This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft File: 3ZapfPzU67oF9hUkAJ8sFco0P8U.mft (raw, json) Hash identifier: Dju+D2hNuggmbzOdEQrh8cDhVuhmt2J9YfyxpYCQOig= Subject key identifier: E6:FD:B2:4C:90:CC:A1:F7:DA:45:F3:70:69:73:56:A1:53:EA:CC:B4 Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5 Certificate issuer: /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5 Certificate serial: 019BB1399AED676F65CA0848B89C5C1BB92C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft Manifest number: 22 Signing time: Mon 12 Jan 2026 08:01:40 +0000 Manifest this update: Mon 12 Jan 2026 08:01:40 +0000 Manifest next update: Tue 13 Jan 2026 08:01:40 +0000 Files and hashes: 1: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (hash: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg=) 2: 3ZapfPzU67oF9hUkAJ8sFco0P8U.crl (hash: PXUCzmWU4aZIEKr0/mFOXaN7enzrRQl9MXPjshOKG34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 08:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:39:9a:ed:67:6f:65:ca:08:48:b8:9c:5c:1b:b9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5 Validity Not Before: Jan 12 08:01:40 2026 GMT Not After : Jan 13 08:01:40 2026 GMT Subject: CN=e6fdb24c90cca1f7da45f370697356a153eaccb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:62:e9:97:f9:85:dd:91:1f:7b:cb:e0:47: df:38:a5:df:98:24:fc:1c:cb:6c:95:73:20:16:90: e1:2d:fb:5a:7c:d6:89:2b:cb:39:a3:13:ad:c1:17: ce:d6:4a:54:7b:ff:45:0f:d5:8d:fd:a2:bb:e8:72: 70:47:89:b6:25:d7:52:17:f6:de:b4:d1:ce:0d:6c: d1:79:f5:f6:8a:5f:04:92:c4:93:09:c6:79:e3:73: 49:57:c7:0f:3d:45:4a:c0:c2:38:0b:cb:5f:f5:7a: 61:e9:29:d5:f7:39:d2:c3:f6:e4:31:39:42:22:77: 9d:bc:53:b9:34:44:d5:fd:62:13:db:f7:2b:c6:d7: 94:09:ea:a9:5c:42:5a:da:69:9a:a0:bc:16:6b:3c: 9b:42:12:91:00:de:a4:02:60:a1:fe:49:52:33:b7: 4f:c1:d9:d5:1e:e9:5e:be:2f:c9:ac:28:ed:b7:49: ce:2f:07:ed:62:d9:bc:5c:dd:43:aa:33:d0:b1:d8: 0d:f8:71:65:54:b3:8c:cf:15:f6:ae:9d:04:2b:8e: 93:99:8b:1a:3c:c3:d8:05:a6:bc:45:58:91:e1:cb: 06:3a:4e:96:8e:db:12:6c:d1:14:cd:82:b6:f2:e2: 52:66:e7:5c:37:38:e5:48:3d:6e:43:5f:db:63:93: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FD:B2:4C:90:CC:A1:F7:DA:45:F3:70:69:73:56:A1:53:EA:CC:B4 X509v3 Authority Key Identifier: keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a1:db:ea:a9:fb:c8:a7:dd:37:39:4d:cd:a1:41:29:fa:3a: 7f:3c:c3:8c:a0:a5:f9:cf:26:5d:73:03:7a:d9:15:0c:9b:ac: 49:db:63:81:92:4d:b8:e8:68:b6:5f:6b:d0:ae:3e:c6:eb:04: 20:f5:ac:ae:e9:23:52:a2:78:ec:f1:93:f5:06:7c:cf:e1:bc: b3:4b:8b:9b:2e:f2:22:b5:a3:94:c3:03:c9:61:2d:73:26:f1: 31:d3:af:94:bc:71:6a:8e:44:b0:75:69:d5:43:c6:63:1c:5d: 47:bf:86:24:4d:e4:a1:9b:77:fe:f8:3a:ac:03:75:d0:b1:c3: f8:1d:b1:93:87:70:91:a2:ba:5a:a4:cf:ec:40:49:9b:f3:a8: aa:99:0a:81:c9:21:ed:28:82:ee:3a:c9:a3:49:6c:89:53:8c: 26:3a:d9:16:cf:d3:ff:eb:75:7b:85:67:f7:2b:65:de:7a:24: 72:79:ba:ae:20:f1:41:dc:13:2f:e8:bd:3a:0e:1b:ba:74:93: ea:04:52:85:e1:0f:14:1e:62:44:85:30:f6:ce:eb:c4:e0:5b: 8a:c8:96:56:94:63:52:0f:7e:06:9e:83:b6:98:7c:fb:19:c1: 5d:a6:6a:ca:08:ef:92:d7:1e:a2:5a:1d:65:92:4c:63:1b:63: cb:00:34:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxOZrtZ29lyghIuJxcG7ksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTZhOTdjZmNkNGViYmEwNWY2MTUyNDAwOWYyYzE1Y2Ez NDNmYzUwHhcNMjYwMTEyMDgwMTQwWhcNMjYwMTEzMDgwMTQwWjAzMTEwLwYDVQQD EyhlNmZkYjI0YzkwY2NhMWY3ZGE0NWYzNzA2OTczNTZhMTUzZWFjY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzENi6Zf5hd2RH3vL4EffOKXfmCT8 HMtslXMgFpDhLftafNaJK8s5oxOtwRfO1kpUe/9FD9WN/aK76HJwR4m2JddSF/be tNHODWzRefX2il8EksSTCcZ543NJV8cPPUVKwMI4C8tf9Xph6SnV9znSw/bkMTlC InedvFO5NETV/WIT2/crxteUCeqpXEJa2mmaoLwWazybQhKRAN6kAmCh/klSM7dP wdnVHulevi/JrCjtt0nOLwftYtm8XN1DqjPQsdgN+HFlVLOMzxX2rp0EK46TmYsa PMPYBaa8RViR4csGOk6WjtsSbNEUzYK28uJSZudcNzjlSD1uQ1/bY5PprwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOb9skyQzKH32kXzcGlzVqFT6sy0MB8GA1UdIwQY MBaAFN2WqXz81Ou6BfYVJACfLBXKND/FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1phcGZQelU2N29GOWhVa0FKOHNGY28wUDhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MzZiMTAtOTJlMS00ZDFkLThlZmIt YzFjNTQ4NjZiNjE2LzEvM1phcGZQelU2N29GOWhVa0FKOHNGY28wUDhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80MzZiMTAtOTJlMS00ZDFkLThlZmItYzFjNTQ4NjZiNjE2 LzEvM1phcGZQelU2N29GOWhVa0FKOHNGY28wUDhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKHb6qn7 yKfdNzlNzaFBKfo6fzzDjKCl+c8mXXMDetkVDJusSdtjgZJNuOhotl9r0K4+xusE IPWsrukjUqJ47PGT9QZ8z+G8s0uLmy7yIrWjlMMDyWEtcybxMdOvlLxxao5EsHVp 1UPGYxxdR7+GJE3koZt3/vg6rAN10LHD+B2xk4dwkaK6WqTP7EBJm/OoqpkKgckh 7SiC7jrJo0lsiVOMJjrZFs/T/+t1e4Vn9ytl3nokcnm6riDxQdwTL+i9Og4bunST 6gRSheEPFB5iRIUw9s7rxOBbisiWVpRjUg9+Bp6Dtph8+xnBXaZqygjvktceolod ZZJMYxtjywA0uA== -----END CERTIFICATE-----Generated at Mon Jan 12 14:56:31 2026 by rpki-client