This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json) Hash identifier: S1BVzFdZPf1ghZwAKvcjHwkL0oF3le9AW4i1nCK9EjA= Subject key identifier: D7:CA:8E:A4:03:6A:24:06:87:42:6D:C1:67:AC:A5:A0:67:04:32:8B Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b Certificate serial: 019BF79AF9C6A10C7368EA69E1AA5D867B33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 00:01:26 +0000 Manifest this update: Mon 26 Jan 2026 00:01:26 +0000 Manifest next update: Tue 27 Jan 2026 00:01:26 +0000 Files and hashes: 1: MwSiI9GchKzKf7qBJz16eEvXh-o.roa (hash: Ya5VgXFHK7dGaRYg+cDCB5cxS5nYPyBDhXocUh/n9cI=) 2: fjMubu-qV26IszBH3XWThUEp1jQ.roa (hash: nM6/+tL+EeUavkkSwnU8Z5g0dAyeEyJMz2lMeFc9xyg=) 3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: 1jWN03+bX37EuFA4NqyM6PjXq7M5jYXAgL/lvfoTIZ0=) 4: zXLnfUczUBBQtu-uo6mCxhK1HNI.roa (hash: 5SgEpDYdRUOD9p+rClAHWfynMXe8ZAzFE3cf1BLha3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:f9:c6:a1:0c:73:68:ea:69:e1:aa:5d:86:7b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b Validity Not Before: Jan 26 00:01:26 2026 GMT Not After : Jan 27 00:01:26 2026 GMT Subject: CN=d7ca8ea4036a240687426dc167aca5a06704328b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:29:c5:3f:db:05:70:a1:10:53:6c:35:2e: 24:3d:29:7b:02:be:48:8e:32:ae:c8:92:1b:58:d3: 19:19:f2:4e:b6:9d:0c:7b:25:23:22:00:cd:03:55: 9d:17:6a:37:43:d7:40:f7:5b:7b:28:96:28:f0:7b: ab:a1:94:54:fc:77:c0:d5:17:05:2f:29:2e:d9:ea: 1b:60:02:99:c6:99:e6:51:7d:96:fd:4f:fa:fa:64: e6:43:38:4e:2e:46:e5:53:66:7e:32:4d:57:5f:77: d1:86:5c:d4:76:d1:e7:e0:30:8d:82:96:1e:3c:95: 37:6f:3e:11:88:82:63:16:82:30:39:ba:30:f1:d2: df:72:6d:ad:2f:d2:5f:14:8b:56:84:51:a9:c7:85: 7e:58:68:b4:fc:43:96:39:41:e6:88:99:90:25:c3: e9:2c:fc:a6:a2:e4:d4:01:d9:9b:30:b4:4f:c2:83: fd:7e:fb:e4:aa:da:03:e4:19:8a:55:8b:6d:27:c5: 71:02:c0:53:9a:ec:c1:58:fe:ec:8c:ca:f9:20:fa: ea:6b:32:ba:f4:fc:d1:93:86:85:b8:9d:37:47:13: 9e:e0:b0:28:45:d0:5b:24:ca:e9:23:d7:8d:2b:13: 88:70:45:b8:97:bd:51:ce:b4:e2:4d:0d:90:bf:c7: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CA:8E:A4:03:6A:24:06:87:42:6D:C1:67:AC:A5:A0:67:04:32:8B X509v3 Authority Key Identifier: keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b6:70:c3:d7:66:85:3d:e1:2c:44:ad:29:ec:2c:01:ca:6c: 6a:8c:87:48:17:d2:8b:43:1f:a4:00:56:58:00:51:01:2b:c7: b7:c1:2c:74:93:09:f2:99:d7:d3:87:0e:80:be:21:99:ed:70: a7:51:9f:ba:7f:d2:ab:c2:dc:34:9d:d0:a8:6e:96:28:95:a4: ab:41:dc:c9:8e:60:b3:94:39:12:ec:ac:7c:8e:68:9b:44:3f: 32:d1:f9:e5:5e:99:91:98:3c:af:e8:4a:cd:11:a7:97:55:49: d8:6b:44:b6:79:00:68:8d:c2:d6:a0:c8:31:fe:a3:6f:be:61: 06:68:17:2b:e7:62:e7:12:90:a3:8d:fe:65:39:d8:fc:53:bd: e9:64:86:2f:6e:42:99:cc:b4:72:f5:7c:ca:ac:93:cd:2b:69: 9c:d0:9e:df:07:a0:29:5e:54:91:09:a3:8d:fb:f5:ee:50:29: 05:54:fc:41:68:da:47:c1:da:63:56:2b:4e:fe:76:64:f2:d9: 4e:f9:27:61:ec:55:e5:d6:64:d2:20:68:74:96:46:2a:a1:eb: 87:62:c5:b1:79:38:c6:ed:c7:ed:ba:30:d3:bc:c9:bd:52:fd: 56:aa:a6:64:65:5b:af:d6:44:7f:46:e2:0f:0d:d1:59:8d:8a: 6d:99:d9:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mvnGoQxzaOpp4apdhnszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Nzg1YTMwZDg1MTJkMGQ4YWI2Mzc4MTJiNzlmYTQ1Mjlh MWVmMWIwHhcNMjYwMTI2MDAwMTI2WhcNMjYwMTI3MDAwMTI2WjAzMTEwLwYDVQQD EyhkN2NhOGVhNDAzNmEyNDA2ODc0MjZkYzE2N2FjYTVhMDY3MDQzMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+IpxT/bBXChEFNsNS4kPSl7Ar5I jjKuyJIbWNMZGfJOtp0MeyUjIgDNA1WdF2o3Q9dA91t7KJYo8HuroZRU/HfA1RcF Lyku2eobYAKZxpnmUX2W/U/6+mTmQzhOLkblU2Z+Mk1XX3fRhlzUdtHn4DCNgpYe PJU3bz4RiIJjFoIwObow8dLfcm2tL9JfFItWhFGpx4V+WGi0/EOWOUHmiJmQJcPp LPymouTUAdmbMLRPwoP9fvvkqtoD5BmKVYttJ8VxAsBTmuzBWP7sjMr5IPrqazK6 9PzRk4aFuJ03RxOe4LAoRdBbJMrpI9eNKxOIcEW4l71RzrTiTQ2Qv8csIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfKjqQDaiQGh0JtwWespaBnBDKLMB8GA1UdIwQY MBaAFLd4WjDYUS0NirY3gSt5+kUpoe8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEt NjIxOWIzMjEyMmQwLzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEtNjIxOWIzMjEyMmQw LzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLZww9dm hT3hLEStKewsAcpsaoyHSBfSi0MfpABWWABRASvHt8EsdJMJ8pnX04cOgL4hme1w p1Gfun/Sq8LcNJ3QqG6WKJWkq0HcyY5gs5Q5EuysfI5om0Q/MtH55V6ZkZg8r+hK zRGnl1VJ2GtEtnkAaI3C1qDIMf6jb75hBmgXK+di5xKQo43+ZTnY/FO96WSGL25C mcy0cvV8yqyTzStpnNCe3wegKV5UkQmjjfv17lApBVT8QWjaR8HaY1YrTv52ZPLZ TvknYexV5dZk0iBodJZGKqHrh2LFsXk4xu3H7bow07zJvVL9VqqmZGVbr9ZEf0bi Dw3RWY2KbZnZxQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:01:49 2026 by rpki-client