This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json) Hash identifier: FV5rFRGuFwmXR8mvSxxuxEUQuEePVjhv7KCdTY2I/jg= Subject key identifier: CE:56:41:A9:DC:60:D4:DB:33:D5:97:A1:F7:17:A4:07:69:2D:CE:AE Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9 Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9 Certificate serial: 019C41A18F48EFC071819AFCD89F41862A08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft Manifest number: 0B41 Signing time: Mon 09 Feb 2026 09:00:32 +0000 Manifest this update: Mon 09 Feb 2026 09:00:32 +0000 Manifest next update: Tue 10 Feb 2026 09:00:32 +0000 Files and hashes: 1: TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa (hash: gr5IW23RFNN3IAOqTCUEX95vD/VGxJTWiQyqhzBx/Xc=) 2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: ET5JP0hpcqax45ky9DjLW7KyCLKMC75zqlBtSehj+zE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:8f:48:ef:c0:71:81:9a:fc:d8:9f:41:86:2a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9 Validity Not Before: Feb 9 09:00:32 2026 GMT Not After : Feb 10 09:00:32 2026 GMT Subject: CN=ce5641a9dc60d4db33d597a1f717a407692dceae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:b9:0d:93:d1:dd:0a:f4:f0:80:bc:a5:ce: ea:98:ba:77:8c:34:61:50:f4:c4:e9:48:33:07:26: 0f:45:68:3a:e8:56:95:3e:b2:ba:89:ca:1f:7d:9e: dd:d5:b8:5f:3d:30:9b:83:30:c8:25:c6:54:6b:bf: 8b:e9:84:b7:a7:8a:0e:d9:95:3c:47:00:c9:66:2a: 99:69:7a:41:68:3d:f2:99:c4:2a:06:b9:fb:df:c5: 4e:3c:20:b0:10:61:8a:7a:6f:66:16:fa:af:f0:12: 97:13:c2:45:f4:c6:8d:4d:17:0b:dc:fa:45:3a:25: b4:ea:19:97:7b:85:d9:59:41:be:ca:2c:28:31:5e: 77:0f:51:34:5e:8d:96:1e:47:66:da:d9:00:bf:b1: be:aa:3c:7f:59:1c:0f:1a:6d:31:0a:e5:c6:0c:00: 07:92:eb:10:c8:8b:00:fd:8d:65:e6:34:56:30:a3: d7:86:dd:2c:00:cb:78:54:6c:ef:91:56:c7:82:b4: 79:fc:5d:57:c3:2f:8a:44:94:fb:64:26:eb:b6:84: 64:5e:8a:e7:3e:33:44:2b:95:f5:f0:06:55:54:08: 69:72:ac:c2:36:d8:0b:0f:d6:13:a1:55:9c:1d:50: bf:dd:c1:d9:0b:cb:e3:73:71:e3:a7:de:dd:37:d2: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:56:41:A9:DC:60:D4:DB:33:D5:97:A1:F7:17:A4:07:69:2D:CE:AE X509v3 Authority Key Identifier: keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:21:a0:ba:ee:25:2c:22:16:7f:58:93:2b:30:01:80:49:51: d0:6c:45:58:57:8a:cd:c6:33:34:17:f4:63:20:a9:d8:ac:ce: a3:01:37:91:ae:6c:5f:13:79:42:5a:77:8e:d1:0d:e2:84:e3: 51:14:c7:d3:d5:cd:a0:a8:4a:e3:51:85:fc:50:69:4a:38:de: 24:a7:a1:9f:37:a8:e7:71:14:4b:81:32:8d:d8:36:84:24:f9: 59:57:19:4d:44:2c:2c:7e:c8:61:c2:01:55:19:5d:29:95:eb: a0:98:14:6c:3a:aa:70:16:70:c7:b7:9f:5a:26:86:d4:a3:82: d2:11:b2:c9:7a:c3:73:2e:85:b9:27:0d:65:a5:14:f3:49:b7: bb:13:1b:b9:07:09:60:5c:69:e6:37:b8:18:3d:a1:d5:f6:69: a8:3e:d2:b6:3d:60:f4:a7:d4:e6:67:81:bb:09:5e:5d:c6:32: 0e:2c:2e:08:69:68:b2:3b:77:85:97:b0:8d:d8:c6:4e:d3:d3: a8:e3:36:89:ef:64:5c:e4:9a:f7:16:79:99:48:77:6f:04:dd: 64:20:4b:6b:2e:7d:b6:52:26:ab:0f:d2:46:c9:7a:1f:67:10: 6c:05:2d:18:42:e2:2b:15:4d:e0:58:f7:dc:f1:04:66:24:d4: 82:7c:25:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoY9I78BxgZr82J9BhioIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzBiODkyODFjZGI3NjFhMDRhZGNiYzBhYzQxNzA1NDEz MTUwZTkwHhcNMjYwMjA5MDkwMDMyWhcNMjYwMjEwMDkwMDMyWjAzMTEwLwYDVQQD EyhjZTU2NDFhOWRjNjBkNGRiMzNkNTk3YTFmNzE3YTQwNzY5MmRjZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL25DZPR3Qr08IC8pc7qmLp3jDRh UPTE6UgzByYPRWg66FaVPrK6icoffZ7d1bhfPTCbgzDIJcZUa7+L6YS3p4oO2ZU8 RwDJZiqZaXpBaD3ymcQqBrn738VOPCCwEGGKem9mFvqv8BKXE8JF9MaNTRcL3PpF OiW06hmXe4XZWUG+yiwoMV53D1E0Xo2WHkdm2tkAv7G+qjx/WRwPGm0xCuXGDAAH kusQyIsA/Y1l5jRWMKPXht0sAMt4VGzvkVbHgrR5/F1Xwy+KRJT7ZCbrtoRkXorn PjNEK5X18AZVVAhpcqzCNtgLD9YToVWcHVC/3cHZC8vjc3Hjp97dN9LzuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5WQancYNTbM9WXofcXpAdpLc6uMB8GA1UdIwQY MBaAFLtwuJKBzbdhoErcvArEFwVBMVDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2Yjgt NDE3MzIwY2JhZTU1LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2YjgtNDE3MzIwY2JhZTU1 LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSGguu4l LCIWf1iTKzABgElR0GxFWFeKzcYzNBf0YyCp2KzOowE3ka5sXxN5Qlp3jtEN4oTj URTH09XNoKhK41GF/FBpSjjeJKehnzeo53EUS4Eyjdg2hCT5WVcZTUQsLH7IYcIB VRldKZXroJgUbDqqcBZwx7efWiaG1KOC0hGyyXrDcy6FuScNZaUU80m3uxMbuQcJ YFxp5je4GD2h1fZpqD7Stj1g9KfU5meBuwleXcYyDiwuCGlosjt3hZewjdjGTtPT qOM2ie9kXOSa9xZ5mUh3bwTdZCBLay59tlImqw/SRsl6H2cQbAUtGELiKxVN4Fj3 3PEEZiTUgnwllQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:59 2026 by rpki-client