This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json) Hash identifier: B0cceHpIlq5oVUraaT+/y5lQKIjAMr1YtGvFGpPed9g= Subject key identifier: 4A:12:F3:1D:CE:41:1B:52:E9:41:FA:54:90:F8:1D:6F:D7:55:B7:A9 Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82 Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82 Certificate serial: 019BF83F1AF0AAEF3BAE7D77BFEDDB8DFE40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 03:00:43 +0000 Manifest this update: Mon 26 Jan 2026 03:00:43 +0000 Manifest next update: Tue 27 Jan 2026 03:00:43 +0000 Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: 4R90jgRYaCkNVjTGVmx6jw984+Z8iS3mm7keH6Y8B4g=) 2: BMMff36mDnqefE-fi1QYcDeaUEk.roa (hash: Yky2cFQCYWcMLt5A2AE8QdQ1eB3p9PDevvqazUFMfX4=) 3: c1k5DpW670XTtOlEvTkIz9kZXlc.roa (hash: Y49a9m/TdUFutVOSA2rIEcmP18u8ki2BwGqjBT3Sy90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:1a:f0:aa:ef:3b:ae:7d:77:bf:ed:db:8d:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82 Validity Not Before: Jan 26 03:00:43 2026 GMT Not After : Jan 27 03:00:43 2026 GMT Subject: CN=4a12f31dce411b52e941fa5490f81d6fd755b7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:26:aa:43:27:b6:e8:6c:e9:0f:0c:ca:4a: 6e:2f:78:51:6f:0d:77:22:bd:56:da:0b:3f:18:ce: 6b:81:13:1b:b4:c0:35:67:a1:a7:ca:9a:3f:44:41: 75:b3:f0:e1:94:31:c3:aa:79:ee:b8:da:3a:ef:b3: 4d:2c:80:84:74:24:69:d2:5f:49:00:cf:d1:dd:0a: b5:9b:6f:d3:74:13:6d:b0:11:38:a0:cd:28:07:26: 89:b9:ff:ec:5b:32:bf:a4:61:5c:7a:85:a9:38:5c: e2:65:b1:af:94:b7:81:77:d4:75:54:51:9c:17:14: 6d:94:bd:19:55:89:31:81:dc:5b:55:d5:ce:1c:54: d0:2d:ba:78:bc:e6:ed:39:72:f3:ed:dd:c1:24:60: d9:e5:33:80:22:07:ca:a3:4a:72:c4:0e:6f:2c:b6: ca:44:60:64:72:04:42:5b:7a:fb:97:2f:64:ab:3c: 76:59:2e:7d:6b:78:2b:54:c3:4e:0a:df:21:57:4b: f7:b0:b5:e7:59:cd:e1:5b:37:8d:3b:9d:ae:6d:f7: 37:cb:b6:e8:d0:96:16:55:76:92:16:98:27:7b:31: 20:3d:df:64:0f:cf:14:e1:65:a6:77:3c:a3:4c:1c: b5:69:32:a9:6b:60:b9:c9:64:0f:81:83:61:32:03: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:12:F3:1D:CE:41:1B:52:E9:41:FA:54:90:F8:1D:6F:D7:55:B7:A9 X509v3 Authority Key Identifier: keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:41:d6:df:3a:fa:8e:f2:9b:b9:ff:34:72:57:9f:dc:1d:f5: b0:0b:f2:6b:3d:62:79:72:b3:3e:54:7b:f4:dd:57:17:f8:e7: 1b:54:e7:6b:a6:dc:0a:27:ce:16:25:62:d7:4a:70:96:17:8b: 60:fa:27:e3:99:27:69:c8:e9:f8:11:31:77:25:c9:0c:d0:57: 48:5a:e3:92:78:0e:3b:de:08:67:c9:9a:38:f4:a4:fd:e3:d7: 33:05:4e:67:cd:2f:eb:b5:87:82:dc:ac:01:00:08:22:91:fe: 06:94:ac:30:8a:4f:3b:f5:65:d0:e7:50:4f:3a:0b:fd:51:a1: 01:dc:10:9c:d6:82:a2:a4:eb:5b:13:8f:80:1c:dc:0b:90:aa: 3a:05:14:39:16:6d:60:19:48:ba:21:f3:05:5f:c9:d4:f2:fb: 56:88:47:3f:e1:a5:74:01:0c:a0:c2:84:1d:50:cc:1f:60:9d: 27:3a:2f:ea:66:50:20:bf:ad:9c:a6:32:29:f3:ed:3e:c2:c2: 95:f7:41:3a:e4:4d:90:1a:a6:13:b1:27:0d:02:ec:ea:ca:f6: f9:b5:0e:bf:2f:c5:62:e3:29:28:65:62:75:f6:f7:3f:f9:72: 13:e1:4a:43:8e:b4:57:ec:af:f6:1e:f8:6e:15:de:cf:9b:05: 76:7b:2d:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4Pxrwqu87rn13v+3bjf5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMGJhNGY1NmU2ZjAzNzcyNTI4NjAzN2FmYzNjMTRjMjkz YjliODIwHhcNMjYwMTI2MDMwMDQzWhcNMjYwMTI3MDMwMDQzWjAzMTEwLwYDVQQD Eyg0YTEyZjMxZGNlNDExYjUyZTk0MWZhNTQ5MGY4MWQ2ZmQ3NTViN2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj4mqkMntuhs6Q8MykpuL3hRbw13 Ir1W2gs/GM5rgRMbtMA1Z6Gnypo/REF1s/DhlDHDqnnuuNo677NNLICEdCRp0l9J AM/R3Qq1m2/TdBNtsBE4oM0oByaJuf/sWzK/pGFceoWpOFziZbGvlLeBd9R1VFGc FxRtlL0ZVYkxgdxbVdXOHFTQLbp4vObtOXLz7d3BJGDZ5TOAIgfKo0pyxA5vLLbK RGBkcgRCW3r7ly9kqzx2WS59a3grVMNOCt8hV0v3sLXnWc3hWzeNO52ubfc3y7bo 0JYWVXaSFpgnezEgPd9kD88U4WWmdzyjTBy1aTKpa2C5yWQPgYNhMgNVlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoS8x3OQRtS6UH6VJD4HW/XVbepMB8GA1UdIwQY MBaAFN8LpPVubwN3JShgN6/DwUwpO5uCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTIt MzZjNjc4OTAwZjc5LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTItMzZjNjc4OTAwZjc5 LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkHW3zr6 jvKbuf80clef3B31sAvyaz1ieXKzPlR79N1XF/jnG1Tna6bcCifOFiVi10pwlheL YPon45knacjp+BExdyXJDNBXSFrjkngOO94IZ8maOPSk/ePXMwVOZ80v67WHgtys AQAIIpH+BpSsMIpPO/Vl0OdQTzoL/VGhAdwQnNaCoqTrWxOPgBzcC5CqOgUUORZt YBlIuiHzBV/J1PL7VohHP+GldAEMoMKEHVDMH2CdJzov6mZQIL+tnKYyKfPtPsLC lfdBOuRNkBqmE7EnDQLs6sr2+bUOvy/FYuMpKGVidfb3P/lyE+FKQ460V+yv9h74 bhXez5sFdnstCQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:43 2026 by rpki-client