This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json) Hash identifier: tixVU5P0lr75pl/05DJlmkDUsnyEs9hGik+FEhsw64A= Subject key identifier: 9C:F9:22:F1:00:1A:89:5C:08:5D:28:B6:3A:7F:BC:93:6A:7B:95:12 Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f Certificate serial: 019C4246C696AC1C4AB5A6394EECEECD7B49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 12:01:00 +0000 Manifest this update: Mon 09 Feb 2026 12:01:00 +0000 Manifest next update: Tue 10 Feb 2026 12:01:00 +0000 Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: apOXfdnI/75jxoPFGQedG8DlIrRL08BnUeILV9SSiv4=) 2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:c6:96:ac:1c:4a:b5:a6:39:4e:ec:ee:cd:7b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f Validity Not Before: Feb 9 12:01:00 2026 GMT Not After : Feb 10 12:01:00 2026 GMT Subject: CN=9cf922f1001a895c085d28b63a7fbc936a7b9512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:1c:3a:6d:f8:09:9c:b3:95:79:28:21:32: 8f:cf:b9:42:59:69:94:d8:c8:f4:ad:f1:1d:1d:e7: 7a:d9:2a:a1:06:21:2c:26:50:5c:ef:43:35:3a:91: a7:b9:66:c7:eb:aa:53:c2:2d:84:58:e4:68:4a:c0: a1:09:d8:53:5f:83:06:b1:02:d8:22:d7:e0:64:79: 3a:29:da:9e:3b:14:5d:a0:8a:5a:0e:c3:46:02:e9: dc:dc:5e:5d:46:01:27:f0:1b:74:0e:b9:2b:c9:92: 82:42:4f:b7:3f:a6:31:ae:e0:c5:d3:4b:77:57:93: 8a:c4:c9:47:da:e3:25:d1:8b:5b:13:c5:12:a7:eb: cc:77:02:58:cd:46:47:43:fd:5e:51:70:0e:b0:65: 11:22:41:b1:66:c8:80:e4:25:f7:67:db:e9:bc:31: 17:70:ed:dc:9a:ea:e2:db:0a:74:fe:cb:a8:dc:71: fb:d5:c2:ce:6a:42:9e:44:b4:a0:97:d7:3c:9f:5f: 9f:29:df:8f:2a:b0:8b:5f:ea:04:42:8a:06:6b:1a: 0d:4e:9f:ef:f8:43:d8:6c:43:07:e7:03:6e:fe:c6: 1e:84:ea:af:4f:c7:7b:25:ea:b2:fe:99:27:26:67: c2:cd:b8:86:a5:5e:ba:4f:e0:ce:67:38:a8:1e:ac: fb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F9:22:F1:00:1A:89:5C:08:5D:28:B6:3A:7F:BC:93:6A:7B:95:12 X509v3 Authority Key Identifier: keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:05:cc:cb:8d:c0:01:d6:df:a0:4a:62:9f:b6:b3:70:92:10: e2:db:2e:91:e7:ad:b0:67:81:b9:0e:3b:d6:16:47:b9:cf:8f: 27:80:19:50:03:cb:52:79:94:a7:62:17:8e:8a:73:a6:24:b3: a9:da:d1:ae:bd:c6:54:c7:df:a2:92:f1:23:15:9b:56:70:ab: bc:5e:25:4a:06:a6:42:cd:6d:b6:b3:f6:51:f9:c2:ee:f0:0d: 40:99:01:fa:f1:8c:4b:3f:44:2d:d0:a9:ce:12:bb:00:2f:43: 41:48:75:8f:f1:07:03:c5:ef:2f:d8:88:69:33:31:1e:86:fb: e5:b8:71:46:70:2c:56:cf:27:1a:9b:ec:97:0a:9a:44:e6:25: 3d:12:7b:3f:ff:4f:09:4e:59:61:94:51:fb:47:3b:74:c8:b5: fd:01:6c:52:5f:b7:4c:4f:ed:51:6f:92:0e:85:23:8c:e8:62: c5:76:af:12:0d:11:22:4c:5b:a1:0b:9b:b6:1f:33:06:d9:df: 44:56:19:3e:97:91:e6:9b:d1:ca:16:e5:f2:3c:ca:5e:09:1f: 73:dc:04:3d:5b:7a:cd:85:0c:22:01:d6:18:87:7c:26:d0:df: b6:64:28:8d:ac:1b:dc:5c:ba:90:6e:5f:ef:b7:63:c6:cb:0f: 71:bc:97:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRsaWrBxKtaY5TuzuzXtJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMDg1YjBkMWJiZjllNzgxYjE1NGIwNmY3YjkxNDExMjlk Yjc3NWYwHhcNMjYwMjA5MTIwMTAwWhcNMjYwMjEwMTIwMTAwWjAzMTEwLwYDVQQD Eyg5Y2Y5MjJmMTAwMWE4OTVjMDg1ZDI4YjYzYTdmYmM5MzZhN2I5NTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw24cOm34CZyzlXkoITKPz7lCWWmU 2Mj0rfEdHed62SqhBiEsJlBc70M1OpGnuWbH66pTwi2EWORoSsChCdhTX4MGsQLY ItfgZHk6KdqeOxRdoIpaDsNGAunc3F5dRgEn8Bt0DrkryZKCQk+3P6YxruDF00t3 V5OKxMlH2uMl0YtbE8USp+vMdwJYzUZHQ/1eUXAOsGURIkGxZsiA5CX3Z9vpvDEX cO3cmuri2wp0/suo3HH71cLOakKeRLSgl9c8n1+fKd+PKrCLX+oEQooGaxoNTp/v +EPYbEMH5wNu/sYehOqvT8d7Jeqy/pknJmfCzbiGpV66T+DOZzioHqz7FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz5IvEAGolcCF0otjp/vJNqe5USMB8GA1UdIwQY MBaAFN4IWw0bv554GxVLBve5FBEp23dfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTkt N2EwYjNkNWQ5MTU2LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTktN2EwYjNkNWQ5MTU2 LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQXMy43A AdbfoEpin7azcJIQ4tsukeetsGeBuQ471hZHuc+PJ4AZUAPLUnmUp2IXjopzpiSz qdrRrr3GVMffopLxIxWbVnCrvF4lSgamQs1ttrP2UfnC7vANQJkB+vGMSz9ELdCp zhK7AC9DQUh1j/EHA8XvL9iIaTMxHob75bhxRnAsVs8nGpvslwqaROYlPRJ7P/9P CU5ZYZRR+0c7dMi1/QFsUl+3TE/tUW+SDoUjjOhixXavEg0RIkxboQubth8zBtnf RFYZPpeR5pvRyhbl8jzKXgkfc9wEPVt6zYUMIgHWGId8JtDftmQojawb3Fy6kG5f 77djxssPcbyXIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:45 2026 by rpki-client