This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft File: 3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json) Hash identifier: DPJkmTXBs8RDDHbviGCWWMkiDEENzzujpm7AkJwwFd0= Subject key identifier: 88:E5:DF:34:88:1D:0B:F2:54:80:82:46:FD:12:B1:F2:1B:26:F1:7C Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Certificate serial: 019C25BCF169E7D17C46ED1C4F0F5D9BB618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft Manifest number: 1808 Signing time: Tue 03 Feb 2026 23:01:05 +0000 Manifest this update: Tue 03 Feb 2026 23:01:05 +0000 Manifest next update: Wed 04 Feb 2026 23:01:05 +0000 Files and hashes: 1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: A1RJweAmyfgBvvzNP2m1IJZaGPM1XwD8ffhw15Hh9Lw=) 2: E_7lG7f5ZU0hPBZXeO9KiDguzXQ.roa (hash: uU7vlve0LCQA4yv+Ab2N5h2lLHcGh/mEnZNylo4rqpM=) 3: XKNodyTpVE_edu5x6d6F6Y2O2tk.roa (hash: bwj5H0svZvvLnoA8x9sKQziSKp08OjMhTh7PRO1SLcQ=) 4: ZDpRY_KWNL6AZ9OnIDN7BtGPipc.roa (hash: 1DrZ+2ptHaqoBHGtimSHqvMKa2JLNNgAJEEeUlCf64I=) 5: d9A4hlEmKbDPdLh-NP6SoKhEXtQ.roa (hash: 2KXDsx5G7CA7gUyYoSSGzL5b/e8kc/9Eqvs4mB1p5uE=) 6: hneKOL6xKV3cr3gP56n-PmBtpXI.roa (hash: GxqGClH9UHGqcmyTREy95vx88t5aKLbmXG/YE4t9Tqg=) 7: i97cNeb8oKq1iXS4wbPlLnkqnXM.roa (hash: tnxwmRHEGHKiP3jVd9g9eR9Y1YnQOfRk5Mq17tUDcaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:25:bc:f1:69:e7:d1:7c:46:ed:1c:4f:0f:5d:9b:b6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Validity Not Before: Feb 3 23:01:05 2026 GMT Not After : Feb 4 23:01:05 2026 GMT Subject: CN=88e5df34881d0bf254808246fd12b1f21b26f17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9f:18:a7:0b:49:97:3b:a7:f9:44:11:ae:8e: 31:1b:e2:01:e6:13:d5:56:0d:60:9b:39:96:87:76: f7:1d:cf:74:d6:0a:17:d0:7f:c1:a8:ea:4c:50:d9: 8c:33:ef:2e:ba:3c:de:44:f9:5e:1e:8d:93:64:8c: 7f:76:5f:36:1f:56:e3:ed:3d:79:ce:cc:b2:75:c4: 22:8f:e3:44:3b:f3:94:6d:67:57:98:1b:7b:99:8f: f1:e1:84:30:86:a7:78:08:e0:a0:36:9c:40:9c:d5: 1a:22:d3:a2:f6:63:2e:9c:ad:80:09:d4:8b:35:a4: 40:56:a6:a9:e8:05:87:39:99:5b:f5:f2:29:f0:20: 42:b1:11:61:8b:c7:6f:b0:67:4b:29:59:cb:6d:e0: 25:89:c8:04:60:46:ec:86:d0:c3:ed:9a:81:fa:75: 30:4d:ee:81:4e:cb:c5:5b:8d:bc:55:72:34:cf:72: d4:a4:a9:51:39:1f:38:c5:a3:f8:60:63:8d:f6:ed: 68:3e:f2:bc:08:97:02:94:cc:89:89:46:b5:1c:50: 9a:d8:7c:a6:37:72:a5:fb:94:a3:5d:b3:a1:f0:f9: 59:b8:44:eb:ba:0e:c1:b7:f8:a0:12:e2:f3:6e:53: ec:8b:54:b7:41:6c:ca:9a:3e:93:89:a8:be:df:15: 72:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E5:DF:34:88:1D:0B:F2:54:80:82:46:FD:12:B1:F2:1B:26:F1:7C X509v3 Authority Key Identifier: keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1f:52:4a:42:4c:cf:e7:14:1e:4f:64:69:7a:ae:e6:22:03: 02:aa:f6:5f:80:27:21:6b:da:59:39:46:0c:2f:ed:7d:91:b0: 5a:0d:26:c0:72:d6:bc:c9:3f:ac:ed:bd:c4:17:fb:92:1d:a6: 8b:dd:e6:a5:9c:c1:82:ea:71:eb:62:1e:b3:8f:37:4f:8c:44: ab:87:c2:36:62:2b:37:df:7f:0b:ad:ae:13:ba:51:8c:d4:d4: c9:de:d3:b0:b5:1f:c6:81:d6:fd:06:df:47:e1:4c:74:f0:0c: 4e:87:10:fc:ab:cd:b8:da:fd:1b:a6:92:32:ef:10:a6:5f:3b: 6c:8c:45:f3:65:6f:c5:e0:f3:54:05:39:65:a3:40:8b:92:ae: 93:17:da:e4:13:18:72:dc:46:f0:e5:90:23:f7:5a:69:7a:0c: f2:fd:5a:eb:60:58:7d:76:d3:a0:39:22:14:94:e3:92:8a:97: 70:e8:62:4e:69:f3:3c:01:cd:8b:87:ea:7c:c9:bc:ef:56:01: 1b:f6:fb:f1:af:81:99:de:a5:79:05:cc:5a:9b:9e:80:70:a4: 94:cf:9e:7c:ef:a9:dc:fb:14:94:17:c6:a4:eb:f4:69:83:e8: d3:aa:97:2b:f9:27:5d:70:7a:68:9c:e7:6e:b9:9a:30:61:a8: d3:ce:29:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwlvPFp59F8Ru0cTw9dm7YYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGQ5ZDZiNjk3Y2ExYzg2NTcwYzI1Njg2MmU2ODU4YjQ3 OTljODUwHhcNMjYwMjAzMjMwMTA1WhcNMjYwMjA0MjMwMTA1WjAzMTEwLwYDVQQD Eyg4OGU1ZGYzNDg4MWQwYmYyNTQ4MDgyNDZmZDEyYjFmMjFiMjZmMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ8YpwtJlzun+UQRro4xG+IB5hPV Vg1gmzmWh3b3Hc901goX0H/BqOpMUNmMM+8uujzeRPleHo2TZIx/dl82H1bj7T15 zsyydcQij+NEO/OUbWdXmBt7mY/x4YQwhqd4COCgNpxAnNUaItOi9mMunK2ACdSL NaRAVqap6AWHOZlb9fIp8CBCsRFhi8dvsGdLKVnLbeAlicgEYEbshtDD7ZqB+nUw Te6BTsvFW428VXI0z3LUpKlROR84xaP4YGON9u1oPvK8CJcClMyJiUa1HFCa2Hym N3Kl+5SjXbOh8PlZuETrug7Bt/igEuLzblPsi1S3QWzKmj6Tiai+3xVyewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjl3zSIHQvyVICCRv0SsfIbJvF8MB8GA1UdIwQY MBaAFN4NnWtpfKHIZXDCVoYuaFi0eZyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYt MDFjYmZjMGU5NGU3LzEvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYtMDFjYmZjMGU5NGU3 LzEvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnR9SSkJM z+cUHk9kaXqu5iIDAqr2X4AnIWvaWTlGDC/tfZGwWg0mwHLWvMk/rO29xBf7kh2m i93mpZzBgupx62Ies483T4xEq4fCNmIrN99/C62uE7pRjNTUyd7TsLUfxoHW/Qbf R+FMdPAMTocQ/KvNuNr9G6aSMu8Qpl87bIxF82VvxeDzVAU5ZaNAi5Kukxfa5BMY ctxG8OWQI/daaXoM8v1a62BYfXbToDkiFJTjkoqXcOhiTmnzPAHNi4fqfMm871YB G/b78a+Bmd6leQXMWpuegHCklM+efO+p3PsUlBfGpOv0aYPo06qXK/knXXB6aJzn brmaMGGo084pfA== -----END CERTIFICATE-----Generated at Wed Feb 4 02:18:18 2026 by rpki-client