This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json) Hash identifier: 1tuZNutOKiQr4YWQZBY9SHV4YkLXFj00+4YXTlEz4Gw= Subject key identifier: 54:A8:91:12:F9:B5:F7:89:A4:F2:EF:D0:C1:77:F4:ED:17:14:3D:69 Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07 Certificate serial: 019BF5E3D09E69999211C4D58DFD9F086C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft Manifest number: 038B Signing time: Sun 25 Jan 2026 16:01:46 +0000 Manifest this update: Sun 25 Jan 2026 16:01:46 +0000 Manifest next update: Mon 26 Jan 2026 16:01:46 +0000 Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: h8Z9GTcO26kjiVE5MRqLkpjj8knwHkpXc/oKJWO3oos=) 2: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=) 3: epxl9L9HWnrGUI5XuexvyGVngTU.roa (hash: 6h181ow5CoYXxR4oepREBM0W4TQFaDLQ6AfqnnaQ+Lg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:d0:9e:69:99:92:11:c4:d5:8d:fd:9f:08:6c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07 Validity Not Before: Jan 25 16:01:46 2026 GMT Not After : Jan 26 16:01:46 2026 GMT Subject: CN=54a89112f9b5f789a4f2efd0c177f4ed17143d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f8:1b:4f:a6:0e:4f:2b:23:6a:03:52:99:d2: 78:29:ca:23:65:cd:94:44:f8:66:76:d7:43:03:94: d8:97:5b:7a:f1:75:e3:dc:81:69:61:6c:d1:17:59: 51:b1:02:14:97:55:65:ac:c1:c3:77:18:7c:a7:f5: fd:79:9d:73:43:66:7a:f0:01:5c:3a:50:cb:84:45: 51:78:6a:76:45:37:9a:ba:8b:80:5f:27:12:f4:74: b0:17:c9:f9:0d:8b:0c:d7:70:94:cd:9f:32:e0:1c: b7:6a:cf:ed:98:45:95:2b:9d:37:a2:b5:2d:17:5f: a6:96:64:24:6f:c1:54:f3:84:50:24:65:96:83:32: 57:ed:27:3a:8b:07:47:ef:70:4e:16:2b:5f:c9:f1: 4a:53:d6:39:49:22:61:6d:07:43:f0:dd:0e:0c:d1: 10:72:70:89:6c:5d:fe:ac:50:1e:5e:68:f4:04:c3: 7e:4d:5a:55:2b:29:47:c8:05:bf:7f:fb:ba:8f:d6: da:67:56:19:0e:ec:7e:5f:6b:67:9c:17:4f:0e:7b: 42:4f:56:04:00:dd:45:19:43:f6:43:87:f7:24:d4: 8d:a0:9a:37:63:21:9a:56:e7:ed:6c:92:fc:30:63: a0:1e:dd:1e:52:83:35:f8:62:f5:01:3a:bd:fd:ff: 42:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A8:91:12:F9:B5:F7:89:A4:F2:EF:D0:C1:77:F4:ED:17:14:3D:69 X509v3 Authority Key Identifier: keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6b:ea:2f:c3:1b:8f:df:98:21:39:f2:d5:3d:d9:dc:c2:57: 06:f7:76:7d:fc:ca:dd:7f:7c:c6:18:08:3b:83:7d:b2:65:a2: 82:4b:7e:41:a1:58:47:8b:5c:c9:6d:ee:e4:36:03:6c:10:aa: 09:28:87:89:17:cc:ec:65:e0:c4:5b:be:6d:7d:47:77:ec:36: 8a:fd:f5:75:46:f1:ce:09:0e:02:5d:e6:50:ac:1a:af:d3:4b: aa:1b:95:5a:7f:31:2b:e0:0f:20:be:e1:29:ad:de:e0:e6:c2: ce:79:d3:f8:d7:4a:e6:58:a1:64:8a:f6:43:84:0c:a6:e8:5d: 87:22:c0:4d:f6:e9:77:87:ef:59:20:c2:dd:1a:c9:1d:5a:03: e2:e9:b7:be:85:0b:72:a1:1e:64:cf:5f:d4:7e:3a:ad:23:ac: 31:39:e8:4f:77:ac:2d:0d:34:9b:bc:b4:7d:85:5c:2b:43:00: 19:c1:6e:bd:28:af:29:ac:4a:28:08:38:5d:58:46:89:ba:bf: f2:2a:b5:09:a0:13:22:f0:66:06:cf:9a:26:70:aa:a3:a4:c0: 90:85:54:e4:2d:96:94:ba:d1:f4:4d:b0:f2:1d:ef:bc:0d:a5: 66:f5:98:79:14:b7:e7:dd:5e:88:27:66:b4:f1:dc:d6:56:6a: 17:a8:59:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv149CeaZmSEcTVjf2fCGwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWIzOTRhYWUwODM2ZDM0MzQxZjdhZDMxOTQ5NDc2NWFi NTZiMDcwHhcNMjYwMTI1MTYwMTQ2WhcNMjYwMTI2MTYwMTQ2WjAzMTEwLwYDVQQD Eyg1NGE4OTExMmY5YjVmNzg5YTRmMmVmZDBjMTc3ZjRlZDE3MTQzZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvgbT6YOTysjagNSmdJ4KcojZc2U RPhmdtdDA5TYl1t68XXj3IFpYWzRF1lRsQIUl1VlrMHDdxh8p/X9eZ1zQ2Z68AFc OlDLhEVReGp2RTeauouAXycS9HSwF8n5DYsM13CUzZ8y4By3as/tmEWVK503orUt F1+mlmQkb8FU84RQJGWWgzJX7Sc6iwdH73BOFitfyfFKU9Y5SSJhbQdD8N0ODNEQ cnCJbF3+rFAeXmj0BMN+TVpVKylHyAW/f/u6j9baZ1YZDux+X2tnnBdPDntCT1YE AN1FGUP2Q4f3JNSNoJo3YyGaVuftbJL8MGOgHt0eUoM1+GL1ATq9/f9ClwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSokRL5tfeJpPLv0MF39O0XFD1pMB8GA1UdIwQY MBaAFNzrOUquCDbTQ0H3rTGUlHZatWsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEt NDBjODZiMzJlYjIyLzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEtNDBjODZiMzJlYjIy LzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWvqL8Mb j9+YITny1T3Z3MJXBvd2ffzK3X98xhgIO4N9smWigkt+QaFYR4tcyW3u5DYDbBCq CSiHiRfM7GXgxFu+bX1Hd+w2iv31dUbxzgkOAl3mUKwar9NLqhuVWn8xK+APIL7h Ka3e4ObCznnT+NdK5lihZIr2Q4QMpuhdhyLATfbpd4fvWSDC3RrJHVoD4um3voUL cqEeZM9f1H46rSOsMTnoT3esLQ00m7y0fYVcK0MAGcFuvSivKaxKKAg4XVhGibq/ 8iq1CaATIvBmBs+aJnCqo6TAkIVU5C2WlLrR9E2w8h3vvA2lZvWYeRS3591eiCdm tPHc1lZqF6hZKQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:02 2026 by rpki-client