This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft File: tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft (raw, json) Hash identifier: neYewIKYpYyPRQSHJ5ImqvXV6naUtms+yzPRpTI5wMs= Subject key identifier: 66:27:E4:C4:75:A7:5B:B0:60:F4:6D:6E:27:2B:5B:C3:76:68:04:32 Authority key identifier: B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0 Certificate issuer: /CN=b6bde8794b0a0d88f92967f5084e4c38199613a0 Certificate serial: 019BF83EEBF7613EEBC7E4D779860E97EB9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft Manifest number: 72 Signing time: Mon 26 Jan 2026 03:00:31 +0000 Manifest this update: Mon 26 Jan 2026 03:00:31 +0000 Manifest next update: Tue 27 Jan 2026 03:00:31 +0000 Files and hashes: 1: tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl (hash: VBqCLY1l6JHTnQqZfgtvrsS633LEJIYuYqIS0G7MsJI=) 2: ukIbrLUvPtIxZ5wtDHPd0BjbBfs.roa (hash: 4R245tMXj5hWTZh+CwuGNWMTCAhfqI5ky1f9sYscEcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:eb:f7:61:3e:eb:c7:e4:d7:79:86:0e:97:eb:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6bde8794b0a0d88f92967f5084e4c38199613a0 Validity Not Before: Jan 26 03:00:31 2026 GMT Not After : Jan 27 03:00:31 2026 GMT Subject: CN=6627e4c475a75bb060f46d6e272b5bc376680432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:37:b2:f0:29:57:79:92:8e:2f:c3:d4:a6: 57:c8:04:d2:fd:f8:5a:93:70:0b:3d:7d:f1:e1:ac: 7b:3f:34:51:1b:22:0b:39:44:13:43:af:97:cb:5c: 36:e8:8f:b4:f4:0b:e9:89:53:fa:80:8f:37:5e:82: 16:a0:41:d6:93:a2:74:5d:3b:fc:c2:e9:59:a6:35: 8b:a6:9f:69:7b:03:35:ba:57:13:9a:3b:ba:24:9f: ba:8a:27:3f:fb:b5:88:0b:51:a5:d7:30:1f:9e:3f: df:7c:a0:c3:ff:45:17:61:64:e8:f6:a1:ba:f9:c0: 3a:56:d3:b4:03:b2:11:fe:39:04:62:82:15:5e:60: d7:a1:5c:7c:a9:ac:3d:f6:20:40:13:a7:61:6e:a4: 54:e7:dc:13:90:a0:b6:e0:38:cb:d8:bc:db:cc:1e: e1:57:0b:85:43:4c:3b:01:c3:1d:b6:f6:a1:aa:70: 9e:a8:dd:c6:7c:6a:f3:27:8f:30:67:b3:5b:0b:80: 53:d9:b1:6b:2f:cd:d2:09:56:f3:e1:f2:d2:8b:ab: 45:3e:3c:8b:ea:00:78:f2:6b:69:89:1f:27:0f:09: 4b:b8:f7:86:3d:5f:56:66:cc:c3:87:76:57:58:d4: 76:ef:0a:31:49:b0:94:22:50:ab:39:1b:8d:69:90: a4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:27:E4:C4:75:A7:5B:B0:60:F4:6D:6E:27:2B:5B:C3:76:68:04:32 X509v3 Authority Key Identifier: keyid:B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:f5:78:60:f5:b7:d4:ed:ca:0f:11:0d:4f:7e:6b:db:45:d0: 