This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft File: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json) Hash identifier: 50NIl3+rRLEnr27xbako4rxs9EK4BnaKMj9OUtHc2K4= Subject key identifier: A7:10:8E:19:9A:DC:81:E5:F7:CA:C2:AB:AA:65:52:29:3B:EC:06:39 Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a Certificate serial: 019BF9890E42E2FE13830E337B19081B76EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 09:01:07 +0000 Manifest this update: Mon 26 Jan 2026 09:01:07 +0000 Manifest next update: Tue 27 Jan 2026 09:01:07 +0000 Files and hashes: 1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: JsMYqTQXQYLNzAsv+Xyg9d8E/WX1Gh+9+bNh53oeH08=) 2: O4J-NYIe9H0u52beSrp6KYfxSyM.roa (hash: 9cGF5R/YNUjncOYY/j5mBT3HsIQEUCIbaqGilj06Z9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:0e:42:e2:fe:13:83:0e:33:7b:19:08:1b:76:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=077946f04742c66279acd322009be15e3d588a5a Validity Not Before: Jan 26 09:01:07 2026 GMT Not After : Jan 27 09:01:07 2026 GMT Subject: CN=a7108e199adc81e5f7cac2abaa6552293bec0639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:35:89:a8:a9:85:89:fb:da:25:78:57:06: fd:9a:64:27:83:4d:80:61:c6:bc:17:89:cb:d5:af: ba:43:78:32:59:4e:dd:e9:6d:04:fe:9d:d8:b8:ee: c9:87:49:c2:28:4f:a0:43:77:3e:bd:06:bc:1c:19: 99:58:d5:0c:d2:d4:65:a1:30:ae:06:1a:fa:17:e0: 71:2b:fd:4c:dc:d7:e4:c6:40:c0:16:2f:f1:a0:2c: 51:fe:ad:31:d3:db:63:9e:84:f0:d7:69:8c:03:e9: 7f:d9:69:ac:0f:3e:b5:ac:1a:71:a8:c9:1f:d4:9d: ae:ba:cb:7c:9a:59:9f:aa:18:47:97:e5:ff:64:d6: 90:b4:64:37:66:b4:ac:27:3f:2b:3c:6d:88:e2:95: a2:5b:99:2c:e5:da:5e:a2:6a:7b:8b:66:39:15:bd: 53:6b:18:d5:81:54:11:df:8c:ba:5c:23:f2:06:b3: 77:34:14:9e:64:45:01:00:b6:cc:e7:35:37:f1:ce: 16:77:be:23:24:2a:b4:bc:68:bb:bf:1a:55:af:cf: b7:2b:95:94:a9:1e:4a:87:a5:3e:3f:85:20:65:86: d8:40:32:a3:99:90:fa:a9:25:31:22:f4:b9:82:50: f6:6d:64:4a:91:7c:e1:cb:a5:3a:67:2e:6f:82:65: 9b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:10:8E:19:9A:DC:81:E5:F7:CA:C2:AB:AA:65:52:29:3B:EC:06:39 X509v3 Authority Key Identifier: keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:97:89:84:a1:6c:55:a8:2b:e3:9e:64:c0:57:22:18:2f:78: a9:d5:37:f1:d7:39:18:57:6b:24:8d:97:76:37:8b:d0:81:f2: 2b:fe:dc:ae:7c:50:72:2f:19:b6:7a:7f:d0:fc:5c:47:dd:a7: 59:f8:ea:ae:b5:32:e7:43:84:77:f0:a3:25:a3:48:55:ed:02: a2:96:60:df:7a:a1:74:8a:10:8c:b9:64:1e:f9:45:81:14:77: 92:55:ac:ae:85:ff:13:9b:4f:c9:c4:60:46:b8:10:17:0d:98: 84:3d:07:2d:af:3d:fe:07:1a:6a:92:48:d9:b8:eb:b1:cc:fa: 18:9e:2b:18:fe:1a:08:10:b0:9c:a9:ef:5e:8e:32:83:c4:ed: 39:d8:eb:a5:07:4b:a7:c6:66:3c:05:32:88:c6:f7:84:52:89: b6:2f:01:58:f1:f0:00:d7:39:84:07:4d:16:00:b9:4c:98:25: 33:dd:ae:a6:b9:ef:23:f0:b8:ae:c8:94:ad:52:4e:ac:03:38: 9e:d8:97:b1:0d:99:18:68:1c:a4:93:ef:c4:42:8c:9f:b6:71: 95:15:93:1e:8e:34:fa:3a:d1:73:6a:56:6f:3c:ea:ae:d1:16: ed:f7:d6:9d:8a:05:12:d3:7c:64:c1:d0:88:88:ef:45:83:36: f4:a1:c7:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iQ5C4v4Tgw4zexkIG3brMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3Nzk0NmYwNDc0MmM2NjI3OWFjZDMyMjAwOWJlMTVlM2Q1 ODhhNWEwHhcNMjYwMTI2MDkwMTA3WhcNMjYwMTI3MDkwMTA3WjAzMTEwLwYDVQQD EyhhNzEwOGUxOTlhZGM4MWU1ZjdjYWMyYWJhYTY1NTIyOTNiZWMwNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9I1iaiphYn72iV4Vwb9mmQng02A Yca8F4nL1a+6Q3gyWU7d6W0E/p3YuO7Jh0nCKE+gQ3c+vQa8HBmZWNUM0tRloTCu Bhr6F+BxK/1M3NfkxkDAFi/xoCxR/q0x09tjnoTw12mMA+l/2WmsDz61rBpxqMkf 1J2uust8mlmfqhhHl+X/ZNaQtGQ3ZrSsJz8rPG2I4pWiW5ks5dpeomp7i2Y5Fb1T axjVgVQR34y6XCPyBrN3NBSeZEUBALbM5zU38c4Wd74jJCq0vGi7vxpVr8+3K5WU qR5Kh6U+P4UgZYbYQDKjmZD6qSUxIvS5glD2bWRKkXzhy6U6Zy5vgmWbmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcQjhma3IHl98rCq6plUik77AY5MB8GA1UdIwQY MBaAFAd5RvBHQsZieazTIgCb4V49WIpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lM2ZkMGItOWY0YS00NDUyLTkyYWYt YmUxNTE4MzlmMzY2LzEvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9lM2ZkMGItOWY0YS00NDUyLTkyYWYtYmUxNTE4MzlmMzY2 LzEvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpeJhKFs Vagr455kwFciGC94qdU38dc5GFdrJI2XdjeL0IHyK/7crnxQci8Ztnp/0PxcR92n WfjqrrUy50OEd/CjJaNIVe0CopZg33qhdIoQjLlkHvlFgRR3klWsroX/E5tPycRg RrgQFw2YhD0HLa89/gcaapJI2bjrscz6GJ4rGP4aCBCwnKnvXo4yg8TtOdjrpQdL p8ZmPAUyiMb3hFKJti8BWPHwANc5hAdNFgC5TJglM92uprnvI/C4rsiUrVJOrAM4 ntiXsQ2ZGGgcpJPvxEKMn7ZxlRWTHo40+jrRc2pWbzzqrtEW7ffWnYoFEtN8ZMHQ iIjvRYM29KHHBA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:30 2026 by rpki-client