This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json) Hash identifier: H5fTdPuBnhTPYXet6mdIQOXYuYwkKOBh9eTGrXGsU00= Subject key identifier: 28:E3:A6:5C:E0:BE:39:CD:1C:42:99:E7:54:15:AD:22:D3:9E:01:DD Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Certificate serial: 019B7DB9426E2E0693737842E3AC463D3F45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft Manifest number: 0C14 Signing time: Fri 02 Jan 2026 08:00:51 +0000 Manifest this update: Fri 02 Jan 2026 08:00:51 +0000 Manifest next update: Sat 03 Jan 2026 08:00:51 +0000 Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: xcR28N3Dn4s5QjZjsOLUL5se8bfNoo6PeD35JorvR/k=) 2: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (hash: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:b9:42:6e:2e:06:93:73:78:42:e3:ac:46:3d:3f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Validity Not Before: Jan 2 08:00:51 2026 GMT Not After : Jan 3 08:00:51 2026 GMT Subject: CN=28e3a65ce0be39cd1c4299e75415ad22d39e01dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e4:7f:c2:21:ca:7b:00:f8:8a:ef:c7:93:48: 17:83:57:51:00:36:33:8e:a9:e8:57:81:58:77:6e: 0e:8f:ac:31:7b:68:3c:ef:89:f3:58:75:f3:f1:91: 85:ae:89:cf:2b:fe:03:9d:6c:60:fc:e3:ec:0c:54: 81:18:09:10:83:61:b7:2f:0d:86:ea:6d:ae:c2:b5: 73:8d:e9:db:fa:cb:4c:20:29:a9:a4:f4:92:2b:ce: a7:e5:be:8c:a5:48:76:04:55:7d:da:70:a3:89:cf: 22:d8:a8:ef:bf:e2:aa:ad:fa:9b:70:09:53:48:70: cc:1b:a9:71:3d:ab:37:84:20:05:35:d5:a7:94:94: 4d:aa:86:ed:a3:d1:c9:1a:04:8a:09:27:b3:26:f5: be:80:47:93:3c:cb:d0:c8:63:60:78:b5:81:3b:ab: 03:5c:b9:43:13:bb:50:93:f1:9a:4f:6d:6a:ec:81: f7:01:04:7a:f9:54:53:e7:03:af:06:21:10:3f:7e: f2:f2:33:ca:be:91:cf:5e:2b:4e:be:f7:7f:a4:33: 01:34:a4:63:a5:45:14:5a:54:e7:a8:5e:8b:ca:9d: 2c:8d:fa:7b:f0:d0:00:bc:78:a8:c2:bd:fd:61:1d: 36:ca:00:ac:cc:40:2a:45:07:7a:9e:7a:67:7a:a8: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E3:A6:5C:E0:BE:39:CD:1C:42:99:E7:54:15:AD:22:D3:9E:01:DD X509v3 Authority Key Identifier: keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:b0:7c:3d:5b:df:3f:f1:f4:1a:74:56:f9:0c:d1:94:96:2b: b8:8a:dc:9d:89:44:ee:00:bb:88:69:d9:1b:c5:a5:1b:18:c2: 06:d6:ef:80:e3:24:55:92:61:4a:36:d6:3c:f0:2c:38:93:e7: 69:f5:fd:5c:93:8c:3b:1c:2a:c3:5c:8e:a2:31:bd:83:a0:ab: 51:99:9f:59:47:24:16:47:31:58:72:76:ec:c3:5e:cf:38:15: 01:9a:69:2b:a8:93:71:2f:13:27:16:e2:a0:c4:5c:1c:a3:39: f6:69:51:09:3c:b4:2b:40:f9:1e:77:99:6c:68:50:ac:78:73: 8d:21:76:5b:45:d8:0c:d6:ae:67:ee:8a:27:f4:1c:b4:9c:60: c8:6c:10:e6:27:fc:c2:ba:14:33:c4:b0:af:a8:f9:bc:01:16: 13:34:a6:a1:a8:2c:64:9d:81:0c:43:a0:ad:e6:37:71:c0:60: aa:9e:54:9e:32:d2:62:e3:f8:f7:21:78:4e:e2:2d:56:fe:2e: da:fe:84:bf:3a:b4:8d:68:32:28:4c:56:39:8a:cf:f7:23:66: 18:96:60:1d:e9:e4:74:51:40:b6:0c:b3:a4:f6:09:ae:ce:16: e6:97:14:e3:82:ca:7f:da:42:8f:0f:1a:47:d7:05:85:50:1e: 22:76:a5:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9uUJuLgaTc3hC46xGPT9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOWMzMDM5OWY2Mzg1NTVmNGMwMmU4ZDFiNTViYzkyNzIy NWNiNTEwHhcNMjYwMTAyMDgwMDUxWhcNMjYwMTAzMDgwMDUxWjAzMTEwLwYDVQQD EygyOGUzYTY1Y2UwYmUzOWNkMWM0Mjk5ZTc1NDE1YWQyMmQzOWUwMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+R/wiHKewD4iu/Hk0gXg1dRADYz jqnoV4FYd24Oj6wxe2g874nzWHXz8ZGFronPK/4DnWxg/OPsDFSBGAkQg2G3Lw2G 6m2uwrVzjenb+stMICmppPSSK86n5b6MpUh2BFV92nCjic8i2Kjvv+KqrfqbcAlT SHDMG6lxPas3hCAFNdWnlJRNqobto9HJGgSKCSezJvW+gEeTPMvQyGNgeLWBO6sD XLlDE7tQk/GaT21q7IH3AQR6+VRT5wOvBiEQP37y8jPKvpHPXitOvvd/pDMBNKRj pUUUWlTnqF6Lyp0sjfp78NAAvHiowr39YR02ygCszEAqRQd6nnpneqjhYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjjplzgvjnNHEKZ51QVrSLTngHdMB8GA1UdIwQY MBaAFN2cMDmfY4VV9MAujRtVvJJyJctRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTIt MGU1MTQwNjJjNTkwLzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTItMGU1MTQwNjJjNTkw LzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv7B8PVvf P/H0GnRW+QzRlJYruIrcnYlE7gC7iGnZG8WlGxjCBtbvgOMkVZJhSjbWPPAsOJPn afX9XJOMOxwqw1yOojG9g6CrUZmfWUckFkcxWHJ27MNezzgVAZppK6iTcS8TJxbi oMRcHKM59mlRCTy0K0D5HneZbGhQrHhzjSF2W0XYDNauZ+6KJ/QctJxgyGwQ5if8 wroUM8Swr6j5vAEWEzSmoagsZJ2BDEOgreY3ccBgqp5UnjLSYuP49yF4TuItVv4u 2v6Evzq0jWgyKExWOYrP9yNmGJZgHenkdFFAtgyzpPYJrs4W5pcU44LKf9pCjw8a R9cFhVAeInalLQ== -----END CERTIFICATE-----Generated at Fri Jan 2 17:04:38 2026 by rpki-client