This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft File: 3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft (raw, json) Hash identifier: ZoTuO304ujd6FcprxyuZlPgaEkg2kLIwujIc1Y9nQT8= Subject key identifier: B4:3B:AA:EB:46:AC:52:C1:F9:AA:8E:73:67:62:08:54:E3:31:F9:A8 Authority key identifier: DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5 Certificate issuer: /CN=dee02e267c89f50df1a176f0e75f5c28235b23a5 Certificate serial: 019BB4035B863047469BFB875C532054D800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft Manifest number: 17C7 Signing time: Mon 12 Jan 2026 21:01:17 +0000 Manifest this update: Mon 12 Jan 2026 21:01:17 +0000 Manifest next update: Tue 13 Jan 2026 21:01:17 +0000 Files and hashes: 1: 3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl (hash: bk1ahd5NWMCLK6NBycYEuD56oi5ZkguUct3yuMn2Krk=) 2: _yiSgUOzwENT6HWFGMrWkl5JgGo.roa (hash: 0WyaaoMTpom+arYMmqs6/I0vff3v73Sx2KKt3/t+tGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b4:03:5b:86:30:47:46:9b:fb:87:5c:53:20:54:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee02e267c89f50df1a176f0e75f5c28235b23a5 Validity Not Before: Jan 12 21:01:17 2026 GMT Not After : Jan 13 21:01:17 2026 GMT Subject: CN=b43baaeb46ac52c1f9aa8e7367620854e331f9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:8c:ca:ab:23:f5:54:df:1a:15:44:0a:02: b9:88:28:41:7d:f5:2d:cf:83:08:78:d2:16:e1:16: 8f:ab:ea:bc:33:65:9f:e2:af:95:76:64:d1:66:92: d0:2d:fd:70:a7:57:61:60:af:e7:77:85:35:cb:94: cf:ea:66:b3:28:0f:d4:e9:38:81:31:27:63:4c:74: 7c:e9:c2:16:b2:98:18:ec:52:4d:8a:c0:ba:7a:fe: 0d:cb:52:05:77:07:3e:f9:51:8e:bc:28:41:cb:7e: 60:ea:1e:2c:3e:d8:1f:dc:0d:9f:8d:90:f7:7a:b3: d8:d0:8d:7d:3d:79:5e:a7:30:0b:a2:c4:f4:90:d8: e2:7c:07:b4:61:0e:87:ec:cd:a2:d4:58:46:1f:46: e2:5c:d9:0c:cd:ff:d9:b6:72:cd:e4:0a:29:7f:fe: 47:99:a2:76:d5:dc:fc:de:7b:6e:b8:4c:c5:79:34: 7d:e2:ff:b7:44:26:d4:91:28:2b:83:57:22:95:db: c4:8b:47:d3:c8:70:d1:39:1c:6a:50:43:bd:45:2d: 80:a7:74:f6:19:49:0d:e3:e1:4b:bf:e9:bf:4d:6a: 07:7d:3f:8d:16:8f:1c:96:ee:b5:6a:d2:47:7d:ea: d0:0a:2b:97:9a:53:99:24:03:2d:4b:8d:2b:d8:2a: a9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3B:AA:EB:46:AC:52:C1:F9:AA:8E:73:67:62:08:54:E3:31:F9:A8 X509v3 Authority Key Identifier: keyid:DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:db:b4:c3:0d:e8:4a:83:49:0d:44:e2:bb:bd:dd:00:2c:45: aa:32:d4:b6:c0:5d:e4:50:05:f7:9d:34:a2:03:16:95:99:e8: 92:02:b8:54:1d:f8:d0:dc:19:57:5c:74:51:1d:2e:6f:71:bd: 04:95:1d:d5:0d:31:c2:b5:07:92:fa:2f:54:17:a8:fc:60:4d: dc:14:38:df:2b:8e:66:65:8f:34:d0:c8:20:9d:6e:d8:57:1f: ec:de:7b:8f:a1:3a:fe:e0:d2:97:d0:46:69:0e:a3:77:76:ce: fc:5e:f2:ac:c7:2b:a2:06:ac:2b:1d:3c:ca:ef:2b:c6:a5:ba: ee:ba:d6:d7:2b:f9:1a:89:f7:7d:36:2a:99:0f:3d:b6:d0:e1: 08:e2:93:0c:e7:8a:3e:ad:cb:9a:d9:fd:fc:ed:76:9a:fe:88: e7:85:dd:18:61:6a:73:21:61:f5:08:f1:49:b5:3f:0d:f3:d4: d3:0d:e9:86:eb:e0:56:d8:d2:5e:67:5a:bc:c1:8b:a9:c6:ba: 4a:37:db:40:c2:11:0a:13:a4:10:e5:63:45:0f:4c:a0:50:3d: 88:ce:6f:6a:c1:b3:75:6c:27:12:bf:a6:f9:e4:d0:8c:b1:83: a3:8a:98:2d:15:2c:2e:f1:fc:71:36:a8:d3:df:80:d1:1f:82: d1:95:d8:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu0A1uGMEdGm/uHXFMgVNgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTAyZTI2N2M4OWY1MGRmMWExNzZmMGU3NWY1YzI4MjM1 YjIzYTUwHhcNMjYwMTEyMjEwMTE3WhcNMjYwMTEzMjEwMTE3WjAzMTEwLwYDVQQD EyhiNDNiYWFlYjQ2YWM1MmMxZjlhYThlNzM2NzYyMDg1NGUzMzFmOWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIuMyqsj9VTfGhVECgK5iChBffUt z4MIeNIW4RaPq+q8M2Wf4q+VdmTRZpLQLf1wp1dhYK/nd4U1y5TP6mazKA/U6TiB MSdjTHR86cIWspgY7FJNisC6ev4Ny1IFdwc++VGOvChBy35g6h4sPtgf3A2fjZD3 erPY0I19PXlepzALosT0kNjifAe0YQ6H7M2i1FhGH0biXNkMzf/ZtnLN5Aopf/5H maJ21dz83ntuuEzFeTR94v+3RCbUkSgrg1cildvEi0fTyHDRORxqUEO9RS2Ap3T2 GUkN4+FLv+m/TWoHfT+NFo8clu61atJHferQCiuXmlOZJAMtS40r2CqpSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ7qutGrFLB+aqOc2diCFTjMfmoMB8GA1UdIwQY MBaAFN7gLiZ8ifUN8aF28OdfXCgjWyOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lOWJhNDctMDZhZS00OTg4LTgxNjUt MzcwMThiMWZlOWZhLzEvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lOWJhNDctMDZhZS00OTg4LTgxNjUtMzcwMThiMWZlOWZh LzEvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNu0ww3o SoNJDUTiu73dACxFqjLUtsBd5FAF9500ogMWlZnokgK4VB340NwZV1x0UR0ub3G9 BJUd1Q0xwrUHkvovVBeo/GBN3BQ43yuOZmWPNNDIIJ1u2Fcf7N57j6E6/uDSl9BG aQ6jd3bO/F7yrMcrogasKx08yu8rxqW67rrW1yv5Gon3fTYqmQ89ttDhCOKTDOeK Pq3Lmtn9/O12mv6I54XdGGFqcyFh9QjxSbU/DfPU0w3phuvgVtjSXmdavMGLqca6 SjfbQMIRChOkEOVjRQ9MoFA9iM5vasGzdWwnEr+m+eTQjLGDo4qYLRUsLvH8cTao 09+A0R+C0ZXYIw== -----END CERTIFICATE-----Generated at Mon Jan 12 23:53:03 2026 by rpki-client