This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: 3QMQUHdbTWtT8stmEDBkmnaqkM9dudMLM4c1yNBmuOM= Subject key identifier: B3:E2:50:28:51:F9:87:45:92:04:57:F1:90:76:5E:75:54:CF:D5:A2 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019C296287F51406D9925762549623C13B2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 13CC Signing time: Wed 04 Feb 2026 16:00:49 +0000 Manifest this update: Wed 04 Feb 2026 16:00:49 +0000 Manifest next update: Thu 05 Feb 2026 16:00:49 +0000 Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: j7hdr4BrLVu0p2FHIYVhwE/9XFkUGWI0f2+kc7NKMf4=) 3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=) 4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=) 5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=) 6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=) 7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=) 8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 16:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:29:62:87:f5:14:06:d9:92:57:62:54:96:23:c1:3b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Feb 4 16:00:49 2026 GMT Not After : Feb 5 16:00:49 2026 GMT Subject: CN=b3e2502851f98745920457f190765e7554cfd5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a3:94:f5:5a:f1:5b:23:25:f6:f9:59:79:e2: d5:06:5b:12:31:60:e5:ca:72:68:10:e5:b9:36:37: 32:96:61:79:07:7f:13:63:c3:b0:e7:56:44:3b:20: eb:ee:bb:43:fc:30:16:9f:0d:a1:2f:df:b4:be:fd: 1c:71:97:50:ef:3e:56:09:63:e4:53:05:c3:6e:00: 89:c1:bc:dc:52:6f:55:61:f8:a5:fb:77:f5:c9:97: b9:b0:53:47:d3:5e:68:df:71:00:a4:13:e1:dd:94: b1:20:e0:23:62:65:f9:ec:a8:06:0b:de:90:ab:e2: c7:57:a6:85:5c:8c:44:8e:53:0a:6b:3d:71:f0:51: ad:57:98:8c:3c:f9:71:59:28:a4:95:5e:3b:3c:78: 7c:bb:9d:2b:70:23:cc:f1:b4:08:28:0f:81:c9:18: c5:32:26:a4:d4:fe:39:d2:02:67:9e:55:93:d0:ab: 50:67:99:3c:89:cf:a9:6a:da:37:7e:fe:a2:5e:2f: 95:d6:5f:05:61:f4:8d:16:16:23:7b:8d:b1:4e:c5: 85:ba:b6:75:61:05:51:61:1d:83:5c:7d:58:a9:48: 94:ca:ce:72:c0:c3:dc:eb:10:45:e4:8a:9d:e4:86: 41:37:4f:d9:86:de:3c:9c:27:ea:e1:b4:be:6d:25: 9a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E2:50:28:51:F9:87:45:92:04:57:F1:90:76:5E:75:54:CF:D5:A2 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d5:9a:7d:9d:60:46:ed:70:4f:0c:a0:4a:04:60:c7:90:d1: e9:4d:63:f2:ec:e0:ff:b8:0a:36:41:30:b1:38:01:c1:cb:c1: 22:8d:ae:cf:32:dc:de:b4:ab:2e:81:c5:66:76:66:b2:79:75: 48:ac:e4:5f:53:38:7d:14:56:6c:02:52:0f:57:5e:a9:fd:a1: ba:bd:07:cb:19:4c:46:d9:6e:63:4b:70:d4:57:09:2b:0f:06: f7:26:f1:16:42:5a:9a:a1:fe:cf:04:f4:ce:f6:ad:79:0e:ab: 5c:85:82:5e:24:d9:a9:a7:74:c0:a2:9e:85:a0:2f:4a:7b:88: 1c:fb:a9:5e:81:e2:4f:6f:ec:44:a0:43:2e:2f:fa:a8:9c:0c: 6e:59:3c:a0:6d:b3:8e:2a:c7:a4:24:d2:96:6a:26:81:fe:46: a0:90:aa:a0:b3:bd:87:7f:1b:89:ca:de:36:32:4f:e7:15:6d: 87:ee:f9:46:d8:88:33:09:77:ea:e3:6c:9a:7a:af:e4:0d:2f: 4f:33:09:13:4d:c9:4f:5b:33:16:27:b7:09:50:6d:db:25:5d: d2:a2:2f:c6:4e:89:ca:fc:ff:25:42:a1:70:ab:79:12:45:eb: 8c:29:45:ed:91:91:44:cd:dd:4a:ee:d8:79:02:05:e9:38:93: 07:1e:c5:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwpYof1FAbZkldiVJYjwTsrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMjA0MTYwMDQ5WhcNMjYwMjA1MTYwMDQ5WjAzMTEwLwYDVQQD EyhiM2UyNTAyODUxZjk4NzQ1OTIwNDU3ZjE5MDc2NWU3NTU0Y2ZkNWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86OU9VrxWyMl9vlZeeLVBlsSMWDl ynJoEOW5NjcylmF5B38TY8Ow51ZEOyDr7rtD/DAWnw2hL9+0vv0ccZdQ7z5WCWPk UwXDbgCJwbzcUm9VYfil+3f1yZe5sFNH015o33EApBPh3ZSxIOAjYmX57KgGC96Q q+LHV6aFXIxEjlMKaz1x8FGtV5iMPPlxWSiklV47PHh8u50rcCPM8bQIKA+ByRjF Miak1P450gJnnlWT0KtQZ5k8ic+pato3fv6iXi+V1l8FYfSNFhYje42xTsWFurZ1 YQVRYR2DXH1YqUiUys5ywMPc6xBF5Iqd5IZBN0/Zht48nCfq4bS+bSWaGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPiUChR+YdFkgRX8ZB2XnVUz9WiMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdWafZ1g Ru1wTwygSgRgx5DR6U1j8uzg/7gKNkEwsTgBwcvBIo2uzzLc3rSrLoHFZnZmsnl1 SKzkX1M4fRRWbAJSD1deqf2hur0HyxlMRtluY0tw1FcJKw8G9ybxFkJamqH+zwT0 zvateQ6rXIWCXiTZqad0wKKehaAvSnuIHPupXoHiT2/sRKBDLi/6qJwMblk8oG2z jirHpCTSlmomgf5GoJCqoLO9h38bicreNjJP5xVth+75RtiIMwl36uNsmnqv5A0v TzMJE03JT1szFie3CVBt2yVd0qIvxk6Jyvz/JUKhcKt5EkXrjClF7ZGRRM3dSu7Y eQIF6TiTBx7FGw== -----END CERTIFICATE-----Generated at Wed Feb 4 20:12:16 2026 by rpki-client