This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft File: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft (raw, json) Hash identifier: Kj+6HuAztdK6IUYHdKD6uaM+xaeK3tu6wbgbkdyRjVQ= Subject key identifier: FA:35:38:39:97:8A:A1:57:10:18:90:11:CE:D7:74:65:D3:7F:D4:B4 Authority key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91 Certificate issuer: /CN=dd399e494189f691a5ed64f3be3a6a3b50225091 Certificate serial: 019BB102597561D28C09F6CFF44B4E0F71F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft Manifest number: 0731 Signing time: Mon 12 Jan 2026 07:01:19 +0000 Manifest this update: Mon 12 Jan 2026 07:01:19 +0000 Manifest next update: Tue 13 Jan 2026 07:01:19 +0000 Files and hashes: 1: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl (hash: HtaqhWfyyK7/c9DwRqcCogZJqZvV3wmsrlxH9OoBwGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:02:59:75:61:d2:8c:09:f6:cf:f4:4b:4e:0f:71:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd399e494189f691a5ed64f3be3a6a3b50225091 Validity Not Before: Jan 12 07:01:19 2026 GMT Not After : Jan 13 07:01:19 2026 GMT Subject: CN=fa353839978aa15710189011ced77465d37fd4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:dc:2a:47:cb:35:d1:10:58:21:96:14:a4: 39:99:48:e5:e6:1c:03:2f:d0:d1:41:0d:e5:e9:ec: 79:2b:c0:a0:c9:44:34:d8:ac:47:0d:08:d1:48:40: b3:b1:1a:34:d8:8f:24:38:12:49:75:89:ff:19:df: e4:0c:a2:13:86:ac:ba:05:4d:d4:df:3b:cb:28:40: 6c:f1:de:f2:d2:f3:84:70:ff:14:08:e7:c8:57:0f: 9a:7a:4d:74:89:c0:71:3b:38:d8:de:6a:eb:2a:54: 8f:08:78:40:3b:bf:5a:b0:26:a3:fd:19:bc:81:60: 68:4d:e6:a6:22:75:58:d7:41:74:ea:83:f6:e4:d7: 41:9e:a6:f6:0c:f5:dd:e6:b4:59:28:6f:c2:b1:10: 73:51:1a:e0:12:19:57:9d:2f:08:c8:bd:32:86:49: b1:37:2e:7e:1d:ed:f4:f7:6d:01:2a:0b:bf:b2:1f: 35:4a:a5:b3:ba:f0:6a:83:e7:a7:24:ff:ae:05:22: 17:4f:67:fe:b0:9a:74:62:a5:2a:0c:de:64:c9:cc: fe:0e:fd:c5:40:20:7f:ea:5d:f5:a2:c2:e1:af:3a: 4c:c0:bb:ae:0d:d0:87:7d:01:f5:88:e9:32:0c:99: 8c:3b:a2:1b:a8:39:7a:d6:10:55:12:2d:49:3e:6f: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:35:38:39:97:8A:A1:57:10:18:90:11:CE:D7:74:65:D3:7F:D4:B4 X509v3 Authority Key Identifier: keyid:DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6b:b0:5a:33:84:b8:6b:2b:6f:e0:67:54:b3:d8:9d:7c:2e: 93:21:3a:31:41:5c:16:e8:4a:46:b1:7d:e5:30:d7:5c:29:f8: c9:6d:e0:43:f4:f2:46:13:7f:a2:d0:8c:ad:e5:a3:54:4d:12: 84:6c:01:e5:e3:e6:14:45:e4:7e:21:df:5a:65:28:7d:05:02: 04:28:21:d5:b4:fc:92:6c:3d:11:a9:3b:2a:4d:1b:34:57:c8: 26:d6:90:86:47:ea:9a:6b:16:b5:27:a7:c3:9a:cf:c3:f4:79: 54:58:96:b6:5a:46:d8:31:cc:b3:93:20:55:63:2d:e1:84:9a: 63:69:68:39:1e:ea:38:63:74:9f:98:2a:fa:8c:09:e7:f5:c9: a7:c1:8e:42:36:ed:cc:9c:8d:4e:15:3b:ca:0e:06:c9:63:2c: ba:05:1f:ac:36:e9:2d:55:12:88:53:54:75:89:ed:34:19:9b: 46:d0:ae:2e:1e:97:a8:73:c8:22:68:1c:f4:b4:cf:64:ce:88: 5e:dc:2c:e9:b4:92:c1:9a:0b:0d:2e:57:4e:9e:0c:14:c8:25: 55:63:70:4a:3f:2e:be:24:02:da:fe:af:91:e1:f2:0f:e8:cd: 21:ef:b9:68:b8:85:aa:54:07:50:f7:45:bd:57:76:4d:84:4b: b9:23:b2:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxAll1YdKMCfbP9EtOD3H4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMzk5ZTQ5NDE4OWY2OTFhNWVkNjRmM2JlM2E2YTNiNTAy MjUwOTEwHhcNMjYwMTEyMDcwMTE5WhcNMjYwMTEzMDcwMTE5WjAzMTEwLwYDVQQD EyhmYTM1MzgzOTk3OGFhMTU3MTAxODkwMTFjZWQ3NzQ2NWQzN2ZkNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTrcKkfLNdEQWCGWFKQ5mUjl5hwD L9DRQQ3l6ex5K8CgyUQ02KxHDQjRSECzsRo02I8kOBJJdYn/Gd/kDKIThqy6BU3U 3zvLKEBs8d7y0vOEcP8UCOfIVw+aek10icBxOzjY3mrrKlSPCHhAO79asCaj/Rm8 gWBoTeamInVY10F06oP25NdBnqb2DPXd5rRZKG/CsRBzURrgEhlXnS8IyL0yhkmx Ny5+He30920BKgu/sh81SqWzuvBqg+enJP+uBSIXT2f+sJp0YqUqDN5kycz+Dv3F QCB/6l31osLhrzpMwLuuDdCHfQH1iOkyDJmMO6IbqDl61hBVEi1JPm9aSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPo1ODmXiqFXEBiQEc7XdGXTf9S0MB8GA1UdIwQY MBaAFN05nklBifaRpe1k8746ajtQIlCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1RtZVNVR0o5cEdsN1dUenZqcHFPMUFpVUpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yN2JhNjgtZjE3OC00OTkxLTk2YTct NDQyYTAzYjdmMDg0LzEvM1RtZVNVR0o5cEdsN1dUenZqcHFPMUFpVUpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yN2JhNjgtZjE3OC00OTkxLTk2YTctNDQyYTAzYjdmMDg0 LzEvM1RtZVNVR0o5cEdsN1dUenZqcHFPMUFpVUpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2uwWjOE uGsrb+BnVLPYnXwukyE6MUFcFuhKRrF95TDXXCn4yW3gQ/TyRhN/otCMreWjVE0S hGwB5ePmFEXkfiHfWmUofQUCBCgh1bT8kmw9Eak7Kk0bNFfIJtaQhkfqmmsWtSen w5rPw/R5VFiWtlpG2DHMs5MgVWMt4YSaY2loOR7qOGN0n5gq+owJ5/XJp8GOQjbt zJyNThU7yg4GyWMsugUfrDbpLVUSiFNUdYntNBmbRtCuLh6XqHPIImgc9LTPZM6I Xtws6bSSwZoLDS5XTp4MFMglVWNwSj8uviQC2v6vkeHyD+jNIe+5aLiFqlQHUPdF vVd2TYRLuSOyWQ== -----END CERTIFICATE-----Generated at Mon Jan 12 13:03:56 2026 by rpki-client