This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json) Hash identifier: cXou5Kn2J1g0rwywDICloB87Pf+ClvyBwrsAumzG3Zc= Subject key identifier: 5C:BE:FB:0C:51:AB:74:D9:09:62:85:7F:78:57:24:E4:89:99:E5:BF Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04 Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04 Certificate serial: 019C4133BCEF01E1E27B8FE53D38BBF17C35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft Manifest number: 13F3 Signing time: Mon 09 Feb 2026 07:00:35 +0000 Manifest this update: Mon 09 Feb 2026 07:00:35 +0000 Manifest next update: Tue 10 Feb 2026 07:00:35 +0000 Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: lVJsbpr1LHu4kOOMhU93nbyUx6AVjWOf//3vHmVYhNQ=) 2: DXnEQHiVvNu7Vyoq9JcZ6dLMCdI.roa (hash: 4AlE0r+iRVTgtlkq9V/mm0BrnXYUrFnqbuKHIAvSdgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:bc:ef:01:e1:e2:7b:8f:e5:3d:38:bb:f1:7c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04 Validity Not Before: Feb 9 07:00:35 2026 GMT Not After : Feb 10 07:00:35 2026 GMT Subject: CN=5cbefb0c51ab74d90962857f785724e48999e5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:93:90:43:ee:6e:15:2d:39:cd:7f:f6:6f: 3a:03:df:81:ca:3b:e4:29:1f:22:4d:01:8d:29:1a: 7f:5a:81:1e:0f:13:a2:1f:05:18:f1:e9:14:55:e1: 37:34:f9:e3:b4:7c:90:9c:1b:07:2c:e2:64:25:60: f4:94:1e:3b:ed:65:97:90:38:17:9d:b5:5d:64:0a: 88:5c:0b:ce:0f:6d:68:33:90:53:68:47:7d:b0:31: cb:d3:32:4f:fa:c8:7b:ac:53:d1:d9:b7:f4:92:43: d6:48:6d:3b:ae:d5:4b:5a:a3:4c:56:76:74:15:79: 20:bb:c3:18:1f:09:02:21:47:52:32:65:0a:20:93: da:a5:40:c6:a0:45:31:62:c2:d9:8d:1a:3a:50:f5: bf:72:51:33:8b:6f:c7:f9:9e:7f:2c:1f:17:c4:96: 0e:f0:e4:79:80:34:03:7e:02:bf:16:9d:f0:26:d9: 9a:08:6d:3f:ff:89:55:cb:4a:9f:b2:0c:e5:3b:ef: d0:0c:22:47:e4:36:9e:fe:f4:33:32:8c:dd:b0:07: 62:84:6c:d7:9e:0c:65:03:31:11:bc:8e:cc:f8:56: 04:2e:e0:a2:a0:eb:99:55:7a:f5:73:56:04:cb:02: 78:cb:59:40:04:f5:9a:9d:da:5d:e3:0b:cd:85:72: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BE:FB:0C:51:AB:74:D9:09:62:85:7F:78:57:24:E4:89:99:E5:BF X509v3 Authority Key Identifier: keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:48:9e:1b:a2:e3:7d:ff:77:c9:e4:b9:2e:8f:df:16:b8:42: b0:32:da:ff:45:91:f2:41:fc:cf:eb:08:36:63:6c:b7:0f:f8: 90:95:ad:2d:fb:df:05:62:ce:6e:3f:03:bb:9a:d0:2c:33:fe: 5d:73:91:09:b5:dc:d0:08:45:45:b7:82:0f:2c:e6:8d:28:7e: c7:a7:69:5d:28:a5:84:4c:c3:5a:ab:fb:e1:17:94:b3:a4:8a: d9:5d:bd:a6:eb:ab:54:60:52:f0:85:b8:a4:21:59:21:df:26: 07:bd:de:09:a7:87:75:0c:66:5a:63:27:b8:43:09:e1:c4:82: 7a:83:99:76:bd:60:f5:d9:f0:f8:91:69:2f:ac:fb:30:50:fe: 07:c1:b2:77:7c:5f:20:1c:51:6f:bd:13:d6:66:b5:0c:65:b3: e0:27:48:b6:c6:24:a0:74:cf:93:e9:24:ef:8b:7b:2f:f4:8e: d3:39:15:c1:fe:8b:ee:25:6b:4e:e4:7c:77:59:c8:c5:6d:9f: 56:ba:67:a9:0d:36:0f:a0:08:b2:5d:88:b1:a0:48:12:6d:7f: 19:f8:02:c1:62:71:1d:cb:92:4e:14:59:bc:bb:f5:22:c4:27: bc:b6:d2:de:ff:4c:09:74:e2:a9:fe:67:56:a1:a2:cd:5b:e5: 7f:41:e0:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM7zvAeHie4/lPTi78Xw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTFiMjVmZDkxYjVmYmMxZmZiMTIxOGM2N2VkNTU4YWU3 NzhjMDQwHhcNMjYwMjA5MDcwMDM1WhcNMjYwMjEwMDcwMDM1WjAzMTEwLwYDVQQD Eyg1Y2JlZmIwYzUxYWI3NGQ5MDk2Mjg1N2Y3ODU3MjRlNDg5OTllNWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIeTkEPubhUtOc1/9m86A9+Byjvk KR8iTQGNKRp/WoEeDxOiHwUY8ekUVeE3NPnjtHyQnBsHLOJkJWD0lB477WWXkDgX nbVdZAqIXAvOD21oM5BTaEd9sDHL0zJP+sh7rFPR2bf0kkPWSG07rtVLWqNMVnZ0 FXkgu8MYHwkCIUdSMmUKIJPapUDGoEUxYsLZjRo6UPW/clEzi2/H+Z5/LB8XxJYO 8OR5gDQDfgK/Fp3wJtmaCG0//4lVy0qfsgzlO+/QDCJH5Dae/vQzMozdsAdihGzX ngxlAzERvI7M+FYELuCioOuZVXr1c1YEywJ4y1lABPWandpd4wvNhXIopQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFy++wxRq3TZCWKFf3hXJOSJmeW/MB8GA1UdIwQY MBaAFNzhsl/ZG1+8H/sSGMZ+1Viud4wEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09HeVg5a2JYN3dmLXhJWXhuN1ZXSzUzakFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zMjUyYzAtNTcyNS00NDlmLTkyYTEt NjQzYmIyN2Y3ZmJmLzEvM09HeVg5a2JYN3dmLXhJWXhuN1ZXSzUzakFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8zMjUyYzAtNTcyNS00NDlmLTkyYTEtNjQzYmIyN2Y3ZmJm LzEvM09HeVg5a2JYN3dmLXhJWXhuN1ZXSzUzakFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkieG6Lj ff93yeS5Lo/fFrhCsDLa/0WR8kH8z+sINmNstw/4kJWtLfvfBWLObj8Du5rQLDP+ XXORCbXc0AhFRbeCDyzmjSh+x6dpXSilhEzDWqv74ReUs6SK2V29puurVGBS8IW4 pCFZId8mB73eCaeHdQxmWmMnuEMJ4cSCeoOZdr1g9dnw+JFpL6z7MFD+B8Gyd3xf IBxRb70T1ma1DGWz4CdItsYkoHTPk+kk74t7L/SO0zkVwf6L7iVrTuR8d1nIxW2f VrpnqQ02D6AIsl2IsaBIEm1/GfgCwWJxHcuSThRZvLv1IsQnvLbS3v9MCXTiqf5n VqGizVvlf0HgDg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:04 2026 by rpki-client