This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json) Hash identifier: uM8HM/OCRDMz8mHWoToejPfVSSf1PqD/Lk0l6l9SbuM= Subject key identifier: AA:46:E0:3A:2C:E1:35:A7:E9:50:79:62:26:8F:F3:66:37:D9:7C:41 Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20 Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120 Certificate serial: 019C42103E6706A20C905286ED7B12D84CA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:01:26 +0000 Manifest this update: Mon 09 Feb 2026 11:01:26 +0000 Manifest next update: Tue 10 Feb 2026 11:01:26 +0000 Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: ls8pQ9CvcSgSZ0RCfhjWGg8Vnv+4O1JH4LiCU2PwZk8=) 2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:3e:67:06:a2:0c:90:52:86:ed:7b:12:d8:4c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120 Validity Not Before: Feb 9 11:01:26 2026 GMT Not After : Feb 10 11:01:26 2026 GMT Subject: CN=aa46e03a2ce135a7e9507962268ff36637d97c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:46:5e:aa:ac:61:ae:34:35:78:6f:56:22:40: 75:16:73:90:21:f0:08:13:0e:87:74:4b:72:d1:a3: 0b:b1:81:93:93:45:62:83:9f:98:e8:75:fa:8f:cb: 04:24:68:cd:01:5f:36:32:b2:8f:24:21:c8:76:bc: 11:4d:e7:03:50:2e:b3:ac:a6:bc:45:79:0e:dc:66: 35:01:9b:d0:66:20:fe:1e:ff:92:ae:65:0d:88:33: 74:06:64:45:23:bd:5c:09:dd:43:2d:d0:64:60:b5: ff:8c:6d:7f:8b:1c:a2:28:d2:30:d7:06:be:d9:91: 61:12:dd:da:3f:9d:29:c2:af:34:7a:63:ac:40:4a: 3e:6d:1b:e6:ef:77:52:58:16:43:e8:53:7f:6b:26: 3c:a9:3f:b0:d6:cf:6f:b5:3a:b2:6f:fb:ed:d2:f6: 5f:76:5f:12:61:a5:50:ba:36:90:d3:23:3e:ca:2e: ba:4f:0f:9c:1d:97:aa:4e:e7:12:93:11:0f:fe:d5: 0a:5b:ed:28:9b:9c:26:f4:8a:df:07:8f:b6:f3:2c: 67:b2:cc:5a:af:e9:14:4b:54:a4:9c:38:cb:9b:e0: a3:ec:ef:4c:f9:f7:28:5c:d5:4a:9a:89:36:96:6a: d5:b5:62:d2:58:ab:25:87:16:39:94:41:07:5d:76: 8d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:46:E0:3A:2C:E1:35:A7:E9:50:79:62:26:8F:F3:66:37:D9:7C:41 X509v3 Authority Key Identifier: keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:71:58:1d:19:04:63:5b:1a:12:84:60:a9:10:c7:b6:34:ce: e1:32:81:96:e4:86:3e:01:57:43:0b:1f:b0:59:c7:13:40:bd: 71:cf:23:4d:a3:17:40:19:2e:1e:85:d6:85:9c:80:ba:26:f1: cc:28:b6:bf:89:1f:21:b3:39:02:bc:4d:9d:d9:cf:79:00:1e: f8:44:49:22:3b:3c:bd:23:7a:91:db:2e:72:e1:1b:2e:bb:79: af:62:30:b1:47:c2:e2:3d:6e:0d:d1:cc:b1:ac:10:aa:61:cf: 69:0c:f4:6f:eb:60:8c:fe:ac:7f:04:fa:65:b5:ef:e7:59:a0: d3:39:bd:db:e1:c8:0f:3d:3b:4d:f0:2a:33:d7:c5:7a:02:6b: 9c:a3:8d:c6:11:15:0b:85:b2:08:9c:de:cd:58:7f:95:79:19: 0d:78:98:b1:1a:75:44:84:29:28:3b:b6:db:0a:85:f8:ae:a6: 12:b8:fb:6a:3a:92:a2:c3:3c:4d:0c:91:9b:81:15:a3:8c:db: c3:22:84:9d:4e:2b:54:b1:74:c8:cf:9e:42:de:ea:39:3b:79: 5d:22:96:c6:03:46:62:64:7a:0c:d0:07:14:04:31:59:b6:68: aa:56:50:52:cc:94:bd:91:59:ef:88:62:11:32:f2:71:8d:a0: 64:b5:03:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCED5nBqIMkFKG7XsS2EylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDVkZjZlNDA0ZWY5MjBlNmE1OTI4ZDg5NjNlNmE1Zjhk NjExMjAwHhcNMjYwMjA5MTEwMTI2WhcNMjYwMjEwMTEwMTI2WjAzMTEwLwYDVQQD EyhhYTQ2ZTAzYTJjZTEzNWE3ZTk1MDc5NjIyNjhmZjM2NjM3ZDk3YzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40ZeqqxhrjQ1eG9WIkB1FnOQIfAI Ew6HdEty0aMLsYGTk0Vig5+Y6HX6j8sEJGjNAV82MrKPJCHIdrwRTecDUC6zrKa8 RXkO3GY1AZvQZiD+Hv+SrmUNiDN0BmRFI71cCd1DLdBkYLX/jG1/ixyiKNIw1wa+ 2ZFhEt3aP50pwq80emOsQEo+bRvm73dSWBZD6FN/ayY8qT+w1s9vtTqyb/vt0vZf dl8SYaVQujaQ0yM+yi66Tw+cHZeqTucSkxEP/tUKW+0om5wm9IrfB4+28yxnssxa r+kUS1SknDjLm+Cj7O9M+fcoXNVKmok2lmrVtWLSWKslhxY5lEEHXXaNfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpG4Dos4TWn6VB5YiaP82Y32XxBMB8GA1UdIwQY MBaAFNwF325ATvkg5qWSjYlj5qX41hEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQt YmNlOTM0MjA1YWU4LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQtYmNlOTM0MjA1YWU4 LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXFYHRkE Y1saEoRgqRDHtjTO4TKBluSGPgFXQwsfsFnHE0C9cc8jTaMXQBkuHoXWhZyAuibx zCi2v4kfIbM5ArxNndnPeQAe+ERJIjs8vSN6kdsucuEbLrt5r2IwsUfC4j1uDdHM sawQqmHPaQz0b+tgjP6sfwT6ZbXv51mg0zm92+HIDz07TfAqM9fFegJrnKONxhEV C4WyCJzezVh/lXkZDXiYsRp1RIQpKDu22wqF+K6mErj7ajqSosM8TQyRm4EVo4zb wyKEnU4rVLF0yM+eQt7qOTt5XSKWxgNGYmR6DNAHFAQxWbZoqlZQUsyUvZFZ74hi ETLycY2gZLUDxw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:11 2026 by rpki-client