This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json) Hash identifier: ZAJk3hJ9AvVlNX6qZPYhI9zdhbuAc/4lYlSAJqOnUVc= Subject key identifier: 3E:1A:4B:17:34:41:80:77:0A:3E:4A:A7:6F:57:61:5F:DB:5C:EF:89 Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5 Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5 Certificate serial: 019BF72CBB5D0E9F67CD9A7C0F96FD299B7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft Manifest number: 0C78 Signing time: Sun 25 Jan 2026 22:01:02 +0000 Manifest this update: Sun 25 Jan 2026 22:01:02 +0000 Manifest next update: Mon 26 Jan 2026 22:01:02 +0000 Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: kGkw3Pwo0uGK/1mktmArkp/mVqlGGbI6wXKQTxV9e9M=) 2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:bb:5d:0e:9f:67:cd:9a:7c:0f:96:fd:29:9b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce6e13e413baf381b625131e924e947843436f5 Validity Not Before: Jan 25 22:01:02 2026 GMT Not After : Jan 26 22:01:02 2026 GMT Subject: CN=3e1a4b17344180770a3e4aa76f57615fdb5cef89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e1:ec:d7:65:3f:5e:a3:1b:5f:bf:f7:7e:90: f0:4e:22:be:f5:04:5d:93:04:0b:1d:60:1c:31:3d: e3:19:e4:8b:40:e8:80:1e:98:61:c1:25:c9:d4:57: 2e:b7:b7:d0:9c:e5:7c:82:0f:02:2c:72:08:33:39: e6:2e:af:d6:a6:36:5b:0f:87:72:dc:eb:7e:ac:97: 54:e4:3d:e4:dc:ee:06:97:cf:7d:fe:d0:d1:c3:2a: 45:69:39:46:ef:aa:ac:66:d7:ec:29:c1:b6:d2:e4: 5a:ee:f7:67:6b:74:d1:25:05:c4:a7:bd:6b:af:ee: f1:eb:a7:95:47:17:57:f0:32:c6:e5:b4:1f:66:f7: 20:11:87:6f:2e:33:ef:91:35:fe:85:77:b4:69:c8: d3:f5:98:28:ae:73:70:c3:ef:47:9c:b3:da:a4:45: 35:3f:72:76:17:ff:8b:45:bb:14:7e:c7:56:ec:dc: 85:11:0c:25:71:df:4f:2f:22:e5:60:60:73:b9:1e: ee:c9:2e:7b:86:74:13:8c:33:19:ac:7a:7b:8a:1f: 5d:b5:06:22:50:d7:6b:64:65:2a:7c:7f:e7:68:71: d9:97:08:ef:b9:e8:ed:04:f0:7d:d7:5f:12:ce:a0: ae:6a:46:b8:9d:52:1c:27:4f:cb:e6:9f:06:03:1a: ba:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1A:4B:17:34:41:80:77:0A:3E:4A:A7:6F:57:61:5F:DB:5C:EF:89 X509v3 Authority Key Identifier: keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:05:f9:58:38:e1:f4:3f:46:dc:56:5f:a2:ff:f4:01:f5:d6: bc:d6:10:9a:8a:42:87:09:3e:07:e5:8b:03:1a:4e:65:3d:37: c4:3e:8e:97:b6:48:ca:46:18:e7:68:fb:ac:cd:67:8f:ba:cb: 2a:1d:e4:a2:31:1e:fd:60:ed:56:4d:1c:38:ed:7c:2c:59:35: 8c:66:4f:48:18:5b:4d:91:19:05:56:3a:eb:38:ea:78:b4:f2: 57:c4:77:a4:90:46:73:a3:07:9f:ae:d0:92:a0:ff:02:3e:c5: 03:2a:63:df:61:88:7e:f3:9f:b2:85:7f:7b:c8:c9:72:2e:99: bb:11:f5:87:38:44:c2:06:f2:69:6b:db:77:7b:9e:e1:f7:32: 65:09:70:12:80:c0:1e:8b:ed:16:44:ae:72:5e:78:82:32:16: e9:76:ca:d0:5c:14:92:cc:75:58:f9:56:c9:6f:57:e0:4b:2d: 87:1a:2f:76:a8:f7:d5:2c:91:57:6e:48:28:57:76:22:00:6c: 8d:e6:9b:51:f8:8f:1b:6c:d6:48:2c:87:92:f0:95:d3:29:be: c4:91:24:90:a5:69:d3:14:f9:9e:af:72:6d:44:68:17:51:85: 02:f6:81:e4:bc:90:fd:08:5a:ab:cb:ea:38:08:52:f0:6e:e8: 49:0a:67:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LLtdDp9nzZp8D5b9KZt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTZlMTNlNDEzYmFmMzgxYjYyNTEzMWU5MjRlOTQ3ODQz NDM2ZjUwHhcNMjYwMTI1MjIwMTAyWhcNMjYwMTI2MjIwMTAyWjAzMTEwLwYDVQQD EygzZTFhNGIxNzM0NDE4MDc3MGEzZTRhYTc2ZjU3NjE1ZmRiNWNlZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uHs12U/XqMbX7/3fpDwTiK+9QRd kwQLHWAcMT3jGeSLQOiAHphhwSXJ1Fcut7fQnOV8gg8CLHIIMznmLq/WpjZbD4dy 3Ot+rJdU5D3k3O4Gl899/tDRwypFaTlG76qsZtfsKcG20uRa7vdna3TRJQXEp71r r+7x66eVRxdX8DLG5bQfZvcgEYdvLjPvkTX+hXe0acjT9ZgornNww+9HnLPapEU1 P3J2F/+LRbsUfsdW7NyFEQwlcd9PLyLlYGBzuR7uyS57hnQTjDMZrHp7ih9dtQYi UNdrZGUqfH/naHHZlwjvuejtBPB9118SzqCuaka4nVIcJ0/L5p8GAxq67wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4aSxc0QYB3Cj5Kp29XYV/bXO+JMB8GA1UdIwQY MBaAFNzm4T5BO684G2JRMekk6UeENDb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85YTRlZjUtNDJmYS00MzVmLWE4ZmUt YjFmNGZjNzUyMmEwLzEvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi85YTRlZjUtNDJmYS00MzVmLWE4ZmUtYjFmNGZjNzUyMmEw LzEvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQX5WDjh 9D9G3FZfov/0AfXWvNYQmopChwk+B+WLAxpOZT03xD6Ol7ZIykYY52j7rM1nj7rL Kh3kojEe/WDtVk0cOO18LFk1jGZPSBhbTZEZBVY66zjqeLTyV8R3pJBGc6MHn67Q kqD/Aj7FAypj32GIfvOfsoV/e8jJci6ZuxH1hzhEwgbyaWvbd3ue4fcyZQlwEoDA HovtFkSucl54gjIW6XbK0FwUksx1WPlWyW9X4Esthxovdqj31SyRV25IKFd2IgBs jeabUfiPG2zWSCyHkvCV0ym+xJEkkKVp0xT5nq9ybURoF1GFAvaB5LyQ/Qhaq8vq OAhS8G7oSQpneQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:58 2026 by rpki-client