This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json) Hash identifier: pszUvurHNOix07V/wn+RgnNeWArtKwBzuYf331+jBAA= Subject key identifier: B7:43:4E:8D:0F:9E:D9:E0:B2:88:2A:43:E6:58:8B:93:3E:AA:C9:E8 Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056 Certificate serial: 019BF3F599B1D185811C15C5A91C1007BC64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 07:01:57 +0000 Manifest this update: Sun 25 Jan 2026 07:01:57 +0000 Manifest next update: Mon 26 Jan 2026 07:01:57 +0000 Files and hashes: 1: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: Dqr1qcQtjpKKrh/yJ+qd6fR1srvj805Ree6iU9Jim1E=) 2: GzMjnqAMs0LUgNkkZUnPmTnsw-U.roa (hash: 6whjobpWy5AGszV3zunKjIFDrpH8oaovVR4Ks5zQelI=) 3: JezjNTAfPbdlulCLBoO7mgYw2Y4.roa (hash: DSa6N96/QE2hXNxEFptm9KXCtFZ3HWg6uWKpBPavcuk=) 4: K3NmFuOPAddd8mCVtQYOCkx1jh0.roa (hash: SrLTNGPGVS2F82EZUaVR6hJ6RB2NsvkrSon85JqFkV8=) 5: WSkrs1ltbglcOvmgNNdKDlpJVJo.roa (hash: EfPSiAnXovgs9qwouEhgN4C060q6TwU5BAOhp7sYuHU=) 6: h_4gmGFAdBbCBD4uG-WTGKZV_TU.roa (hash: P8a4xHG+/TWjE2YM8N7yyLhJbWdTBUAy0FVC8WDBUFg=) 7: oAxekyalCBJoSFCk-RiZNpTa9fI.roa (hash: fHlHdL28b0ZUhERGdLlogDNTc4sgr86ip6F/0FC9Q4o=) 8: p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa (hash: HB8efpVA3BHYu9Zn4BAQKGXl8PNjjJD4B4das4y3Wnc=) 9: pPqoqszyNflAViMWi46ZOrZTdjY.roa (hash: 9ArEQlpDxpoMCJBHKPMxnNBFpsFnEVif2wzal4CkC4Y=) 10: tY4sfWyl-B6edZnbfqS5nS-IIv0.asa (hash: YBYJQpmviGXQzwnOV8znSXyELVmQ68/wa0NM6FbOLAc=) 11: uICc5XRh06cVWGSCd3zD2mE8MyE.roa (hash: 4JsLV2oEO2910mihUaMvXNeKfCRpoSGKQU3GmEptyxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:99:b1:d1:85:81:1c:15:c5:a9:1c:10:07:bc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Validity Not Before: Jan 25 07:01:57 2026 GMT Not After : Jan 26 07:01:57 2026 GMT Subject: CN=b7434e8d0f9ed9e0b2882a43e6588b933eaac9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:64:58:98:77:bf:d7:9d:40:0b:da:a4:9f: 6f:21:16:e3:1f:01:22:5c:b1:b9:f4:03:d8:b1:fa: 59:25:70:eb:98:8d:fd:0d:1d:3e:a8:95:3b:3f:ce: c7:81:ef:ef:b2:cf:d8:08:c2:5e:f3:88:00:03:6e: a1:11:7a:1d:ff:92:82:a8:13:b3:24:5b:20:3d:5f: 2f:e7:7b:28:a1:73:3a:e7:b8:6a:a7:80:04:9e:4b: 71:e1:d0:78:70:ac:09:eb:7f:94:d7:19:8d:e2:de: ec:70:96:cd:cd:48:92:40:13:5f:c8:4c:4d:08:c5: da:a9:3d:ce:09:73:e5:80:ae:b2:fd:69:4f:ab:f6: 22:35:9a:37:b9:3b:38:03:23:36:52:c0:ed:4b:eb: 0d:f0:ae:d2:93:f6:b2:40:d4:a1:a3:79:73:51:59: 09:fa:16:e2:84:58:6d:2a:91:91:11:84:77:fa:42: 81:7e:5a:62:6a:95:05:b6:d3:f9:0d:89:3e:0f:c6: 