This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft File: 3g1q1z4YioWTcrYTo6JwS5wzD-0.mft (raw, json) Hash identifier: zf/ectdty94FmfVNtpAr0ubtVkLMdE2qV4umG/FbLCU= Subject key identifier: EF:E8:01:23:E1:6C:81:BC:B5:8C:30:D8:CC:DC:6B:DC:BB:13:68:0A Authority key identifier: DE:0D:6A:D7:3E:18:8A:85:93:72:B6:13:A3:A2:70:4B:9C:33:0F:ED Certificate issuer: /CN=de0d6ad73e188a859372b613a3a2704b9c330fed Certificate serial: 019C41A1E3A6EA3C9B1377E20C4D5A58FB31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft Manifest number: 010F Signing time: Mon 09 Feb 2026 09:00:54 +0000 Manifest this update: Mon 09 Feb 2026 09:00:54 +0000 Manifest next update: Tue 10 Feb 2026 09:00:54 +0000 Files and hashes: 1: 3g1q1z4YioWTcrYTo6JwS5wzD-0.crl (hash: HrPop6kJEwCTqYsU0wOp0igXWpFEq+kiQHPhYI5T5ac=) 2: xlffALi4uBOFmreXz8haweCZNck.roa (hash: 3wXdfGigS71aUdPX9RI8m2mtTK/gKdzEh9NGf1XtL2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.crl rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:e3:a6:ea:3c:9b:13:77:e2:0c:4d:5a:58:fb:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0d6ad73e188a859372b613a3a2704b9c330fed Validity Not Before: Feb 9 09:00:54 2026 GMT Not After : Feb 10 09:00:54 2026 GMT Subject: CN=efe80123e16c81bcb58c30d8ccdc6bdcbb13680a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a5:5a:50:b1:99:03:90:0c:5b:07:61:e9:c0: 61:1a:6e:72:2b:df:df:6d:a7:6d:76:78:76:ec:73: f5:c7:fe:15:7c:2b:d9:8e:17:05:93:a8:a4:b2:b3: 53:4b:00:56:d1:44:ac:d9:8a:9f:91:28:a8:66:d7: 64:d0:16:25:f2:0d:1b:12:d0:8f:3c:d2:11:14:8b: 41:88:62:2f:1a:d9:b6:ad:64:12:42:07:82:54:5a: eb:40:d6:b0:6a:9a:9e:43:30:a9:86:ed:db:10:71: 67:91:7a:43:08:72:b3:18:2a:96:83:e9:29:f1:8c: 50:fb:c0:db:35:c2:33:4e:6c:32:ab:bc:7f:f3:9a: f2:f0:60:5c:a1:ae:dd:c4:59:00:b6:9e:f3:0c:e0: e0:4b:9b:0e:af:71:27:5a:3f:0d:3d:36:e1:2a:2c: d9:bf:62:ab:74:61:3b:2d:85:34:ce:81:10:c1:c1: 17:ef:18:6f:49:ca:ec:b7:84:8f:9c:77:d8:23:fe: de:8c:8c:00:97:95:e6:b0:e6:2e:8d:d3:98:a6:49: b0:43:58:f1:10:56:0f:ee:6c:cc:3f:c3:c9:5f:f0: e7:37:c3:71:7d:89:f0:d1:5d:51:71:e4:c7:a0:99: ef:aa:3a:c3:16:03:dd:b2:b7:4f:80:43:69:4b:86: 66:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E8:01:23:E1:6C:81:BC:B5:8C:30:D8:CC:DC:6B:DC:BB:13:68:0A X509v3 Authority Key Identifier: keyid:DE:0D:6A:D7:3E:18:8A:85:93:72:B6:13:A3:A2:70:4B:9C:33:0F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6e:c0:8b:b5:df:7e:bf:ac:58:94:a3:e2:5d:a2:95:1f:38: 