This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json) Hash identifier: izDwQqyhgNlBrSt3Z5QWEKKY0irX2Y+g7BmFuPsSYJ4= Subject key identifier: 68:90:7F:D3:16:0D:F3:BE:1E:12:DB:AC:A6:74:CF:7E:BE:22:66:08 Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26 Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26 Certificate serial: 019C427D8494DE15C0715CFF3275BB165A5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft Manifest number: 11F6 Signing time: Mon 09 Feb 2026 13:00:48 +0000 Manifest this update: Mon 09 Feb 2026 13:00:48 +0000 Manifest next update: Tue 10 Feb 2026 13:00:48 +0000 Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: vj9VNpb3ihvhsJFi9R9GrwAAOKW/OE8BSCXVGn++ows=) 2: 5NCPJAHZuuvT_Y3OLL7H8HuHVKg.roa (hash: Bkja5xY8wPIuCivflgBr5uP8e0j+G2X5xzd/ng/E16A=) 3: D6_vhrKcdm3SeocdHjY0RSl6kYk.roa (hash: 7HV4a9Y3R1hQs2yh9xBaiZSckY1ztfOLxpIEor4i7PY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:84:94:de:15:c0:71:5c:ff:32:75:bb:16:5a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26 Validity Not Before: Feb 9 13:00:48 2026 GMT Not After : Feb 10 13:00:48 2026 GMT Subject: CN=68907fd3160df3be1e12dbaca674cf7ebe226608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e0:64:bc:2a:a8:a5:ba:4d:31:14:8d:43:93: b3:1b:fd:da:1b:5e:37:dd:6c:a6:0b:c8:fb:08:b8: e9:90:86:90:40:70:c2:e3:f2:36:c3:81:95:d5:73: 3c:af:f7:73:d9:36:73:d4:be:2e:b0:b6:6b:54:4e: ce:69:d1:80:f3:b3:33:9e:6f:e8:2d:d3:98:17:25: bb:8d:b2:33:55:f3:72:29:92:94:fb:d5:f4:ee:f1: da:e0:c8:8d:cb:3f:38:0e:b1:f6:eb:5c:9f:52:ac: 2c:b5:d3:a7:ca:ff:10:39:35:b8:9b:62:de:b2:f7: 50:98:85:78:17:da:d8:7f:d6:cf:77:f1:30:60:9d: 7d:41:2a:76:2e:08:03:55:ce:ca:c4:01:8f:5d:90: 3e:9d:90:9b:09:ba:09:61:2d:06:9e:86:12:75:d8: e8:87:b9:01:f3:c2:60:5b:44:32:7d:8b:57:30:33: 1d:f7:43:67:96:06:d9:29:96:85:b2:ab:ec:f3:9d: 07:39:ad:a4:f6:fd:c4:16:74:92:b6:45:c2:54:96: 69:97:e3:2f:0b:61:ee:8e:51:de:ea:d5:83:4c:14: 4c:b0:dc:00:71:5f:e1:67:65:b3:72:19:84:32:c9: 66:5b:7b:ad:2e:c3:ce:ef:af:6d:cd:e8:e1:8b:04: 7b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:90:7F:D3:16:0D:F3:BE:1E:12:DB:AC:A6:74:CF:7E:BE:22:66:08 X509v3 Authority Key Identifier: keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ea:07:03:69:06:dd:31:93:de:6d:2d:5c:eb:65:ab:f3:93: b3:b9:4c:58:28:09:8e:ea:82:5b:fb:a6:c9:45:cf:3e:f9:f2: 58:29:f8:8d:d8:87:48:7c:7b:20:f7:da:c5:8b:86:ad:89:72: 2c:5f:8b:5f:3d:e5:69:07:d2:1e:76:1e:51:c7:23:63:3b:73: 8b:7b:95:e6:3c:13:93:0c:40:09:07:ff:75:2d:5e:eb:2f:d1: d2:dd:d1:c4:41:43:31:06:20:32:84:5e:21:ce:a6:31:56:fd: 5f:7b:54:34:c2:ab:2b:c0:04:4a:b0:c2:42:13:8e:bf:b2:b6: fe:c0:61:18:db:38:84:ba:16:c9:a3:4b:89:73:12:cb:ae:da: ad:83:a3:9b:4f:57:9f:6a:97:6a:b7:14:ad:aa:74:71:c6:da: 5e:15:d0:9f:06:18:53:20:1a:ae:98:c6:79:2f:e5:5a:d0:c3: 63:e8:c7:08:38:18:28:04:21:84:65:e1:e7:f2:ac:92:e1:76: 6e:fa:63:3e:94:06:03:77:8f:4c:0d:5d:ca:c4:58:f1:ed:04: 33:3f:f6:5c:25:2a:14:e4:1a:51:69:55:4b:83:67:41:62:a4: 61:0e:e4:87:46:7c:2e:97:d1:f2:44:9e:2c:17:f6:60:c9:0b: 74:ee:2d:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYSU3hXAcVz/MnW7FlpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTRhNDI5ZTY2NThhYmI3MGEzNzkyYzE3MmQ3ZWQ2MmVi OGZhMjYwHhcNMjYwMjA5MTMwMDQ4WhcNMjYwMjEwMTMwMDQ4WjAzMTEwLwYDVQQD Eyg2ODkwN2ZkMzE2MGRmM2JlMWUxMmRiYWNhNjc0Y2Y3ZWJlMjI2NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OBkvCqopbpNMRSNQ5OzG/3aG143 3WymC8j7CLjpkIaQQHDC4/I2w4GV1XM8r/dz2TZz1L4usLZrVE7OadGA87Mznm/o LdOYFyW7jbIzVfNyKZKU+9X07vHa4MiNyz84DrH261yfUqwstdOnyv8QOTW4m2Le svdQmIV4F9rYf9bPd/EwYJ19QSp2LggDVc7KxAGPXZA+nZCbCboJYS0GnoYSddjo h7kB88JgW0QyfYtXMDMd90NnlgbZKZaFsqvs850HOa2k9v3EFnSStkXCVJZpl+Mv C2HujlHe6tWDTBRMsNwAcV/hZ2WzchmEMslmW3utLsPO769tzejhiwR76QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiQf9MWDfO+HhLbrKZ0z36+ImYIMB8GA1UdIwQY MBaAFN4UpCnmZYq7cKN5LBctftYuuPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEt MDVkOWMxY2Q3NDI1LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEtMDVkOWMxY2Q3NDI1 LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeoHA2kG 3TGT3m0tXOtlq/OTs7lMWCgJjuqCW/umyUXPPvnyWCn4jdiHSHx7IPfaxYuGrYly LF+LXz3laQfSHnYeUccjYztzi3uV5jwTkwxACQf/dS1e6y/R0t3RxEFDMQYgMoRe Ic6mMVb9X3tUNMKrK8AESrDCQhOOv7K2/sBhGNs4hLoWyaNLiXMSy67arYOjm09X n2qXarcUrap0ccbaXhXQnwYYUyAarpjGeS/lWtDDY+jHCDgYKAQhhGXh5/KskuF2 bvpjPpQGA3ePTA1dysRY8e0EMz/2XCUqFOQaUWlVS4NnQWKkYQ7kh0Z8LpfR8kSe LBf2YMkLdO4tug== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:35 2026 by rpki-client