This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft File: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json) Hash identifier: 8w8yka7h4e6vzbgkxHqQbrsSW73uvWGT5PMiOBQ/51M= Subject key identifier: FA:86:2A:F2:4B:B3:0E:ED:6D:AF:B9:6E:E7:B0:16:42:F1:F5:AE:67 Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17 Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17 Certificate serial: 019BA2A1D842B4D9D24FF41F6DAA2677461A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft Manifest number: 0814 Signing time: Fri 09 Jan 2026 12:01:14 +0000 Manifest this update: Fri 09 Jan 2026 12:01:14 +0000 Manifest next update: Sat 10 Jan 2026 12:01:14 +0000 Files and hashes: 1: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: Yi4aitG5OZQq1LQNeM2bxlSOXwGqlPWHvjx21TWu3XM=) 2: hBIKQJotb91PfUz83IlhlDln8Os.roa (hash: FZgPmcaU95wHeFAG7MifAFsuelM+Kr14jElFrFSjrsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:a1:d8:42:b4:d9:d2:4f:f4:1f:6d:aa:26:77:46:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17 Validity Not Before: Jan 9 12:01:14 2026 GMT Not After : Jan 10 12:01:14 2026 GMT Subject: CN=fa862af24bb30eed6dafb96ee7b01642f1f5ae67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:55:35:3c:09:ba:21:f4:7d:e9:b2:ef:f3: 91:b5:e0:d0:9a:a8:60:97:32:03:0b:b4:d9:3b:29: 92:27:42:c2:85:ae:9f:14:30:1e:1c:50:a5:9d:a2: 31:ad:6b:e4:0c:ed:a8:4f:d3:cc:71:71:0e:6a:e2: 56:f6:5d:f3:8e:94:54:ab:8d:e6:10:40:8a:79:bb: 1a:81:5d:24:b7:b6:51:c3:dc:eb:5e:76:f0:c2:08: e9:3d:3f:7b:52:7b:44:66:8c:eb:1c:4d:1c:aa:8d: 3a:d3:6f:e9:49:9b:33:87:26:7c:bc:3c:4d:c3:e5: 72:98:da:17:ae:bf:d7:c5:cf:e0:d3:31:4f:02:e5: 2d:f4:48:a5:47:fb:9a:35:3d:6a:36:b1:e6:b3:29: b0:87:d2:f6:d0:89:28:fe:66:53:0a:4c:53:50:45: 8d:9f:0a:27:f6:7e:3b:bd:1b:18:e0:e5:7c:c8:44: 98:9e:84:f0:c8:bc:62:82:42:17:5e:9a:5c:ef:48: 94:64:1f:9c:91:ff:6d:ea:ca:aa:a0:df:1a:91:ff: 19:c6:69:87:7c:f5:4d:48:7b:4b:bf:15:cb:80:be: 08:64:90:26:17:60:cc:34:f5:6a:4d:0f:18:45:c1: dd:c3:65:de:76:d8:62:15:a6:22:be:5b:a1:97:37: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:86:2A:F2:4B:B3:0E:ED:6D:AF:B9:6E:E7:B0:16:42:F1:F5:AE:67 X509v3 Authority Key Identifier: keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e7:54:68:60:1f:d6:1b:af:3b:16:b0:86:be:7c:22:e8:a5: 17:82:8d:80:86:70:37:64:37:a1:96:c7:33:30:fb:a1:bd:d1: 39:f3:36:0d:3d:20:b3:66:54:4b:32:19:30:fc:be:5a:7d:24: 7a:bf:e7:a8:67:f6:fb:83:13:18:55:2a:6f:7c:5d:b3:cf:0e: 98:cd:29:b6:41:1f:a6:38:ec:a7:2a:66:8a:1c:71:85:b9:30: 57:51:72:0e:63:30:d8:0e:e7:36:8b:92:c9:29:84:b6:95:cb: 79:4d:ed:ec:59:51:65:43:5a:c9:cf:33:d8:d8:74:30:b9:e6: 90:4d:e4:39:4a:b3:14:cc:3c:c8:3f:84:ab:22:38:de:31:49: 2c:dc:22:c3:1c:4a:e0:0d:77:23:71:6e:40:c8:ed:90:60:64: ca:68:74:70:9d:27:4c:00:b8:e3:f3:82:48:7f:7d:11:b6:21: e9:b3:da:e1:67:f2:8c:99:16:bc:f2:cc:77:f7:81:81:0e:a0: b3:fb:d8:84:47:98:75:c7:62:4b:d3:c3:1c:82:b1:2d:07:b5: 60:24:5f:37:b4:7b:2b:9a:b3:c4:85:b4:cc:8b:84:1e:5a:8d: 21:ae:ab:04:89:35:a0:b3:f3:8d:4c:68:cd:89:09:f0:02:92: 41:95:65:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiodhCtNnST/Qfbaomd0YaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGRkNmU3YTFmZWI2ZmI0N2M5YTJmODk5MTg4MjcwOTRk YmZjMTcwHhcNMjYwMTA5MTIwMTE0WhcNMjYwMTEwMTIwMTE0WjAzMTEwLwYDVQQD EyhmYTg2MmFmMjRiYjMwZWVkNmRhZmI5NmVlN2IwMTY0MmYxZjVhZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveBVNTwJuiH0femy7/ORteDQmqhg lzIDC7TZOymSJ0LCha6fFDAeHFClnaIxrWvkDO2oT9PMcXEOauJW9l3zjpRUq43m EECKebsagV0kt7ZRw9zrXnbwwgjpPT97UntEZozrHE0cqo0602/pSZszhyZ8vDxN w+VymNoXrr/Xxc/g0zFPAuUt9EilR/uaNT1qNrHmsymwh9L20Iko/mZTCkxTUEWN nwon9n47vRsY4OV8yESYnoTwyLxigkIXXppc70iUZB+ckf9t6sqqoN8akf8ZxmmH fPVNSHtLvxXLgL4IZJAmF2DMNPVqTQ8YRcHdw2XedthiFaYivluhlzcN7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqGKvJLsw7tba+5buewFkLx9a5nMB8GA1UdIwQY MBaAFN7d1ueh/rb7R8mi+JkYgnCU2/wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYWQ5OWEtMWEwZi00MmUwLWFlN2Qt ZjA3MTgzNzczYjI2LzEvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wYWQ5OWEtMWEwZi00MmUwLWFlN2QtZjA3MTgzNzczYjI2 LzEvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADudUaGAf 1huvOxawhr58IuilF4KNgIZwN2Q3oZbHMzD7ob3ROfM2DT0gs2ZUSzIZMPy+Wn0k er/nqGf2+4MTGFUqb3xds88OmM0ptkEfpjjspypmihxxhbkwV1FyDmMw2A7nNouS ySmEtpXLeU3t7FlRZUNayc8z2Nh0MLnmkE3kOUqzFMw8yD+EqyI43jFJLNwiwxxK 4A13I3FuQMjtkGBkymh0cJ0nTAC44/OCSH99EbYh6bPa4WfyjJkWvPLMd/eBgQ6g s/vYhEeYdcdiS9PDHIKxLQe1YCRfN7R7K5qzxIW0zIuEHlqNIa6rBIk1oLPzjUxo zYkJ8AKSQZVlBQ== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:57 2026 by rpki-client