This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: R5tUUB1OVa7y1443f3R8sjNdwZT9xnZ/etw/OO1qL1M= Subject key identifier: 38:26:46:2B:9B:47:F6:77:A2:B9:14:7F:E3:B3:C3:FB:22:99:20:B8 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019C2D3EF0A3CD87D3144DC0D71AF4C9253D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 13CE Signing time: Thu 05 Feb 2026 10:00:25 +0000 Manifest this update: Thu 05 Feb 2026 10:00:25 +0000 Manifest next update: Fri 06 Feb 2026 10:00:25 +0000 Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: QZEi2U51KwkmVhIopOBfuODHyHaRTsmxkGZ2jbxo+8E=) 3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=) 4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=) 5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=) 6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=) 7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=) 8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 10:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:3e:f0:a3:cd:87:d3:14:4d:c0:d7:1a:f4:c9:25:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Feb 5 10:00:25 2026 GMT Not After : Feb 6 10:00:25 2026 GMT Subject: CN=3826462b9b47f677a2b9147fe3b3c3fb229920b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:05:24:92:c6:7b:a3:4b:c4:d6:7a:cb:73: 87:da:93:6e:25:b3:e4:31:cb:02:ec:6b:d7:76:29: 0f:67:fd:7e:76:41:e1:7d:8c:e7:ef:fd:22:f5:25: 24:42:18:c9:d5:c2:6b:9e:4d:28:d1:24:a4:ab:fa: 16:14:9f:a0:b0:26:0f:f3:7b:3f:cc:eb:2a:0c:20: 80:67:74:df:e4:79:d7:ea:a6:71:ce:04:09:05:4a: 6e:0d:db:5d:2f:8c:1a:6c:fa:f1:50:6f:58:b8:c5: 61:1d:b1:8d:b6:50:b1:bf:87:21:a6:d0:89:c6:aa: 2a:aa:b1:3b:7f:07:0c:59:b1:b1:df:c1:33:92:aa: c3:78:0e:b5:66:d4:09:15:0e:1b:7b:2d:02:c9:f3: 3e:15:38:83:cb:eb:c7:73:d3:cc:f7:7e:e1:69:31: df:de:41:3f:c7:99:c7:b0:83:ff:dc:cb:4e:f9:07: ef:48:0b:d2:35:e6:89:6b:14:f3:8f:54:16:2a:2d: 43:21:00:3b:59:87:fd:aa:19:37:49:b6:7c:3f:e4: 0d:b9:42:80:55:96:b8:01:ce:1b:22:91:55:5f:d4: 1b:db:24:04:d1:00:af:6d:3f:a0:dd:4b:1f:4c:8e: 4b:c3:d2:18:38:ac:a8:20:a0:8f:c5:36:9c:03:2d: a4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:26:46:2B:9B:47:F6:77:A2:B9:14:7F:E3:B3:C3:FB:22:99:20:B8 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:da:54:b6:1f:1b:a0:f2:d9:b4:11:16:42:26:a5:a6:47:16: 96:0e:39:fb:a8:0e:36:4a:d6:48:52:c2:d9:cc:a9:c7:8a:cd: c5:db:01:fe:0e:88:e2:2a:12:1d:f0:e5:01:65:f9:d2:d1:08: 33:2a:ff:dc:58:c3:6d:6f:2d:05:79:3f:cb:76:ae:1e:f2:68: cd:75:b2:8e:19:2c:a0:14:ad:c4:60:a2:86:99:6e:2d:a0:62: f1:d4:c3:98:27:b6:cf:a8:13:c0:ea:03:42:2f:63:36:71:26: 8b:8a:67:75:c6:99:12:e7:17:a0:4c:39:84:de:67:7b:f8:62: bc:e2:fc:8d:91:24:1d:b7:1a:5b:86:30:ba:25:42:b4:1b:a3: 52:bb:7b:4b:14:34:aa:2f:30:a5:8d:a2:ea:20:dd:e0:b3:3d: 3f:89:53:a3:f0:12:5d:ba:3c:47:8b:18:2c:53:86:48:58:78: 07:57:6a:25:21:c0:da:a7:58:99:0f:18:c0:3e:02:72:35:e4: df:f1:b2:7c:7d:cf:0f:a9:a3:68:8e:38:ee:4d:e2:c9:d2:75: 34:82:06:5a:82:58:d3:81:92:7d:a0:91:ba:6a:69:c1:92:d8: 74:3e:6e:6b:1b:a7:e7:4d:e8:1f:92:69:35:a1:63:65:bf:62: fe:d2:62:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwtPvCjzYfTFE3A1xr0ySU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMjA1MTAwMDI1WhcNMjYwMjA2MTAwMDI1WjAzMTEwLwYDVQQD EygzODI2NDYyYjliNDdmNjc3YTJiOTE0N2ZlM2IzYzNmYjIyOTkyMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQcFJJLGe6NLxNZ6y3OH2pNuJbPk McsC7GvXdikPZ/1+dkHhfYzn7/0i9SUkQhjJ1cJrnk0o0SSkq/oWFJ+gsCYP83s/ zOsqDCCAZ3Tf5HnX6qZxzgQJBUpuDdtdL4wabPrxUG9YuMVhHbGNtlCxv4chptCJ xqoqqrE7fwcMWbGx38EzkqrDeA61ZtQJFQ4bey0CyfM+FTiDy+vHc9PM937haTHf 3kE/x5nHsIP/3MtO+QfvSAvSNeaJaxTzj1QWKi1DIQA7WYf9qhk3SbZ8P+QNuUKA VZa4Ac4bIpFVX9Qb2yQE0QCvbT+g3UsfTI5Lw9IYOKyoIKCPxTacAy2kTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgmRiubR/Z3orkUf+Ozw/simSC4MB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz9pUth8b oPLZtBEWQialpkcWlg45+6gONkrWSFLC2cypx4rNxdsB/g6I4ioSHfDlAWX50tEI Myr/3FjDbW8tBXk/y3auHvJozXWyjhksoBStxGCihpluLaBi8dTDmCe2z6gTwOoD Qi9jNnEmi4pndcaZEucXoEw5hN5ne/hivOL8jZEkHbcaW4YwuiVCtBujUrt7SxQ0 qi8wpY2i6iDd4LM9P4lTo/ASXbo8R4sYLFOGSFh4B1dqJSHA2qdYmQ8YwD4CcjXk 3/GyfH3PD6mjaI447k3iydJ1NIIGWoJY04GSfaCRumppwZLYdD5uaxun503oH5Jp NaFjZb9i/tJiVg== -----END CERTIFICATE-----Generated at Thu Feb 5 20:17:51 2026 by rpki-client