This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json) Hash identifier: AiudKcJCwVdCp0ba10uW1EDxsga9wH7+O2YZauhTnJw= Subject key identifier: EE:68:93:D6:E2:34:62:21:44:5B:10:9F:AD:18:41:25:85:7D:B2:85 Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e Certificate serial: 019BA12122BDD96821EA49B7196A3DF7D965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft Manifest number: 1405 Signing time: Fri 09 Jan 2026 05:01:01 +0000 Manifest this update: Fri 09 Jan 2026 05:01:01 +0000 Manifest next update: Sat 10 Jan 2026 05:01:01 +0000 Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: vag7OG1+O49YPb5LB6uOiL6eR/DVmOtMFLuqknhQo3s=) 2: WpRWO2EVlSv_D7W5fcevKIcX17g.roa (hash: dwm8si4Ivv7QjBLEYqxtuHlmWwLaHZym07JUqJNzM8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:21:22:bd:d9:68:21:ea:49:b7:19:6a:3d:f7:d9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e Validity Not Before: Jan 9 05:01:01 2026 GMT Not After : Jan 10 05:01:01 2026 GMT Subject: CN=ee6893d6e2346221445b109fad184125857db285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:31:94:18:2c:82:82:56:58:78:cc:4c:4c: ad:e7:f2:10:89:f5:5d:23:81:24:60:7c:4a:a8:1a: 5c:df:19:35:cc:00:33:71:cd:20:38:36:ad:36:63: 0f:75:6e:80:2a:4e:0d:af:a7:d2:55:8f:71:98:6d: cd:71:c2:a5:96:1d:37:71:13:a1:b9:c5:45:bd:69: 43:9d:39:e7:1a:26:f7:d9:d9:27:a7:8d:76:4e:70: 57:03:06:52:52:d8:5a:39:24:57:f2:fa:21:52:fd: e1:34:64:49:d5:89:40:01:99:22:b7:2b:ba:54:13: 26:e2:b5:81:64:fd:3a:07:7e:60:4a:4c:37:89:6f: f7:94:ef:31:a0:2e:51:b9:56:76:e2:ee:c8:51:75: 9f:35:3d:3d:6e:4e:7a:02:8c:60:f9:86:f7:64:72: a6:c5:1f:21:67:75:94:b6:71:72:77:88:8d:0a:6d: e5:48:98:04:17:47:11:6b:13:6d:b0:b0:c8:a8:95: 75:e2:74:1f:15:87:77:06:69:68:3c:80:68:af:1c: af:ab:43:7a:0b:31:64:ea:2b:ef:5d:db:1f:48:81: f9:8e:f4:74:0e:88:72:cb:b1:fc:6b:a5:7a:70:54: 51:93:45:98:d2:aa:30:5e:b9:1f:29:d9:e5:e3:db: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:68:93:D6:E2:34:62:21:44:5B:10:9F:AD:18:41:25:85:7D:B2:85 X509v3 Authority Key Identifier: keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e4:34:d6:bc:56:85:4a:07:47:87:49:76:48:03:72:79:87: 06:1b:3d:a6:6c:a4:ae:45:c1:ab:6e:2d:a2:5d:70:ea:1b:ee: 47:f5:cd:6e:69:e3:1c:bb:cb:14:93:24:68:04:26:d6:51:b4: c3:09:7b:47:33:55:8d:cb:93:c5:3c:3a:61:e6:68:49:f7:68: 70:98:4f:28:cd:64:98:eb:a4:b3:4a:bb:c4:51:dc:ea:32:c5: 29:eb:25:12:a5:c2:dc:77:61:85:f5:0c:fe:c8:55:7c:57:3f: 0b:5f:9d:c0:a3:d6:71:d6:75:e8:00:87:04:42:fc:74:24:33: 60:48:29:d2:57:65:10:5d:1a:fc:f6:2a:7f:29:bf:0e:91:bf: 64:5a:e2:7b:63:db:52:30:b9:ff:71:bb:04:d1:ae:84:55:3b: a7:12:8f:44:72:a8:a4:31:94:86:9e:06:46:64:e3:de:2d:9f: 60:3b:8b:b3:d5:12:44:fb:0c:87:ed:76:c6:c2:b3:ce:bd:34: e2:bf:2e:24:8a:9e:cd:e4:67:3c:b6:72:d0:3e:47:02:86:8c: 0e:f7:e6:7f:f4:c7:7e:cb:97:64:ca:23:88:13:b3:11:2d:54: f3:fe:b8:cc:0d:d6:06:76:05:84:d0:90:d1:ae:0c:3b:61:f3: 24:2a:d2:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhISK92Wgh6km3GWo999llMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNmM2MDM1MDQyY2M1MzI1MTZlYmMxOTY4ZjQxYmZmZjRi ODUzN2UwHhcNMjYwMTA5MDUwMTAxWhcNMjYwMTEwMDUwMTAxWjAzMTEwLwYDVQQD EyhlZTY4OTNkNmUyMzQ2MjIxNDQ1YjEwOWZhZDE4NDEyNTg1N2RiMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwsxlBgsgoJWWHjMTEyt5/IQifVd I4EkYHxKqBpc3xk1zAAzcc0gODatNmMPdW6AKk4Nr6fSVY9xmG3NccKllh03cROh ucVFvWlDnTnnGib32dknp412TnBXAwZSUthaOSRX8vohUv3hNGRJ1YlAAZkityu6 VBMm4rWBZP06B35gSkw3iW/3lO8xoC5RuVZ24u7IUXWfNT09bk56Aoxg+Yb3ZHKm xR8hZ3WUtnFyd4iNCm3lSJgEF0cRaxNtsLDIqJV14nQfFYd3BmloPIBorxyvq0N6 CzFk6ivvXdsfSIH5jvR0Dohyy7H8a6V6cFRRk0WY0qowXrkfKdnl49s54wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5ok9biNGIhRFsQn60YQSWFfbKFMB8GA1UdIwQY MBaAFN5sYDUELMUyUW68GWj0G//0uFN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jMmJiNGQtODQ4My00N2NlLWJiMGEt ZjVmNDkwZDJjMTYzLzEvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jMmJiNGQtODQ4My00N2NlLWJiMGEtZjVmNDkwZDJjMTYz LzEvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuQ01rxW hUoHR4dJdkgDcnmHBhs9pmykrkXBq24tol1w6hvuR/XNbmnjHLvLFJMkaAQm1lG0 wwl7RzNVjcuTxTw6YeZoSfdocJhPKM1kmOuks0q7xFHc6jLFKeslEqXC3HdhhfUM /shVfFc/C1+dwKPWcdZ16ACHBEL8dCQzYEgp0ldlEF0a/PYqfym/DpG/ZFrie2Pb UjC5/3G7BNGuhFU7pxKPRHKopDGUhp4GRmTj3i2fYDuLs9USRPsMh+12xsKzzr00 4r8uJIqezeRnPLZy0D5HAoaMDvfmf/THfsuXZMojiBOzES1U8/64zA3WBnYFhNCQ 0a4MO2HzJCrSVQ== -----END CERTIFICATE-----Generated at Fri Jan 9 09:22:07 2026 by rpki-client