This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json) Hash identifier: NFCSZarSqvO9ZTxvJ5NQG3cJLZwpYEq30L6CxPDGdJA= Subject key identifier: 7F:02:4F:8B:0D:CD:6B:EA:6E:5E:88:F5:8B:B3:F3:AF:E5:28:AC:35 Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Certificate serial: 019BF687CFBCEF7D4D99E82ECE23CAD95CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft Manifest number: 17F1 Signing time: Sun 25 Jan 2026 19:00:54 +0000 Manifest this update: Sun 25 Jan 2026 19:00:54 +0000 Manifest next update: Mon 26 Jan 2026 19:00:54 +0000 Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: hegvWJYYGOXDYJEGufVxgCLHgXLGHn8J0CzeU1pkZqk=) 2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=) 3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:cf:bc:ef:7d:4d:99:e8:2e:ce:23:ca:d9:5c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Validity Not Before: Jan 25 19:00:54 2026 GMT Not After : Jan 26 19:00:54 2026 GMT Subject: CN=7f024f8b0dcd6bea6e5e88f58bb3f3afe528ac35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ee:2a:e6:0b:ae:de:a0:55:eb:30:02:4f:ef: ae:91:c0:e8:32:fd:8d:76:2e:e2:16:ac:22:da:5c: 0b:94:1f:d6:1c:9c:18:2f:9a:1f:5d:35:33:fb:26: f5:98:62:43:a2:5f:43:50:a4:d8:c6:55:75:0a:53: f1:f9:b5:19:51:1c:49:a2:d4:2a:10:b6:eb:8d:b6: e4:83:78:96:92:c1:23:cb:2a:c6:37:2e:15:fc:b0: 19:e2:d7:14:1f:ff:60:2e:87:08:08:2c:df:67:cf: 1d:b4:cd:f3:78:e2:20:59:fc:1f:4b:1d:3b:23:28: d8:e1:ab:f9:e4:1a:eb:d0:84:e4:b4:88:0f:79:00: ea:5e:7f:7b:e8:3f:a2:53:52:b2:31:f7:c7:3e:55: d0:f3:79:0f:30:9c:67:1b:b1:d2:74:2a:37:94:c7: 00:b4:e5:2f:32:9a:55:a4:f5:44:88:b1:6f:aa:e1: ea:91:d1:dc:cd:ae:71:1b:cb:22:bb:af:f1:b1:0e: ee:e5:90:20:17:c3:9b:ea:89:95:00:46:a9:96:0b: b3:17:32:b2:10:c0:0a:e1:02:01:68:e0:bb:59:ee: 24:03:62:ce:43:f7:c4:ed:25:00:ed:19:b5:7a:9c: 73:23:35:15:50:86:da:a9:6d:77:84:48:98:39:94: f0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:02:4F:8B:0D:CD:6B:EA:6E:5E:88:F5:8B:B3:F3:AF:E5:28:AC:35 X509v3 Authority Key Identifier: keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:4e:49:99:6b:ae:c5:f3:6e:10:b2:fe:ef:07:df:46:7c:f8: 46:c1:3c:52:36:20:fe:4f:78:75:79:07:73:56:c3:c5:6c:4f: 31:f2:5b:03:ad:c6:c5:5f:8e:a4:fb:d2:8d:13:70:90:45:11: 0c:26:7e:9a:84:89:6c:8d:47:27:94:f8:41:9e:3b:ee:03:9f: c4:c4:6f:81:a1:9e:68:59:b4:08:21:c6:56:0a:09:46:cd:ae: 75:96:95:5a:c3:a9:7a:f3:14:f4:40:e1:a1:59:e6:a8:bc:cd: b0:2e:c8:22:5c:11:5e:21:cc:53:a3:9d:80:4f:b6:11:05:7e: 89:82:c0:d5:be:78:39:db:8a:bc:c3:03:c1:94:b3:42:8b:a4: db:26:e8:de:5b:1e:b8:14:34:73:c6:38:2a:81:35:df:87:6d: 5f:f3:10:33:1a:1a:00:f9:6f:4b:53:29:00:42:20:db:87:1f: 0d:84:bd:4b:86:14:b2:35:8a:3e:9f:a1:13:14:1f:a1:b7:c8: d1:19:58:d7:75:8d:aa:64:ec:f5:6a:14:06:ae:bd:45:9b:92: ee:09:07:04:90:34:70:be:eb:92:8b:40:99:a1:06:de:df:b1: 58:1f:20:bb:e7:27:f4:45:54:19:7c:3f:46:fd:45:00:10:24: 8d:8f:7b:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h8+8731NmeguziPK2VymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTBkNDMyOTNjZmViZjg3ZTdlYWIyYjBkNTUzZmQyMWE2 ZTk2NDEwHhcNMjYwMTI1MTkwMDU0WhcNMjYwMTI2MTkwMDU0WjAzMTEwLwYDVQQD Eyg3ZjAyNGY4YjBkY2Q2YmVhNmU1ZTg4ZjU4YmIzZjNhZmU1MjhhYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO4q5guu3qBV6zACT++ukcDoMv2N di7iFqwi2lwLlB/WHJwYL5ofXTUz+yb1mGJDol9DUKTYxlV1ClPx+bUZURxJotQq ELbrjbbkg3iWksEjyyrGNy4V/LAZ4tcUH/9gLocICCzfZ88dtM3zeOIgWfwfSx07 IyjY4av55Brr0ITktIgPeQDqXn976D+iU1KyMffHPlXQ83kPMJxnG7HSdCo3lMcA tOUvMppVpPVEiLFvquHqkdHcza5xG8siu6/xsQ7u5ZAgF8Ob6omVAEaplguzFzKy EMAK4QIBaOC7We4kA2LOQ/fE7SUA7Rm1epxzIzUVUIbaqW13hEiYOZTw0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8CT4sNzWvqbl6I9Yuz86/lKKw1MB8GA1UdIwQY MBaAFN6Q1DKTz+v4fn6rKw1VP9IabpZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODkt NTNlZGM2MjZiMjg3LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODktNTNlZGM2MjZiMjg3 LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo05JmWuu xfNuELL+7wffRnz4RsE8UjYg/k94dXkHc1bDxWxPMfJbA63GxV+OpPvSjRNwkEUR DCZ+moSJbI1HJ5T4QZ477gOfxMRvgaGeaFm0CCHGVgoJRs2udZaVWsOpevMU9EDh oVnmqLzNsC7IIlwRXiHMU6OdgE+2EQV+iYLA1b54OduKvMMDwZSzQouk2ybo3lse uBQ0c8Y4KoE134dtX/MQMxoaAPlvS1MpAEIg24cfDYS9S4YUsjWKPp+hExQfobfI 0RlY13WNqmTs9WoUBq69RZuS7gkHBJA0cL7rkotAmaEG3t+xWB8gu+cn9EVUGXw/ Rv1FABAkjY97gw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:52 2026 by rpki-client