9c:03:b5:a9:2d:fe:84:a3:83:d2:af:66:17:34:24: c6:a5:6e:a2:f6:cf:5b:3e:1d:87:f6:fa:82:73:43: f1:a6:8d:9b:3f:d6:8a:6b:bc:50:7f:74:31:87:b5: cc:4f:8c:9a:12:ee:f1:bf:b8:ba:7c:39:2d:74:a6: 46:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:43:4E:8D:0F:9E:D9:E0:B2:88:2A:43:E6:58:8B:93:3E:AA:C9:E8 X509v3 Authority Key Identifier: keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f8:18:d6:7f:1e:51:40:77:9b:aa:d6:2e:26:da:67:9c:d7: c8:2f:e3:7d:a6:0b:08:3f:ac:b2:18:33:aa:7c:4d:55:cb:18: 3a:c4:40:f1:93:a9:07:19:57:e1:95:49:4e:ab:a4:ea:80:fe: eb:c0:ac:f2:d3:98:68:ad:64:1c:64:3c:0f:c1:cb:b7:7a:63: a5:0e:fc:c6:3e:b6:94:41:ee:a7:8e:34:6d:ab:36:87:9e:24: bf:89:06:b7:2c:6c:a3:d5:d4:34:7d:9f:44:57:6b:1e:88:ed: e1:95:e9:c9:8e:09:c0:6f:9c:d8:2a:71:82:3d:4e:63:35:f6: ab:3e:74:a2:9d:25:7c:0f:bb:2b:58:0d:a5:5c:df:ae:d0:62: e0:2f:9e:e2:bb:e0:a0:07:49:08:0a:df:2e:d6:1d:04:10:5d: bc:ae:e7:98:83:4d:9f:34:15:de:e8:8f:81:30:51:59:ae:35: f3:84:8f:7a:2a:69:6f:5d:d2:ce:8e:a1:51:4a:8b:3b:65:f1: 21:f2:75:e7:97:62:99:91:df:2a:b8:14:3d:e6:ed:41:48:18: fa:50:dc:c4:3a:2f:1f:5f:00:5f:01:0e:8b:62:2d:40:fa:a8: 9f:2e:52:0f:0e:bd:c5:63:96:72:04:5a:8c:65:1d:b9:8a:7d: 95:0b:b7:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9Zmx0YWBHBXFqRwQB7xkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0 ZDkwNTYwHhcNMjYwMTI1MDcwMTU3WhcNMjYwMTI2MDcwMTU3WjAzMTEwLwYDVQQD EyhiNzQzNGU4ZDBmOWVkOWUwYjI4ODJhNDNlNjU4OGI5MzNlYWFjOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC9kWJh3v9edQAvapJ9vIRbjHwEi XLG59APYsfpZJXDrmI39DR0+qJU7P87Hge/vss/YCMJe84gAA26hEXod/5KCqBOz JFsgPV8v53sooXM657hqp4AEnktx4dB4cKwJ63+U1xmN4t7scJbNzUiSQBNfyExN CMXaqT3OCXPlgK6y/WlPq/YiNZo3uTs4AyM2UsDtS+sN8K7Sk/ayQNSho3lzUVkJ +hbihFhtKpGREYR3+kKBflpiapUFttP5DYk+D8acA7WpLf6Eo4PSr2YXNCTGpW6i 9s9bPh2H9vqCc0Pxpo2bP9aKa7xQf3Qxh7XMT4yaEu7xv7i6fDktdKZGsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdDTo0PntngsogqQ+ZYi5M+qsnoMB8GA1UdIwQY MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt NmNjMWQzZWE4MzJlLzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvgY1n8e UUB3m6rWLibaZ5zXyC/jfaYLCD+sshgzqnxNVcsYOsRA8ZOpBxlX4ZVJTquk6oD+ 68Cs8tOYaK1kHGQ8D8HLt3pjpQ78xj62lEHup440bas2h54kv4kGtyxso9XUNH2f RFdrHojt4ZXpyY4JwG+c2Cpxgj1OYzX2qz50op0lfA+7K1gNpVzfrtBi4C+e4rvg oAdJCArfLtYdBBBdvK7nmINNnzQV3uiPgTBRWa4184SPeippb13Szo6hUUqLO2Xx IfJ155dimZHfKrgUPebtQUgY+lDcxDovH18AXwEOi2ItQPqony5SDw69xWOWcgRa jGUduYp9lQu33A== -----END CERTIFICATE-----Generated at Sun Jan 25 14:14:32 2026 by rpki-client