This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json) Hash identifier: XBWgyOo4Ues71IyUR+LJwM2N/I/RDqphQuTE++2YMlk= Subject key identifier: FC:2C:D3:EC:17:E1:C9:01:60:99:89:3A:CA:C3:3C:9B:4E:B0:CA:24 Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c Certificate serial: 019BB2BA3DB7B8F1BB2F03D15D6A868F622C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft Manifest number: 0F26 Signing time: Mon 12 Jan 2026 15:01:48 +0000 Manifest this update: Mon 12 Jan 2026 15:01:48 +0000 Manifest next update: Tue 13 Jan 2026 15:01:48 +0000 Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: S+heP9eMrIn+9hKvs916C5zxml3pgrwvFhI+Fij+k10=) 2: ipwbth9z_kAmFFiQQC69LkO_nQw.roa (hash: NejJVwemsx7RaWRb+qhN37iXZFwIo50zil0wLKpDlFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:ba:3d:b7:b8:f1:bb:2f:03:d1:5d:6a:86:8f:62:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c Validity Not Before: Jan 12 15:01:48 2026 GMT Not After : Jan 13 15:01:48 2026 GMT Subject: CN=fc2cd3ec17e1c9016099893acac33c9b4eb0ca24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fc:e9:a4:30:c3:be:5b:a2:3e:23:5a:b9:e3: 25:af:46:04:d0:a7:7f:51:10:ed:0e:6a:9a:38:dc: 9d:3c:14:62:13:ba:ad:1c:8b:db:2d:06:36:23:33: 53:c4:3a:19:02:f2:1b:de:8b:c9:33:9e:49:31:bf: b8:ae:26:89:92:83:06:87:6d:11:35:ca:c1:25:d7: 3b:eb:6e:c8:c7:6b:ee:f2:88:2c:33:53:ea:a3:ed: d3:1d:ac:6c:e1:82:e1:5f:db:30:2d:21:96:a4:1d: c5:f9:c9:08:09:fc:7a:ad:ff:cc:3a:16:e0:4b:32: 37:52:ea:e2:7d:96:38:00:98:6d:4e:1b:1e:87:1f: f1:12:df:70:b2:b9:31:c0:b6:13:9b:57:91:98:88: 87:af:7d:6c:6a:9f:05:3a:34:33:60:66:b6:11:b6: 71:5e:6f:ca:55:a1:26:06:db:d3:5f:55:33:85:d7: 58:39:ec:81:7a:03:d8:de:c6:11:c1:f4:84:8f:83: 8f:f4:ff:a0:d2:f6:e2:32:c6:40:2c:1a:dc:36:63: 45:4a:f4:03:17:0f:c1:48:00:8c:7f:1d:af:b1:e2: 66:dd:de:f3:cf:2a:88:31:2a:4d:a5:66:ff:96:b3: 2e:1b:70:c4:de:02:a2:16:1e:88:5c:3a:9b:96:d7: ea:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2C:D3:EC:17:E1:C9:01:60:99:89:3A:CA:C3:3C:9B:4E:B0:CA:24 X509v3 Authority Key Identifier: keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5b:7a:36:00:e2:a5:d8:67:3e:c7:a7:6a:a9:51:44:9c:07: 85:f2:5f:c7:2a:8f:25:b2:d2:01:e4:22:88:14:04:08:dd:44: f3:28:f1:9a:8d:1d:79:0e:da:2b:85:e1:fe:97:17:b7:16:fa: 88:4b:2a:42:e7:ab:4a:9a:33:88:fb:9c:8c:57:76:c8:ad:62: f9:ed:19:e8:52:10:3e:d1:42:6b:85:59:36:f3:eb:39:e8:2f: ac:db:c9:95:a7:2a:87:26:48:f5:5b:c2:a3:c1:5f:f2:a5:a0: c4:2b:4f:ff:86:f0:6f:a7:c2:d6:31:5b:ee:d4:2f:cf:fb:f1: 4b:9e:40:63:bb:d4:7b:38:91:9b:a0:06:38:0e:49:f1:4e:c9: e2:55:e0:6f:59:89:05:04:9c:5e:08:2d:9d:32:0e:2a:70:ee: 76:97:fb:f1:a9:58:d0:e6:00:ac:1c:68:dc:f8:53:07:d1:b6: 9e:9a:0d:93:b7:e0:bc:05:0c:9e:f9:c1:77:e9:70:9e:c7:73: 77:98:58:8f:1d:75:be:38:45:68:ab:29:bb:c9:ed:ea:5c:e9: 6f:43:e0:68:33:53:57:e0:ee:76:53:23:f8:a3:83:c8:1d:96: cc:50:93:ab:59:99:c0:07:2e:4a:76:29:42:8d:f2:01:32:ab: 4f:1e:af:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyuj23uPG7LwPRXWqGj2IsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOGFhYmEwZjQ2YmFhMTQ0ZmRiMDkzOGU5MWMxNGY5NGM2 MTY1MGMwHhcNMjYwMTEyMTUwMTQ4WhcNMjYwMTEzMTUwMTQ4WjAzMTEwLwYDVQQD EyhmYzJjZDNlYzE3ZTFjOTAxNjA5OTg5M2FjYWMzM2M5YjRlYjBjYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvzppDDDvluiPiNaueMlr0YE0Kd/ URDtDmqaONydPBRiE7qtHIvbLQY2IzNTxDoZAvIb3ovJM55JMb+4riaJkoMGh20R NcrBJdc7627Ix2vu8ogsM1Pqo+3THaxs4YLhX9swLSGWpB3F+ckICfx6rf/MOhbg SzI3UurifZY4AJhtThsehx/xEt9wsrkxwLYTm1eRmIiHr31sap8FOjQzYGa2EbZx Xm/KVaEmBtvTX1UzhddYOeyBegPY3sYRwfSEj4OP9P+g0vbiMsZALBrcNmNFSvQD Fw/BSACMfx2vseJm3d7zzyqIMSpNpWb/lrMuG3DE3gKiFh6IXDqbltfqswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPws0+wX4ckBYJmJOsrDPJtOsMokMB8GA1UdIwQY MBaAFN2Kq6D0a6oUT9sJOOkcFPlMYWUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xZmEyN2UtYWFmMC00YmUyLWE1MjIt YTgwYzk0NzYxZDIzLzEvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xZmEyN2UtYWFmMC00YmUyLWE1MjItYTgwYzk0NzYxZDIz LzEvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVt6NgDi pdhnPsenaqlRRJwHhfJfxyqPJbLSAeQiiBQECN1E8yjxmo0deQ7aK4Xh/pcXtxb6 iEsqQuerSpoziPucjFd2yK1i+e0Z6FIQPtFCa4VZNvPrOegvrNvJlacqhyZI9VvC o8Ff8qWgxCtP/4bwb6fC1jFb7tQvz/vxS55AY7vUeziRm6AGOA5J8U7J4lXgb1mJ BQScXggtnTIOKnDudpf78alY0OYArBxo3PhTB9G2npoNk7fgvAUMnvnBd+lwnsdz d5hYjx11vjhFaKspu8nt6lzpb0PgaDNTV+DudlMj+KODyB2WzFCTq1mZwAcuSnYp Qo3yATKrTx6vZQ== -----END CERTIFICATE-----Generated at Mon Jan 12 23:51:19 2026 by rpki-client