:96:7a:21: e2:6a:cb:22:32:22:7c:a6:3d:90:43:4a:82:7d:a8: 30:7e:3a:9e:c0:59:6f:5a:6f:9e:42:80:d6:89:1b: 53:ec:ad:4e:4d:5f:ea:df:8b:28:ec:72:df:1f:33: 4a:e5:36:16:ef:30:5c:7d:c5:72:4c:ad:3c:12:a9: 9a:a1:4e:51:32:43:a9:05:1f:7f:37:e5:64:9f:10: e5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1C:B0:A3:44:FD:9E:C0:C0:92:3D:2C:19:1C:90:9B:99:D6:26:7A X509v3 Authority Key Identifier: keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:91:f9:47:84:5d:d7:94:95:bc:14:11:a4:3b:f1:dd:93:68: f4:02:c2:df:a5:cc:d6:0b:47:b1:c1:20:bd:8f:6d:92:5e:de: bc:22:7b:2a:82:bd:b6:23:67:5a:55:d5:af:15:7d:fc:05:28: a0:ba:94:60:7c:26:c8:76:ed:9e:c0:6f:4d:17:37:06:e4:73: 16:6e:7c:6c:53:5b:04:09:69:ae:02:a5:89:2b:02:4a:71:59: 72:93:85:b3:a2:39:70:0f:39:51:a5:9d:a3:50:55:dd:b3:06: d7:1c:43:9a:80:b4:8f:9b:03:40:54:b7:27:67:22:c1:1f:3c: 45:0e:7e:80:73:7c:fb:ae:ea:3b:80:bb:7d:3f:01:bd:a1:d4: 14:1a:7d:7e:71:28:0e:37:9f:77:23:b3:03:f3:8d:46:10:ec: 15:9d:a5:89:9a:67:8b:f7:7c:73:1b:78:e3:d7:f4:bb:89:10: a4:ce:97:32:75:e7:09:d7:dc:0c:c1:b2:56:4b:68:23:9a:55: b0:75:3d:26:b0:99:7a:f5:37:9b:71:4b:5c:0c:a4:38:03:fb: 63:1c:e3:51:59:ac:67:50:67:25:9f:5b:5d:35:1d:70:7f:5a: 3c:3c:02:d4:9b:06:1e:aa:88:0f:d1:85:36:18:f5:47:25:2c: fe:aa:a3:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y98762/A/o43Juy721lOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDNlYTJjZDA3OTk3ZWNkZmUxNzE4ODg3MjcwODY1MmUx NzJkZjIwHhcNMjYwMTI1MjMwMTE1WhcNMjYwMTI2MjMwMTE1WjAzMTEwLwYDVQQD EygyMzFjYjBhMzQ0ZmQ5ZWMwYzA5MjNkMmMxOTFjOTA5Yjk5ZDYyNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9u8p7MwaL5BMA3lyhazNUJarelo FPGC8vsYFIZIMgpTbzEatKO535VwtaWZHC555cbAP7dfdW/zuhJ5WZR78Nf1y573 W+/HBlOFvbH8hMdFFmEl1/z4pd6O1fp39ZK3ZBWDGwnigL81Zwe2xWT6DNwwOMag uL2643fBlM9Dy/TRqhZnPuSGKbjxGgoKqeJr+FAxX9dcg5/uN3kaOp76VBUt7t6M oN6AwAhPRgkHiH+WeiHiassiMiJ8pj2QQ0qCfagwfjqewFlvWm+eQoDWiRtT7K1O TV/q34so7HLfHzNK5TYW7zBcfcVyTK08EqmaoU5RMkOpBR9/N+VknxDlHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMcsKNE/Z7AwJI9LBkckJuZ1iZ6MB8GA1UdIwQY MBaAFNxD6izQeZfs3+FxiIcnCGUuFy3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2Yt NDQ2NDRkZDVlZDQ0LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2YtNDQ2NDRkZDVlZDQ0 LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZH5R4Rd 15SVvBQRpDvx3ZNo9ALC36XM1gtHscEgvY9tkl7evCJ7KoK9tiNnWlXVrxV9/AUo oLqUYHwmyHbtnsBvTRc3BuRzFm58bFNbBAlprgKliSsCSnFZcpOFs6I5cA85UaWd o1BV3bMG1xxDmoC0j5sDQFS3J2ciwR88RQ5+gHN8+67qO4C7fT8BvaHUFBp9fnEo DjefdyOzA/ONRhDsFZ2liZpni/d8cxt449f0u4kQpM6XMnXnCdfcDMGyVktoI5pV sHU9JrCZevU3m3FLXAykOAP7YxzjUVmsZ1BnJZ9bXTUdcH9aPDwC1JsGHqqID9GF Nhj1RyUs/qqjBw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:55 2026 by rpki-client