This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft File: 0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json) Hash identifier: H7aTT+fVq1OIV9BNtMe1aDatk8h3+dAotygxD3UOt6E= Subject key identifier: E1:79:76:2F:4D:29:07:7D:1F:E8:B3:24:EE:80:29:E8:85:5C:82:73 Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Certificate serial: 019BF2E29B9622A1DC7C0109776F9BD00C06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft Manifest number: 17F7 Signing time: Sun 25 Jan 2026 02:01:35 +0000 Manifest this update: Sun 25 Jan 2026 02:01:35 +0000 Manifest next update: Mon 26 Jan 2026 02:01:35 +0000 Files and hashes: 1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: YOmm7v2e0mOS+XUDskRvolpKqhikHfUvrkNMVZErApM=) 2: 3Yx2vfa7XpKGoKje1_1k7pHSStk.roa (hash: 4SXl0Toh/4xYp5qzMatRJXmfZoTd3stX8dho8IkBhRc=) 3: O_zLKAo-ZMO-tgxP2QAdS4mIV5k.roa (hash: exFmvEBwttF4QN/C/nqEjfx58jhXHu21SMR83NxxCYg=) 4: QR0mWp5CB2k02nj5BSvnE7tpKAM.roa (hash: A8a1C7V27tTrnez+fuGaMRZjLBF20tyIIMaEIdlj6NQ=) 5: ZcXPev5XSqeCfOjCRaC4jLAvk3w.roa (hash: tC1vsSl2lFcihSUrAMnGtV0LC1FxIGsGqNLEW5eQ5Gk=) 6: uDA5v4UlBvQvX-LZ9N2uiXPAqNc.roa (hash: 74PjhxXF+GVRA7M8a6OYT30HIUUuictdHv+lHM0QfVc=) 7: yBmSRS9b5lz7_xzd3NgvPyLBW94.roa (hash: 8pKcmdD26fnU0KVwOwv225VvvZWRzrn5qkT1zOJvfrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:9b:96:22:a1:dc:7c:01:09:77:6f:9b:d0:0c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Validity Not Before: Jan 25 02:01:35 2026 GMT Not After : Jan 26 02:01:35 2026 GMT Subject: CN=e179762f4d29077d1fe8b324ee8029e8855c8273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:9d:c4:8f:0e:71:31:14:2c:bf:f9:56:77: 43:82:51:e1:ad:4f:ba:51:2f:27:2e:ac:d0:42:61: 9c:28:fd:14:35:25:8c:e2:cc:23:aa:c7:93:e6:cf: f6:f3:0a:f1:92:88:f6:d6:c8:12:a8:c4:66:23:dd: 95:a2:0d:88:5a:41:fa:65:d0:af:62:27:3a:a9:f4: 00:e6:fb:71:5e:37:00:b7:fe:3d:d3:0b:90:75:64: ad:a3:26:7a:75:52:4c:ec:b7:1b:31:25:cf:81:01: 73:f8:a6:a9:96:da:7a:b0:40:36:0f:6f:5b:b1:5c: 15:e9:ca:38:2c:33:11:c5:3b:4a:b6:19:b0:de:b8: 48:92:76:a4:ed:d8:4f:44:c5:80:26:9a:41:56:84: f5:04:05:32:bf:fc:11:25:30:3d:a9:9f:7e:c3:b7: 9a:f1:fb:37:a0:b4:b4:97:f8:f4:56:b5:65:a3:25: 81:3a:57:9c:b5:da:30:5d:b5:86:a7:00:8d:d6:77: c2:68:cf:26:67:9b:24:9d:81:ba:17:88:61:0b:93: dd:76:a9:93:b5:bc:00:ba:7a:76:ce:d6:2d:ce:d3: 52:a6:4f:33:e6:b6:6b:b8:d7:b6:60:0c:d4:91:5d: 48:d2:40:50:88:0c:52:d8:fc:64:ef:9f:a2:47:c7: 