This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft File: t3gT9sVnClhoatw9SVV0QpXdFBk.mft (raw, json) Hash identifier: iJ7nuqdA70sTnPIWN77K0dspZnbg1DlEQCdnofXdYBc= Subject key identifier: 32:2D:EB:A8:17:ED:53:37:E4:19:A8:82:DE:5C:1A:81:72:A9:E4:CA Authority key identifier: B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19 Certificate issuer: /CN=b77813f6c5670a58686adc3d4955744295dd1419 Certificate serial: 019C41A18DF7D31608284FA1C29C1680C0AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft Manifest number: 10E8 Signing time: Mon 09 Feb 2026 09:00:32 +0000 Manifest this update: Mon 09 Feb 2026 09:00:32 +0000 Manifest next update: Tue 10 Feb 2026 09:00:32 +0000 Files and hashes: 1: 6I-7kIsmNEbjqpaRLZFYHSiX3Cg.roa (hash: l5DJjaa9jBabVc2gTKAmahVVwUkclCV/KKoXuPERh3I=) 2: t3gT9sVnClhoatw9SVV0QpXdFBk.crl (hash: QW5i+LRO2qgN0duLbtGwBUBVmrMUzRtTMiJD1CciI/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:8d:f7:d3:16:08:28:4f:a1:c2:9c:16:80:c0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b77813f6c5670a58686adc3d4955744295dd1419 Validity Not Before: Feb 9 09:00:32 2026 GMT Not After : Feb 10 09:00:32 2026 GMT Subject: CN=322deba817ed5337e419a882de5c1a8172a9e4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:db:16:d0:df:8a:bc:28:f3:d8:0c:e7:57: 1e:43:34:de:cf:ad:1a:13:69:ac:4f:9f:7d:80:37: f4:d0:13:7e:ff:69:c0:af:2e:16:b0:47:86:2e:d6: fc:74:00:ad:11:09:9a:5d:2e:e5:46:4c:4f:f2:c7: 15:50:de:d4:ee:3d:ee:c7:93:5f:03:dc:32:00:bb: f5:2c:2c:17:fa:4a:cd:ff:9b:7e:2a:f7:c3:b2:83: 71:64:bc:e1:12:4e:7b:f1:d5:ef:5d:4c:58:c8:b0: e9:0e:a6:f0:bc:d7:f3:22:66:b1:40:3f:23:93:e4: bd:dc:5e:f0:f5:ec:d4:77:b3:77:dd:ce:d6:f1:de: 2c:31:2f:d6:04:75:40:02:d5:09:ed:6f:58:03:b2: eb:db:70:18:00:a7:32:d5:75:90:83:6a:90:f5:36: 7e:9b:80:cc:50:e3:29:b0:1b:d0:54:3e:93:c9:37: 35:5d:aa:9a:c1:1b:8b:a2:d8:a4:03:b8:b7:37:25: d7:7e:e6:41:b1:8b:7f:20:94:f0:4a:69:7e:44:a0: 91:d7:17:07:8c:36:ac:3f:53:57:54:a0:b1:81:8d: 4e:99:cf:00:c1:9b:3d:d6:3e:41:97:5f:b9:9e:41: 9f:e7:8f:bb:8c:c2:92:bc:9f:04:9e:08:b4:f6:a5: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2D:EB:A8:17:ED:53:37:E4:19:A8:82:DE:5C:1A:81:72:A9:E4:CA X509v3 Authority Key Identifier: keyid:B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2e:1f:aa:16:98:49:e6:00:41:17:d1:31:9f:f5:0a:39:e3: 24:eb:8d:43:39:83:1b:33:c8:4a:d5:ce:82:41:73:1f:f5:71: