This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: tQmM84AUFDIWlTHm3fC0xOob6IiPWS3T09SXRrziZl4= Subject key identifier: E3:2A:6B:F1:A6:B6:C4:C8:98:D4:35:F6:F6:D6:B7:BD:77:83:8C:13 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019C19F006FE6AF91F83400F9BD106265500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 13C4 Signing time: Sun 01 Feb 2026 16:01:26 +0000 Manifest this update: Sun 01 Feb 2026 16:01:26 +0000 Manifest next update: Mon 02 Feb 2026 16:01:26 +0000 Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: pgpe/tQ+bkd8MyPhgIt1TlZX0rZBqe4w9x7/1Nvalzc=) 3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=) 4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=) 5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=) 6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=) 7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=) 8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 10:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:19:f0:06:fe:6a:f9:1f:83:40:0f:9b:d1:06:26:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Feb 1 16:01:26 2026 GMT Not After : Feb 2 16:01:26 2026 GMT Subject: CN=e32a6bf1a6b6c4c898d435f6f6d6b7bd77838c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:30:21:d5:f9:76:e2:8a:db:87:92:6b:bf: ba:ad:34:5c:2f:6d:56:20:14:73:68:22:4f:f2:20: 9e:ff:64:62:dd:9f:e8:58:47:a8:49:32:b0:96:e0: 4f:6a:70:37:5d:d5:0f:c6:48:59:f3:07:90:31:5b: 46:63:b5:e3:0d:5d:97:10:79:28:07:93:ea:42:ac: b1:42:bc:32:ff:fa:94:66:fa:4c:b5:06:c9:c6:49: ea:96:91:38:10:2d:45:95:06:6c:2b:82:25:19:62: e4:62:ec:56:8b:ae:77:34:9f:61:98:c2:66:ad:60: 15:54:c9:21:d3:76:0b:27:1b:71:62:36:1a:c4:b5: f8:3b:25:62:b2:47:d9:0b:ca:74:33:b0:6e:8e:0e: a3:d8:cc:50:e3:66:b3:e9:a7:82:2a:0c:b7:a2:86: a3:fc:91:6b:97:4a:48:7e:61:30:f4:90:b6:f1:e7: f3:51:b6:89:46:2d:2a:64:f1:93:38:e7:d9:90:23: 4e:26:66:49:9e:70:e7:71:db:31:11:d2:aa:97:c8: 6f:b6:b2:19:63:27:76:96:77:3f:ce:79:9a:bf:73: 12:69:19:b7:02:6f:bb:fc:a3:53:a5:cc:12:7d:4b: 4e:de:1e:46:b8:6a:b8:43:ae:0d:6e:a1:4c:eb:ac: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2A:6B:F1:A6:B6:C4:C8:98:D4:35:F6:F6:D6:B7:BD:77:83:8C:13 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ea:01:36:bb:01:d5:50:7b:5f:0c:98:0a:5e:a4:f6:c4:6e: 20:ba:01:07:db:21:49:73:32:f5:71:93:21:2a:51:49:80:d7: 68:32:af:5a:69:df:60:e4:b8:12:55:47:de:27:44:62:88:e3: 4a:71:ce:5b:c1:2e:f9:86:77:4e:e9:4e:f8:80:a4:75:83:96: ab:5c:3b:1f:b7:66:d4:74:04:5a:0f:0c:3d:ae:27:64:f8:67: 55:1b:f1:8c:d2:08:ad:e7:ea:9c:14:31:ec:42:47:1f:fb:1b: e7:02:f7:04:6a:61:25:72:30:b6:07:c5:73:73:ab:d3:12:b4: df:9a:54:15:b7:b2:06:31:f1:3e:a4:0f:2d:d4:7e:2c:2b:63: 0a:57:f8:cb:d3:bc:bd:6f:b9:42:9c:21:c9:fa:07:f4:e0:d2: a2:57:13:ad:9c:21:d9:d9:f8:1f:46:1f:f1:ac:b7:a0:ae:40: 2b:ad:f4:b9:14:e2:c1:f3:f4:37:5f:4a:80:c6:98:db:01:6e: ba:db:f6:0b:67:97:f5:66:3c:32:e1:20:cf:ea:31:ce:b4:96: 5c:65:7d:ba:fe:21:7c:b1:88:bd:6c:ea:58:d6:c6:78:44:8b: 62:4d:41:ee:c6:b8:13:e1:f5:8f:f0:f6:10:bf:9d:0a:bc:26: 64:c8:48:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwZ8Ab+avkfg0APm9EGJlUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMjAxMTYwMTI2WhcNMjYwMjAyMTYwMTI2WjAzMTEwLwYDVQQD EyhlMzJhNmJmMWE2YjZjNGM4OThkNDM1ZjZmNmQ2YjdiZDc3ODM4YzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaIwIdX5duKK24eSa7+6rTRcL21W IBRzaCJP8iCe/2Ri3Z/oWEeoSTKwluBPanA3XdUPxkhZ8weQMVtGY7XjDV2XEHko B5PqQqyxQrwy//qUZvpMtQbJxknqlpE4EC1FlQZsK4IlGWLkYuxWi653NJ9hmMJm rWAVVMkh03YLJxtxYjYaxLX4OyViskfZC8p0M7Bujg6j2MxQ42az6aeCKgy3ooaj /JFrl0pIfmEw9JC28efzUbaJRi0qZPGTOOfZkCNOJmZJnnDncdsxEdKql8hvtrIZ Yyd2lnc/znmav3MSaRm3Am+7/KNTpcwSfUtO3h5GuGq4Q64NbqFM66ytmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMqa/GmtsTImNQ19vbWt713g4wTMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuoBNrsB 1VB7XwyYCl6k9sRuILoBB9shSXMy9XGTISpRSYDXaDKvWmnfYOS4ElVH3idEYojj SnHOW8Eu+YZ3TulO+ICkdYOWq1w7H7dm1HQEWg8MPa4nZPhnVRvxjNIIrefqnBQx 7EJHH/sb5wL3BGphJXIwtgfFc3Or0xK035pUFbeyBjHxPqQPLdR+LCtjClf4y9O8 vW+5QpwhyfoH9ODSolcTrZwh2dn4H0Yf8ay3oK5AK630uRTiwfP0N19KgMaY2wFu utv2C2eX9WY8MuEgz+oxzrSWXGV9uv4hfLGIvWzqWNbGeESLYk1B7sa4E+H1j/D2 EL+dCrwmZMhIng== -----END CERTIFICATE-----Generated at Sun Feb 1 18:45:17 2026 by rpki-client