This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json) Hash identifier: GajPfReKgahZF5h9uwxV7UKOdPIG6yDwIN56qLtEAak= Subject key identifier: B7:A3:FF:B2:3A:D5:2F:A8:58:85:86:13:C0:3C:43:91:E6:82:B0:AD Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Certificate serial: 019C43FE7F342197C456706A4C0AE3CC4CFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft Manifest number: 1815 Signing time: Mon 09 Feb 2026 20:01:17 +0000 Manifest this update: Mon 09 Feb 2026 20:01:17 +0000 Manifest next update: Tue 10 Feb 2026 20:01:17 +0000 Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: ARvdr8u/ntF+8MMBKTwA+cx04hQhEvO8TaBX1oV09+U=) 2: 6W16tPBnc1dRPPXrNvPZCBivu-A.roa (hash: VTmSpbN2hd3Hw/P9lB0yjXnyihI9X48UXmmFukdSqcM=) 3: 8w9rvTUUt_RYhR3L0tQXn0glplA.roa (hash: f1jbbfJnG4ozyDGlTqWQz2YYiVrxgFWVHi3zprKmPqg=) 4: ACaX6w3ymJccvXanlDaDKMOtpm8.roa (hash: rxt58ZfZIffkntY04x8LDdPZCwFWWCpGs1EcVhf6HWU=) 5: G0RCF0Z6ZBSE1DTghZmezsnYOFc.asa (hash: Yk7ILI9iy5TC4KHdDTWpcbNPlYqZvxcnNf6IQxr0xj8=) 6: hrEIqJAwCku3aKDnRzlzuarP4tc.roa (hash: /EQ3061AHFPZuvaT0q5zSvf6uilyT/zCrLJMTA/SNVM=) 7: rzxMYEL8BKNR02VR6It9IPmftps.roa (hash: 9y+RUm2eWl0SkVwbpclKO/OAFTw8zaeRZoG7TQq0yY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:7f:34:21:97:c4:56:70:6a:4c:0a:e3:cc:4c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Validity Not Before: Feb 9 20:01:17 2026 GMT Not After : Feb 10 20:01:17 2026 GMT Subject: CN=b7a3ffb23ad52fa858858613c03c4391e682b0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:9f:02:9e:4e:53:30:b3:e3:90:be:5d:cc: 46:49:68:38:ff:84:f1:7d:d5:56:70:a0:11:26:d9: 0d:45:ee:f2:f4:fd:30:6f:72:26:4f:de:8c:9c:f8: 77:07:c7:cc:5b:57:0d:3d:79:d4:7c:be:7f:de:34: b7:0d:cd:63:5b:c0:47:bb:e6:3e:e3:c0:f5:3e:0d: 7d:91:9e:55:84:90:fc:e1:b1:59:37:e6:75:cb:a1: 92:ba:11:18:f7:f6:1b:ac:b3:84:5e:81:93:10:89: 85:84:e5:e4:29:a4:bc:c7:67:8f:30:91:3f:e6:87: 0b:74:a7:1e:3a:8f:78:52:31:fe:a1:4a:9a:32:fe: c3:8b:31:f9:6b:cf:ed:a3:3a:82:c2:f4:b8:0a:e0: 5f:c0:6c:fa:36:5f:5f:6b:61:9a:1f:7f:e7:b1:a1: ea:de:19:46:b6:d9:59:9d:9d:36:6d:6d:27:fb:61: 8e:ff:04:7d:1d:3a:1c:30:8a:d7:5e:c3:2f:90:4d: 0e:bf:c7:2b:8a:7c:08:3a:cb:54:fa:77:e1:a0:2d: 12:06:7b:f2:26:b8:49:db:91:30:77:de:c9:8f:2a: 23:b6:17:2b:44:db:df:e7:d9:eb:52:80:72:3b:4e: 49:d6:61:a7:db:fd:64:9f:84:2d:ca:12:fa:0a:57: 8d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A3:FF:B2:3A:D5:2F:A8:58:85:86:13:C0:3C:43:91:E6:82:B0:AD