cd:87:30:a1:ff:f8:9d:38:0a:76:7e:2f:7c:cc:cc:f4:07:e6: 5c:de:d9:4f:22:98:59:d8:d3:ba:92:87:0b:e2:ce:5f:fa:e6: 04:8a:c3:f6:f7:41:8b:bc:cd:c6:29:c4:05:f4:ac:30:72:06: 18:f2:5a:06:b8:1e:d4:1d:30:b2:ee:02:16:c9:34:51:fe:93: ec:d6:03:39:35:a2:25:46:6d:b0:bb:13:18:74:5c:2b:a1:9f: 4e:cf:af:9e:fe:93:c4:a6:6b:51:6f:2e:3c:c2:cb:c0:74:8a: 1a:95:62:75:9c:ff:4e:28:eb:1a:2a:43:72:48:c8:ab:4c:3e: 72:33:f9:bf:99:08:45:37:fa:82:d8:71:42:b7:81:59:18:9a: a1:83:52:c1:5a:41:04:a8:5b:ab:a8:33:2f:20:9b:50:a3:33: 27:63:43:20:fe:35:97:e2:69:d1:45:c9:de:b3:0c:a5:cb:61: 59:1d:29:61:73:55:56:77:fb:9c:cd:64:7f:61:dc:e8:84:ed: ae:b9:2d:04:77:0f:0c:f8:b3:88:ab:5a:ce:8d:6b:bd:06:27: 07:9d:3f:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoY330xYIKE+hwpwWgMCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzgxM2Y2YzU2NzBhNTg2ODZhZGMzZDQ5NTU3NDQyOTVk ZDE0MTkwHhcNMjYwMjA5MDkwMDMyWhcNMjYwMjEwMDkwMDMyWjAzMTEwLwYDVQQD EygzMjJkZWJhODE3ZWQ1MzM3ZTQxOWE4ODJkZTVjMWE4MTcyYTllNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNPbFtDfirwo89gM51ceQzTez60a E2msT599gDf00BN+/2nAry4WsEeGLtb8dACtEQmaXS7lRkxP8scVUN7U7j3ux5Nf A9wyALv1LCwX+krN/5t+KvfDsoNxZLzhEk578dXvXUxYyLDpDqbwvNfzImaxQD8j k+S93F7w9ezUd7N33c7W8d4sMS/WBHVAAtUJ7W9YA7Lr23AYAKcy1XWQg2qQ9TZ+ m4DMUOMpsBvQVD6TyTc1XaqawRuLotikA7i3NyXXfuZBsYt/IJTwSml+RKCR1xcH jDasP1NXVKCxgY1Omc8AwZs91j5Bl1+5nkGf54+7jMKSvJ8Engi09qWyCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIt66gX7VM35Bmogt5cGoFyqeTKMB8GA1UdIwQY MBaAFLd4E/bFZwpYaGrcPUlVdEKV3RQZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNnVDlzVm5DbGhvYXR3OVNWVjBRcFhkRkJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xZjU3ZDUtOTljMi00Y2E5LTkzNTAt MTc3MzVlMmMyNTVmLzEvdDNnVDlzVm5DbGhvYXR3OVNWVjBRcFhkRkJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xZjU3ZDUtOTljMi00Y2E5LTkzNTAtMTc3MzVlMmMyNTVm LzEvdDNnVDlzVm5DbGhvYXR3OVNWVjBRcFhkRkJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkC4fqhaY SeYAQRfRMZ/1CjnjJOuNQzmDGzPIStXOgkFzH/VxzYcwof/4nTgKdn4vfMzM9Afm XN7ZTyKYWdjTupKHC+LOX/rmBIrD9vdBi7zNxinEBfSsMHIGGPJaBrge1B0wsu4C Fsk0Uf6T7NYDOTWiJUZtsLsTGHRcK6GfTs+vnv6TxKZrUW8uPMLLwHSKGpVidZz/ TijrGipDckjIq0w+cjP5v5kIRTf6gthxQreBWRiaoYNSwVpBBKhbq6gzLyCbUKMz J2NDIP41l+Jp0UXJ3rMMpcthWR0pYXNVVnf7nM1kf2Hc6ITtrrktBHcPDPiziKta zo1rvQYnB50/+A== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:43 2026 by rpki-client