This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft File: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft (raw, json) Hash identifier: KU1qB7zc8KmNOscM5hBkH7h1jPmKGiS11pjFD9gOLoA= Subject key identifier: 65:CE:90:7B:73:2D:92:25:7C:84:B7:F9:F6:5A:62:E4:7C:ED:92:DA Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47 Certificate issuer: /CN=b77627cafe755785750bde5ba49e6c1091bf4247 Certificate serial: 019B81CCF51387DAC68E41D808E8F93477AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft Manifest number: 0FA2 Signing time: Sat 03 Jan 2026 03:00:51 +0000 Manifest this update: Sat 03 Jan 2026 03:00:51 +0000 Manifest next update: Sun 04 Jan 2026 03:00:51 +0000 Files and hashes: 1: ZwPne8zOsgkMT0U51cJiftdsvfk.roa (hash: BIxOUNugWCSEebM0j8omjX/fG0IbzdxHMnELYPl8RdM=) 2: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl (hash: Qch0rKB4d+LBdtx8VWz7WK1Gr2Ux3cyn27hNPd1F6cQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:cc:f5:13:87:da:c6:8e:41:d8:08:e8:f9:34:77:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247 Validity Not Before: Jan 3 03:00:51 2026 GMT Not After : Jan 4 03:00:51 2026 GMT Subject: CN=65ce907b732d92257c84b7f9f65a62e47ced92da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:c8:e2:b1:67:44:cc:df:f4:72:e6:3a:ab: 24:09:38:e9:63:af:a6:b1:f4:56:84:96:e8:14:41: 58:93:56:5d:e0:b5:8a:2e:40:38:bc:f7:8d:5e:eb: 0d:2a:1a:09:9c:0d:55:61:95:18:39:14:5c:f1:06: 6a:80:98:3c:53:6e:cf:bb:51:22:11:8b:3f:93:e8: a3:65:52:68:4a:7c:3c:94:e3:99:f3:d3:28:ef:c8: ae:1a:a0:25:e1:81:64:54:f7:40:9f:44:2e:f9:68: 21:17:a3:e7:77:ae:bf:ec:b3:89:75:6f:47:60:6e: 32:f5:ea:d5:1e:6e:a8:42:b5:91:06:8b:f8:e5:45: 59:94:07:97:f2:c8:56:8a:28:fd:da:9a:f4:dd:1d: 49:72:2a:c8:b8:92:f8:20:ca:9e:d0:6c:4d:77:b8: cb:64:9f:6d:9a:11:b3:1c:3d:ca:51:75:7e:0d:4e: a2:df:72:3a:d8:04:bf:ad:e7:e8:72:ea:1e:87:8a: 63:e9:bf:53:3a:28:1b:1d:bb:2d:04:de:c5:10:57: 75:c7:be:52:04:5d:51:2c:b0:2a:21:c3:dd:8e:d3: 6d:d0:b0:3c:d6:af:21:95:54:5f:19:52:fb:fb:dc: e2:09:62:71:4a:18:6f:21:35:0f:16:d9:c2:81:4f: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CE:90:7B:73:2D:92:25:7C:84:B7:F9:F6:5A:62:E4:7C:ED:92:DA X509v3 Authority Key Identifier: keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:a9:ed:e5:e6:f1:9b:50:81:64:12:83:d1:25:04:bd:fa:95: d3:1f:a9:94:88:31:74:b8:08:37:c1:08:b9:01:a0:1e:a9:2b: 