This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json) Hash identifier: V6fV3b5vEvAt/eUm5GSN+T8Rac28zAsSM2FCk5jNdpI= Subject key identifier: 47:DD:A6:3F:09:E7:E2:F8:BD:FB:2A:38:3B:EA:42:22:F2:40:E5:FB Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d Certificate serial: 019BF91BD9E9380CE071DD335D255380A556 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft Manifest number: 1514 Signing time: Mon 26 Jan 2026 07:01:50 +0000 Manifest this update: Mon 26 Jan 2026 07:01:50 +0000 Manifest next update: Tue 27 Jan 2026 07:01:50 +0000 Files and hashes: 1: 55zpSPIb8yRIbjJpUuTnrKNG7KE.roa (hash: h4Ec3W5AoQcpGRKZrj+SMm1p96ZddYSDTRq4GA8UC/E=) 2: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: 8ehoywx4z1IEvIZl1ydTM+JYXHK8BoPtcLnp4tg4JiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:d9:e9:38:0c:e0:71:dd:33:5d:25:53:80:a5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d Validity Not Before: Jan 26 07:01:50 2026 GMT Not After : Jan 27 07:01:50 2026 GMT Subject: CN=47dda63f09e7e2f8bdfb2a383bea4222f240e5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:09:05:6b:e0:5a:cd:35:86:f8:62:cb:c0: b8:db:10:4a:ef:04:15:62:ba:a1:d2:8f:c6:86:69: 33:b9:8b:07:d8:4b:12:b5:10:cb:31:92:3b:7e:1d: c5:cd:2a:e1:65:d3:c4:24:01:33:a3:e4:a9:b3:fe: 08:57:af:9e:ba:cd:63:fc:55:bd:26:f1:01:fc:91: 69:72:e0:47:e1:48:3b:4f:e5:2b:fb:0d:e7:ef:dd: 67:c9:bf:55:05:ef:74:c2:c0:d7:b8:dd:b7:54:f1: 84:ab:f8:0e:0f:86:56:34:54:86:e0:14:15:e0:55: 11:c1:7f:26:15:18:51:ff:6a:74:f3:ef:b8:0a:31: af:44:34:6b:71:6f:16:96:75:2e:42:87:a8:fc:a9: bb:57:32:1f:1a:42:45:ef:bf:eb:a0:44:31:e6:c3: 84:d3:7d:fe:d5:45:56:80:c4:a1:0b:4a:0b:da:20: 92:c8:6c:f1:1e:79:78:7f:66:89:ce:f2:a6:3e:ec: 94:73:9e:ec:04:91:6b:5c:d1:0f:d9:86:ba:97:ec: 20:e1:da:5e:c6:1a:fd:f3:d1:ee:7b:0e:6b:32:e4: 2f:55:24:6c:45:8d:59:6e:fd:d1:ca:c9:6d:7a:0e: 7f:94:66:29:5d:d9:a9:0a:b2:7b:d0:2f:8b:52:67: 54:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DD:A6:3F:09:E7:E2:F8:BD:FB:2A:38:3B:EA:42:22:F2:40:E5:FB X509v3 Authority Key Identifier: keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:52:e5:65:44:19:ff:9d:67:be:5c:85:47:ef:be:47:9f:e8: b8:d4:30:5d:9c:05:4a:d2:e3:1b:7e:69:a0:75:bc:96:a1:bc: 78:8e:4d:b4:67:34:76:e6:a3:f9:e0:b2:fa:c0:e2:0d:6b:b0: a0:7a:f5:cc:b1:c9:aa:0a:21:d4:6e:f3:b5:9d:b2:00:22:0f: 0b:7c:98:e2:1d:4f:34:f3:7b:0c:41:50:10:a0:85:28:77:37: ae:18:b4:a7:58:de:95:67:76:88:d8:a4:c9:41:b1:7b:5e:fb: 60:ff:ed:64:f9:f6:07:c3:e1:32:6d:e7:e0:cf:4d:41:3a:68: f0:83:0b:75:b5:99:1e:73:3e:05:d1:0b:d8:86:59:91:fa:2d: c3:99:30:1e:eb:ec:fe:53:a0:6f:ac:9a:6e:91:7a:59:8e:54: a1:4f:30:2e:b4:bb:eb:73:af:02:53:f4:69:97:cf:1f:20:c0: a1:c7:b4:b9:ea:b0:2d:2d:d5:07:25:f4:df:a8:f0:cc:9f:af: b6:47:ac:18:9e:ce:11:13:7d:84:16:f9:66:95:01:2d:29:63: e2:26:3f:0f:4a:02:80:bd:55:5e:06:d3:44:e4:aa:d3:ec:6f: c1:bd:a7:7e:0e:fa:e5:02:42:98:65:9d:68:a0:aa:f2:99:d4: 5a:5d:ac:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G9npOAzgcd0zXSVTgKVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2IzZGY2ZDc4Mzk5ZjAzMTgyODU1NmZjZDkwZWJmZGY0 ZDBkMmQwHhcNMjYwMTI2MDcwMTUwWhcNMjYwMTI3MDcwMTUwWjAzMTEwLwYDVQQD Eyg0N2RkYTYzZjA5ZTdlMmY4YmRmYjJhMzgzYmVhNDIyMmYyNDBlNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp0JBWvgWs01hvhiy8C42xBK7wQV Yrqh0o/GhmkzuYsH2EsStRDLMZI7fh3FzSrhZdPEJAEzo+Sps/4IV6+eus1j/FW9 JvEB/JFpcuBH4Ug7T+Ur+w3n791nyb9VBe90wsDXuN23VPGEq/gOD4ZWNFSG4BQV 4FURwX8mFRhR/2p08++4CjGvRDRrcW8WlnUuQoeo/Km7VzIfGkJF77/roEQx5sOE 033+1UVWgMShC0oL2iCSyGzxHnl4f2aJzvKmPuyUc57sBJFrXNEP2Ya6l+wg4dpe xhr989Huew5rMuQvVSRsRY1Zbv3Ryslteg5/lGYpXdmpCrJ70C+LUmdUJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfdpj8J5+L4vfsqODvqQiLyQOX7MB8GA1UdIwQY MBaAFAN7PfbXg5nwMYKFVvzZDr/fTQ0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgt YTQ3NWFlYmIwOGQ1LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgtYTQ3NWFlYmIwOGQ1 LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1LlZUQZ /51nvlyFR+++R5/ouNQwXZwFStLjG35poHW8lqG8eI5NtGc0duaj+eCy+sDiDWuw oHr1zLHJqgoh1G7ztZ2yACIPC3yY4h1PNPN7DEFQEKCFKHc3rhi0p1jelWd2iNik yUGxe177YP/tZPn2B8PhMm3n4M9NQTpo8IMLdbWZHnM+BdEL2IZZkfotw5kwHuvs /lOgb6yabpF6WY5UoU8wLrS763OvAlP0aZfPHyDAoce0ueqwLS3VByX036jwzJ+v tkesGJ7OERN9hBb5ZpUBLSlj4iY/D0oCgL1VXgbTROSq0+xvwb2nfg765QJCmGWd aKCq8pnUWl2sUA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:41 2026 by rpki-client