This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json) Hash identifier: 0p7FZlMV3dLL8GXcHH006cywRCc+dirkeMgW+6a4vj4= Subject key identifier: BF:13:01:5F:CC:6D:92:34:13:19:AD:6C:5E:6F:41:72:47:40:BA:A2 Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21 Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921 Certificate serial: 019C427E0109F9D47205CEB7203DEF056DEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 13:01:19 +0000 Manifest this update: Mon 09 Feb 2026 13:01:19 +0000 Manifest next update: Tue 10 Feb 2026 13:01:19 +0000 Files and hashes: 1: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: YLZid9JYVTx/NTrb0i+7Q3YU3hR5gSmNwy/JeTFfSHA=) 2: pLGoFC89pNsr7Py4cTyjK2qhEfg.roa (hash: E5aXP60TZFECYX5WU/DbcrY7n3oYD2lgvk9iR+kGxes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:01:09:f9:d4:72:05:ce:b7:20:3d:ef:05:6d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921 Validity Not Before: Feb 9 13:01:19 2026 GMT Not After : Feb 10 13:01:19 2026 GMT Subject: CN=bf13015fcc6d92341319ad6c5e6f41724740baa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:13:9a:a5:7f:07:79:6e:0c:f3:19:fa:04:a9: bd:71:43:d7:4d:70:3f:d5:e9:03:dd:f5:78:de:b7: 8c:d0:eb:a2:49:fb:65:21:42:21:de:e7:db:82:03: 17:cf:28:71:ec:b0:a2:70:2f:0a:72:fd:0c:1d:f0: 28:db:3c:b7:8f:70:c8:09:6d:2e:c5:4d:98:eb:1d: cc:51:fe:25:2e:57:d1:d9:0e:95:da:7f:d8:8b:d5: b4:15:8e:b3:26:94:37:fd:83:c2:4a:d9:3a:53:68: 67:1d:df:f8:a2:f8:25:e1:dc:c1:d4:79:e7:aa:6e: d8:e3:67:56:4e:7e:aa:7f:8f:77:c8:be:1d:e7:c5: 52:0d:e0:c2:58:51:02:ec:0d:7c:ac:b3:bc:21:01: 22:c1:fd:95:04:cd:16:aa:f6:e2:ab:dd:b0:c4:f5: 92:57:0d:1f:cf:8c:d3:2d:32:30:11:ad:fd:f3:b6: 60:b7:f0:dd:cc:cc:fa:30:ff:4e:b4:43:7e:cd:2b: 19:fd:6d:d1:d5:34:c0:91:b9:f7:ef:58:ce:4a:74: 68:f3:0a:82:86:bc:af:28:5b:6f:d5:35:f0:96:a1: 06:a8:c2:0e:f7:f9:96:2c:63:e5:97:4d:be:9a:22: a5:58:b9:6c:2a:11:fb:c3:63:9f:0f:78:e9:90:79: 63:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:13:01:5F:CC:6D:92:34:13:19:AD:6C:5E:6F:41:72:47:40:BA:A2 X509v3 Authority Key Identifier: keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ee:e7:08:3b:0c:d3:25:21:22:9c:1f:15:d8:53:7c:56:2d: c9:7f:e0:32:9f:2a:12:e9:a3:c2:36:e1:d2:64:ca:36:e9:6b: e0:2f:78:7d:1c:f4:84:e7:84:60:35:b1:8b:47:02:2c:b0:dd: 2d:de:9d:9f:7f:3a:5f:50:f3:db:43:6a:26:9b:d9:d6:b5:1a: d3:79:11:cb:5f:ea:8f:ee:fb:a5:02:83:13:5b:34:6a:0c:77: d5:e0:84:ca:0e:98:71:2f:44:6e:da:a5:4b:6c:86:ea:5c:6f: 3d:a4:cb:7a:1e:fb:e1:05:4a:66:50:a7:15:d6:a3:31:c1:bf: f2:ff:ee:c0:cb:96:df:ec:3f:bf:20:4b:f7:23:07:df:1a:31: 50:85:18:82:39:bb:5b:b6:b4:1b:c9:0b:1c:72:34:e6:c6:d4: b6:20:5c:56:f2:c6:a6:6d:c6:3d:f3:54:e1:7b:6c:da:89:78: ab:8f:9b:f6:ce:37:1d:e9:12:98:21:6c:6e:b0:f4:10:44:85: 52:63:10:41:6f:66:87:09:24:a9:ae:d3:72:6b:6f:fb:d5:b7: 6a:45:06:08:f9:6e:22:07:0f:09:1b:d1:3a:5c:89:2a:d9:a2: 30:80:4d:81:a6:26:dc:a2:4c:65:43:c6:64:04:52:fd:1a:04: da:8c:0c:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgEJ+dRyBc63ID3vBW3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3N2NkMDg2ZDZiODI5MjVhYmI4YmI4MTVlNjU4ODUyNTIy ZTA5MjEwHhcNMjYwMjA5MTMwMTE5WhcNMjYwMjEwMTMwMTE5WjAzMTEwLwYDVQQD EyhiZjEzMDE1ZmNjNmQ5MjM0MTMxOWFkNmM1ZTZmNDE3MjQ3NDBiYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xOapX8HeW4M8xn6BKm9cUPXTXA/ 1ekD3fV43reM0OuiSftlIUIh3ufbggMXzyhx7LCicC8Kcv0MHfAo2zy3j3DICW0u xU2Y6x3MUf4lLlfR2Q6V2n/Yi9W0FY6zJpQ3/YPCStk6U2hnHd/4ovgl4dzB1Hnn qm7Y42dWTn6qf493yL4d58VSDeDCWFEC7A18rLO8IQEiwf2VBM0Wqvbiq92wxPWS Vw0fz4zTLTIwEa3987Zgt/DdzMz6MP9OtEN+zSsZ/W3R1TTAkbn371jOSnRo8wqC hryvKFtv1TXwlqEGqMIO9/mWLGPll02+miKlWLlsKhH7w2OfD3jpkHljRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8TAV/MbZI0ExmtbF5vQXJHQLqiMB8GA1UdIwQY MBaAFFd80IbWuCklq7i7gV5liFJSLgkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjkt NzIwOGNkOThkODgxLzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjktNzIwOGNkOThkODgx LzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+7nCDsM 0yUhIpwfFdhTfFYtyX/gMp8qEumjwjbh0mTKNulr4C94fRz0hOeEYDWxi0cCLLDd Ld6dn386X1Dz20NqJpvZ1rUa03kRy1/qj+77pQKDE1s0agx31eCEyg6YcS9Ebtql S2yG6lxvPaTLeh774QVKZlCnFdajMcG/8v/uwMuW3+w/vyBL9yMH3xoxUIUYgjm7 W7a0G8kLHHI05sbUtiBcVvLGpm3GPfNU4Xts2ol4q4+b9s43HekSmCFsbrD0EESF UmMQQW9mhwkkqa7Tcmtv+9W3akUGCPluIgcPCRvROlyJKtmiMIBNgaYm3KJMZUPG ZARS/RoE2owM4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:51 2026 by rpki-client