This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json) Hash identifier: dAT5H8/r73/+IOLg7RMxBdGnk26c+WfFjL03UJDRwmM= Subject key identifier: DE:8D:CA:14:AE:EC:47:45:67:77:42:57:04:F0:CF:81:58:0D:B8:FA Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8 Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8 Certificate serial: 019C421004A93F5856667AB4993B0E023CCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft Manifest number: 0E10 Signing time: Mon 09 Feb 2026 11:01:11 +0000 Manifest this update: Mon 09 Feb 2026 11:01:11 +0000 Manifest next update: Tue 10 Feb 2026 11:01:11 +0000 Files and hashes: 1: 1-aGDqZW0qQT1CMUWfY2StRi45As.roa (hash: B8Rl9Gai4vi9Uu6NQRhUSO+YTREX6IaIlJN6RMt60oA=) 2: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: C4OOQtrhV4cMBPt5hKDHAzUr7ajlU7DSg6lWWsmq1wE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:04:a9:3f:58:56:66:7a:b4:99:3b:0e:02:3c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8 Validity Not Before: Feb 9 11:01:11 2026 GMT Not After : Feb 10 11:01:11 2026 GMT Subject: CN=de8dca14aeec47456777425704f0cf81580db8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:34:db:6d:db:53:2e:9e:34:2f:95:18:6f:2d: 9d:f3:c6:5d:e7:77:42:c1:04:3a:9d:9c:43:b9:7f: bb:a5:11:00:b1:e8:66:8e:0e:63:ea:8d:41:6b:9d: 04:c2:24:81:40:1d:cc:ac:08:54:cc:1b:6a:11:f4: 00:f0:e5:6f:05:2f:bc:b4:e6:8a:95:0a:ec:80:d2: 40:e6:9a:8d:fd:39:d8:a8:11:9b:44:08:8d:f4:1c: f6:f4:60:e5:59:d3:ad:6e:10:ff:b3:f4:34:5d:ad: 00:58:e2:0a:ad:9c:d0:0d:24:96:a4:44:32:78:20: 9e:27:ee:f1:95:ca:f9:30:2b:95:06:98:3c:c3:9d: 2b:d8:1e:17:b8:1d:30:05:4e:0e:62:bd:83:df:19: 7f:df:e1:19:76:3c:88:45:dd:26:e2:ec:50:00:ae: f3:16:f7:d4:1d:ee:35:49:17:f8:05:67:b6:21:a2: fe:2b:18:97:3c:1d:d7:85:32:a1:f2:35:62:b2:e2: f0:3b:5a:fc:55:dc:49:bb:5d:ec:bb:9a:31:4d:89: ec:02:c0:35:a5:6c:6e:04:e8:43:4c:e8:77:fc:fc: 17:05:28:b7:1f:3c:ad:41:5b:9a:35:06:32:a2:60: 36:03:47:ac:18:6b:c4:c7:1a:1a:d0:78:db:85:81: b2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8D:CA:14:AE:EC:47:45:67:77:42:57:04:F0:CF:81:58:0D:B8:FA X509v3 Authority Key Identifier: keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8f:14:d5:c6:ee:fb:02:31:56:b9:85:5d:9f:48:f1:53:aa: 59:90:f8:39:43:e8:88:ea:63:48:cf:e7:54:b4:80:b5:e2:45: 6b:43:1e:fa:18:3d:a6:cd:37:f7:6e:d3:eb:17:a9:5f:42:f6: e0:e2:02:60:17:c6:65:32:b5:8e:e1:7f:6c:0d:f9:20:4c:b9: 8b:f9:a3:df:8d:17:6c:b9:90:b8:aa:8f:08:c1:d2:11:c8:b8: 96:c0:0b:e9:62:83:d7:d1:18:77:14:06:e5:48:9a:38:86:a2: c2:a5:22:a7:ea:63:21:f1:b6:c2:1a:6f:83:8b:f3:ca:d3:a9: 33:f2:94:46:39:71:a4:c1:7c:54:d4:69:0e:6a:25:a1:d1:27: f0:cd:e8:ec:33:cb:1a:29:b9:c6:9b:3d:7f:8d:42:40:99:30: ce:ab:ab:be:e2:72:e3:b1:a2:8b:80:fe:7c:4f:bb:b8:5c:07: 6a:27:7f:ea:37:c0:e5:f0:49:dd:11:fd:99:54:08:8b:cb:6b: 37:13:18:54:c3:ef:a0:59:4a:21:4e:35:e8:27:5b:ae:7a:b9: d7:02:bc:46:36:5c:e8:c5:00:0d:2a:db:58:14:ca:a7:e3:ae: 65:02:a0:45:e1:a0:4c:bc:df:1a:6c:fc:67:fc:77:9f:4f:d3: bd:f7:76:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEASpP1hWZnq0mTsOAjzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNTJhZDA5MGI1NDY3OGUwOTY4ZTY5OTU1YzI1MDQ5NDM0 ZDk2YzgwHhcNMjYwMjA5MTEwMTExWhcNMjYwMjEwMTEwMTExWjAzMTEwLwYDVQQD EyhkZThkY2ExNGFlZWM0NzQ1Njc3NzQyNTcwNGYwY2Y4MTU4MGRiOGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzTbbdtTLp40L5UYby2d88Zd53dC wQQ6nZxDuX+7pREAsehmjg5j6o1Ba50EwiSBQB3MrAhUzBtqEfQA8OVvBS+8tOaK lQrsgNJA5pqN/TnYqBGbRAiN9Bz29GDlWdOtbhD/s/Q0Xa0AWOIKrZzQDSSWpEQy eCCeJ+7xlcr5MCuVBpg8w50r2B4XuB0wBU4OYr2D3xl/3+EZdjyIRd0m4uxQAK7z FvfUHe41SRf4BWe2IaL+KxiXPB3XhTKh8jVisuLwO1r8VdxJu13su5oxTYnsAsA1 pWxuBOhDTOh3/PwXBSi3HzytQVuaNQYyomA2A0esGGvExxoa0HjbhYGyiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6NyhSu7EdFZ3dCVwTwz4FYDbj6MB8GA1UdIwQY MBaAFN1SrQkLVGeOCWjmmVXCUElDTZbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmIt ZDMwNTczMGI1MzY4LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmItZDMwNTczMGI1MzY4 LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM48U1cbu +wIxVrmFXZ9I8VOqWZD4OUPoiOpjSM/nVLSAteJFa0Me+hg9ps03927T6xepX0L2 4OICYBfGZTK1juF/bA35IEy5i/mj340XbLmQuKqPCMHSEci4lsAL6WKD19EYdxQG 5UiaOIaiwqUip+pjIfG2whpvg4vzytOpM/KURjlxpMF8VNRpDmolodEn8M3o7DPL Gim5xps9f41CQJkwzqurvuJy47Gii4D+fE+7uFwHaid/6jfA5fBJ3RH9mVQIi8tr NxMYVMPvoFlKIU416Cdbrnq51wK8RjZc6MUADSrbWBTKp+OuZQKgReGgTLzfGmz8 Z/x3n0/Tvfd2Tg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:20 2026 by rpki-client