This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json) Hash identifier: OSzUPwmAiC9FaCt5POWf31F7DebaBTzF5lAeZowPDk0= Subject key identifier: 64:FE:70:0D:D5:F5:2D:B5:43:BC:73:D9:48:F8:07:5C:36:D4:56:A6 Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b Certificate serial: 019C42460E712E42DF80ADF5BACD6B0ADA0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 12:00:13 +0000 Manifest this update: Mon 09 Feb 2026 12:00:13 +0000 Manifest next update: Tue 10 Feb 2026 12:00:13 +0000 Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: sYHl9Z4AY/CnRqo04D6AeB3JN+VSFPy1voAytJUs2Nk=) 2: WGji20uEwm-qc16TI-95pZHam9M.roa (hash: bsiH0UDqVUjwGYGg21cqoyVxVRYxf5QKf4uTXeiNmjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:0e:71:2e:42:df:80:ad:f5:ba:cd:6b:0a:da:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b Validity Not Before: Feb 9 12:00:13 2026 GMT Not After : Feb 10 12:00:13 2026 GMT Subject: CN=64fe700dd5f52db543bc73d948f8075c36d456a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:44:b8:14:4e:97:b1:df:97:52:64:6e:9d: 06:7c:2f:c0:fd:63:d6:21:6c:9a:49:5d:71:3f:07: 06:dd:3a:5c:13:53:e6:07:c2:19:3a:d7:ff:b1:10: 5e:81:e9:05:4e:98:9b:84:51:37:3b:42:12:ec:1f: 73:75:42:4b:9d:77:62:d1:7d:22:82:1e:fe:c7:9e: 33:97:9a:cd:6d:ab:95:03:07:6b:3d:a2:bd:74:5a: 76:7d:a6:ac:ce:bc:b9:68:f0:1a:f8:ef:e0:d9:2f: 5a:34:55:70:33:0d:4a:b1:5d:35:ba:75:71:02:28: 2b:2c:15:f2:6a:67:37:0e:a1:3e:9c:93:48:47:97: 02:6a:ad:ce:d3:d5:d3:03:4e:05:ec:6c:b7:e3:b5: 7e:7a:28:db:d1:19:6b:c8:91:5c:7c:1d:32:ca:1e: 33:df:c5:19:0e:bd:49:d9:f6:bd:a4:b2:b7:eb:82: 0c:ab:c1:37:90:b6:15:c8:92:a8:31:e3:39:16:bc: e0:2f:2c:59:f9:a6:28:27:94:d2:9a:c8:c8:b3:fd: 5c:e0:c3:fd:9a:9d:6c:98:a0:13:fb:b1:46:bb:c3: 55:ea:ea:05:89:67:eb:ad:ec:6c:fe:63:6b:4e:50: 46:b1:5b:cd:4b:b3:05:dd:d3:08:1b:1d:65:b1:af: 91:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FE:70:0D:D5:F5:2D:B5:43:BC:73:D9:48:F8:07:5C:36:D4:56:A6 X509v3 Authority Key Identifier: keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:0f:db:d1:c5:d4:ed:59:52:f8:fe:fd:80:9f:da:3d:9a:18: 16:dd:b5:40:9d:8f:a3:d5:2f:0b:c4:00:07:a0:5a:d2:7e:79: 56:b9:c0:b2:90:69:6f:80:aa:d5:53:51:f0:76:81:8c:78:7d: d3:2e:4b:a7:4d:c3:89:84:dc:a5:1b:34:0b:27:b1:c4:f5:0d: 0d:1a:a1:93:5d:31:3c:3b:8b:27:b3:69:2e:d3:73:fe:c2:7d: 20:90:ba:42:0d:1e:44:98:ad:97:c1:d8:86:b3:0b:94:9d:d2: 10:d5:05:c4:80:34:55:60:4f:92:17:6a:be:fd:64:1a:29:7a: a7:ff:df:4c:a3:62:e2:ad:bf:63:76:c7:a9:fa:73:91:22:85: 32:c6:e5:5a:37:8e:09:9f:33:a5:f2:c1:f8:c1:f3:4a:40:e5: 21:6b:73:a7:df:15:b0:20:61:39:b6:2c:aa:3c:1a:d2:14:8d: d6:fb:cb:23:f4:ad:ef:5c:99:c2:12:2c:94:e0:16:5d:ce:be: 4b:54:1c:cd:8e:3e:47:56:08:6c:64:d6:c6:d1:69:e2:fb:b9: a1:6d:80:46:bc:10:be:51:fd:d3:7f:55:86:ab:0f:6a:99:8b: 06:03:4a:b0:ee:8c:e5:9c:7f:ed:89:34:6b:bd:a3:fe:f2:dd: 43:92:eb:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRg5xLkLfgK31us1rCtoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMmE2OTVjNDEyMjFkZDhlZGRjZmM1YzRiNWNjMGI3ODlj Yjk1M2IwHhcNMjYwMjA5MTIwMDEzWhcNMjYwMjEwMTIwMDEzWjAzMTEwLwYDVQQD Eyg2NGZlNzAwZGQ1ZjUyZGI1NDNiYzczZDk0OGY4MDc1YzM2ZDQ1NmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7FEuBROl7Hfl1Jkbp0GfC/A/WPW IWyaSV1xPwcG3TpcE1PmB8IZOtf/sRBegekFTpibhFE3O0IS7B9zdUJLnXdi0X0i gh7+x54zl5rNbauVAwdrPaK9dFp2faaszry5aPAa+O/g2S9aNFVwMw1KsV01unVx AigrLBXyamc3DqE+nJNIR5cCaq3O09XTA04F7Gy347V+eijb0RlryJFcfB0yyh4z 38UZDr1J2fa9pLK364IMq8E3kLYVyJKoMeM5FrzgLyxZ+aYoJ5TSmsjIs/1c4MP9 mp1smKAT+7FGu8NV6uoFiWfrrexs/mNrTlBGsVvNS7MF3dMIGx1lsa+RGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGT+cA3V9S21Q7xz2Uj4B1w21FamMB8GA1UdIwQY MBaAFN0qaVxBIh3Y7dz8XEtcwLeJy5U7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NGFjMTctZjlkZC00OWY2LWE4OGEt MjA4ZGMwNjhkNTNjLzEvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85NGFjMTctZjlkZC00OWY2LWE4OGEtMjA4ZGMwNjhkNTNj LzEvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlg/b0cXU 7VlS+P79gJ/aPZoYFt21QJ2Po9UvC8QAB6Ba0n55VrnAspBpb4Cq1VNR8HaBjHh9 0y5Lp03DiYTcpRs0CyexxPUNDRqhk10xPDuLJ7NpLtNz/sJ9IJC6Qg0eRJitl8HY hrMLlJ3SENUFxIA0VWBPkhdqvv1kGil6p//fTKNi4q2/Y3bHqfpzkSKFMsblWjeO CZ8zpfLB+MHzSkDlIWtzp98VsCBhObYsqjwa0hSN1vvLI/St71yZwhIslOAWXc6+ S1QczY4+R1YIbGTWxtFp4vu5oW2ARrwQvlH9039VhqsPapmLBgNKsO6M5Zx/7Yk0 a72j/vLdQ5Lrzw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:37 2026 by rpki-client