This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json) Hash identifier: yOinVuo/kC7io6WkGpMeGJaeEzvoRZpGPwncG5YawJQ= Subject key identifier: 79:57:84:BA:3E:F0:B4:04:4E:A9:52:24:46:BE:DB:54:C8:E9:7B:E3 Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Certificate serial: 019BF7D173C20FA279886B4D8435B8B31C82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft Manifest number: 11D3 Signing time: Mon 26 Jan 2026 01:00:57 +0000 Manifest this update: Mon 26 Jan 2026 01:00:57 +0000 Manifest next update: Tue 27 Jan 2026 01:00:57 +0000 Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: PE8FD1v5uwYcQqBMdSlGgi0YFNbCLz/q2xNrku2tIbE=) 2: 8q9oSsZ4UYUMrh0rSwaxnqwZWJ4.roa (hash: UZuk/CP3WSM3LGuW3AkAPL5k1plOMJu2aZscVLHOeSY=) 3: B1oGCbp_lCKqrih8ynGfv6BUSjw.roa (hash: ZEKfqtdqNld+YDkZ9QlGUoE8oCQ7PZGkrXbAphwgc1E=) 4: WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa (hash: p/GOCcmj2ID1uwRfM042pGyDP5xNtN4A8xvh5ei0x1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:73:c2:0f:a2:79:88:6b:4d:84:35:b8:b3:1c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Validity Not Before: Jan 26 01:00:57 2026 GMT Not After : Jan 27 01:00:57 2026 GMT Subject: CN=795784ba3ef0b4044ea9522446bedb54c8e97be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:eb:91:39:1d:29:dd:40:34:47:8f:50:95: 4a:29:e9:40:5e:6f:c5:07:61:1c:2c:b5:63:4d:43: 25:e1:3e:b1:4c:10:5f:36:3d:1c:5c:91:6f:90:9e: e9:b0:09:a0:3f:17:41:3d:d7:9c:fa:4a:ba:b3:60: f6:2a:dc:f6:8a:65:c5:65:ef:83:24:77:3f:21:a8: d2:16:83:1f:a6:60:54:a1:97:72:29:e3:73:45:f8: 74:1b:d2:ad:2c:08:6a:26:fb:cb:8f:75:7b:74:69: 29:92:06:b5:65:7b:ee:1c:8b:b6:f8:7f:56:4e:71: 79:ac:81:df:7d:34:2d:69:93:ef:e0:4f:c3:b5:56: 39:4d:ca:f1:6f:ee:26:a9:27:38:c0:c0:79:18:0f: fa:26:34:7a:ed:9a:4f:8b:ea:59:49:7e:3b:98:0f: 57:e6:f6:30:73:7a:89:5b:ab:13:c0:ba:2e:eb:30: 28:13:c8:3b:ff:45:79:98:9d:41:bc:c8:a1:40:e3: 5a:21:af:fd:9f:5e:1e:be:6b:9f:9b:c1:ae:72:0a: 3d:40:11:31:e1:1e:7b:9e:8e:1a:9c:d5:1a:d0:94: cd:b8:c3:cb:1a:98:e9:2e:bd:ad:ff:6c:de:43:e2: fa:ec:a2:f7:a2:c6:f0:7c:39:85:3e:4c:46:65:19: 0d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:57:84:BA:3E:F0:B4:04:4E:A9:52:24:46:BE:DB:54:C8:E9:7B:E3 X509v3 Authority Key Identifier: keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e7:1d:02:28:d7:d1:18:3f:22:b6:a7:8c:e0:5f:80:9f:76: 41:5c:73:bc:ed:4a:5e:9c:e3:1c:e7:f7:39:b9:80:03:f1:46: 23:87:11:07:d1:c0:41:f2:91:9f:78:c1:ae:57:16:40:c5:2b: ba:1d:13:67:dd:a4:1e:58:f7:da:95:4c:d7:c0:32:8a:52:45: e1:cd:0b:dc:9d:21:b0:b2:29:91:48:c9:ad:7d:ba:3f:42:80: 5b:a1:96:5d:cc:0b:9e:39:1d:42:7f:92:07:84:d9:51:cd:d4: 90:a9:71:9e:21:ab:df:c3:9c:ad:c0:5b:c7:2e:41:8c:93:00: a5:91:c8:3e:ec:db:7a:6d:d0:c5:e9:37:fa:52:73:6a:1b:4a: f5:86:bc:0e:f6:9d:b7:67:c5:df:d8:99:73:87:55:f5:ec:11: 3f:76:4f:ac:ab:72:85:09:01:bc:4c:05:64:57:e7:02:55:51: ef:d2:46:18:8e:7e:6d:15:09:3d:fb:ae:3c:5a:8e:ee:a8:4f: 36:bf:d4:e9:df:3c:1a:d2:7f:92:04:da:5e:8c:89:2f:b1:3c: c5:ea:09:f0:89:ff:4d:78:7d:4a:01:dd:a0:14:40:4c:ef:fe: cb:03:86:7a:f8:0b:6e:5e:c4:e3:d9:6c:2e:6d:bd:5a:77:6d: 8d:bf:22:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30XPCD6J5iGtNhDW4sxyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj NjZhZWIwHhcNMjYwMTI2MDEwMDU3WhcNMjYwMTI3MDEwMDU3WjAzMTEwLwYDVQQD Eyg3OTU3ODRiYTNlZjBiNDA0NGVhOTUyMjQ0NmJlZGI1NGM4ZTk3YmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpTrkTkdKd1ANEePUJVKKelAXm/F B2EcLLVjTUMl4T6xTBBfNj0cXJFvkJ7psAmgPxdBPdec+kq6s2D2Ktz2imXFZe+D JHc/IajSFoMfpmBUoZdyKeNzRfh0G9KtLAhqJvvLj3V7dGkpkga1ZXvuHIu2+H9W TnF5rIHffTQtaZPv4E/DtVY5Tcrxb+4mqSc4wMB5GA/6JjR67ZpPi+pZSX47mA9X 5vYwc3qJW6sTwLou6zAoE8g7/0V5mJ1BvMihQONaIa/9n14evmufm8Gucgo9QBEx 4R57no4anNUa0JTNuMPLGpjpLr2t/2zeQ+L67KL3osbwfDmFPkxGZRkN7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlXhLo+8LQETqlSJEa+21TI6XvjMB8GA1UdIwQY MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt MjU0NTVhOGRkZDQ1LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1 LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOcdAijX 0Rg/IranjOBfgJ92QVxzvO1KXpzjHOf3ObmAA/FGI4cRB9HAQfKRn3jBrlcWQMUr uh0TZ92kHlj32pVM18AyilJF4c0L3J0hsLIpkUjJrX26P0KAW6GWXcwLnjkdQn+S B4TZUc3UkKlxniGr38OcrcBbxy5BjJMApZHIPuzbem3Qxek3+lJzahtK9Ya8Dvad t2fF39iZc4dV9ewRP3ZPrKtyhQkBvEwFZFfnAlVR79JGGI5+bRUJPfuuPFqO7qhP Nr/U6d88GtJ/kgTaXoyJL7E8xeoJ8In/TXh9SgHdoBRATO/+ywOGevgLbl7E49ls Lm29Wndtjb8iTw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:38 2026 by rpki-client