This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json) Hash identifier: PL40G2v6kZ18zBblZ7DqdK/Ugip/GnRHAaiLIoHG7g8= Subject key identifier: 54:72:A2:3D:58:1E:96:43:19:8F:6B:09:F5:CA:19:ED:5B:E0:EC:B9 Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5 Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5 Certificate serial: 019BF8ACD6057F76DEBEE503E07125205F13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft Manifest number: 0702 Signing time: Mon 26 Jan 2026 05:00:35 +0000 Manifest this update: Mon 26 Jan 2026 05:00:35 +0000 Manifest next update: Tue 27 Jan 2026 05:00:35 +0000 Files and hashes: 1: 2U3Vq1QnP8ctuHADYZl7AYfrN8Q.roa (hash: aSqIWAFTh+DEyVISsUqiiF4heoz8JVrFxkyTiK/xNAk=) 2: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: 0msonpYiKRepZyr28TxXBUE9xGJSe05QDUD/ET7c/IQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:d6:05:7f:76:de:be:e5:03:e0:71:25:20:5f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5 Validity Not Before: Jan 26 05:00:35 2026 GMT Not After : Jan 27 05:00:35 2026 GMT Subject: CN=5472a23d581e9643198f6b09f5ca19ed5be0ecb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e7:c8:70:b0:ec:36:b5:65:9f:6e:ef:1b:be: cf:15:b8:9f:3f:bc:7e:cf:8c:56:8f:76:55:cd:f1: 44:07:63:a7:2e:b8:f0:98:7f:60:8c:25:11:97:27: 62:8e:65:3d:a1:af:d8:4c:94:64:73:d6:6b:46:ed: 19:e4:89:b7:3a:c9:3b:18:32:e2:a3:77:15:fc:a2: e3:16:02:b7:00:9b:19:b9:f0:a3:53:44:b8:cf:a9: 86:0b:5d:48:91:a4:f3:ae:42:30:39:dd:b6:c3:23: b1:d7:7b:8e:e1:ff:81:79:97:ab:87:92:ab:91:26: 63:93:43:ff:d0:8f:f6:1c:42:4f:93:50:6b:b9:24: 81:b6:bc:98:61:01:40:b4:24:55:f2:14:cb:9c:00: a8:e3:be:d5:7f:44:30:f8:b3:a1:78:be:11:be:40: 1c:e0:8e:50:a0:66:de:90:f7:e9:d7:bc:02:b7:e0: 04:82:43:a7:ff:75:94:47:02:f9:5c:78:dc:4d:02: a1:e5:3e:71:a4:e8:55:1c:ad:eb:27:be:61:7f:5c: e2:cd:35:29:d8:ca:2e:2d:7b:72:6e:e4:d6:0d:24: 9b:f0:cb:0d:06:5b:fe:be:78:27:85:5f:c0:ef:44: f5:91:92:0b:cb:af:43:f5:b5:d5:c4:5a:09:8e:57: 62:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:72:A2:3D:58:1E:96:43:19:8F:6B:09:F5:CA:19:ED:5B:E0:EC:B9 X509v3 Authority Key Identifier: keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:37:78:bf:04:e2:0c:61:57:fb:7b:f0:a9:ea:49:d6:34:4c: 3f:ac:1d:0f:28:06:bf:b9:a5:aa:8b:53:87:3e:85:a3:0c:88: b1:e5:7c:0f:07:4c:47:c4:7f:96:30:02:69:f7:cb:8d:90:b9: b3:5b:c1:0c:77:b4:53:1d:f2:e2:08:73:3a:c1:c3:c9:c9:2c: e5:bc:4d:39:67:b5:1f:51:96:8f:13:a1:ee:b2:e7:43:61:92: 15:5a:fe:22:e0:84:d2:4a:01:b0:76:a7:65:c8:79:2c:83:80: 96:53:f8:07:15:8d:d6:df:12:de:77:53:f9:dc:83:23:78:10: e4:64:f1:48:c4:7a:29:ac:87:c3:9f:d4:e4:b6:0d:ab:20:ef: bd:c4:ab:be:2c:d3:01:60:0f:e6:dd:2b:da:29:6d:1d:61:35: b6:86:55:30:10:ae:92:e5:29:4a:62:3c:39:e7:66:b6:f2:24: 4a:8f:46:b5:22:a0:23:84:c5:84:e1:11:76:81:c4:ef:ed:e0: 84:49:38:65:04:91:ff:38:f0:48:b9:ec:7e:39:25:43:66:82: 70:20:80:68:80:28:ca:9e:1d:43:1c:34:0b:dd:ff:e2:d8:30: b3:53:48:20:83:49:dd:f0:24:21:1e:61:05:b6:97:33:5b:3e: 43:c2:37:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rNYFf3bevuUD4HElIF8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOGFlNGQ5YWQ4NjNkZGExNDAxYjQ5MGMyOGNmZjgyZDk5 OGUzYjUwHhcNMjYwMTI2MDUwMDM1WhcNMjYwMTI3MDUwMDM1WjAzMTEwLwYDVQQD Eyg1NDcyYTIzZDU4MWU5NjQzMTk4ZjZiMDlmNWNhMTllZDViZTBlY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhufIcLDsNrVln27vG77PFbifP7x+ z4xWj3ZVzfFEB2OnLrjwmH9gjCURlydijmU9oa/YTJRkc9ZrRu0Z5Im3Osk7GDLi o3cV/KLjFgK3AJsZufCjU0S4z6mGC11IkaTzrkIwOd22wyOx13uO4f+BeZerh5Kr kSZjk0P/0I/2HEJPk1BruSSBtryYYQFAtCRV8hTLnACo477Vf0Qw+LOheL4RvkAc 4I5QoGbekPfp17wCt+AEgkOn/3WURwL5XHjcTQKh5T5xpOhVHK3rJ75hf1zizTUp 2MouLXtybuTWDSSb8MsNBlv+vngnhV/A70T1kZILy69D9bXVxFoJjldiEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRyoj1YHpZDGY9rCfXKGe1b4Oy5MB8GA1UdIwQY MBaAFN2K5Nmthj3aFAG0kMKM/4LZmOO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGIt NGRlOTM0NWM4M2JmLzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGItNGRlOTM0NWM4M2Jm LzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITd4vwTi DGFX+3vwqepJ1jRMP6wdDygGv7mlqotThz6FowyIseV8DwdMR8R/ljACaffLjZC5 s1vBDHe0Ux3y4ghzOsHDycks5bxNOWe1H1GWjxOh7rLnQ2GSFVr+IuCE0koBsHan Zch5LIOAllP4BxWN1t8S3ndT+dyDI3gQ5GTxSMR6KayHw5/U5LYNqyDvvcSrvizT AWAP5t0r2iltHWE1toZVMBCukuUpSmI8OedmtvIkSo9GtSKgI4TFhOERdoHE7+3g hEk4ZQSR/zjwSLnsfjklQ2aCcCCAaIAoyp4dQxw0C93/4tgws1NIIINJ3fAkIR5h BbaXM1s+Q8I3WQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:37:17 2026 by rpki-client