This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json) Hash identifier: C2EAAK05aPGCefRcrGnwWZg4vJnnan1eh7rHfrXBCoY= Subject key identifier: A8:53:4C:21:9B:76:71:23:4A:A2:55:11:8B:17:56:3B:BD:C9:76:90 Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8 Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8 Certificate serial: 019BAFB8F8D73461467A8585FE7F3A3CC3A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft Manifest number: 10C5 Signing time: Mon 12 Jan 2026 01:01:33 +0000 Manifest this update: Mon 12 Jan 2026 01:01:33 +0000 Manifest next update: Tue 13 Jan 2026 01:01:33 +0000 Files and hashes: 1: WgyWXzUsbTmY_1RP05v7gzecvkE.roa (hash: 21qhAR+umq3QUHZh7Y6Cu4mrPcpjOq1CbtvmUgC6mpY=) 2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: yVRF8MfEuyk6HeH3EekIh97fI6BlXTFpxeA0D4FIIgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:b8:f8:d7:34:61:46:7a:85:85:fe:7f:3a:3c:c3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8 Validity Not Before: Jan 12 01:01:33 2026 GMT Not After : Jan 13 01:01:33 2026 GMT Subject: CN=a8534c219b7671234aa255118b17563bbdc97690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:45:2c:87:0c:bd:b6:08:7c:62:1f:80:8d:ff: 36:3c:9d:8f:46:5e:7e:9a:e6:e2:84:c1:a2:62:ae: 29:18:e4:18:9b:0c:d3:3a:43:ef:fd:25:9c:5a:96: 32:7a:db:56:b6:3f:66:dc:f2:be:9f:fd:b3:4a:41: 2f:61:9d:99:a3:ab:b8:21:e8:92:56:a0:87:13:ce: c1:b5:78:58:d8:10:4e:35:59:8b:7b:09:ec:3c:bd: 3f:7c:8b:84:57:ea:f2:1a:07:68:8c:73:45:4c:65: 7b:5b:f3:de:f3:b2:79:b5:12:14:f4:5b:d9:7c:2d: 09:51:e2:5e:69:ea:ac:5d:e4:c5:c9:8b:7a:a7:9c: 7d:d6:d6:bd:c8:35:4c:c0:1c:5f:78:e1:35:37:b9: 7d:01:ea:e6:1c:d0:57:8f:62:7b:61:44:d1:bd:a8: 34:0f:4a:bf:99:40:98:79:f0:26:71:eb:fd:25:98: 0a:43:3c:a4:00:16:38:f6:3a:1c:6b:bd:49:73:20: e4:fb:6b:c7:6a:8c:58:70:f6:d8:ae:1c:43:69:39: fc:9d:39:7c:dd:2b:a6:a0:ec:cf:78:75:92:5f:52: f3:a5:b8:6a:44:cb:a9:e1:b5:29:e9:c9:4f:4c:75: a5:1d:6a:5f:33:74:9d:c2:0c:20:cd:ed:02:58:0f: a7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:53:4C:21:9B:76:71:23:4A:A2:55:11:8B:17:56:3B:BD:C9:76:90 X509v3 Authority Key Identifier: keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5a:d7:6f:4d:46:aa:88:81:89:14:8c:6b:72:ee:44:db:9c: 61:06:a5:bd:b5:e7:db:18:ee:62:35:17:b6:68:6d:a6:38:70: fc:08:2f:d0:8b:45:15:0d:aa:0f:7b:ce:11:6b:37:c0:5e:be: 56:ff:42:d8:62:91:dd:83:f4:c7:2f:75:c3:b9:d5:e0:c8:f2: fe:61:f2:48:d7:94:c1:9b:13:fd:38:2d:5f:43:20:a9:3d:0b: 33:1e:05:e7:ee:07:a8:81:41:91:ed:17:cb:61:ed:45:a3:29: 60:fe:c0:7c:6e:16:55:cd:c7:11:2b:86:0b:04:78:99:79:63: c1:1c:ff:8b:73:f5:f0:3b:20:22:c7:3d:61:08:50:e8:85:dd: cf:7c:62:38:c5:9a:ea:cc:46:25:1a:fb:7b:17:b8:53:19:47: 1e:8b:0f:4d:62:e7:86:8c:67:6b:93:7e:e0:07:b8:39:be:ae: 79:3e:61:dd:48:d3:34:99:e3:b5:73:e2:63:12:26:36:61:df: e6:40:41:49:85:08:12:6a:08:64:88:58:9b:74:e1:16:50:38: 0c:b9:e1:dd:0c:3e:6b:ab:36:67:06:f5:bc:87:1a:e0:e2:60: 14:67:79:6e:24:3a:bd:03:a1:6e:57:92:e1:7d:a8:a3:7f:7b: 2e:2c:95:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvuPjXNGFGeoWF/n86PMOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzM2ZWRlYjkyZjkzN2VhNDU4OTNlYTliY2Y0ZWY4M2Yx NWZmYzgwHhcNMjYwMTEyMDEwMTMzWhcNMjYwMTEzMDEwMTMzWjAzMTEwLwYDVQQD EyhhODUzNGMyMTliNzY3MTIzNGFhMjU1MTE4YjE3NTYzYmJkYzk3NjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10Ushwy9tgh8Yh+Ajf82PJ2PRl5+ mubihMGiYq4pGOQYmwzTOkPv/SWcWpYyettWtj9m3PK+n/2zSkEvYZ2Zo6u4IeiS VqCHE87BtXhY2BBONVmLewnsPL0/fIuEV+ryGgdojHNFTGV7W/Pe87J5tRIU9FvZ fC0JUeJeaeqsXeTFyYt6p5x91ta9yDVMwBxfeOE1N7l9AermHNBXj2J7YUTRvag0 D0q/mUCYefAmcev9JZgKQzykABY49joca71JcyDk+2vHaoxYcPbYrhxDaTn8nTl8 3SumoOzPeHWSX1LzpbhqRMup4bUp6clPTHWlHWpfM3Sdwgwgze0CWA+nnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhTTCGbdnEjSqJVEYsXVju9yXaQMB8GA1UdIwQY MBaAFMdzbt65L5N+pFiT6pvPTvg/Ff/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYt NjY5NmRhZGI0NWViLzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYtNjY5NmRhZGI0NWVi LzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblrXb01G qoiBiRSMa3LuRNucYQalvbXn2xjuYjUXtmhtpjhw/Agv0ItFFQ2qD3vOEWs3wF6+ Vv9C2GKR3YP0xy91w7nV4Mjy/mHySNeUwZsT/TgtX0MgqT0LMx4F5+4HqIFBke0X y2HtRaMpYP7AfG4WVc3HESuGCwR4mXljwRz/i3P18DsgIsc9YQhQ6IXdz3xiOMWa 6sxGJRr7exe4UxlHHosPTWLnhoxna5N+4Ae4Ob6ueT5h3UjTNJnjtXPiYxImNmHf 5kBBSYUIEmoIZIhYm3ThFlA4DLnh3Qw+a6s2Zwb1vIca4OJgFGd5biQ6vQOhbleS 4X2oo397LiyV/Q== -----END CERTIFICATE-----Generated at Mon Jan 12 05:19:17 2026 by rpki-client