3f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:79:76:2F:4D:29:07:7D:1F:E8:B3:24:EE:80:29:E8:85:5C:82:73 X509v3 Authority Key Identifier: keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6e:b9:25:f1:1e:90:46:b9:ab:6c:f3:34:2f:db:59:26:ff: 39:ea:2c:4f:7a:7c:6f:a9:5d:e4:ed:eb:71:cb:9b:c2:35:36: 1e:49:45:39:76:bb:56:83:93:ef:b6:e9:1b:14:f8:91:20:06: 35:a5:2a:70:d8:99:b2:20:9a:9c:58:01:68:50:cd:74:48:6c: 2a:42:61:e5:05:f7:77:63:5f:d8:ec:3f:6f:f6:69:5f:68:e6: f1:1a:52:80:03:07:1f:d5:9e:ba:df:3c:16:4e:a1:34:e4:c4: 2a:0d:20:2b:08:e7:6d:7b:34:5b:61:c7:63:82:8e:d5:0b:bd: ba:39:6c:e5:b1:ed:eb:a2:4b:a2:47:1d:6f:42:e1:ff:1e:b6: e4:0a:d3:9f:56:dc:06:36:39:04:d9:db:a7:78:3a:a7:85:9e: a6:c2:7c:ed:c1:91:8e:e2:f3:cc:25:fe:08:ec:cd:e7:c9:d4: 1d:ef:48:26:81:f7:35:e7:39:4f:52:6a:08:e2:a2:5f:12:3c: 05:ed:9d:bf:dd:a9:29:4b:80:2e:b0:0a:c0:93:1f:e8:ae:2e: 12:de:5c:b2:57:73:9a:67:91:e1:6f:30:f2:ca:e6:08:65:c7: 97:a4:58:83:2e:28:06:6a:4c:e3:a3:04:0d:11:7e:6a:8f:4d: de:69:7b:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4puWIqHcfAEJd2+b0AwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4 ZDQ3OWYwHhcNMjYwMTI1MDIwMTM1WhcNMjYwMTI2MDIwMTM1WjAzMTEwLwYDVQQD EyhlMTc5NzYyZjRkMjkwNzdkMWZlOGIzMjRlZTgwMjllODg1NWM4MjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYCdxI8OcTEULL/5VndDglHhrU+6 US8nLqzQQmGcKP0UNSWM4swjqseT5s/28wrxkoj21sgSqMRmI92Vog2IWkH6ZdCv Yic6qfQA5vtxXjcAt/490wuQdWStoyZ6dVJM7LcbMSXPgQFz+Kapltp6sEA2D29b sVwV6co4LDMRxTtKthmw3rhIknak7dhPRMWAJppBVoT1BAUyv/wRJTA9qZ9+w7ea 8fs3oLS0l/j0VrVloyWBOlectdowXbWGpwCN1nfCaM8mZ5sknYG6F4hhC5PddqmT tbwAunp2ztYtztNSpk8z5rZruNe2YAzUkV1I0kBQiAxS2Pxk75+iR8c/gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOF5di9NKQd9H+izJO6AKeiFXIJzMB8GA1UdIwQY MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt YjE2NmFlMmVmMjg3LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3 LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIG65JfEe kEa5q2zzNC/bWSb/OeosT3p8b6ld5O3rccubwjU2HklFOXa7VoOT77bpGxT4kSAG NaUqcNiZsiCanFgBaFDNdEhsKkJh5QX3d2Nf2Ow/b/ZpX2jm8RpSgAMHH9Weut88 Fk6hNOTEKg0gKwjnbXs0W2HHY4KO1Qu9ujls5bHt66JLokcdb0Lh/x625ArTn1bc BjY5BNnbp3g6p4WepsJ87cGRjuLzzCX+COzN58nUHe9IJoH3Nec5T1JqCOKiXxI8 Be2dv92pKUuALrAKwJMf6K4uEt5csldzmmeR4W8w8srmCGXHl6RYgy4oBmpM46ME DRF+ao9N3ml75A== -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:46 2026 by rpki-client