3c:09:d3:49:73:70:a0:0f:0a:21:c2:26:c0:ec:f0:06:7c:a6: 91:85:5f:38:17:00:41:38:1e:eb:7d:b0:6b:8a:86:e2:f1:ca: 34:52:dc:9f:08:4f:1f:75:48:f9:6e:b5:d1:14:7e:78:cd:ff: 21:f7:22:b0:65:a0:0a:b9:cc:57:ca:53:e7:6c:5a:ff:56:64: 40:4c:e5:1d:ed:06:6d:89:8d:12:8c:33:35:4e:46:8a:e8:fc: c2:cd:e4:1e:62:60:51:e7:7c:c7:19:32:0e:5c:b9:a4:c1:4e: a2:fa:bd:d6:16:b8:86:fb:15:c7:e6:85:cb:1d:be:46:72:4c: 66:f2:f9:9f:6e:3c:dc:3a:ef:85:44:e9:3e:d2:af:27:3a:5e: 77:0d:03:ab:a8:ec:d2:64:a7:f0:84:b1:cd:d3:da:71:9e:ca: 62:02:6e:37:79:d5:09:e2:1e:6a:80:b9:bd:f7:32:4d:ef:2e: 1f:33:c5:39:a4:df:02:37:41:50:c0:ad:f8:1c:47:5f:29:ef: 15:5e:56:f8:cd:50:7c:cb:32:ea:fc:fe:29:31:b9:83:60:d4: f3:e6:c7:7c:7f:fe:6a:ff:3e:7b:e2:6b:7d:c0:84:dc:94:8a: b5:e9:f6:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4Puv3YT7rx+TXeYYOl+ucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YmRlODc5NGIwYTBkODhmOTI5NjdmNTA4NGU0YzM4MTk5 NjEzYTAwHhcNMjYwMTI2MDMwMDMxWhcNMjYwMTI3MDMwMDMxWjAzMTEwLwYDVQQD Eyg2NjI3ZTRjNDc1YTc1YmIwNjBmNDZkNmUyNzJiNWJjMzc2NjgwNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8g3svApV3mSji/D1KZXyATS/fha k3ALPX3x4ax7PzRRGyILOUQTQ6+Xy1w26I+09AvpiVP6gI83XoIWoEHWk6J0XTv8 wulZpjWLpp9pewM1ulcTmju6JJ+6iic/+7WIC1Gl1zAfnj/ffKDD/0UXYWTo9qG6 +cA6VtO0A7IR/jkEYoIVXmDXoVx8qaw99iBAE6dhbqRU59wTkKC24DjL2LzbzB7h VwuFQ0w7AcMdtvahqnCeqN3GfGrzJ48wZ7NbC4BT2bFrL83SCVbz4fLSi6tFPjyL 6gB48mtpiR8nDwlLuPeGPV9WZszDh3ZXWNR27woxSbCUIlCrORuNaZCkRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYn5MR1p1uwYPRtbicrW8N2aAQyMB8GA1UdIwQY MBaAFLa96HlLCg2I+Sln9QhOTDgZlhOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHIzb2VVc0tEWWo1S1dmMUNFNU1PQm1XRTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGIt MjBlNTljZjkyNjg2LzEvdHIzb2VVc0tEWWo1S1dmMUNFNU1PQm1XRTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGItMjBlNTljZjkyNjg2 LzEvdHIzb2VVc0tEWWo1S1dmMUNFNU1PQm1XRTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfV4YPW3 1O3KDxENT35r20XQPAnTSXNwoA8KIcImwOzwBnymkYVfOBcAQTge632wa4qG4vHK NFLcnwhPH3VI+W610RR+eM3/IfcisGWgCrnMV8pT52xa/1ZkQEzlHe0GbYmNEowz NU5Giuj8ws3kHmJgUed8xxkyDly5pMFOovq91ha4hvsVx+aFyx2+RnJMZvL5n248 3DrvhUTpPtKvJzpedw0Dq6js0mSn8ISxzdPacZ7KYgJuN3nVCeIeaoC5vfcyTe8u HzPFOaTfAjdBUMCt+BxHXynvFV5W+M1QfMsy6vz+KTG5g2DU8+bHfH/+av8+e+Jr fcCE3JSKten26w== -----END CERTIFICATE-----Generated at Mon Jan 26 06:32:29 2026 by rpki-client