This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json) Hash identifier: 61uCr/iT9XDO8whkzyrxoNZTMYt+znTI5O9AX2J8OwA= Subject key identifier: 18:28:7C:36:46:1A:55:F7:C2:CA:09:72:1A:3D:BF:45:38:5D:F9:D0 Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c Certificate serial: 019BAD93638B620A37519A2BEA85A1BA05B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft Manifest number: 0CFB Signing time: Sun 11 Jan 2026 15:01:16 +0000 Manifest this update: Sun 11 Jan 2026 15:01:16 +0000 Manifest next update: Mon 12 Jan 2026 15:01:16 +0000 Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: GEwb2ZEJB2CfXaRWNikcwHAkQpZdwhYIZrtIkBKVbC0=) 2: y2Yw6-Xzss6T6oXyrYGmZ001q9U.roa (hash: d8IrU4kU0qWnxL1m5NsiZ0ByNC3CpvcAWEyIv/Y47HA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:93:63:8b:62:0a:37:51:9a:2b:ea:85:a1:ba:05:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c Validity Not Before: Jan 11 15:01:16 2026 GMT Not After : Jan 12 15:01:16 2026 GMT Subject: CN=18287c36461a55f7c2ca09721a3dbf45385df9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d1:81:24:e6:72:bf:73:6d:63:79:1a:fc:c3: aa:50:23:b3:0b:6e:84:18:0f:41:54:47:3d:f9:cc: d5:cb:f4:01:1c:08:3e:80:6c:56:5e:50:6c:ac:30: 6f:f8:4b:be:ed:dc:bc:26:02:90:78:74:c8:8b:24: 2e:37:6f:9f:84:49:1a:2f:06:32:a5:ff:66:eb:b6: 98:c9:11:ec:0b:7f:ca:1d:47:c3:77:97:1f:e5:29: e0:91:ab:44:88:a7:0c:41:99:17:84:89:a6:7a:80: 23:f1:c3:b7:24:ea:42:c5:da:89:b5:c7:74:74:66: 02:42:43:52:f8:1e:06:ab:47:ef:9c:89:13:bc:a8: 86:48:58:cd:59:27:06:d8:72:d2:81:0d:aa:e2:c0: 5d:1b:b3:87:34:cf:b3:82:1f:35:d8:ae:db:85:f6: b6:3c:69:14:fb:33:ba:05:85:f1:1c:7b:f2:1d:72: 91:97:2e:ba:94:58:16:04:f0:a9:8f:89:71:0c:73: 7a:58:d4:81:49:ed:8b:2b:86:d3:79:26:2c:aa:f9: 08:2d:6c:78:7e:f5:34:89:f2:dc:87:1f:b9:a3:08: b4:12:da:87:60:82:e1:b2:3d:00:27:dc:66:4d:1e: 89:8f:c4:4b:cc:ae:10:c7:54:e9:76:45:e8:dd:42: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:28:7C:36:46:1A:55:F7:C2:CA:09:72:1A:3D:BF:45:38:5D:F9:D0 X509v3 Authority Key Identifier: keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:5a:c8:58:5c:33:0d:6c:08:ae:66:b9:c8:74:06:b6:ac:35: 1f:0a:13:8d:b3:3c:80:20:5b:c9:0c:25:96:7c:94:a8:75:cc: 7c:88:02:93:0d:04:05:1b:9a:1c:66:12:3a:87:e2:5d:e0:dc: 56:80:ab:51:ca:8f:18:1a:12:4f:86:53:48:c0:05:42:eb:00: 4f:1d:ea:4b:de:6d:11:c5:87:0b:89:f2:3c:57:ee:34:24:52: 93:3a:41:d0:5c:fa:49:c2:06:c9:53:27:67:f4:c1:ef:52:3b: a9:0d:a7:f6:7c:bf:81:b0:70:87:67:3b:bc:8d:4a:33:ff:0f: 50:c1:2e:cd:8b:ba:c9:ab:91:1c:2e:5c:57:74:bb:26:6b:73: 28:9e:06:07:57:45:16:49:59:2b:c7:77:ba:1d:fd:05:38:35: a5:f7:fe:23:41:5b:56:20:f2:c0:2f:27:35:e4:b8:98:15:4e: b8:c3:04:11:e7:8b:01:30:53:82:ed:94:0f:98:ff:7f:dc:12: c1:b6:b4:fc:b6:0b:2d:b5:0d:7f:03:4f:43:eb:90:2a:af:47: a5:14:62:af:6b:a9:07:e8:6c:5c:90:0b:ef:7a:fb:3e:64:2b: 97:46:da:9d:b7:c7:ed:1f:43:21:66:c2:a3:f4:4a:4a:84:c9: 36:db:01:43 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZutk2OLYgo3UZor6oWhugW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzIzNzA2ZDBlODM3NThiYTUyMTM4ZTlkYjQyMDdiNWE1 YzE4OWMwHhcNMjYwMTExMTUwMTE2WhcNMjYwMTEyMTUwMTE2WjAzMTEwLwYDVQQD EygxODI4N2MzNjQ2MWE1NWY3YzJjYTA5NzIxYTNkYmY0NTM4NWRmOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9GBJOZyv3NtY3ka/MOqUCOzC26E GA9BVEc9+czVy/QBHAg+gGxWXlBsrDBv+Eu+7dy8JgKQeHTIiyQuN2+fhEkaLwYy pf9m67aYyRHsC3/KHUfDd5cf5SngkatEiKcMQZkXhImmeoAj8cO3JOpCxdqJtcd0 dGYCQkNS+B4Gq0fvnIkTvKiGSFjNWScG2HLSgQ2q4sBdG7OHNM+zgh812K7bhfa2 PGkU+zO6BYXxHHvyHXKRly66lFgWBPCpj4lxDHN6WNSBSe2LK4bTeSYsqvkILWx4 fvU0ifLchx+5owi0EtqHYILhsj0AJ9xmTR6Jj8RLzK4Qx1TpdkXo3UI/QQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBgofDZGGlX3wsoJcho9v0U4XfnQMB8GA1UdIwQY MBaAFPtyNwbQ6DdYulITjp20IHtaXBicMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zSTNCdERvTjFpNlVoT09uYlFnZTFwY0dKdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvY2ZhYzMxLTgzNTYtNDMyZC1hMzRk LWI2MTQzNjExOTZmZC8xLzEtM0kzQnREb04xaTZVaE9PbmJRZ2UxcGNHSncubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU5L2NmYWMzMS04MzU2LTQzMmQtYTM0ZC1iNjE0MzYxMTk2 ZmQvMS8xLTNJM0J0RG9OMWk2VWhPT25iUWdlMXBjR0p3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVrI WFwzDWwIrma5yHQGtqw1HwoTjbM8gCBbyQwllnyUqHXMfIgCkw0EBRuaHGYSOofi XeDcVoCrUcqPGBoST4ZTSMAFQusATx3qS95tEcWHC4nyPFfuNCRSkzpB0Fz6ScIG yVMnZ/TB71I7qQ2n9ny/gbBwh2c7vI1KM/8PUMEuzYu6yauRHC5cV3S7JmtzKJ4G B1dFFklZK8d3uh39BTg1pff+I0FbViDywC8nNeS4mBVOuMMEEeeLATBTgu2UD5j/ f9wSwba0/LYLLbUNfwNPQ+uQKq9HpRRir2upB+hsXJAL73r7PmQrl0banbfH7R9D IWbCo/RKSoTJNtsBQw== -----END CERTIFICATE-----Generated at Sun Jan 11 23:26:36 2026 by rpki-client