This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json) Hash identifier: tCQ2zf9FhBxF3bBnkAUra9xVwFEsZjJt7cHtjHnvPuo= Subject key identifier: 18:28:6E:2E:20:46:0E:31:31:DC:12:05:42:8B:68:DB:F2:23:45:62 Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Certificate serial: 019BAFEF96E467A36E3F1136AC2FC07C1662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft Manifest number: 0C2E Signing time: Mon 12 Jan 2026 02:01:13 +0000 Manifest this update: Mon 12 Jan 2026 02:01:13 +0000 Manifest next update: Tue 13 Jan 2026 02:01:13 +0000 Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: SysNSq96emCwUoO2jfg/4tqLVP6iBmE2F2EHuZBfkvo=) 2: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (hash: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:ef:96:e4:67:a3:6e:3f:11:36:ac:2f:c0:7c:16:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Validity Not Before: Jan 12 02:01:13 2026 GMT Not After : Jan 13 02:01:13 2026 GMT Subject: CN=18286e2e20460e3131dc1205428b68dbf2234562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:5a:83:6c:77:cc:cf:34:db:56:8e:f9:12: ea:d7:d0:5a:bb:5c:1f:c6:1d:6c:5c:d7:42:9b:73: 4d:f1:dc:45:19:4c:c3:a1:1f:15:76:e6:81:c8:44: 1d:a1:26:b0:1c:89:02:2e:3a:2e:2f:61:5a:aa:29: 32:ea:fe:c2:45:4b:64:16:e6:ed:4b:ba:48:41:3f: eb:ce:4d:0a:5e:6d:35:40:9e:29:24:d8:85:ae:16: 9e:81:fc:41:3e:80:e1:6e:cc:6c:d9:ac:94:b0:48: 63:bf:90:3d:d1:e7:46:71:08:6b:ca:d4:fe:3e:02: a4:3f:b7:22:f5:52:98:93:64:47:3a:63:a4:00:18: f9:be:20:a1:a3:98:9a:14:e2:df:cc:b7:8f:6e:0e: e7:77:d5:f1:26:f4:00:dd:cc:ae:12:92:4f:d5:ce: d3:5c:ea:92:c3:d3:c1:43:7f:34:fb:e8:4e:e6:5b: b6:dc:83:25:6a:79:6f:e4:c8:3f:3c:e8:8e:05:21: f8:89:5b:14:6c:5b:b8:78:24:08:51:cd:6c:69:03: e6:73:0d:4c:ba:a0:34:4c:0c:71:87:f1:53:14:14: 5e:4a:76:15:ba:3c:21:ba:44:ee:73:42:a7:e2:88: cd:d7:09:e8:e1:f5:f9:e4:f5:4f:ef:f3:cb:44:e6: 51:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:28:6E:2E:20:46:0E:31:31:DC:12:05:42:8B:68:DB:F2:23:45:62 X509v3 Authority Key Identifier: keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:98:44:57:d0:15:43:4a:9a:02:31:f3:15:91:87:29:d8:e7: 76:f0:e2:76:16:b7:a1:60:ce:40:29:16:63:66:21:8a:9d:55: a9:95:51:db:82:61:d9:b9:1a:09:5f:6b:10:78:e7:de:80:75: 65:43:06:c8:0a:7d:06:50:8c:4b:a9:3e:3d:c2:0d:cb:b8:da: 30:f4:ff:d9:4d:f8:e3:6f:47:61:86:32:94:da:0e:52:26:ce: 23:46:c3:4b:ff:70:ba:d2:b9:1b:4b:ae:4e:a9:06:c9:40:36: d4:e4:c0:bc:18:d5:6d:13:37:47:49:b9:70:5a:4a:39:80:f2: 0f:77:b0:e4:6c:15:9f:50:c6:70:4f:f0:7b:1c:aa:62:c7:65: 50:99:09:b4:18:eb:0d:13:d3:48:0f:3f:25:ac:ba:78:d3:58: e2:82:f4:34:1e:51:09:24:80:73:98:96:af:08:c6:05:52:da: 4f:22:17:b0:ff:27:c6:77:8b:66:39:44:30:55:eb:a0:11:0a: 75:82:f9:03:94:c9:7c:f2:8c:7d:e7:3c:ae:7d:3f:d0:5a:7c: 55:dc:a1:5b:bf:9d:0e:75:96:ad:cc:9e:f7:8a:8f:53:fd:73: fb:2a:11:37:21:df:cd:07:f6:4b:72:e0:8b:c6:34:b7:4c:b3: ab:3f:36:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuv75bkZ6NuPxE2rC/AfBZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOWMzMDM5OWY2Mzg1NTVmNGMwMmU4ZDFiNTViYzkyNzIy NWNiNTEwHhcNMjYwMTEyMDIwMTEzWhcNMjYwMTEzMDIwMTEzWjAzMTEwLwYDVQQD EygxODI4NmUyZTIwNDYwZTMxMzFkYzEyMDU0MjhiNjhkYmYyMjM0NTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ5ag2x3zM8021aO+RLq19Bau1wf xh1sXNdCm3NN8dxFGUzDoR8VduaByEQdoSawHIkCLjouL2Faqiky6v7CRUtkFubt S7pIQT/rzk0KXm01QJ4pJNiFrhaegfxBPoDhbsxs2ayUsEhjv5A90edGcQhrytT+ PgKkP7ci9VKYk2RHOmOkABj5viCho5iaFOLfzLePbg7nd9XxJvQA3cyuEpJP1c7T XOqSw9PBQ380++hO5lu23IMlanlv5Mg/POiOBSH4iVsUbFu4eCQIUc1saQPmcw1M uqA0TAxxh/FTFBReSnYVujwhukTuc0Kn4ojN1wno4fX55PVP7/PLROZRUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgobi4gRg4xMdwSBUKLaNvyI0ViMB8GA1UdIwQY MBaAFN2cMDmfY4VV9MAujRtVvJJyJctRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTIt MGU1MTQwNjJjNTkwLzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTItMGU1MTQwNjJjNTkw LzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5hEV9AV Q0qaAjHzFZGHKdjndvDidha3oWDOQCkWY2Yhip1VqZVR24Jh2bkaCV9rEHjn3oB1 ZUMGyAp9BlCMS6k+PcINy7jaMPT/2U34429HYYYylNoOUibOI0bDS/9wutK5G0uu TqkGyUA21OTAvBjVbRM3R0m5cFpKOYDyD3ew5GwVn1DGcE/wexyqYsdlUJkJtBjr DRPTSA8/Jay6eNNY4oL0NB5RCSSAc5iWrwjGBVLaTyIXsP8nxneLZjlEMFXroBEK dYL5A5TJfPKMfec8rn0/0Fp8VdyhW7+dDnWWrcye94qPU/1z+yoRNyHfzQf2S3Lg i8Y0t0yzqz82Vw== -----END CERTIFICATE-----Generated at Mon Jan 12 08:11:43 2026 by rpki-client