This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft File: 3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json) Hash identifier: Tt58M0mNGbpsr1qMqnbK60qFtCs4Psd5h18y4FzhpHE= Subject key identifier: 3C:65:08:2C:82:78:7C:97:F2:DC:AC:71:5D:09:3E:EC:EA:F7:05:7C Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37 Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37 Certificate serial: 019BFA9C067BB93D3E10BA17A817AF1E7011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 14:01:27 +0000 Manifest this update: Mon 26 Jan 2026 14:01:27 +0000 Manifest next update: Tue 27 Jan 2026 14:01:27 +0000 Files and hashes: 1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: tmyKhTBmtWL3O9Z8xAdswpl8S8r7Y/fbohK8Tuc777o=) 2: WEFbXTk7yeRkC088JT7a_ioRbi0.roa (hash: 3qKJYS5NzbZWhGkSEbXPMuOX8xOy4zfcmmxRc/G+Gk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9c:06:7b:b9:3d:3e:10:ba:17:a8:17:af:1e:70:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37 Validity Not Before: Jan 26 14:01:27 2026 GMT Not After : Jan 27 14:01:27 2026 GMT Subject: CN=3c65082c82787c97f2dcac715d093eeceaf7057c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:86:4d:e4:58:2d:58:77:45:6d:1d:01:e6: 99:08:1f:d4:46:fb:7f:97:dd:a4:1f:35:5c:ed:81: ce:b8:b3:ba:68:9a:ee:80:5d:f1:a3:29:4f:36:6c: 3e:78:70:1d:9c:33:e6:02:7a:da:18:8f:94:b3:e0: 2f:e5:82:be:3c:31:31:a6:89:82:c5:71:50:41:e7: f3:46:cc:91:e4:b3:1b:67:61:8c:f2:23:39:f6:33: b8:e8:74:74:d4:a7:c6:de:74:e7:0a:81:76:7f:a9: 75:2a:dc:17:52:65:a8:8c:56:cd:fe:9a:b6:89:73: 4d:be:8a:7b:60:5d:83:ee:ed:73:f4:b1:5f:4c:1a: 34:8d:a5:bb:e3:dd:49:c7:f6:63:90:8a:20:64:47: ad:d8:38:af:4a:14:74:7d:4a:3c:a6:6c:e3:f2:2b: fb:78:a3:8c:ab:07:5e:eb:33:19:bb:8b:06:0c:5e: 86:95:de:a2:b4:ca:c5:96:19:6f:13:fd:75:37:9c: b1:05:c6:87:4a:85:53:46:58:31:68:9e:f6:66:8f: 2c:2d:14:1f:0c:7b:a5:1e:74:4d:a3:45:aa:a4:e6: d6:9d:75:2d:6d:25:dd:9a:e4:d2:7d:8e:25:ef:89: 50:db:99:aa:fd:4a:55:10:ce:52:a5:f5:ab:cf:25: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:65:08:2C:82:78:7C:97:F2:DC:AC:71:5D:09:3E:EC:EA:F7:05:7C X509v3 Authority Key Identifier: keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:4b:3c:2f:19:41:05:33:9f:5f:44:11:05:0c:ce:29:68:ce: ea:36:cb:d5:9f:2d:e8:64:ea:7b:36:b9:d7:6c:e3:4e:9c:fa: 00:b3:da:33:6e:f2:bc:b6:42:9b:ec:bf:0e:bb:fb:03:c5:f5: 56:f9:f9:3c:86:8f:68:50:6e:fb:e8:ec:56:6f:eb:1d:b7:f5: 51:e9:df:a9:5f:50:52:2a:24:81:96:0a:fe:f5:5b:a3:6f:e7: 1a:c0:77:df:5c:cc:85:a2:51:91:75:24:07:ae:0e:e2:3a:56: f7:90:f4:9b:2b:dc:96:6b:14:c9:2a:6b:fb:0f:ab:f3:7b:b8: e6:87:4d:48:0a:9f:a9:30:71:c3:e5:b0:f3:5a:78:41:46:49: f9:6a:9d:57:a4:3a:14:db:9d:21:53:f3:a2:a0:cc:ef:38:44: dc:96:62:af:c5:ab:72:0d:b8:bc:46:79:1c:b8:53:ce:54:f1: 97:13:4f:a8:58:4f:48:d4:84:05:a0:ed:93:fb:4d:b8:f8:03: 3f:b4:e5:cf:52:e8:bd:81:53:02:98:db:bf:e7:10:cc:06:53: b3:21:fd:03:67:95:a1:40:51:df:59:97:5e:40:4a:87:43:33: d2:84:55:29:c7:19:43:85:59:b5:1f:bb:13:ce:a6:e8:f3:c5: b2:34:73:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6nAZ7uT0+ELoXqBevHnARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGFmN2Q4M2M1ZWViMGQ0MzRhZDc1M2M2YTVmNDc1NDk2 OThiMzcwHhcNMjYwMTI2MTQwMTI3WhcNMjYwMTI3MTQwMTI3WjAzMTEwLwYDVQQD EygzYzY1MDgyYzgyNzg3Yzk3ZjJkY2FjNzE1ZDA5M2VlY2VhZjcwNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviqGTeRYLVh3RW0dAeaZCB/URvt/ l92kHzVc7YHOuLO6aJrugF3xoylPNmw+eHAdnDPmAnraGI+Us+Av5YK+PDExpomC xXFQQefzRsyR5LMbZ2GM8iM59jO46HR01KfG3nTnCoF2f6l1KtwXUmWojFbN/pq2 iXNNvop7YF2D7u1z9LFfTBo0jaW7491Jx/ZjkIogZEet2DivShR0fUo8pmzj8iv7 eKOMqwde6zMZu4sGDF6Gld6itMrFlhlvE/11N5yxBcaHSoVTRlgxaJ72Zo8sLRQf DHulHnRNo0WqpObWnXUtbSXdmuTSfY4l74lQ25mq/UpVEM5SpfWrzyXf5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxlCCyCeHyX8tyscV0JPuzq9wV8MB8GA1UdIwQY MBaAFN4K99g8XusNQ0rXU8al9HVJaYs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lN2E3NzItOGIzOS00MzBkLWIxOTIt YTFiOGJjNWIyY2Q3LzEvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lN2E3NzItOGIzOS00MzBkLWIxOTItYTFiOGJjNWIyY2Q3 LzEvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3ks8LxlB BTOfX0QRBQzOKWjO6jbL1Z8t6GTqeza512zjTpz6ALPaM27yvLZCm+y/Drv7A8X1 Vvn5PIaPaFBu++jsVm/rHbf1UenfqV9QUiokgZYK/vVbo2/nGsB331zMhaJRkXUk B64O4jpW95D0myvclmsUySpr+w+r83u45odNSAqfqTBxw+Ww81p4QUZJ+WqdV6Q6 FNudIVPzoqDM7zhE3JZir8Wrcg24vEZ5HLhTzlTxlxNPqFhPSNSEBaDtk/tNuPgD P7Tlz1LovYFTApjbv+cQzAZTsyH9A2eVoUBR31mXXkBKh0Mz0oRVKccZQ4VZtR+7 E86m6PPFsjRz4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 21:11:41 2026 by rpki-client