This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json) Hash identifier: 6Vh9SQmJqcyuO1/rM1SwEs/jY2hS9XzECLewVMLO0CU= Subject key identifier: 03:65:54:72:7F:3A:7C:2B:AE:34:F1:F0:9C:B4:00:EB:34:FA:AA:70 Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86 Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786 Certificate serial: 019BACEE8C997DB60D4563490043513CD2A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft Manifest number: 05C7 Signing time: Sun 11 Jan 2026 12:01:13 +0000 Manifest this update: Sun 11 Jan 2026 12:01:13 +0000 Manifest next update: Mon 12 Jan 2026 12:01:13 +0000 Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: xyHgKpH6XJWjeo2XW0L9tiQbTPMKcLJ12V09ONQrDYE=) 2: WoN0CrYvueqPk1KqmXJffVK7ib4.roa (hash: 4FA6Dc/pCbAQFuPtL5vNxbuQK2/hlz7MGBa9RY6awaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:ee:8c:99:7d:b6:0d:45:63:49:00:43:51:3c:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786 Validity Not Before: Jan 11 12:01:13 2026 GMT Not After : Jan 12 12:01:13 2026 GMT Subject: CN=036554727f3a7c2bae34f1f09cb400eb34faaa70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:9f:c5:b8:27:9d:c9:a5:af:bd:01:9b:17: 18:7e:43:eb:99:0f:b6:77:ea:14:e1:03:d3:1c:de: fd:1f:21:70:9c:e1:7c:c0:d9:49:58:19:45:5c:68: a5:f6:89:fa:c7:ef:60:da:f7:e2:ad:26:a2:24:e2: 9a:4c:cb:d4:bb:d1:e0:0c:bd:68:e0:08:b9:93:08: 33:0e:7b:89:28:13:f9:84:30:48:d3:28:b5:e2:d7: 54:74:93:8f:15:60:ab:40:4a:ba:ab:6f:37:9b:40: 15:06:12:f4:11:36:1e:b9:c1:98:39:3e:e3:f7:c3: a7:1e:52:ea:1f:a0:cf:79:64:21:3b:6b:b6:ef:99: d9:5d:77:a7:23:13:0b:11:5a:d6:c9:c3:6c:0a:4c: 9c:bf:58:e9:48:1b:31:bd:f5:bd:82:6d:58:94:77: 37:f0:15:96:b5:90:7e:1b:80:59:b7:0d:53:b6:47: 8b:0c:01:c9:35:ed:e3:ac:7d:47:55:4c:e5:74:5a: a5:6b:b6:9e:fd:88:f3:e3:98:a7:f9:4d:ed:47:83: 67:87:57:0b:e4:f3:ea:ae:2e:c4:ac:44:e9:fa:0a: d8:00:3f:b7:b3:7e:4a:ed:d3:36:e2:d0:94:d6:f0: a3:b4:0c:23:e0:2e:2c:59:b7:f7:a3:75:d9:c0:7c: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:65:54:72:7F:3A:7C:2B:AE:34:F1:F0:9C:B4:00:EB:34:FA:AA:70 X509v3 Authority Key Identifier: keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:be:0a:20:eb:a2:b0:b1:23:94:80:47:e6:2b:c9:d1:d0:9b: 22:59:21:a9:18:1e:ae:84:9d:17:9d:6a:2d:89:6b:31:53:35: e0:70:01:10:ef:18:d7:7c:a6:72:10:7a:16:fa:a4:a3:1a:6a: c6:6b:4c:06:af:bd:15:06:a8:a9:0e:b0:f7:6f:69:a9:32:e4: 08:d2:ba:9c:38:e7:da:d1:f8:65:52:a2:da:de:f3:fe:a3:0e: 53:5d:fa:19:8b:0a:b3:db:5f:8e:30:c4:cf:5b:57:a0:bb:86: f8:f6:a9:ba:59:14:4a:a2:b2:70:a5:a2:58:13:13:26:fd:3b: d7:ca:d1:7c:e1:29:07:4b:f9:07:1b:2b:48:72:54:f3:68:76: ea:42:09:ef:d6:b1:08:d8:0f:13:73:dc:5f:32:1f:bc:06:92: 6d:60:ca:fb:2a:10:97:70:ec:43:97:94:27:53:7b:53:5c:24: 55:2c:71:82:57:67:e1:56:17:34:a2:30:41:22:db:00:6b:b2: 47:7c:f6:91:8c:c4:a7:8b:df:38:33:f7:7a:59:b3:2d:b1:c3: 1a:98:1a:2f:2b:99:46:b4:03:88:44:cf:82:9e:22:1b:c1:9a: 12:21:b1:ae:f8:dd:6f:a5:12:44:f6:82:a1:05:99:0b:ed:6a: ff:ad:6f:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZus7oyZfbYNRWNJAENRPNKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGY5MGE5M2RjOTQyNzg1NTY0NDkwM2NiNzBjMWY3NGI5 MzE3ODYwHhcNMjYwMTExMTIwMTEzWhcNMjYwMTEyMTIwMTEzWjAzMTEwLwYDVQQD EygwMzY1NTQ3MjdmM2E3YzJiYWUzNGYxZjA5Y2I0MDBlYjM0ZmFhYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFqfxbgnncmlr70BmxcYfkPrmQ+2 d+oU4QPTHN79HyFwnOF8wNlJWBlFXGil9on6x+9g2vfirSaiJOKaTMvUu9HgDL1o 4Ai5kwgzDnuJKBP5hDBI0yi14tdUdJOPFWCrQEq6q283m0AVBhL0ETYeucGYOT7j 98OnHlLqH6DPeWQhO2u275nZXXenIxMLEVrWycNsCkycv1jpSBsxvfW9gm1YlHc3 8BWWtZB+G4BZtw1TtkeLDAHJNe3jrH1HVUzldFqla7ae/Yjz45in+U3tR4Nnh1cL 5PPqri7ErETp+grYAD+3s35K7dM24tCU1vCjtAwj4C4sWbf3o3XZwHwXpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANlVHJ/OnwrrjTx8Jy0AOs0+qpwMB8GA1UdIwQY MBaAFNxPkKk9yUJ4VWRJA8twwfdLkxeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUt NjMxNzdmYjE5YWJlLzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUtNjMxNzdmYjE5YWJl LzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOb4KIOui sLEjlIBH5ivJ0dCbIlkhqRgeroSdF51qLYlrMVM14HABEO8Y13ymchB6Fvqkoxpq xmtMBq+9FQaoqQ6w929pqTLkCNK6nDjn2tH4ZVKi2t7z/qMOU136GYsKs9tfjjDE z1tXoLuG+PapulkUSqKycKWiWBMTJv0718rRfOEpB0v5BxsrSHJU82h26kIJ79ax CNgPE3PcXzIfvAaSbWDK+yoQl3DsQ5eUJ1N7U1wkVSxxgldn4VYXNKIwQSLbAGuy R3z2kYzEp4vfODP3elmzLbHDGpgaLyuZRrQDiETPgp4iG8GaEiGxrvjdb6USRPaC oQWZC+1q/61vVQ== -----END CERTIFICATE-----Generated at Sun Jan 11 15:11:21 2026 by rpki-client