08:db:0b:0d:05:64:f4:c8:e1:f6:42:f1:f0:03:5c:b7:17:ee: f7:eb:06:0c:3d:eb:e6:36:16:80:4d:80:a4:96:bc:cf:f0:ff: 0e:27:d4:dd:bc:08:f8:93:e0:bb:48:b9:2a:ac:3f:ed:8e:15: 3c:31:6f:19:96:7b:73:65:65:b6:3a:4f:df:28:64:4c:11:89: 21:ee:ec:c7:d7:86:3f:54:83:f8:f6:85:53:38:5e:dc:33:f5: 14:0c:4a:cb:39:87:b9:0f:fc:06:64:b6:3b:c3:da:be:ef:be: 34:c4:dd:7c:92:eb:93:91:46:c6:b2:83:b3:42:72:19:58:47: 8a:0a:dd:c1:9f:17:dd:8a:b5:77:2b:e0:bb:32:cd:89:fd:ce: 0a:29:d6:87:87:fd:2b:bc:ff:b6:4d:2e:2e:e2:4f:3c:34:ff: d8:38:fd:50:b0:57:e6:df:cd:e1:0d:27:02:fe:11:e9:38:bf: f5:28:1a:1e:c8:3c:47:d9:70:64:99:79:ea:ee:88:4c:56:bc: 1f:86:42:b3:1e:b3:e0:6d:28:a2:35:2e:1f:ed:64:26:15:c5: 20:d6:93:3f:ac:cd:9a:64:02:a5:2e:a7:2a:c7:37:0c:e7:be: 1e:58:b7:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoeOm6jybE3fiDE1aWPsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGQ2YWQ3M2UxODhhODU5MzcyYjYxM2EzYTI3MDRiOWMz MzBmZWQwHhcNMjYwMjA5MDkwMDU0WhcNMjYwMjEwMDkwMDU0WjAzMTEwLwYDVQQD EyhlZmU4MDEyM2UxNmM4MWJjYjU4YzMwZDhjY2RjNmJkY2JiMTM2ODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KVaULGZA5AMWwdh6cBhGm5yK9/f badtdnh27HP1x/4VfCvZjhcFk6iksrNTSwBW0USs2YqfkSioZtdk0BYl8g0bEtCP PNIRFItBiGIvGtm2rWQSQgeCVFrrQNawapqeQzCphu3bEHFnkXpDCHKzGCqWg+kp 8YxQ+8DbNcIzTmwyq7x/85ry8GBcoa7dxFkAtp7zDODgS5sOr3EnWj8NPTbhKizZ v2KrdGE7LYU0zoEQwcEX7xhvScrst4SPnHfYI/7ejIwAl5XmsOYujdOYpkmwQ1jx EFYP7mzMP8PJX/DnN8NxfYnw0V1RceTHoJnvqjrDFgPdsrdPgENpS4ZmIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/oASPhbIG8tYww2Mzca9y7E2gKMB8GA1UdIwQY MBaAFN4Natc+GIqFk3K2E6OicEucMw/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2cxcTF6NFlpb1dUY3JZVG82SndTNXd6RC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84MTExMTAtN2ZlNy00ZDM0LWFlYzAt ZjM4NWRmNmQ5NDRhLzEvM2cxcTF6NFlpb1dUY3JZVG82SndTNXd6RC0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84MTExMTAtN2ZlNy00ZDM0LWFlYzAtZjM4NWRmNmQ5NDRh LzEvM2cxcTF6NFlpb1dUY3JZVG82SndTNXd6RC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkm7Ai7Xf fr+sWJSj4l2ilR84CNsLDQVk9Mjh9kLx8ANctxfu9+sGDD3r5jYWgE2ApJa8z/D/ DifU3bwI+JPgu0i5Kqw/7Y4VPDFvGZZ7c2VltjpP3yhkTBGJIe7sx9eGP1SD+PaF Uzhe3DP1FAxKyzmHuQ/8BmS2O8Pavu++NMTdfJLrk5FGxrKDs0JyGVhHigrdwZ8X 3Yq1dyvguzLNif3OCinWh4f9K7z/tk0uLuJPPDT/2Dj9ULBX5t/N4Q0nAv4R6Ti/ 9SgaHsg8R9lwZJl56u6ITFa8H4ZCsx6z4G0oojUuH+1kJhXFINaTP6zNmmQCpS6n Ksc3DOe+Hli3bg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:16 2026 by rpki-client