This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json) Hash identifier: YCcoYcObBFwMOQZVZUBd35dK+zyO3CklimlTCIwWApE= Subject key identifier: 6F:3D:3A:E1:BC:5C:09:17:DB:84:79:96:B3:4B:F6:33:9A:BD:5B:70 Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7 Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7 Certificate serial: 019BB1398C89E0097A3C3FF857F371984407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft Manifest number: 1771 Signing time: Mon 12 Jan 2026 08:01:37 +0000 Manifest this update: Mon 12 Jan 2026 08:01:37 +0000 Manifest next update: Tue 13 Jan 2026 08:01:37 +0000 Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: xh7pHKZLYCJ3ZZzhL55TEor8uvZjVySlxE0We5IvRJM=) 2: 66xj8nJZJDodIpTEFYfIO2lI0pg.roa (hash: cnTcAyScXe7FLebnmc+X1hADlgaMe8Kz4UH8Ho7fCks=) 3: YC7q8GupNzZHSH1s2Vu8MGm0c2Y.roa (hash: TnzlosbHJ70+TNYLJ5XWl/2V3tal0xrZM8UfJyyEdK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 08:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:39:8c:89:e0:09:7a:3c:3f:f8:57:f3:71:98:44:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7 Validity Not Before: Jan 12 08:01:37 2026 GMT Not After : Jan 13 08:01:37 2026 GMT Subject: CN=6f3d3ae1bc5c0917db847996b34bf6339abd5b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:83:5d:d2:ec:4b:41:8c:d2:4c:99:a3:f4: df:92:e5:70:3a:be:ff:00:bb:20:52:06:56:d6:c0: e2:39:86:6a:ce:3e:37:9b:fd:f6:43:c9:11:aa:e2: 69:14:70:e4:f5:cb:35:83:27:29:7a:86:bd:24:f6: 5a:f9:16:de:af:fc:b0:15:dc:9c:b6:9b:89:ae:43: 3f:13:87:4e:d1:97:61:f3:37:72:3f:5e:e7:cf:bd: ad:17:91:e0:47:6e:f5:c6:04:21:ed:fa:f2:73:03: 14:64:bb:fc:be:cd:ea:e5:de:9b:2c:ba:3b:8f:67: 69:ee:bd:02:e8:93:63:a7:31:7b:8b:fc:e9:b4:5a: ab:06:ca:c9:7f:72:e4:54:fa:86:6b:a3:9e:4e:fe: b0:89:bf:55:f6:49:72:0c:d2:c4:05:0e:79:a6:cf: ff:d1:a7:58:21:57:a4:e5:cf:95:f6:78:06:b3:10: 40:73:4a:e1:75:9a:23:95:8f:03:f1:3b:c5:b4:1b: b0:46:6d:70:f6:7e:7a:2b:0c:06:a9:14:be:3b:4d: e4:e0:76:42:1f:4f:1c:e3:b6:0c:96:78:69:58:6e: 3f:74:6a:0e:f8:c2:f9:73:cb:a3:21:bb:28:9b:6a: c3:02:d4:bd:28:61:6d:1a:b2:57:ac:4f:08:a5:e3: cd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3D:3A:E1:BC:5C:09:17:DB:84:79:96:B3:4B:F6:33:9A:BD:5B:70 X509v3 Authority Key Identifier: keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7f:82:a5:8a:fc:c1:d7:0e:37:65:4f:80:57:32:18:8d:2c: f1:a1:56:60:58:5b:83:13:a1:38:3e:98:b0:f5:a3:bd:13:a0: 6b:cc:1e:20:d6:3f:b1:a0:dd:ee:1c:56:1f:66:02:93:c7:41: 8b:dc:8a:bb:c2:07:3b:d3:7c:83:b3:75:e2:4b:71:6a:c9:32: 91:d1:49:83:ca:b1:de:7a:7e:8c:16:18:02:38:79:41:e5:93: 5d:1b:fb:f0:ec:82:d4:46:d1:de:ef:40:c2:cd:52:87:97:f6: 21:00:4c:76:a7:59:8f:0a:15:d2:24:9d:3f:b0:e9:a3:07:94: 97:65:25:ad:40:3e:d6:f0:bd:5c:9c:95:ea:ea:4c:da:c2:34: 92:d1:18:19:7e:7c:22:6c:b0:18:73:76:a4:3e:62:e9:82:ec: 04:f1:1d:4f:05:3e:22:ad:1f:3b:15:d1:13:77:7d:18:ee:36: 05:58:ce:12:3b:76:12:54:e4:5b:e4:b9:e7:fc:46:4f:a4:18: 0c:8c:d9:22:0c:47:c2:94:be:a6:66:65:95:f5:76:95:76:74: 7e:29:45:82:a7:08:ff:2f:76:bf:2f:38:cc:98:74:ae:8c:c0: 47:c7:81:0c:ba:5e:27:67:00:e7:2e:62:31:35:72:3c:34:3c: 67:93:ba:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxOYyJ4Al6PD/4V/NxmEQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTgyZjk3OWEyZDI1ZWJiMmRhYjI2NTRiOGMyN2M5Mjhj ZjVhYzcwHhcNMjYwMTEyMDgwMTM3WhcNMjYwMTEzMDgwMTM3WjAzMTEwLwYDVQQD Eyg2ZjNkM2FlMWJjNWMwOTE3ZGI4NDc5OTZiMzRiZjYzMzlhYmQ1YjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssODXdLsS0GM0kyZo/TfkuVwOr7/ ALsgUgZW1sDiOYZqzj43m/32Q8kRquJpFHDk9cs1gycpeoa9JPZa+Rber/ywFdyc tpuJrkM/E4dO0Zdh8zdyP17nz72tF5HgR271xgQh7frycwMUZLv8vs3q5d6bLLo7 j2dp7r0C6JNjpzF7i/zptFqrBsrJf3LkVPqGa6OeTv6wib9V9klyDNLEBQ55ps// 0adYIVek5c+V9ngGsxBAc0rhdZojlY8D8TvFtBuwRm1w9n56KwwGqRS+O03k4HZC H08c47YMlnhpWG4/dGoO+ML5c8ujIbsom2rDAtS9KGFtGrJXrE8IpePNuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG89OuG8XAkX24R5lrNL9jOavVtwMB8GA1UdIwQY MBaAFN2YL5eaLSXrstqyZUuMJ8koz1rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjct OTg4NmNiMWI2NDBlLzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjctOTg4NmNiMWI2NDBl LzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaH+CpYr8 wdcON2VPgFcyGI0s8aFWYFhbgxOhOD6YsPWjvROga8weINY/saDd7hxWH2YCk8dB i9yKu8IHO9N8g7N14ktxaskykdFJg8qx3np+jBYYAjh5QeWTXRv78OyC1EbR3u9A ws1Sh5f2IQBMdqdZjwoV0iSdP7DpoweUl2UlrUA+1vC9XJyV6upM2sI0ktEYGX58 ImywGHN2pD5i6YLsBPEdTwU+Iq0fOxXRE3d9GO42BVjOEjt2ElTkW+S55/xGT6QY DIzZIgxHwpS+pmZllfV2lXZ0filFgqcI/y92vy84zJh0rozAR8eBDLpeJ2cA5y5i MTVyPDQ8Z5O6iQ== -----END CERTIFICATE-----Generated at Mon Jan 12 15:16:30 2026 by rpki-client