This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json) Hash identifier: qTOc2+dQ2w2JKfPd7tEC0eUaBBHjM9NNENnE6KY1ubg= Subject key identifier: C2:E0:D2:DA:19:02:75:59:95:BE:37:8C:66:3E:DE:B4:EA:5F:75:08 Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1 Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1 Certificate serial: 019C427DCC635946E4F885E44EF498A44399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft Manifest number: 15E9 Signing time: Mon 09 Feb 2026 13:01:06 +0000 Manifest this update: Mon 09 Feb 2026 13:01:06 +0000 Manifest next update: Tue 10 Feb 2026 13:01:06 +0000 Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: lvRoSYwjuUpW/I2gpCjP/0OWjXGEDdpprBiQz7qC0RY=) 2: W_PAmrwUdBQv2HWxrdSy6SHG4Mk.roa (hash: U5b72Zmh/JVyUJzYUod1+mwOGitj2M1nMBA9xsjmnOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:cc:63:59:46:e4:f8:85:e4:4e:f4:98:a4:43:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1 Validity Not Before: Feb 9 13:01:06 2026 GMT Not After : Feb 10 13:01:06 2026 GMT Subject: CN=c2e0d2da1902755995be378c663edeb4ea5f7508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:22:31:41:e4:be:fc:4a:28:bf:3b:f3:92: 49:22:a9:b6:1b:5f:57:b5:08:b4:5d:10:0d:af:7f: 3c:ce:ee:e5:c1:d2:0b:2a:c8:83:5d:ee:b2:7e:53: 4d:d3:9e:78:8a:eb:d5:26:96:13:91:da:36:e8:77: f0:00:0b:cf:46:d6:de:92:9e:07:67:14:99:b4:ab: d4:96:63:b1:d2:a4:ec:86:cc:90:85:c1:cb:cf:53: 80:11:5d:77:0f:52:e1:2e:04:68:69:18:68:7f:f9: 9c:03:eb:0e:08:73:7d:1d:55:e1:5d:1a:df:4f:69: 12:8c:20:58:de:ad:52:53:04:c6:be:78:88:26:ed: 3c:8c:98:22:ec:69:4c:03:03:64:ca:70:34:9c:8f: 8d:24:79:ff:a8:6c:76:65:bb:77:a2:74:1b:9a:9c: 01:78:f5:db:22:84:db:46:28:36:09:e5:3f:21:1e: 60:77:fa:14:e5:b5:17:cd:a9:c3:f6:40:e9:68:45: 0f:9c:3b:21:3e:1d:d3:7f:3d:97:43:d6:ab:10:64: 22:52:48:d3:94:73:63:68:bb:f4:58:dd:a8:ef:2d: ed:d5:05:a4:34:63:46:d7:df:24:8c:1b:93:b7:b2: 5e:c6:82:eb:0e:7a:8a:df:9c:6e:64:4d:ae:e5:1a: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E0:D2:DA:19:02:75:59:95:BE:37:8C:66:3E:DE:B4:EA:5F:75:08 X509v3 Authority Key Identifier: keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:60:66:4e:81:5a:2e:f7:d6:5e:69:5d:ce:b6:2c:f3:55:44: 33:97:83:85:82:ec:6c:3b:65:5b:7e:1b:aa:b5:34:d4:4f:ce: a5:fd:c6:d8:6f:10:fc:c5:c1:aa:2c:98:1b:eb:cf:59:06:fa: ff:9c:cb:98:01:8b:73:fb:14:74:26:d7:84:5d:77:d5:c6:fc: 67:3f:c0:61:e5:5b:4a:3f:b2:d0:97:ee:ea:ff:37:a5:27:4c: 77:02:cc:8b:dc:ba:d9:e5:18:eb:0e:59:19:65:17:a7:a6:18: 40:b1:cc:42:ef:b0:6c:78:5c:b1:1d:7a:54:e6:f4:7a:3f:27: 73:c8:62:d0:ab:8f:d6:ae:af:53:d8:25:52:d3:e9:86:0b:e5: 22:54:6b:3b:47:06:82:b9:b9:56:c1:9e:57:c3:69:4a:b3:89: b6:4e:e1:e3:80:0a:d9:13:b9:82:2d:c6:24:8d:92:86:a4:20: 74:94:a4:a9:4b:3d:aa:93:3f:b1:5b:c1:36:9f:0d:da:0d:a0: 5c:ae:b6:ae:fe:32:a2:33:79:02:f3:73:7c:85:43:f1:60:84: d6:6c:49:e4:86:be:ff:65:aa:27:14:fc:5c:0d:cb:53:f4:77: 4d:56:c5:d3:2e:0b:44:99:33:25:35:16:1c:2a:ab:5d:61:77: 61:0b:85:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcxjWUbk+IXkTvSYpEOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMjQ5NmZlZmY5OTEyNzZiZDFiODUzMzZiNzY5N2E5ODAw Zjg0YzEwHhcNMjYwMjA5MTMwMTA2WhcNMjYwMjEwMTMwMTA2WjAzMTEwLwYDVQQD EyhjMmUwZDJkYTE5MDI3NTU5OTViZTM3OGM2NjNlZGViNGVhNWY3NTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul8iMUHkvvxKKL8785JJIqm2G19X tQi0XRANr388zu7lwdILKsiDXe6yflNN0554iuvVJpYTkdo26HfwAAvPRtbekp4H ZxSZtKvUlmOx0qTshsyQhcHLz1OAEV13D1LhLgRoaRhof/mcA+sOCHN9HVXhXRrf T2kSjCBY3q1SUwTGvniIJu08jJgi7GlMAwNkynA0nI+NJHn/qGx2Zbt3onQbmpwB ePXbIoTbRig2CeU/IR5gd/oU5bUXzanD9kDpaEUPnDshPh3Tfz2XQ9arEGQiUkjT lHNjaLv0WN2o7y3t1QWkNGNG198kjBuTt7JexoLrDnqK35xuZE2u5RruKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLg0toZAnVZlb43jGY+3rTqX3UIMB8GA1UdIwQY MBaAFN0klv7/mRJ2vRuFM2t2l6mAD4TBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80NjQ3N2EtODcwOC00YjM3LTg3NWIt NjcwMDMwZGNhYzMwLzEvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS80NjQ3N2EtODcwOC00YjM3LTg3NWItNjcwMDMwZGNhYzMw LzEvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmBmToFa LvfWXmldzrYs81VEM5eDhYLsbDtlW34bqrU01E/Opf3G2G8Q/MXBqiyYG+vPWQb6 /5zLmAGLc/sUdCbXhF131cb8Zz/AYeVbSj+y0Jfu6v83pSdMdwLMi9y62eUY6w5Z GWUXp6YYQLHMQu+wbHhcsR16VOb0ej8nc8hi0KuP1q6vU9glUtPphgvlIlRrO0cG grm5VsGeV8NpSrOJtk7h44AK2RO5gi3GJI2ShqQgdJSkqUs9qpM/sVvBNp8N2g2g XK62rv4yojN5AvNzfIVD8WCE1mxJ5Ia+/2WqJxT8XA3LU/R3TVbF0y4LRJkzJTUW HCqrXWF3YQuFNw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:57 2026 by rpki-client