This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft File: g-3hynyzX11h-NWctQNumT6kO3A.mft (raw, json) Hash identifier: Ydquf/Hk+04R6ZKffmYM5VZ1d0m7urPCQD1OmlI68Tw= Subject key identifier: 39:B0:4A:3B:3F:1C:36:AE:61:E3:88:FA:B9:2C:5E:91:16:EE:1C:3F Authority key identifier: 83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70 Certificate issuer: /CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70 Certificate serial: 019BAE6F1D81857591305515875FC5A6B1F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft Manifest number: 0FEA Signing time: Sun 11 Jan 2026 19:01:16 +0000 Manifest this update: Sun 11 Jan 2026 19:01:16 +0000 Manifest next update: Mon 12 Jan 2026 19:01:16 +0000 Files and hashes: 1: g-3hynyzX11h-NWctQNumT6kO3A.crl (hash: hYN1k/JXGmiSLe8cvWMD1QW4Zqjs8wh2RVRPNBFREuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6f:1d:81:85:75:91:30:55:15:87:5f:c5:a6:b1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70 Validity Not Before: Jan 11 19:01:16 2026 GMT Not After : Jan 12 19:01:16 2026 GMT Subject: CN=39b04a3b3f1c36ae61e388fab92c5e9116ee1c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:6e:a7:f1:26:dc:09:db:2c:e4:79:59:06: fd:db:df:56:1c:45:a0:31:08:d1:3d:78:81:0f:d1: 04:e2:0d:f8:b0:b7:5b:3e:59:7e:96:b2:17:dc:33: 68:95:b1:9d:60:d8:86:d0:3d:c2:00:a4:ce:61:9d: d3:44:9c:79:b0:ca:8a:43:36:bf:a3:f6:2d:d4:e6: 87:30:1d:f4:67:22:45:ec:8f:e4:f3:9e:22:1a:70: 8d:61:9f:4b:4b:74:eb:06:87:6b:3a:16:04:b5:39: 3d:e7:d8:74:eb:6a:1d:f9:ad:39:03:62:fa:7f:3a: 56:3f:6a:b0:bd:f7:8a:e3:d4:b2:92:a5:28:8f:a5: 80:a6:19:e8:14:8e:61:72:07:0d:f2:27:a7:6c:12: 26:72:06:e8:ae:a0:24:65:1e:5d:4f:bd:ba:8f:67: 68:9f:11:70:5f:d8:37:50:76:eb:9e:2a:b6:17:2c: 13:ec:24:14:37:0b:24:f4:2a:88:df:c1:45:35:63: af:f1:b0:7b:22:27:6f:0d:04:26:50:93:ec:4e:cb: a4:44:ad:b3:e0:42:61:81:b5:2c:f8:14:04:31:1b: fa:7c:bc:db:f3:d4:8a:bb:eb:6c:43:d7:51:cf:57: af:7b:a6:ff:3c:a0:de:5c:e9:f1:5a:5d:d3:c3:e7: 0d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B0:4A:3B:3F:1C:36:AE:61:E3:88:FA:B9:2C:5E:91:16:EE:1C:3F X509v3 Authority Key Identifier: keyid:83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f0:e8:81:f6:29:4c:c2:a7:ce:bf:e4:5b:22:1a:78:5a:04: cb:a6:89:92:c7:25:da:89:57:ba:63:5f:a0:06:a0:a8:5f:c0: 8a:71:6d:85:cc:b4:65:76:f7:15:11:2c:1d:64:a1:a6:64:98: 9c:26:f9:bf:6c:12:c8:e8:39:00:a5:22:87:b7:63:05:18:3d: 99:22:3a:60:ed:b9:9d:df:03:16:3f:8e:bc:05:72:b3:58:f7: 76:74:86:c9:3f:02:ef:50:81:55:22:de:6b:44:62:fe:24:61: 15:52:51:10:cf:ee:4c:bd:9b:4e:b4:7d:a9:3e:bc:83:ae:7b: 10:46:69:6e:63:d1:c8:58:79:2e:d5:30:f5:17:4a:f1:8f:53: 7c:4f:25:16:da:8a:8a:cd:4c:ff:74:5b:72:02:4e:ce:5c:01: 40:df:ec:82:bb:e8:cd:ad:2c:16:9a:50:fc:18:7c:12:f8:ed: 13:09:8f:29:63:d9:96:bc:73:5e:27:88:3e:a6:68:80:28:7e: 7a:76:02:af:e4:4f:cc:c9:d8:f8:ba:9f:1b:fe:6a:8b:30:0d: 9b:7f:fd:a9:17:20:db:f3:6a:4c:81:91:c9:61:b8:61:4d:cb: 08:ac:a6:d1:47:bd:8c:1e:df:b0:fc:2e:e1:a8:72:e0:2a:18: b5:1b:3c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuubx2BhXWRMFUVh1/FprH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZWRlMWNhN2NiMzVmNWQ2MWY4ZDU5Y2I1MDM2ZTk5M2Vh NDNiNzAwHhcNMjYwMTExMTkwMTE2WhcNMjYwMTEyMTkwMTE2WjAzMTEwLwYDVQQD EygzOWIwNGEzYjNmMWMzNmFlNjFlMzg4ZmFiOTJjNWU5MTE2ZWUxYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gdup/Em3AnbLOR5WQb9299WHEWg MQjRPXiBD9EE4g34sLdbPll+lrIX3DNolbGdYNiG0D3CAKTOYZ3TRJx5sMqKQza/ o/Yt1OaHMB30ZyJF7I/k854iGnCNYZ9LS3TrBodrOhYEtTk959h062od+a05A2L6 fzpWP2qwvfeK49SykqUoj6WAphnoFI5hcgcN8ienbBImcgborqAkZR5dT726j2do nxFwX9g3UHbrniq2FywT7CQUNwsk9CqI38FFNWOv8bB7IidvDQQmUJPsTsukRK2z 4EJhgbUs+BQEMRv6fLzb89SKu+tsQ9dRz1eve6b/PKDeXOnxWl3Tw+cNVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmwSjs/HDauYeOI+rksXpEW7hw/MB8GA1UdIwQY MBaAFIPt4cp8s19dYfjVnLUDbpk+pDtwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy0zaHlueXpYMTFoLU5XY3RRTnVtVDZrTzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mM2ViMTktODVlZS00ODdmLWFkMTIt OGIzNjYwZWQ1ZWQwLzEvZy0zaHlueXpYMTFoLU5XY3RRTnVtVDZrTzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9mM2ViMTktODVlZS00ODdmLWFkMTItOGIzNjYwZWQ1ZWQw LzEvZy0zaHlueXpYMTFoLU5XY3RRTnVtVDZrTzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/DogfYp TMKnzr/kWyIaeFoEy6aJkscl2olXumNfoAagqF/AinFthcy0ZXb3FREsHWShpmSY nCb5v2wSyOg5AKUih7djBRg9mSI6YO25nd8DFj+OvAVys1j3dnSGyT8C71CBVSLe a0Ri/iRhFVJREM/uTL2bTrR9qT68g657EEZpbmPRyFh5LtUw9RdK8Y9TfE8lFtqK is1M/3RbcgJOzlwBQN/sgrvoza0sFppQ/Bh8EvjtEwmPKWPZlrxzXieIPqZogCh+ enYCr+RPzMnY+LqfG/5qizANm3/9qRcg2/NqTIGRyWG4YU3LCKym0Ue9jB7fsPwu 4ahy4CoYtRs8eQ== -----END CERTIFICATE-----Generated at Mon Jan 12 01:24:21 2026 by rpki-client