This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json) Hash identifier: PEi6r1wXZBRe2eCVoo3LA3l+5D7Y5ejlsYJf/0H+PC4= Subject key identifier: D5:F9:DA:81:1B:9C:0C:69:08:22:82:9A:81:0F:5C:F9:CC:33:42:0C Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30 Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730 Certificate serial: 019BF5ABE8712C1EB5B3153F691CD1DB44ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 15:00:42 +0000 Manifest this update: Sun 25 Jan 2026 15:00:42 +0000 Manifest next update: Mon 26 Jan 2026 15:00:42 +0000 Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: rxn39K4YrNEmDERK5cxnhvN/NpeA1lOfxoguM50qmls=) 2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:e8:71:2c:1e:b5:b3:15:3f:69:1c:d1:db:44:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730 Validity Not Before: Jan 25 15:00:42 2026 GMT Not After : Jan 26 15:00:42 2026 GMT Subject: CN=d5f9da811b9c0c690822829a810f5cf9cc33420c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:23:49:1c:8a:f4:7c:85:ab:d3:0e:6a:37:8e: f1:cb:65:e0:ae:9b:a7:95:f0:28:11:db:07:07:1a: c9:fc:b1:db:33:a6:8c:2e:66:3c:0b:a9:4a:5c:0f: 85:ca:7f:a4:1a:1e:b5:44:07:55:65:c9:09:87:79: ea:cc:40:fe:c6:70:cf:00:76:49:7a:2d:18:08:f7: 15:57:1a:07:36:aa:de:47:56:6b:cb:a0:bc:48:23: 65:31:58:7a:19:d0:3b:61:b4:95:bb:9d:bd:86:05: ca:1c:a4:77:a3:99:d6:d6:b3:e1:e4:de:70:67:fd: 6e:15:da:b7:24:40:4e:d7:11:a7:f6:bc:7c:5a:91: 0a:dc:00:e0:89:c8:0d:68:7d:b4:57:fe:d5:44:38: 34:df:a9:20:de:4c:19:b9:c1:14:db:b1:0d:43:58: 04:f2:f5:37:0d:20:85:ab:e3:7c:9b:08:87:6f:16: 43:76:a0:ec:e9:63:32:ff:73:b3:1b:c7:9c:7d:42: c8:32:9a:39:e7:f4:6c:63:ee:f9:9a:95:21:55:6c: 1d:57:3b:d0:ce:f5:d1:1f:90:1f:51:3d:ea:b5:89: 0a:18:1f:b4:e5:3f:bb:8a:e0:df:c5:2f:97:b4:fe: 00:18:59:c7:36:99:9c:b7:86:25:a2:bf:24:11:a1: 2e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F9:DA:81:1B:9C:0C:69:08:22:82:9A:81:0F:5C:F9:CC:33:42:0C X509v3 Authority Key Identifier: keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b3:f3:9b:ed:97:2b:d6:8d:a8:96:88:0f:14:f8:d5:29:20: 77:18:98:93:1b:65:99:9e:ad:2c:41:d7:cb:b6:af:10:63:5e: 0b:d7:18:23:c3:d0:b7:d2:56:fb:e9:bb:3f:f3:e6:2e:9d:c1: d6:51:a3:f2:f5:31:b5:f9:9e:12:8a:6a:36:8e:1e:f7:19:78: 55:b2:b2:a3:89:6a:3b:ee:ff:1e:25:88:4c:b1:e5:93:e4:38: d3:5b:61:ae:1c:00:1f:be:64:ee:00:fb:7a:4a:f8:34:76:76: 81:cf:de:f6:1c:4f:f7:70:e3:11:70:4d:7f:2c:07:2f:98:ee: 13:dd:8f:ae:e5:fd:78:6a:a2:2b:1b:f5:0b:9d:fb:b3:d7:a9: 7a:13:cc:88:97:30:e3:c1:65:45:f6:47:d2:bf:dc:f3:c0:67: f9:31:1c:56:0a:d5:ba:64:4c:7b:ae:73:e0:d1:ce:1c:63:77: dd:91:27:30:41:73:e7:66:ef:a4:ed:bf:84:ad:ff:c6:f1:0e: 36:9a:01:47:ec:06:ec:e4:f1:c5:ca:6d:b2:40:eb:96:b4:68: ee:74:5a:6d:11:22:b4:e2:17:02:7c:bd:69:e0:cc:1c:ac:81: f7:a0:44:ce:78:77:ef:00:ab:c7:93:c2:3f:3a:a4:23:3b:92: 44:89:68:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q+hxLB61sxU/aRzR20TtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGIyMDAzMDkwMWZmMmRmNGViZDFmNDllNDg5MWNiMjhm ZTA3MzAwHhcNMjYwMTI1MTUwMDQyWhcNMjYwMTI2MTUwMDQyWjAzMTEwLwYDVQQD EyhkNWY5ZGE4MTFiOWMwYzY5MDgyMjgyOWE4MTBmNWNmOWNjMzM0MjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CNJHIr0fIWr0w5qN47xy2Xgrpun lfAoEdsHBxrJ/LHbM6aMLmY8C6lKXA+Fyn+kGh61RAdVZckJh3nqzED+xnDPAHZJ ei0YCPcVVxoHNqreR1Zry6C8SCNlMVh6GdA7YbSVu529hgXKHKR3o5nW1rPh5N5w Z/1uFdq3JEBO1xGn9rx8WpEK3ADgicgNaH20V/7VRDg036kg3kwZucEU27ENQ1gE 8vU3DSCFq+N8mwiHbxZDdqDs6WMy/3OzG8ecfULIMpo55/RsY+75mpUhVWwdVzvQ zvXRH5AfUT3qtYkKGB+05T+7iuDfxS+XtP4AGFnHNpmct4Ylor8kEaEu/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNX52oEbnAxpCCKCmoEPXPnMM0IMMB8GA1UdIwQY MBaAFN7bIAMJAf8t9OvR9J5Ikcso/gcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Nzg5NjQtZDgwMi00OGY5LTk2ZjEt ZTNiZmE3MmQ3ZWY4LzEvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82Nzg5NjQtZDgwMi00OGY5LTk2ZjEtZTNiZmE3MmQ3ZWY4 LzEvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7Pzm+2X K9aNqJaIDxT41SkgdxiYkxtlmZ6tLEHXy7avEGNeC9cYI8PQt9JW++m7P/PmLp3B 1lGj8vUxtfmeEopqNo4e9xl4VbKyo4lqO+7/HiWITLHlk+Q401thrhwAH75k7gD7 ekr4NHZ2gc/e9hxP93DjEXBNfywHL5juE92PruX9eGqiKxv1C537s9epehPMiJcw 48FlRfZH0r/c88Bn+TEcVgrVumRMe65z4NHOHGN33ZEnMEFz52bvpO2/hK3/xvEO NpoBR+wG7OTxxcptskDrlrRo7nRabREitOIXAny9aeDMHKyB96BEznh37wCrx5PC PzqkIzuSRIlo3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:17 2026 by rpki-client