This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft File: 3sTrmin0tz2fTIT5dcheB1S1a3E.mft (raw, json) Hash identifier: 5vLAwPZHlt4zk8KC+G2yirari36hAnx166ampCiXmJA= Subject key identifier: 85:4D:82:02:AA:F0:B6:A4:F8:D5:58:9F:96:9B:3D:B0:AB:65:45:86 Authority key identifier: DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71 Certificate issuer: /CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71 Certificate serial: 019C5B6112DC8FFC888086C09A097BE0CB73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft Manifest number: 69 Signing time: Sat 14 Feb 2026 09:00:14 +0000 Manifest this update: Sat 14 Feb 2026 09:00:14 +0000 Manifest next update: Sun 15 Feb 2026 09:00:14 +0000 Files and hashes: 1: 3sTrmin0tz2fTIT5dcheB1S1a3E.crl (hash: YTuoGbaZ+vPI6ebppV3UKeg1/pUfBYTU6VnJWnwhciw=) 2: 8v-B4tBwt_nXsn0BNXUtzTao1xQ.asa (hash: c3eWcYcZ6AfSlXW2n8VDHUuk8WUaUZqoj+gBRxx0us0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 09:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:5b:61:12:dc:8f:fc:88:80:86:c0:9a:09:7b:e0:cb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71 Validity Not Before: Feb 14 09:00:14 2026 GMT Not After : Feb 15 09:00:14 2026 GMT Subject: CN=854d8202aaf0b6a4f8d5589f969b3db0ab654586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:0a:7a:98:10:13:33:50:73:25:a8:7e:37: 1d:0c:a6:5a:f3:9d:6f:17:fe:d4:eb:3d:96:d4:8d: b8:a1:20:7f:e1:7e:81:e6:63:ee:fb:be:49:c3:02: 26:c2:32:3a:bf:b5:7b:59:bd:13:a0:ed:76:07:ef: 1b:f2:ff:51:a0:ed:a7:8e:d2:a3:e8:8f:d1:60:21: 84:95:84:72:c5:0d:ea:38:35:f3:98:80:97:40:03: d7:8f:4e:83:11:1b:85:6b:4a:1b:f0:6f:3d:22:f3: c4:1e:3c:cb:95:58:03:41:c0:80:8c:a4:06:24:1c: 9f:c3:1e:c9:97:f2:82:86:2e:c0:a8:d5:4f:55:4d: 5a:75:d4:2d:11:50:e3:ff:be:a9:1a:93:0e:7f:df: ad:cc:a7:bd:b0:17:76:70:78:3a:99:ff:9e:9f:da: ba:1f:84:43:8a:79:b0:0d:3f:a0:4d:08:f7:6c:91: 68:4c:4e:09:bc:3e:89:0a:f5:07:4c:df:9d:bf:1e: 1e:c0:9b:40:4d:03:78:8e:82:9b:74:34:bb:ef:53: e1:82:76:8b:25:eb:7f:0e:cb:d9:da:eb:d6:8e:85: 2b:9e:71:fe:07:53:d3:e5:0b:af:d0:ad:39:11:1d: 06:fa:ce:f4:3d:d4:c6:23:39:9d:55:21:27:7b:ed: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4D:82:02:AA:F0:B6:A4:F8:D5:58:9F:96:9B:3D:B0:AB:65:45:86 X509v3 Authority Key Identifier: keyid:DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:af:36:79:ca:d0:7c:87:31:f6:2e:c5:14:10:fd:ae:f7:ab: ad:f6:d7:7d:43:05:0c:09:93:33:ba:d2:7c:ad:ae:fa:7d:1b: b3:e1:a2:ac:8f:46:c4:36:85:a5:e8:5f:33:d0:52:76:88:2d: a2:ff:32:79:58:ef:8d:ce:81:96:17:5d:b8:5c:3d:13:c7:e5: a3:67:43:75:35:aa:52:1e:cb:85:e7:68:30:d1:12:27:aa:c9: c7:d7:60:6d:50:82:8e:6e:ba:12:8f:a1:03:4e:9b:f6:de:af: 01:94:a1:f1:4d:e7:b1:ef:ca:eb:c4:49:a0:32:33:74:f1:87: 50:ae:b4:a8:09:f7:cb:a5:48:8a:04:33:d1:44:29:f7:c4:2e: 74:74:50:26:d0:12:d8:b7:26:87:8e:75:6a:43:8a:bc:e2:81: 52:f5:7f:4b:22:a8:7e:b2:a8:07:7e:2b:42:7a:ef:be:21:26: 28:01:d6:96:74:be:0c:ad:08:2e:9a:d9:96:de:5c:12:bc:51: 57:2e:ed:79:dc:8d:97:3d:10:35:85:ab:e6:f8:11:66:b6:66: 28:87:9e:a2:d0:f1:a5:e1:d7:e2:ea:79:09:a9:11:fc:d9:a4: 8b:7c:81:32:ec:01:ac:49:1f:36:37:47:aa:b6:9f:b8:c0:c5: 13:ce:5e:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxbYRLcj/yIgIbAmgl74MtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYzRlYjlhMjlmNGI3M2Q5ZjRjODRmOTc1Yzg1ZTA3NTRi NTZiNzEwHhcNMjYwMjE0MDkwMDE0WhcNMjYwMjE1MDkwMDE0WjAzMTEwLwYDVQQD Eyg4NTRkODIwMmFhZjBiNmE0ZjhkNTU4OWY5NjliM2RiMGFiNjU0NTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoAKepgQEzNQcyWofjcdDKZa851v F/7U6z2W1I24oSB/4X6B5mPu+75JwwImwjI6v7V7Wb0ToO12B+8b8v9RoO2njtKj 6I/RYCGElYRyxQ3qODXzmICXQAPXj06DERuFa0ob8G89IvPEHjzLlVgDQcCAjKQG JByfwx7Jl/KChi7AqNVPVU1addQtEVDj/76pGpMOf9+tzKe9sBd2cHg6mf+en9q6 H4RDinmwDT+gTQj3bJFoTE4JvD6JCvUHTN+dvx4ewJtATQN4joKbdDS771PhgnaL Jet/DsvZ2uvWjoUrnnH+B1PT5Quv0K05ER0G+s70PdTGIzmdVSEne+2bqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVNggKq8Lak+NVYn5abPbCrZUWGMB8GA1UdIwQY MBaAFN7E65op9Lc9n0yE+XXIXgdUtWtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xYzkwZDctZjEyYi00MjgzLThhOTMt ZTYxNzQxYjlmMjQ5LzEvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8xYzkwZDctZjEyYi00MjgzLThhOTMtZTYxNzQxYjlmMjQ5 LzEvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVK82ecrQ fIcx9i7FFBD9rverrfbXfUMFDAmTM7rSfK2u+n0bs+GirI9GxDaFpehfM9BSdogt ov8yeVjvjc6BlhdduFw9E8flo2dDdTWqUh7LhedoMNESJ6rJx9dgbVCCjm66Eo+h A06b9t6vAZSh8U3nse/K68RJoDIzdPGHUK60qAn3y6VIigQz0UQp98QudHRQJtAS 2Lcmh451akOKvOKBUvV/SyKofrKoB34rQnrvviEmKAHWlnS+DK0ILprZlt5cErxR Vy7tedyNlz0QNYWr5vgRZrZmKIeeotDxpeHX4up5CakR/Nmki3yBMuwBrEkfNjdH qrafuMDFE85exg== -----END CERTIFICATE-----Generated at Sat Feb 14 14:34:59 2026 by rpki-client