This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json) Hash identifier: 9lkCaRNw21omrBX+i/tFeIvRG/EKgAbtF5F4o9iYOwA= Subject key identifier: 81:41:9A:58:E8:31:8A:E6:25:26:A1:C1:77:28:96:82:B4:00:D7:9D Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Certificate serial: 019BF2E265B42793058AF655A14CCC151B64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft Manifest number: 0760 Signing time: Sun 25 Jan 2026 02:01:21 +0000 Manifest this update: Sun 25 Jan 2026 02:01:21 +0000 Manifest next update: Mon 26 Jan 2026 02:01:21 +0000 Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: vK7AXChpBPmmdhl/f9srWya3UlzsjTnlgaa3Kwswl94=) 2: 88lmdc-mnvLuh7LWT7ewTNitVbQ.roa (hash: 4ev2GHc0kZ6+DnkiGr59ZAC1o1ATDYyOeOGEjJWvhDk=) 3: iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa (hash: 4bH7BrC7xILPkVZ3kcGwCvI7Oji+afFT1aTAsrKOTnM=) 4: mrolwK2KC0w8DkEJIzjFPnT8aDY.roa (hash: KWvJn4y2GSmF/qywBZLEL1QJaSchEcFy2JpZDDXnxyg=) 5: o4G9chIzN7uCnwtKmumyR2sTH_I.roa (hash: KfBs8CLUl46AX0/vUOMRNCDr9u0nNAN2TPcPPQgzWaA=) 6: oFfXrLBfH6lxJPqPhKKALIEnsRY.roa (hash: xv0fWfgOWHRGVoD3X/VZOFn9nwq6PPmmOVIp8EyiD2o=) 7: oovOX9XETodZiiuPtmCpoSGbNQc.roa (hash: P+TaVSkHOwUfOr3zgGexRmHGN3QYL0Fhy8MDYgpRxpU=) 8: yUZKLH7R2JtKQc0S4DdHsOUEQU0.roa (hash: wwrcXsGyyFttGj2nkBh3bs0XPOa0z7A1reDz9TIBgKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:65:b4:27:93:05:8a:f6:55:a1:4c:cc:15:1b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Validity Not Before: Jan 25 02:01:21 2026 GMT Not After : Jan 26 02:01:21 2026 GMT Subject: CN=81419a58e8318ae62526a1c177289682b400d79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:2b:a8:48:ca:d8:c6:94:f2:f6:82:59:78: 55:cf:cc:c2:14:cf:b4:2f:87:35:7e:38:9d:e0:7a: 9a:44:bb:3a:e8:73:77:2f:25:60:20:79:00:66:86: 2d:b2:61:ce:d9:f5:dc:61:85:07:6e:c1:39:cb:60: ca:d3:f4:ea:f6:06:23:8f:09:29:5c:5f:f7:52:00: d8:62:d2:43:21:83:2f:e8:5c:50:94:83:2e:47:68: 93:be:f2:84:d9:65:ab:98:16:9f:16:81:2c:37:f0: 05:be:c3:dd:eb:14:e9:69:a3:66:43:0e:ae:cc:46: 3a:1f:0f:2f:19:84:7e:64:c4:a0:e3:20:36:26:73: 6a:a1:63:1c:2b:b8:ef:d3:74:2c:c5:bc:c3:9e:00: 77:ed:d7:47:27:42:39:07:df:63:7c:ff:02:c2:fa: 04:64:97:a0:40:89:3d:e2:8d:e5:fc:59:5a:fb:e8: 88:60:a8:12:17:4f:fb:74:8f:63:1b:fc:97:cb:1b: b4:29:45:66:49:23:52:9f:97:03:31:79:48:1c:38: 0a:bc:dc:f2:9e:8a:7d:52:3e:91:de:b4:fb:8c:fb: 5a:9e:5c:4b:a2:ba:8b:08:30:9f:6a:0d:c5:99:64: 14:e7:90:5c:1d:c3:b2:ef:e2:c0:35:e6:4f:e3:d0: 