This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json) Hash identifier: iK4hygS3xxtX1F9zhtsNW5GmRP62MHOezkYeDoi6bNQ= Subject key identifier: 37:8B:A5:10:7B:C7:55:5A:EC:34:D7:12:D9:5B:80:69:9E:3D:79:AC Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Certificate serial: 019BF3BDCB1CB67EF0B2327CE279BEFFD2B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft Manifest number: 1805 Signing time: Sun 25 Jan 2026 06:01:00 +0000 Manifest this update: Sun 25 Jan 2026 06:01:00 +0000 Manifest next update: Mon 26 Jan 2026 06:01:00 +0000 Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: 3bHQN6rPAiK/v15XF4b3FCHH9YZ5T6ftKYwN8nlUwbQ=) 2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=) 3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=) 4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=) 5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=) 6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=) 7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=) 8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:cb:1c:b6:7e:f0:b2:32:7c:e2:79:be:ff:d2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Validity Not Before: Jan 25 06:01:00 2026 GMT Not After : Jan 26 06:01:00 2026 GMT Subject: CN=378ba5107bc7555aec34d712d95b80699e3d79ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:83:a1:2e:6b:e1:13:ec:3f:34:9d:0e:6a:fc: c5:c4:5b:f9:da:80:55:46:16:ce:2d:33:b0:74:80: 01:4a:c7:d0:64:b8:ad:07:19:de:70:e1:ed:e0:8b: b8:61:67:08:6f:9e:67:79:3e:11:04:a1:8e:a6:db: 5e:ce:b4:51:5f:48:0f:f9:80:9e:54:26:72:76:04: 29:fc:32:4b:30:5a:ed:91:a9:02:4b:e4:83:70:2d: ac:78:40:5f:a6:81:44:85:00:79:f9:59:c5:9c:54: f0:34:66:9b:84:81:f2:ce:79:cf:3c:62:84:d1:19: 91:45:a3:92:2c:40:b4:4d:e7:8f:98:ce:11:58:4b: 69:6f:f3:f8:ed:e4:f0:3a:15:9c:ad:3e:94:0c:03: 90:61:c9:2a:eb:7c:e4:45:60:03:fe:2d:a8:23:05: 5b:da:b1:73:9f:48:55:37:22:f5:ca:93:1c:77:42: 67:21:39:ef:ed:82:18:4b:3f:c3:6b:6f:c8:15:24: fc:ea:a0:6b:de:5d:64:19:f9:b6:a0:dc:13:32:73: e4:64:0d:ee:89:52:c4:62:d3:3a:e8:22:e2:53:34: 13:37:d7:2f:fd:6c:fb:bd:76:ca:ff:3e:eb:48:3a: 7d:fc:16:35:31:fc:e5:54:db:ff:fe:2a:1c:41:13: 61:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8B:A5:10:7B:C7:55:5A:EC:34:D7:12:D9:5B:80:69:9E:3D:79:AC X509v3 Authority Key Identifier: keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:11:a5:10:9a:66:32:09:8c:c2:24:05:72:8a:95:3c:fb:0e: 2f:d8:55:d3:2c:f5:88:0c:b4:97:74:83:9b:ec:90:4e:d8:f9: d9:8b:8e:65:dd:fe:db:62:8a:59:bd:54:13:36:31:7d:4f:10: 23:8e:4d:4a:69:92:7e:85:71:14:1a:23:7b:ec:16:ac:fd:5a: f6:7b:8b:c4:fd:7f:ee:67:b1:09:31:66:fd:3b:f2:3d:8f:5e: eb:5b:84:12:3e:7e:b8:3b:14:f1:73:f8:a9:0a:25:7e:d3:f5: ff:1b:65:41:34:fe:0e:7f:79:4c:f8:c1:6e:d5:bc:2f:65:b1: eb:e6:a3:f0:19:bd:a0:64:66:1f:65:0a:f0:73:48:8b:11:9f: 71:f2:c6:94:bc:bc:ee:9c:b8:b9:db:0b:50:69:b3:73:7a:76: 04:d6:f5:7b:3e:a2:61:1e:d7:5c:36:b1:da:8e:c9:3d:09:df: cc:fc:6f:fd:86:9a:1e:2b:3a:e6:7c:7c:d4:a5:e5:85:92:0f: db:5d:24:1e:dc:7c:be:5d:bb:27:a0:83:6e:f4:45:7a:c2:1c: a0:09:82:64:d2:8d:7d:49:0d:d1:ec:0f:48:b2:48:e3:f5:dd: 87:95:16:7e:ae:bb:b5:c2:fc:9b:e2:34:9e:5f:dd:35:56:2b: 07:15:af:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvcsctn7wsjJ84nm+/9KyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0 OWQ3NGQwHhcNMjYwMTI1MDYwMTAwWhcNMjYwMTI2MDYwMTAwWjAzMTEwLwYDVQQD EygzNzhiYTUxMDdiYzc1NTVhZWMzNGQ3MTJkOTViODA2OTllM2Q3OWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4OhLmvhE+w/NJ0OavzFxFv52oBV RhbOLTOwdIABSsfQZLitBxnecOHt4Iu4YWcIb55neT4RBKGOpttezrRRX0gP+YCe VCZydgQp/DJLMFrtkakCS+SDcC2seEBfpoFEhQB5+VnFnFTwNGabhIHyznnPPGKE 0RmRRaOSLEC0TeePmM4RWEtpb/P47eTwOhWcrT6UDAOQYckq63zkRWAD/i2oIwVb 2rFzn0hVNyL1ypMcd0JnITnv7YIYSz/Da2/IFST86qBr3l1kGfm2oNwTMnPkZA3u iVLEYtM66CLiUzQTN9cv/Wz7vXbK/z7rSDp9/BY1MfzlVNv//iocQRNheQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeLpRB7x1Va7DTXEtlbgGmePXmsMB8GA1UdIwQY MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt NjY0ZjA0ZDJhNjhkLzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBGlEJpm MgmMwiQFcoqVPPsOL9hV0yz1iAy0l3SDm+yQTtj52YuOZd3+22KKWb1UEzYxfU8Q I45NSmmSfoVxFBoje+wWrP1a9nuLxP1/7mexCTFm/TvyPY9e61uEEj5+uDsU8XP4 qQolftP1/xtlQTT+Dn95TPjBbtW8L2Wx6+aj8Bm9oGRmH2UK8HNIixGfcfLGlLy8 7py4udsLUGmzc3p2BNb1ez6iYR7XXDax2o7JPQnfzPxv/YaaHis65nx81KXlhZIP 210kHtx8vl27J6CDbvRFesIcoAmCZNKNfUkN0ewPSLJI4/Xdh5UWfq67tcL8m+I0 nl/dNVYrBxWvbw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:09:07 2026 by rpki-client