X509v3 Authority Key Identifier: keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:94:54:82:81:61:e8:60:bb:fa:4a:7e:33:c1:6f:13:d0:a5: 97:53:8f:e4:2c:47:c6:21:22:6f:59:8e:82:33:b8:00:2b:b8: cc:3e:64:6c:a8:5c:45:2b:23:35:61:f8:9c:33:72:8f:56:f3: 87:b6:38:ed:24:58:76:03:f9:0d:25:08:3b:8a:d9:65:b5:e3: 65:f5:e6:3d:70:14:0f:c1:f1:b6:d8:22:91:74:25:8b:f2:5b: 1b:be:87:2a:00:50:72:c8:6b:c5:ac:24:87:8e:a2:57:8b:ba: 8e:e5:c7:eb:47:f2:55:c9:0f:ce:f9:26:bb:91:e6:2d:c5:6d: 78:44:e0:4c:ab:94:f5:ec:dc:f7:2e:65:28:20:23:38:26:f6: 4a:25:6d:4c:c9:ae:3c:39:3a:e2:87:0b:17:fd:0a:a6:38:0b: 1b:c8:7e:5f:a0:b1:91:98:15:6f:29:60:06:e1:c3:36:e7:fb: f2:07:be:4d:bd:57:66:5f:5e:86:d3:9e:5d:60:17:b2:92:44: 02:87:0d:79:5c:14:e7:d6:4f:ce:d6:30:b6:d9:2d:55:e4:31: e4:b0:1a:0c:51:d1:93:0a:b5:0a:fc:f4:bf:d7:8a:59:e5:6d: 0b:8d:43:1b:b9:94:98:90:1a:52:5f:23:ee:65:e3:b8:86:7a: d4:df:eb:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/n80IZfEVnBqTArjzEz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTA4OWM5NDJiNjgwMzM2ODNiNGRkNTA2YzBjMzZmNzRi ZTBlYTMwHhcNMjYwMjA5MjAwMTE3WhcNMjYwMjEwMjAwMTE3WjAzMTEwLwYDVQQD EyhiN2EzZmZiMjNhZDUyZmE4NTg4NTg2MTNjMDNjNDM5MWU2ODJiMGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR2fAp5OUzCz45C+XcxGSWg4/4Tx fdVWcKARJtkNRe7y9P0wb3ImT96MnPh3B8fMW1cNPXnUfL5/3jS3Dc1jW8BHu+Y+ 48D1Pg19kZ5VhJD84bFZN+Z1y6GSuhEY9/YbrLOEXoGTEImFhOXkKaS8x2ePMJE/ 5ocLdKceOo94UjH+oUqaMv7DizH5a8/tozqCwvS4CuBfwGz6Nl9fa2GaH3/nsaHq 3hlGttlZnZ02bW0n+2GO/wR9HTocMIrXXsMvkE0Ov8crinwIOstU+nfhoC0SBnvy JrhJ25Ewd97JjyojthcrRNvf59nrUoByO05J1mGn2/1kn4QtyhL6CleNSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLej/7I61S+oWIWGE8A8Q5HmgrCtMB8GA1UdIwQY MBaAFNwQiclCtoAzaDtN1QbAw290vg6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDkt Y2I1NmVkM2VhN2ZhLzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDktY2I1NmVkM2VhN2Zh LzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJRUgoFh 6GC7+kp+M8FvE9Cll1OP5CxHxiEib1mOgjO4ACu4zD5kbKhcRSsjNWH4nDNyj1bz h7Y47SRYdgP5DSUIO4rZZbXjZfXmPXAUD8HxttgikXQli/JbG76HKgBQcshrxawk h46iV4u6juXH60fyVckPzvkmu5HmLcVteETgTKuU9ezc9y5lKCAjOCb2SiVtTMmu PDk64ocLF/0KpjgLG8h+X6CxkZgVbylgBuHDNuf78ge+Tb1XZl9ehtOeXWAXspJE AocNeVwU59ZPztYwttktVeQx5LAaDFHRkwq1Cvz0v9eKWeVtC41DG7mUmJAaUl8j 7mXjuIZ61N/rVg== -----END CERTIFICATE-----Generated at Tue Feb 10 03:13:46 2026 by rpki-client