This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json) Hash identifier: 5gIWSQBl5Ao1RCEDdlEPZbT1msEVzQsQjhKL+AlKz8o= Subject key identifier: EC:4B:D2:EC:E8:EC:CA:FC:62:7C:59:58:55:7F:8C:55:6E:85:F6:F2 Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2 Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2 Certificate serial: 019C454739377873618990FB5EEB74F67540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft Manifest number: 0E88 Signing time: Tue 10 Feb 2026 02:00:21 +0000 Manifest this update: Tue 10 Feb 2026 02:00:21 +0000 Manifest next update: Wed 11 Feb 2026 02:00:21 +0000 Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: bWLP7IsjdOuUprcRut5ZxaHQIQlz7YqrWaaj/yBt0k8=) 2: mN6LPum92-oppYTfVnse9pFdGGY.roa (hash: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:47:39:37:78:73:61:89:90:fb:5e:eb:74:f6:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2 Validity Not Before: Feb 10 02:00:21 2026 GMT Not After : Feb 11 02:00:21 2026 GMT Subject: CN=ec4bd2ece8eccafc627c5958557f8c556e85f6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:36:cf:22:b7:51:cc:cc:95:3a:d3:ae:5f: a8:16:67:1e:79:2f:da:d0:1f:ee:d5:3d:d4:cd:cd: 8b:8c:90:e8:b9:ba:73:c0:67:2d:b4:3a:9b:f2:7b: a5:50:2f:d2:4c:63:3f:02:0c:28:41:98:95:ed:14: fe:be:8a:e9:1f:59:da:d7:a0:b3:43:ce:d0:d7:04: 52:3d:34:97:a9:53:d3:d3:6c:68:5c:ae:2c:a9:6b: 75:50:29:19:9f:2c:21:c2:75:8f:1c:78:c0:9c:32: 8d:d9:20:c6:45:9d:5a:a3:90:d4:61:e7:8d:25:23: 00:df:9e:9b:60:7c:d1:7d:0f:a9:9b:48:6b:4e:a4: 28:af:ad:b4:f9:3a:83:d0:3d:55:93:55:c3:b1:16: 24:7c:eb:26:f0:b1:f9:d1:03:b8:07:32:8e:6b:86: 2b:08:3f:f3:05:9e:d2:e4:3b:ff:ba:89:a2:b8:08: 56:4d:9a:a3:74:52:35:6e:dc:29:d8:5d:46:5e:d3: e4:1c:af:02:0e:43:c8:d3:92:a0:7f:c2:e2:76:6f: 6f:40:ca:53:5f:09:f5:3e:4a:7c:e9:18:a8:a9:15: 44:c6:7b:7b:d9:3b:2f:bd:df:23:d4:62:0c:d3:1e: d9:11:4f:96:f9:42:00:a2:86:ae:a3:73:9e:28:cb: 97:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4B:D2:EC:E8:EC:CA:FC:62:7C:59:58:55:7F:8C:55:6E:85:F6:F2 X509v3 Authority Key Identifier: keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:68:0b:81:bc:aa:bb:7f:fb:09:ea:e7:f9:d0:cc:67:2a:cd: 05:0d:d9:2d:13:c9:33:ae:9c:4f:b4:bb:2a:6f:ee:5d:a2:07: 5a:dd:e0:7e:2e:75:d6:e6:50:c5:34:36:55:86:03:3d:10:2a: 57:9d:96:36:8a:81:d5:83:60:1f:3c:4b:a6:9e:d4:f8:22:ed: a7:a8:a1:23:7a:d2:a9:4e:21:60:44:49:18:87:79:68:30:c9: fa:1b:fe:6a:a7:14:70:8c:33:77:85:7c:5f:6f:bb:e4:ae:63: a9:5f:a7:01:92:3d:b3:80:f5:78:59:a9:ca:60:cf:b1:81:24: ac:62:0a:de:b5:4f:19:d4:20:2c:98:51:42:ff:50:27:8f:fb: 22:95:9e:03:22:fe:ae:e8:d1:06:43:c6:c5:72:34:b6:38:99: 3f:77:20:d9:22:b9:98:91:98:fa:a9:30:40:b3:6d:ad:50:c1: 71:b6:42:5a:fe:11:ea:15:89:ac:e8:c2:55:d6:7d:15:c6:45: ab:83:ea:12:50:e6:5f:5a:f6:ae:40:e6:89:8b:5e:3b:51:c0: 29:cb:7c:08:0a:8c:2d:1f:1c:28:0e:11:09:a7:b5:b8:f6:4f: 54:73:a8:47:35:ec:a8:06:a8:d3:d2:ca:60:cb:9d:2e:50:e0: ef:a4:47:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFRzk3eHNhiZD7Xut09nVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMTQ0Y2U4ZThlNDQxNWU1Yzg2YTBiMjgwNDk5YTM4NWMx NGVmZjIwHhcNMjYwMjEwMDIwMDIxWhcNMjYwMjExMDIwMDIxWjAzMTEwLwYDVQQD EyhlYzRiZDJlY2U4ZWNjYWZjNjI3YzU5NTg1NTdmOGM1NTZlODVmNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh42zyK3UczMlTrTrl+oFmceeS/a 0B/u1T3Uzc2LjJDoubpzwGcttDqb8nulUC/STGM/AgwoQZiV7RT+vorpH1na16Cz Q87Q1wRSPTSXqVPT02xoXK4sqWt1UCkZnywhwnWPHHjAnDKN2SDGRZ1ao5DUYeeN JSMA356bYHzRfQ+pm0hrTqQor620+TqD0D1Vk1XDsRYkfOsm8LH50QO4BzKOa4Yr CD/zBZ7S5Dv/uomiuAhWTZqjdFI1btwp2F1GXtPkHK8CDkPI05Kgf8Lidm9vQMpT Xwn1Pkp86RioqRVExnt72Tsvvd8j1GIM0x7ZEU+W+UIAooauo3OeKMuX9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxL0uzo7Mr8YnxZWFV/jFVuhfbyMB8GA1UdIwQY MBaAFN8UTOjo5EFeXIagsoBJmjhcFO/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUt NTg2N2JlNzAzNmIzLzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUtNTg2N2JlNzAzNmIz LzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuWgLgbyq u3/7Cern+dDMZyrNBQ3ZLRPJM66cT7S7Km/uXaIHWt3gfi511uZQxTQ2VYYDPRAq V52WNoqB1YNgHzxLpp7U+CLtp6ihI3rSqU4hYERJGId5aDDJ+hv+aqcUcIwzd4V8 X2+75K5jqV+nAZI9s4D1eFmpymDPsYEkrGIK3rVPGdQgLJhRQv9QJ4/7IpWeAyL+ rujRBkPGxXI0tjiZP3cg2SK5mJGY+qkwQLNtrVDBcbZCWv4R6hWJrOjCVdZ9FcZF q4PqElDmX1r2rkDmiYteO1HAKct8CAqMLR8cKA4RCae1uPZPVHOoRzXsqAao09LK YMudLlDg76RH2A== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:50 2026 by rpki-client