This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json) Hash identifier: L+fKagS9YLIiMcpNS3lg0kvCnVgiTQdIkqNNYwSDLvY= Subject key identifier: 13:38:DD:45:80:00:EC:EF:9A:6E:BC:15:A1:D6:68:0F:EA:D3:F9:15 Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50 Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250 Certificate serial: 019BF61A0493202B82F82D0679A2BDFCDB52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft Manifest number: 0B66 Signing time: Sun 25 Jan 2026 17:00:58 +0000 Manifest this update: Sun 25 Jan 2026 17:00:58 +0000 Manifest next update: Mon 26 Jan 2026 17:00:58 +0000 Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: 55MJ0XsxblKkBakb0ypfN4ITMZPbnlgexaDx9zjZ5Eg=) 2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:04:93:20:2b:82:f8:2d:06:79:a2:bd:fc:db:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250 Validity Not Before: Jan 25 17:00:58 2026 GMT Not After : Jan 26 17:00:58 2026 GMT Subject: CN=1338dd458000ecef9a6ebc15a1d6680fead3f915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:72:99:49:6c:2b:70:19:f8:ef:d4:26:37: cf:da:c3:2e:3a:be:68:f7:fb:75:d0:83:07:e0:b1: 19:24:81:d9:56:c6:ef:1d:9f:38:5c:f2:3b:79:a0: 26:f3:ca:6c:5f:6b:cd:e2:5d:e9:13:e7:ef:0e:7c: 3d:94:cf:91:71:0c:30:fe:9a:b7:0c:a5:74:2d:65: 9f:70:7f:a5:4d:7f:bb:96:bf:81:0d:a6:1d:48:27: f2:cb:38:92:36:1f:d9:8d:b5:af:f4:62:8f:0d:66: 54:ea:a1:c1:b4:46:c2:67:8e:f2:0b:39:39:54:54: b2:e2:40:84:18:37:83:7b:b1:f5:af:bc:f1:a8:f8: 23:06:c7:d5:9e:7d:cc:e1:c3:3d:c5:34:5a:42:e7: 38:0e:04:28:a0:91:9e:42:f6:08:bd:78:2d:7c:14: b3:56:d8:28:84:76:3e:73:93:d8:6e:f6:8a:1d:7f: 8f:7e:82:90:da:e7:a9:cc:f2:a4:6d:ea:7a:1b:b7: 83:0f:8a:1b:32:ff:37:e4:f4:b1:c0:0a:ac:ae:ff: b7:0b:73:15:37:cd:fd:15:50:bb:08:b5:a1:ee:d8: ab:8c:15:50:15:60:e5:b8:f5:c8:61:e4:8e:a8:a1: 71:9a:80:ce:6f:f6:61:58:95:a7:69:01:da:6f:55: ce:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:38:DD:45:80:00:EC:EF:9A:6E:BC:15:A1:D6:68:0F:EA:D3:F9:15 X509v3 Authority Key Identifier: keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0c:38:b3:ff:9f:af:f1:26:2c:17:9b:22:2c:08:c5:23:79: b1:f9:5c:6b:7c:42:f7:5b:1e:5c:f6:7d:24:38:b5:70:b2:fc: 29:f7:97:bf:7d:34:b0:9e:7c:79:b9:f6:b5:fa:65:a9:33:fa: 77:5e:ad:a6:e0:dc:eb:0c:8d:76:0d:70:ec:ad:f7:3d:b6:ef: 3b:5b:10:f3:fb:d2:99:19:fe:b3:61:3d:3d:dd:7b:08:98:d5: de:0b:11:ec:93:e5:d3:10:4f:b6:2e:29:3f:14:cf:2b:64:86: 38:66:13:81:fa:70:0d:a7:fc:96:42:b7:4d:eb:87:eb:46:f0: c4:c0:04:27:4a:8d:35:4e:4f:4e:c7:5e:7d:13:d9:cc:31:5a: 74:cd:ab:8a:93:2c:d4:dc:35:70:77:47:3c:f0:2a:f6:ba:08: ba:cc:79:64:84:9c:d5:7b:da:8b:6b:06:2a:17:fc:6c:d8:d2: 27:8f:8d:46:db:4f:5f:8d:98:3b:fb:49:78:e1:af:e6:f7:ae: 9e:c7:26:07:9b:be:9d:e9:9e:5c:3f:15:31:6b:b9:26:e7:b1: b9:15:99:b7:76:91:26:b8:dc:3c:48:eb:06:51:a9:f5:1f:d9: 07:fb:1f:d8:48:c5:50:8a:63:38:55:95:15:2a:04:c2:dc:39: 2a:75:e0:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GgSTICuC+C0GeaK9/NtSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlY2JlZjM1MmNhYzcxYWQ1YmFlMGU4YjFjMDIyNDZlM2I2 NTAyNTAwHhcNMjYwMTI1MTcwMDU4WhcNMjYwMTI2MTcwMDU4WjAzMTEwLwYDVQQD EygxMzM4ZGQ0NTgwMDBlY2VmOWE2ZWJjMTVhMWQ2NjgwZmVhZDNmOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslpymUlsK3AZ+O/UJjfP2sMuOr5o 9/t10IMH4LEZJIHZVsbvHZ84XPI7eaAm88psX2vN4l3pE+fvDnw9lM+RcQww/pq3 DKV0LWWfcH+lTX+7lr+BDaYdSCfyyziSNh/ZjbWv9GKPDWZU6qHBtEbCZ47yCzk5 VFSy4kCEGDeDe7H1r7zxqPgjBsfVnn3M4cM9xTRaQuc4DgQooJGeQvYIvXgtfBSz VtgohHY+c5PYbvaKHX+PfoKQ2uepzPKkbep6G7eDD4obMv835PSxwAqsrv+3C3MV N839FVC7CLWh7tirjBVQFWDluPXIYeSOqKFxmoDOb/ZhWJWnaQHab1XOOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBM43UWAAOzvmm68FaHWaA/q0/kVMB8GA1UdIwQY MBaAFN7L7zUsrHGtW64OixwCJG47ZQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWIt NTQxZjlmY2JhNzQyLzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWItNTQxZjlmY2JhNzQy LzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWww4s/+f r/EmLBebIiwIxSN5sflca3xC91seXPZ9JDi1cLL8KfeXv300sJ58ebn2tfplqTP6 d16tpuDc6wyNdg1w7K33PbbvO1sQ8/vSmRn+s2E9Pd17CJjV3gsR7JPl0xBPti4p PxTPK2SGOGYTgfpwDaf8lkK3TeuH60bwxMAEJ0qNNU5PTsdefRPZzDFadM2ripMs 1Nw1cHdHPPAq9roIusx5ZISc1Xvai2sGKhf8bNjSJ4+NRttPX42YO/tJeOGv5veu nscmB5u+nemeXD8VMWu5JuexuRWZt3aRJrjcPEjrBlGp9R/ZB/sf2EjFUIpjOFWV FSoEwtw5KnXgyQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:43 2026 by rpki-client