This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json) Hash identifier: 7dzCFL/GNqOjefERvWs6VCYmXOQ5Vy8pTWIrtRReV6M= Subject key identifier: 6C:D4:92:D0:C0:A1:C6:59:B3:E3:6E:DE:5B:7B:7D:F2:F5:D6:76:36 Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1 Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1 Certificate serial: 019B80836397FD05123CBC8BD82EC802231B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft Manifest number: 135F Signing time: Fri 02 Jan 2026 21:00:52 +0000 Manifest this update: Fri 02 Jan 2026 21:00:52 +0000 Manifest next update: Sat 03 Jan 2026 21:00:52 +0000 Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: AkQGbLCCVs1e7fEY2dDikyrKb0xyYeFnJ1yiTdZpuTk=) 2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:83:63:97:fd:05:12:3c:bc:8b:d8:2e:c8:02:23:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1 Validity Not Before: Jan 2 21:00:52 2026 GMT Not After : Jan 3 21:00:52 2026 GMT Subject: CN=6cd492d0c0a1c659b3e36ede5b7b7df2f5d67636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:1d:33:a2:ee:ef:3b:42:5a:ef:e9:4a:11: 71:2d:e5:27:c7:79:a6:c5:f0:8e:3d:32:79:b7:eb: 64:9e:09:77:91:f0:de:fc:53:0f:d1:75:b1:1c:4b: e9:b3:93:87:d3:46:f1:2a:46:65:a8:42:42:b8:10: 16:a7:72:7c:b2:53:18:0a:ef:8e:23:fb:0c:2d:af: 81:10:8c:ce:22:17:b5:33:17:46:bd:02:fe:1a:80: fb:e3:3b:48:2a:81:53:15:2f:8d:80:2e:62:b3:c1: ef:5e:04:f5:5f:5d:11:d9:9b:fc:e4:0b:26:d0:09: 10:a2:53:45:e5:6f:aa:a3:77:be:85:db:9a:97:ac: 6f:f5:99:90:fd:77:ac:a8:e3:c5:25:66:d4:32:f5: 64:d5:3c:c5:8f:14:02:22:6d:fc:0d:a0:e1:71:55: 26:ec:37:19:c5:29:4e:2e:08:71:5d:09:8a:1d:93: e0:f1:0a:a0:61:3e:f8:ab:66:30:28:fd:8c:0d:b0: 59:13:e8:b0:16:0d:5e:4d:aa:07:e1:6e:45:b1:68: 3e:62:91:87:d5:a3:0f:fa:b4:6b:23:1b:7a:88:77: cf:70:75:2c:a9:15:0b:e8:62:77:30:ed:91:6b:dc: be:67:5a:46:48:3c:01:0e:06:37:b4:34:cb:69:ae: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D4:92:D0:C0:A1:C6:59:B3:E3:6E:DE:5B:7B:7D:F2:F5:D6:76:36 X509v3 Authority Key Identifier: keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6d:73:00:12:69:aa:d1:51:94:28:b3:9c:8b:06:74:c0:4b: b5:89:b4:7a:b2:7c:57:49:52:98:4e:1e:3e:7d:68:b6:83:cb: 76:2d:ac:fe:99:ef:b2:9a:81:7b:19:40:c0:0a:40:ae:30:36: 1f:0f:95:ce:44:81:df:84:8c:f8:50:a8:66:57:3e:49:f2:51: e8:57:db:09:6b:98:33:66:7d:4d:e0:93:a7:8b:dc:54:20:71: cc:d1:45:f7:bd:e5:5f:2a:31:38:fe:f7:00:31:05:b0:bc:c0: 43:44:9f:de:3d:54:4a:c7:49:7e:8a:77:88:ad:31:e6:68:a5: 96:86:66:8c:d1:f0:18:8a:41:39:28:e1:35:18:db:76:0f:32: 6b:36:8d:6c:64:02:ae:d6:85:b3:7f:20:59:54:34:9d:3f:3c: 56:c2:62:d2:43:08:07:c9:e9:51:ef:df:33:12:8d:c0:9c:a3: 2a:9b:23:1e:76:fb:23:99:a3:5b:08:a7:b5:37:d8:25:da:21: de:9a:1b:1f:96:2b:5f:f4:eb:b6:7d:a3:4d:ef:22:e6:b9:89: e9:b8:3b:24:2a:ab:c6:7f:d2:e2:aa:e2:d9:db:a1:65:fd:ef: 16:b6:81:cc:f1:ca:03:c0:7d:b4:51:2f:00:c5:63:6e:dd:6e: 50:ec:9a:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAg2OX/QUSPLyL2C7IAiMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjN2Q4ZWQ5ODQ0M2RlNmM2ODhkMTc0ZjFmMDA1NWJlNGRl MTgyYTEwHhcNMjYwMTAyMjEwMDUyWhcNMjYwMTAzMjEwMDUyWjAzMTEwLwYDVQQD Eyg2Y2Q0OTJkMGMwYTFjNjU5YjNlMzZlZGU1YjdiN2RmMmY1ZDY3NjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorodM6Lu7ztCWu/pShFxLeUnx3mm xfCOPTJ5t+tkngl3kfDe/FMP0XWxHEvps5OH00bxKkZlqEJCuBAWp3J8slMYCu+O I/sMLa+BEIzOIhe1MxdGvQL+GoD74ztIKoFTFS+NgC5is8HvXgT1X10R2Zv85Asm 0AkQolNF5W+qo3e+hdual6xv9ZmQ/XesqOPFJWbUMvVk1TzFjxQCIm38DaDhcVUm 7DcZxSlOLghxXQmKHZPg8QqgYT74q2YwKP2MDbBZE+iwFg1eTaoH4W5FsWg+YpGH 1aMP+rRrIxt6iHfPcHUsqRUL6GJ3MO2Ra9y+Z1pGSDwBDgY3tDTLaa4oyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzUktDAocZZs+Nu3lt7ffL11nY2MB8GA1UdIwQY MBaAFNx9jtmEQ95saI0XTx8AVb5N4YKhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYt YjgwMjA1MjgzMmNmLzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYtYjgwMjA1MjgzMmNm LzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe21zABJp qtFRlCiznIsGdMBLtYm0erJ8V0lSmE4ePn1otoPLdi2s/pnvspqBexlAwApArjA2 Hw+VzkSB34SM+FCoZlc+SfJR6FfbCWuYM2Z9TeCTp4vcVCBxzNFF973lXyoxOP73 ADEFsLzAQ0Sf3j1USsdJfop3iK0x5milloZmjNHwGIpBOSjhNRjbdg8yazaNbGQC rtaFs38gWVQ0nT88VsJi0kMIB8npUe/fMxKNwJyjKpsjHnb7I5mjWwintTfYJdoh 3pobH5YrX/Trtn2jTe8i5rmJ6bg7JCqrxn/S4qri2duhZf3vFraBzPHKA8B9tFEv AMVjbt1uUOya4Q== -----END CERTIFICATE-----Generated at Sat Jan 3 06:41:20 2026 by rpki-client