This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft File: 3sTrmin0tz2fTIT5dcheB1S1a3E.mft (raw, json) Hash identifier: 0jONi2xl2hg6vG1gUbtGvASK9VYKEvVkd17oEfqzjy0= Subject key identifier: C4:B6:C1:6F:12:C9:0D:49:E6:2B:8D:FC:0A:1D:93:59:84:84:CE:F4 Authority key identifier: DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71 Certificate issuer: /CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71 Certificate serial: 019C1BA723AAD5DE3969D64A87480755872A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft Manifest number: 48 Signing time: Mon 02 Feb 2026 00:01:04 +0000 Manifest this update: Mon 02 Feb 2026 00:01:04 +0000 Manifest next update: Tue 03 Feb 2026 00:01:04 +0000 Files and hashes: 1: 3sTrmin0tz2fTIT5dcheB1S1a3E.crl (hash: HVhw3AB6AynskxDcnFjNG29tej7j4QMyM1pm0Hu+QJQ=) 2: 8v-B4tBwt_nXsn0BNXUtzTao1xQ.asa (hash: c3eWcYcZ6AfSlXW2n8VDHUuk8WUaUZqoj+gBRxx0us0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:a7:23:aa:d5:de:39:69:d6:4a:87:48:07:55:87:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71 Validity Not Before: Feb 2 00:01:04 2026 GMT Not After : Feb 3 00:01:04 2026 GMT Subject: CN=c4b6c16f12c90d49e62b8dfc0a1d93598484cef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:81:84:ca:b6:92:29:ad:61:aa:7d:7b:cd:91: 6f:dd:2a:0b:b7:bf:d1:c4:60:70:9d:d2:ae:9a:9f: f1:f7:83:22:82:07:d7:a3:8e:a9:f9:32:bc:88:ca: 08:6a:75:c9:ce:cc:dc:ac:a4:cb:3e:9a:84:37:52: 48:6a:d5:4e:40:f8:e7:78:b7:9d:00:b1:c2:5e:db: 58:1f:26:19:d3:8f:aa:49:b1:5e:bc:fe:94:63:68: 29:aa:5d:40:1e:86:88:28:4e:85:ef:b6:3c:c9:da: 44:54:db:9d:12:8e:a7:bf:f8:2d:5e:45:70:41:89: 71:b4:5e:ca:1d:61:8c:4d:c4:aa:6f:3a:3e:b7:85: ac:01:ac:9c:88:4d:d6:de:a3:03:ae:09:1f:4c:b0: 36:f5:45:e4:b3:fc:57:db:68:06:a2:eb:3d:52:d0: 5d:be:14:52:51:71:f6:2f:8a:89:f3:de:40:7c:b7: 32:f7:e8:53:25:14:b6:44:99:cb:d8:ad:9b:51:4e: 10:5d:ab:3c:75:0c:04:b4:f2:3e:f2:6b:17:73:93: 0b:f2:d9:3b:c8:0d:ce:47:da:34:3c:ac:17:e1:e2: 9d:fd:ad:8c:d0:d1:fa:38:24:cf:76:a4:9c:9e:1c: 1c:9d:2e:ca:5f:81:5d:62:85:3e:dc:6d:de:a4:33: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B6:C1:6F:12:C9:0D:49:E6:2B:8D:FC:0A:1D:93:59:84:84:CE:F4 X509v3 Authority Key Identifier: keyid:DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:42:be:ad:6f:26:89:12:a1:39:0a:6f:91:f3:9f:7d:b1:3e: 2b:cb:53:40:3f:6a:9d:83:43:f2:00:ec:32:ce:f7:7c:d4:46: 87:0c:62:9a:14:01:ed:e2:26:85:10:2e:8a:53:f9:68:4a:0a: 73:50:25:51:ae:be:73:5b:d0:a3:be:4d:b4:9f:fa:ea:bf:86: a2:95:40:52:2f:25:75:73:ba:65:d0:cd:e3:c7:70:91:eb:a6: 18:14:01:55:83:2b:93:d1:9f:e9:a6:90:72:09:b3:dc:1c:45: 44:6f:e3:73:8e:b7:8a:a0:ac:ba:bd:2e:b7:79:85:6d:b1:4f: c3:d3:cd:e3:1a:13:a9:9e:46:53:54:2e:0f:c0:21:c4:53:1b: cd:5c:bd:de:59:c7:ac:14:e6:3b:16:bf:76:53:53:8c:85:c6: 86:d4:5b:88:c9:8b:03:57:c3:8d:f1:44:97:55:45:16:49:13: 6d:6d:ca:df:bc:75:e5:b3:ee:d0:cc:4f:c5:9e:e1:71:cf:70: 55:01:2e:9c:0f:5d:1b:60:b1:b6:3b:b7:0c:87:7f:d2:89:eb: fd:9a:34:ae:03:e8:cc:5e:72:e1:72:17:bd:d1:cf:da:94:fc: 54:0a:87:12:88:46:2e:f4:64:ff:10:97:77:29:d1:76:9c:bf: 80:07:3d:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbpyOq1d45adZKh0gHVYcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYzRlYjlhMjlmNGI3M2Q5ZjRjODRmOTc1Yzg1ZTA3NTRi NTZiNzEwHhcNMjYwMjAyMDAwMTA0WhcNMjYwMjAzMDAwMTA0WjAzMTEwLwYDVQQD EyhjNGI2YzE2ZjEyYzkwZDQ5ZTYyYjhkZmMwYTFkOTM1OTg0ODRjZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4GEyraSKa1hqn17zZFv3SoLt7/R xGBwndKump/x94MiggfXo46p+TK8iMoIanXJzszcrKTLPpqEN1JIatVOQPjneLed ALHCXttYHyYZ04+qSbFevP6UY2gpql1AHoaIKE6F77Y8ydpEVNudEo6nv/gtXkVw QYlxtF7KHWGMTcSqbzo+t4WsAayciE3W3qMDrgkfTLA29UXks/xX22gGous9UtBd vhRSUXH2L4qJ895AfLcy9+hTJRS2RJnL2K2bUU4QXas8dQwEtPI+8msXc5ML8tk7 yA3OR9o0PKwX4eKd/a2M0NH6OCTPdqScnhwcnS7KX4FdYoU+3G3epDOpAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS2wW8SyQ1J5iuN/Aodk1mEhM70MB8GA1UdIwQY MBaAFN7E65op9Lc9n0yE+XXIXgdUtWtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xYzkwZDctZjEyYi00MjgzLThhOTMt ZTYxNzQxYjlmMjQ5LzEvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8xYzkwZDctZjEyYi00MjgzLThhOTMtZTYxNzQxYjlmMjQ5 LzEvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkK+rW8m iRKhOQpvkfOffbE+K8tTQD9qnYND8gDsMs73fNRGhwximhQB7eImhRAuilP5aEoK c1AlUa6+c1vQo75NtJ/66r+GopVAUi8ldXO6ZdDN48dwkeumGBQBVYMrk9Gf6aaQ cgmz3BxFRG/jc463iqCsur0ut3mFbbFPw9PN4xoTqZ5GU1QuD8AhxFMbzVy93lnH rBTmOxa/dlNTjIXGhtRbiMmLA1fDjfFEl1VFFkkTbW3K37x15bPu0MxPxZ7hcc9w VQEunA9dG2Cxtju3DId/0onr/Zo0rgPozF5y4XIXvdHP2pT8VAqHEohGLvRk/xCX dynRdpy/gAc9Iw== -----END CERTIFICATE-----Generated at Mon Feb 2 07:54:48 2026 by rpki-client