49:20:a5:be:d1:ee:a5:1d:c7:b1:11:3e:d7:d1:9b:3c:49:5f: b9:a4:75:f9:f3:b0:16:71:0b:f6:11:22:9c:31:f4:f9:ab:e9: b8:b9:5c:54:1c:12:92:04:80:f7:54:93:70:51:de:fc:b0:43: 3a:b6:08:49:d7:6f:de:c1:09:2f:ff:3e:ab:e8:2a:cb:3e:4b: 5f:d1:dd:f9:89:09:04:58:c9:0d:26:9b:7c:fc:2d:a1:69:23: b9:e5:66:fc:e8:8c:de:ea:02:4f:44:91:d9:6a:07:ff:d5:a0: 85:9b:76:71:b7:f0:21:7a:1d:76:83:b1:35:10:a6:37:1e:0b: 92:e7:93:ed:30:ed:d8:8e:ac:07:f4:5c:72:4d:69:ce:00:64: d4:1e:38:58:17:c7:61:b7:a8:7e:04:c7:a8:c2:5e:1b:6b:67: 9d:c8:76:05:31:ce:9f:58:5a:06:82:f6:10:4d:1a:e0:41:47: 80:0a:b7:98:2d:ed:f3:a4:5e:34:0e:04:18:ac:af:6d:8d:f4: 49:7c:d3:ef:b7:0c:9f:33:89:e5:66:3a:d7:c8:3d:a6:51:17: 01:67:34:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBzPUTh9rGjkHYCOj5NHetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzYyN2NhZmU3NTU3ODU3NTBiZGU1YmE0OWU2YzEwOTFi ZjQyNDcwHhcNMjYwMTAzMDMwMDUxWhcNMjYwMTA0MDMwMDUxWjAzMTEwLwYDVQQD Eyg2NWNlOTA3YjczMmQ5MjI1N2M4NGI3ZjlmNjVhNjJlNDdjZWQ5MmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP/I4rFnRMzf9HLmOqskCTjpY6+m sfRWhJboFEFYk1Zd4LWKLkA4vPeNXusNKhoJnA1VYZUYORRc8QZqgJg8U27Pu1Ei EYs/k+ijZVJoSnw8lOOZ89Mo78iuGqAl4YFkVPdAn0Qu+WghF6Pnd66/7LOJdW9H YG4y9erVHm6oQrWRBov45UVZlAeX8shWiij92pr03R1JcirIuJL4IMqe0GxNd7jL ZJ9tmhGzHD3KUXV+DU6i33I62AS/refocuoeh4pj6b9TOigbHbstBN7FEFd1x75S BF1RLLAqIcPdjtNt0LA81q8hlVRfGVL7+9ziCWJxShhvITUPFtnCgU+dpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXOkHtzLZIlfIS3+fZaYuR87ZLaMB8GA1UdIwQY MBaAFLd2J8r+dVeFdQveW6SebBCRv0JHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNZbnl2NTFWNFYxQzk1YnBKNXNFSkdfUWtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MDIxMzctZGQ0MC00ZWY5LWJiMGYt NDQ1N2ZhMjBiY2JhLzEvdDNZbnl2NTFWNFYxQzk1YnBKNXNFSkdfUWtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82MDIxMzctZGQ0MC00ZWY5LWJiMGYtNDQ1N2ZhMjBiY2Jh LzEvdDNZbnl2NTFWNFYxQzk1YnBKNXNFSkdfUWtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKnt5ebx m1CBZBKD0SUEvfqV0x+plIgxdLgIN8EIuQGgHqkrSSClvtHupR3HsRE+19GbPElf uaR1+fOwFnEL9hEinDH0+avpuLlcVBwSkgSA91STcFHe/LBDOrYISddv3sEJL/8+ q+gqyz5LX9Hd+YkJBFjJDSabfPwtoWkjueVm/OiM3uoCT0SR2WoH/9WghZt2cbfw IXoddoOxNRCmNx4LkueT7TDt2I6sB/Rcck1pzgBk1B44WBfHYbeofgTHqMJeG2tn nch2BTHOn1haBoL2EE0a4EFHgAq3mC3t86ReNA4EGKyvbY30SXzT77cMnzOJ5WY6 18g9plEXAWc0Rw== -----END CERTIFICATE-----Generated at Sat Jan 3 13:08:13 2026 by rpki-client