This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft File: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json) Hash identifier: Wfmft7kf3/0Mc00N8RIl+2efJJchOg902G/rlIayhPY= Subject key identifier: 72:64:2C:90:74:BE:52:93:3F:7C:2F:EA:AB:48:22:48:FC:83:4A:DF Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43 Certificate issuer: /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843 Certificate serial: 019B804C1DFD2DB0BCE691AFE2E7EA708680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft Manifest number: 17AC Signing time: Fri 02 Jan 2026 20:00:30 +0000 Manifest this update: Fri 02 Jan 2026 20:00:30 +0000 Manifest next update: Sat 03 Jan 2026 20:00:30 +0000 Files and hashes: 1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: dltlDSG3ZZWysc/JNgIhqwteHofK+I2Vf9mW+O3e/zE=) 2: cQu8PWE2ED6TGgN91J-oSiBaGLU.roa (hash: FGQyS1Z2RCfk2kbunFiNxKz2rH/BrfGjCFskroiMdcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:4c:1d:fd:2d:b0:bc:e6:91:af:e2:e7:ea:70:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843 Validity Not Before: Jan 2 20:00:30 2026 GMT Not After : Jan 3 20:00:30 2026 GMT Subject: CN=72642c9074be52933f7c2feaab482248fc834adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:0f:35:e5:86:f2:0f:37:09:73:f3:b7:cd: 6b:91:18:65:d6:52:63:45:d0:6b:e0:e7:90:75:ef: e5:e7:80:c6:13:b2:e2:cf:ab:ce:c3:dc:5f:61:58: 3e:97:a8:b9:0e:21:96:cc:4b:11:e8:ee:f4:5a:06: c0:6f:e9:44:37:62:70:58:d3:66:61:82:d0:cf:12: 36:54:34:00:70:9f:25:b2:04:b6:73:43:6d:a6:12: 95:47:70:83:15:6e:c8:e1:88:08:a6:24:3b:fa:e6: 18:74:86:d0:e9:a3:5f:be:d3:a5:dd:b6:73:52:e7: 0f:e5:c8:fa:bb:81:1c:ed:0e:54:52:89:b4:e2:d7: 14:75:e0:fd:5f:c0:53:2d:b2:92:82:0a:57:91:4f: 2a:48:9d:f4:cf:48:66:38:46:a9:e3:96:ba:00:03: 5c:62:60:d4:01:fb:77:8d:e0:43:fd:10:7e:3a:95: 41:9d:9b:e0:62:f3:38:99:b3:47:66:af:9f:e1:d6: da:97:ee:d4:e2:70:b7:9a:1c:88:a5:72:c1:1c:1e: 2d:b9:2c:68:2a:a6:14:09:d2:76:3b:50:3d:9c:bc: ea:cf:72:ab:f7:53:55:bd:e9:0b:a4:5b:b7:b9:91: 54:67:7e:6d:88:0c:cd:1a:aa:4a:a0:d8:8e:b1:45: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:64:2C:90:74:BE:52:93:3F:7C:2F:EA:AB:48:22:48:FC:83:4A:DF X509v3 Authority Key Identifier: keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ad:8e:eb:c7:ce:77:82:77:e8:7f:b3:68:36:c5:1d:cf:45: 61:57:d7:ea:66:55:0c:b7:33:a8:e5:a5:1b:e8:8a:66:d6:bd: 82:91:54:a4:f3:f1:51:18:4a:70:1d:6f:6a:3f:ac:b8:31:20: 5b:b9:42:af:a1:d9:a6:c7:ee:43:82:21:53:30:6b:af:4a:ea: c1:f2:37:e9:cb:f3:38:a6:79:0b:58:eb:69:fc:c6:b4:ed:c6: e0:ff:5b:26:8b:b8:a8:3a:df:71:ed:76:aa:1c:b2:7c:8c:be: 1e:9e:e1:7d:30:be:93:c5:21:18:be:53:ea:f0:28:bc:5f:0d: 6a:87:f0:a9:e6:2e:d0:6e:1e:5c:93:ca:d1:5b:2a:ce:8d:b5: 82:04:ad:52:df:ca:14:f1:50:7f:4f:59:4f:ed:e1:88:55:b0: 8c:d2:18:f4:70:bd:b2:b8:da:67:3a:e2:00:61:25:37:1a:da: ee:f7:c5:d7:79:1a:f2:84:02:52:dc:97:63:78:60:3a:1b:f8: be:ad:49:5a:18:64:f3:2b:67:a9:38:46:92:1b:30:fc:22:ea: a9:18:16:cd:19:f1:ac:cb:e6:60:12:3e:24:4e:9e:56:03:ff: 26:5f:64:ee:0b:f2:1d:7b:8c:3c:6b:36:57:eb:a8:0b:4a:76: 38:56:be:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuATB39LbC85pGv4ufqcIaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYjA0NmI2ZTMwOWU5YTg2NjUyMmMyYTQwYzY2ZmZjNDJm YmI4NDMwHhcNMjYwMTAyMjAwMDMwWhcNMjYwMTAzMjAwMDMwWjAzMTEwLwYDVQQD Eyg3MjY0MmM5MDc0YmU1MjkzM2Y3YzJmZWFhYjQ4MjI0OGZjODM0YWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYkPNeWG8g83CXPzt81rkRhl1lJj RdBr4OeQde/l54DGE7Liz6vOw9xfYVg+l6i5DiGWzEsR6O70WgbAb+lEN2JwWNNm YYLQzxI2VDQAcJ8lsgS2c0NtphKVR3CDFW7I4YgIpiQ7+uYYdIbQ6aNfvtOl3bZz UucP5cj6u4Ec7Q5UUom04tcUdeD9X8BTLbKSggpXkU8qSJ30z0hmOEap45a6AANc YmDUAft3jeBD/RB+OpVBnZvgYvM4mbNHZq+f4dbal+7U4nC3mhyIpXLBHB4tuSxo KqYUCdJ2O1A9nLzqz3Kr91NVvekLpFu3uZFUZ35tiAzNGqpKoNiOsUWnlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJkLJB0vlKTP3wv6qtIIkj8g0rfMB8GA1UdIwQY MBaAFN6wRrbjCemoZlIsKkDGb/xC+7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDkt MWM5NDkyMjQ1Y2FiLzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDktMWM5NDkyMjQ1Y2Fi LzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZK2O68fO d4J36H+zaDbFHc9FYVfX6mZVDLczqOWlG+iKZta9gpFUpPPxURhKcB1vaj+suDEg W7lCr6HZpsfuQ4IhUzBrr0rqwfI36cvzOKZ5C1jrafzGtO3G4P9bJou4qDrfce12 qhyyfIy+Hp7hfTC+k8UhGL5T6vAovF8NaofwqeYu0G4eXJPK0Vsqzo21ggStUt/K FPFQf09ZT+3hiFWwjNIY9HC9srjaZzriAGElNxra7vfF13ka8oQCUtyXY3hgOhv4 vq1JWhhk8ytnqThGkhsw/CLqqRgWzRnxrMvmYBI+JE6eVgP/Jl9k7gvyHXuMPGs2 V+uoC0p2OFa+Pg== -----END CERTIFICATE-----Generated at Sat Jan 3 00:57:26 2026 by rpki-client