This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft File: M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json) Hash identifier: BquWsrEW/PlQBZQGAHrRGEOjCBfG0Qn7XWFgvHTIZVc= Subject key identifier: F7:57:FF:92:FE:E8:81:9E:A2:2F:65:02:BF:D7:2E:20:CB:0B:C4:93 Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C Certificate issuer: /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c Certificate serial: 019BF79A5DCDECA026F8AAC725330D4B90D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 00:00:47 +0000 Manifest this update: Mon 26 Jan 2026 00:00:47 +0000 Manifest next update: Tue 27 Jan 2026 00:00:47 +0000 Files and hashes: 1: 7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa (hash: Cn+90mJi74+2BcOC5W598tXat8oZgbiFe0T88t32ER0=) 2: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: c+Al+5vyNDMXPKXlzTbECxBIR6jZkMgBL4JuPhBgIS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:5d:cd:ec:a0:26:f8:aa:c7:25:33:0d:4b:90:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c Validity Not Before: Jan 26 00:00:47 2026 GMT Not After : Jan 27 00:00:47 2026 GMT Subject: CN=f757ff92fee8819ea22f6502bfd72e20cb0bc493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:f6:38:3e:75:16:53:72:5a:3b:98:11:8f: 86:e6:7c:40:dd:17:13:3b:ed:a4:69:fd:cc:78:ee: 40:01:c4:33:20:2b:50:53:70:98:99:fc:4c:2f:56: 41:62:92:21:ac:9a:86:76:d9:fb:07:15:e4:b0:66: bc:b5:bb:3d:ef:9e:2d:a0:e9:6c:91:46:c2:14:ce: f2:00:b0:63:94:2f:29:7e:b3:ef:5e:bc:76:2d:25: dc:dc:67:ac:e1:28:4d:0a:be:32:70:58:1e:2e:38: 2a:86:37:78:12:4d:13:34:ce:af:3d:dd:f6:24:dc: 95:8a:5a:bc:21:fa:ca:39:2c:61:08:86:94:7f:dd: 46:a2:9e:2d:19:12:8e:c6:a8:d7:fd:70:63:21:f6: 1f:37:0f:e3:37:f6:93:01:4f:01:63:39:3c:14:7a: c1:50:06:19:04:75:b3:ca:87:cd:69:7b:20:0e:7a: b9:39:58:ca:52:62:c8:60:95:a9:8b:88:79:90:83: 48:c6:9a:ec:55:86:27:62:db:c0:e1:fb:65:76:5c: 3c:77:d4:10:f4:d3:69:88:83:76:a6:41:3f:30:34: 1d:54:34:56:b5:a5:d7:0c:25:04:64:b0:b1:0b:32: f7:87:b4:8f:a1:77:b3:e4:c8:ac:b8:c3:73:a6:26: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:57:FF:92:FE:E8:81:9E:A2:2F:65:02:BF:D7:2E:20:CB:0B:C4:93 X509v3 Authority Key Identifier: keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:35:32:1f:9f:26:e3:79:ad:36:75:9a:69:a4:93:04:46:99: 71:c5:1b:cf:c9:c7:4e:3e:60:dd:a0:49:c3:21:af:75:16:4d: 11:66:f5:90:be:85:4d:ee:31:eb:ec:ec:5b:09:e2:eb:35:bc: b1:64:b6:3a:87:af:d4:89:69:65:11:07:6a:b0:a1:93:a0:19: d3:41:28:4f:89:da:92:c3:f9:84:2f:fd:8b:09:6b:95:2c:23: 6e:c9:ba:c0:15:2e:4b:66:46:3c:91:37:d9:b8:29:3d:df:57: 5a:1c:80:0e:70:c1:7b:7e:81:9d:8b:d4:f6:0f:49:6d:3a:fc: 1c:56:1c:7a:cd:4f:3c:5c:b8:c8:73:22:44:89:b8:b7:5a:83: 84:c0:57:81:64:3e:f3:5e:6f:a9:f8:71:36:65:39:a6:70:93: b2:5c:4e:5c:49:f3:de:c2:f4:6f:a0:6d:bf:42:14:af:50:6a: aa:2e:26:78:a3:8d:c0:33:da:72:55:59:ce:8e:68:4d:0f:f9: 94:c8:f0:fe:04:95:ce:f5:4c:1d:b1:f6:3c:de:ce:75:5c:7d: 4f:d9:f8:80:80:35:e8:ae:02:c8:0b:9b:ec:61:af:6d:2c:9e: 35:05:01:ef:ba:9a:d7:01:24:12:18:d9:ed:a3:6c:b0:e6:31: 59:49:74:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3ml3N7KAm+KrHJTMNS5DYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNzEwY2Y4MWQyMTc3N2E5OGQzZDk5OWRjMWU2ZWFlMDU1 ZjdjM2MwHhcNMjYwMTI2MDAwMDQ3WhcNMjYwMTI3MDAwMDQ3WjAzMTEwLwYDVQQD EyhmNzU3ZmY5MmZlZTg4MTllYTIyZjY1MDJiZmQ3MmUyMGNiMGJjNDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCv2OD51FlNyWjuYEY+G5nxA3RcT O+2kaf3MeO5AAcQzICtQU3CYmfxML1ZBYpIhrJqGdtn7BxXksGa8tbs9754toOls kUbCFM7yALBjlC8pfrPvXrx2LSXc3Ges4ShNCr4ycFgeLjgqhjd4Ek0TNM6vPd32 JNyVilq8IfrKOSxhCIaUf91Gop4tGRKOxqjX/XBjIfYfNw/jN/aTAU8BYzk8FHrB UAYZBHWzyofNaXsgDnq5OVjKUmLIYJWpi4h5kINIxprsVYYnYtvA4ftldlw8d9QQ 9NNpiIN2pkE/MDQdVDRWtaXXDCUEZLCxCzL3h7SPoXez5MisuMNzpibIzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdX/5L+6IGeoi9lAr/XLiDLC8STMB8GA1UdIwQY MBaAFDNxDPgdIXd6mNPZmdwebq4FX3w8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8zOTY3MDktMjBlMS00ZjdkLTk2M2Ut M2I1ZTgzZjYyNmUzLzEvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8zOTY3MDktMjBlMS00ZjdkLTk2M2UtM2I1ZTgzZjYyNmUz LzEvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTUyH58m 43mtNnWaaaSTBEaZccUbz8nHTj5g3aBJwyGvdRZNEWb1kL6FTe4x6+zsWwni6zW8 sWS2Ooev1IlpZREHarChk6AZ00EoT4naksP5hC/9iwlrlSwjbsm6wBUuS2ZGPJE3 2bgpPd9XWhyADnDBe36BnYvU9g9JbTr8HFYces1PPFy4yHMiRIm4t1qDhMBXgWQ+ 815vqfhxNmU5pnCTslxOXEnz3sL0b6Btv0IUr1Bqqi4meKONwDPaclVZzo5oTQ/5 lMjw/gSVzvVMHbH2PN7OdVx9T9n4gIA16K4CyAub7GGvbSyeNQUB77qa1wEkEhjZ 7aNssOYxWUl0GQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:20 2026 by rpki-client