This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json) Hash identifier: yDFkmiSSxYRCsmvdLPMoItJG3anvMttLvj7li6msfok= Subject key identifier: 9B:A5:07:AB:0D:9F:21:53:4D:91:DE:AA:87:5A:43:42:AF:B3:69:29 Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89 Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89 Certificate serial: 019BF6BEC5AE89B9407149BAD2F7B952433E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft Manifest number: 12F0 Signing time: Sun 25 Jan 2026 20:00:56 +0000 Manifest this update: Sun 25 Jan 2026 20:00:56 +0000 Manifest next update: Mon 26 Jan 2026 20:00:56 +0000 Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: VEueMY0SqCLHsLs8xr+1QnvQhry/2UlMCNC0F7Go094=) 2: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (hash: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:c5:ae:89:b9:40:71:49:ba:d2:f7:b9:52:43:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89 Validity Not Before: Jan 25 20:00:56 2026 GMT Not After : Jan 26 20:00:56 2026 GMT Subject: CN=9ba507ab0d9f21534d91deaa875a4342afb36929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:68:ca:db:c8:fc:03:d6:ce:5e:52:2a:43:10: 0b:7f:7c:a5:95:be:97:84:f2:eb:21:97:1c:8b:e5: 1c:d2:c1:7c:c4:0f:e0:f2:5a:40:23:aa:09:08:fd: cf:2e:03:74:69:69:b2:a9:ea:4c:ef:6f:1e:b7:83: f3:c1:93:cd:00:54:87:58:aa:4b:04:ed:0f:41:20: 5c:84:c3:57:ec:ff:69:21:1e:3a:63:93:bd:2e:83: 3c:59:a5:ce:ab:4a:b0:5d:5b:f7:83:a0:a7:55:0c: 3b:8d:e0:bc:f0:8f:93:73:02:53:a2:cf:1c:d0:71: cc:7a:a7:19:f9:56:12:94:52:ca:40:38:a9:59:38: a1:35:ce:61:4f:13:08:b8:4c:6b:b5:61:23:d8:26: 29:14:df:ec:e0:76:e5:dd:13:a4:9e:48:a1:b6:e9: 0d:0c:56:cb:27:5c:12:5c:4a:f5:61:64:5b:44:75: ac:6d:2d:d5:38:5c:90:5f:01:80:53:73:9f:bc:6d: 23:9f:23:56:e9:10:5e:f5:99:0a:1a:48:e2:87:d8: b5:ba:37:f9:0b:db:30:fd:b1:b6:23:e9:21:0c:de: 76:2a:5c:97:e2:2c:80:a1:b4:9a:82:84:2e:d5:4b: 75:88:9b:61:8b:be:a2:1d:38:9c:5d:a0:2f:55:95: 16:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A5:07:AB:0D:9F:21:53:4D:91:DE:AA:87:5A:43:42:AF:B3:69:29 X509v3 Authority Key Identifier: keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:42:24:b1:f2:13:47:31:af:1a:0d:f5:68:89:30:ff:e7:fb: c9:b6:4a:ed:5b:21:dc:58:8d:97:d9:cd:40:60:31:07:b2:d2: d1:51:15:40:17:08:24:28:64:38:62:b3:7b:3c:c0:a7:34:4d: f4:4a:8b:5b:9c:45:92:ab:9e:5c:67:07:23:e9:70:33:bc:de: b6:9d:47:3a:2d:c0:fe:e6:bc:19:28:2e:1a:2c:f6:de:1b:f8: e5:aa:1d:af:83:80:30:c7:d5:12:02:6c:f8:8b:f1:c8:8f:44: 89:48:df:65:6a:cd:6f:68:5c:d0:78:32:23:c1:57:97:cb:ea: aa:7d:7d:32:0a:54:a4:6b:47:d7:d1:65:94:0c:eb:5d:d9:f7: 92:a9:63:1c:ce:2f:e1:75:da:54:c1:55:a2:8f:9b:ab:aa:92: ba:3a:11:08:3d:0e:cf:96:13:22:88:67:dd:07:55:a9:85:6c: 75:1d:a0:33:2f:cb:fe:3b:42:dd:9d:b4:10:40:89:0b:b2:41: ed:60:39:97:61:d6:55:41:77:33:bf:f7:90:20:36:9f:a0:7e: ad:ed:23:ac:26:c0:e9:fd:11:13:71:df:ed:4f:18:80:83:e8: 4b:ef:c9:c6:19:06:56:ab:97:7a:a6:3b:17:d2:02:77:17:89: 78:72:8e:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vsWuiblAcUm60ve5UkM+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMjk2Y2Y3MDQzODM2ZWJlMTc0OWM1YzE0NTQ3Yzc5ODQx ZTFiODkwHhcNMjYwMTI1MjAwMDU2WhcNMjYwMTI2MjAwMDU2WjAzMTEwLwYDVQQD Eyg5YmE1MDdhYjBkOWYyMTUzNGQ5MWRlYWE4NzVhNDM0MmFmYjM2OTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGjK28j8A9bOXlIqQxALf3yllb6X hPLrIZcci+Uc0sF8xA/g8lpAI6oJCP3PLgN0aWmyqepM728et4PzwZPNAFSHWKpL BO0PQSBchMNX7P9pIR46Y5O9LoM8WaXOq0qwXVv3g6CnVQw7jeC88I+TcwJTos8c 0HHMeqcZ+VYSlFLKQDipWTihNc5hTxMIuExrtWEj2CYpFN/s4Hbl3ROknkihtukN DFbLJ1wSXEr1YWRbRHWsbS3VOFyQXwGAU3OfvG0jnyNW6RBe9ZkKGkjih9i1ujf5 C9sw/bG2I+khDN52KlyX4iyAobSagoQu1Ut1iJthi76iHTicXaAvVZUWEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJulB6sNnyFTTZHeqodaQ0Kvs2kpMB8GA1UdIwQY MBaAFNwpbPcEODbr4XScXBRUfHmEHhuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMt NjhhYmU1MmQzMDM0LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMtNjhhYmU1MmQzMDM0 LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0IksfIT RzGvGg31aIkw/+f7ybZK7Vsh3FiNl9nNQGAxB7LS0VEVQBcIJChkOGKzezzApzRN 9EqLW5xFkqueXGcHI+lwM7zetp1HOi3A/ua8GSguGiz23hv45aodr4OAMMfVEgJs +IvxyI9EiUjfZWrNb2hc0HgyI8FXl8vqqn19MgpUpGtH19FllAzrXdn3kqljHM4v 4XXaVMFVoo+bq6qSujoRCD0Oz5YTIohn3QdVqYVsdR2gMy/L/jtC3Z20EECJC7JB 7WA5l2HWVUF3M7/3kCA2n6B+re0jrCbA6f0RE3Hf7U8YgIPoS+/JxhkGVquXeqY7 F9ICdxeJeHKOZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:46 2026 by rpki-client