7c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:41:9A:58:E8:31:8A:E6:25:26:A1:C1:77:28:96:82:B4:00:D7:9D X509v3 Authority Key Identifier: keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:93:d1:04:00:5c:15:a8:bb:35:70:c0:1f:b7:56:bb:06:df: a1:07:c4:53:18:22:30:f1:68:eb:4b:52:f4:4b:43:76:7d:0f: 30:e8:2e:29:5a:ba:5a:87:1c:50:c3:45:34:a7:99:ae:e1:c6: 4c:88:a0:1f:0a:2a:a0:a5:0d:41:59:e9:6b:35:ca:aa:40:23: be:0c:85:86:d6:0a:34:15:36:ea:c8:0a:d2:a7:41:52:20:95: 4a:09:d5:37:75:c8:a0:1d:27:43:18:16:45:c5:06:c2:57:4d: 2c:ba:1d:d0:3c:31:bd:63:c1:57:07:cf:21:94:e9:49:0c:86: 01:0d:ce:18:d3:78:d1:6a:33:d8:93:07:83:78:13:3f:1b:9d: 8d:3e:a4:f8:80:d3:8b:d6:15:53:f2:5c:aa:03:3e:52:09:63: 64:49:a7:77:2e:cc:b3:fa:5c:73:a7:9b:8c:04:42:0e:09:57: 18:72:a1:b5:cd:55:a9:61:57:48:7c:4c:2c:93:0b:1c:fd:c8: e3:77:28:9e:03:36:2e:6f:6c:b8:cc:4c:a8:83:aa:80:6c:b7: a0:8a:72:ae:f8:af:b4:c7:6e:58:c0:75:0a:2a:c2:b7:41:72: 31:f8:2e:df:13:95:c8:95:61:ee:5f:0c:6c:1a:ca:3b:9f:ca: d6:15:41:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4mW0J5MFivZVoUzMFRtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2ZkYzRiZjMzYmQ4MGZlMTI4ZDc1Njg0M2Y2MGIzOWQ1 YmVlZTMwHhcNMjYwMTI1MDIwMTIxWhcNMjYwMTI2MDIwMTIxWjAzMTEwLwYDVQQD Eyg4MTQxOWE1OGU4MzE4YWU2MjUyNmExYzE3NzI4OTY4MmI0MDBkNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshsrqEjK2MaU8vaCWXhVz8zCFM+0 L4c1fjid4HqaRLs66HN3LyVgIHkAZoYtsmHO2fXcYYUHbsE5y2DK0/Tq9gYjjwkp XF/3UgDYYtJDIYMv6FxQlIMuR2iTvvKE2WWrmBafFoEsN/AFvsPd6xTpaaNmQw6u zEY6Hw8vGYR+ZMSg4yA2JnNqoWMcK7jv03QsxbzDngB37ddHJ0I5B99jfP8CwvoE ZJegQIk94o3l/Fla++iIYKgSF0/7dI9jG/yXyxu0KUVmSSNSn5cDMXlIHDgKvNzy nop9Uj6R3rT7jPtanlxLorqLCDCfag3FmWQU55BcHcOy7+LANeZP49B8NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFBmljoMYrmJSahwXcoloK0ANedMB8GA1UdIwQY MBaAFN8/3EvzO9gP4SjXVoQ/YLOdW+7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMt YTQ3M2VjNTQxMGMzLzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMtYTQ3M2VjNTQxMGMz LzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5PRBABc Fai7NXDAH7dWuwbfoQfEUxgiMPFo60tS9EtDdn0PMOguKVq6WoccUMNFNKeZruHG TIigHwoqoKUNQVnpazXKqkAjvgyFhtYKNBU26sgK0qdBUiCVSgnVN3XIoB0nQxgW RcUGwldNLLod0DwxvWPBVwfPIZTpSQyGAQ3OGNN40Woz2JMHg3gTPxudjT6k+IDT i9YVU/JcqgM+UgljZEmndy7Ms/pcc6ebjARCDglXGHKhtc1VqWFXSHxMLJMLHP3I 43congM2Lm9suMxMqIOqgGy3oIpyrvivtMduWMB1CirCt0FyMfgu3xOVyJVh7l8M bBrKO5/K1hVBLw== -----END CERTIFICATE-----Generated at Sun Jan 25 05:40:42 2026 by rpki-client