This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json) Hash identifier: MjDanPQP4evqs2HCbhr2xXBMODRVoh//LKKPsSeapCY= Subject key identifier: E5:EA:C9:BD:E9:09:DF:17:27:4F:1F:3C:01:7F:89:E9:41:EC:37:42 Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70 Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370 Certificate serial: 019C427D2CECF50336B9B0814149B4A0E41A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft Manifest number: 181D Signing time: Mon 09 Feb 2026 13:00:25 +0000 Manifest this update: Mon 09 Feb 2026 13:00:25 +0000 Manifest next update: Tue 10 Feb 2026 13:00:25 +0000 Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: RPxgq3y684BB2CS0Eat2c8fLb4jq8jrGD1TMyyGp1mg=) 2: 4OGXKSCe69WbBAqnHrdUacn2xvY.roa (hash: Bo3VASp3hqdpjkuTRhHGGHpuPELAAuy1usZK3W9YkB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:2c:ec:f5:03:36:b9:b0:81:41:49:b4:a0:e4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370 Validity Not Before: Feb 9 13:00:25 2026 GMT Not After : Feb 10 13:00:25 2026 GMT Subject: CN=e5eac9bde909df17274f1f3c017f89e941ec3742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:35:52:e2:12:85:cb:b8:ea:0a:30:c2:a4: 8e:bf:d1:aa:7b:6d:6c:3e:fb:d9:3a:20:9a:cb:d9: bd:39:56:14:32:b8:a0:37:47:fc:7d:32:45:6c:3a: cf:9a:7e:fb:3f:ec:c1:a0:24:02:36:66:d8:3b:14: b7:b1:46:6e:5e:4c:67:bf:c6:bd:ae:17:2d:93:ce: 22:46:87:19:2f:34:33:dc:dc:c5:76:de:bc:3b:0a: 1c:c3:da:56:0c:39:c9:73:f2:73:e2:a5:e4:58:3f: 44:a4:9a:56:8a:03:a5:0f:d9:c4:27:c7:cc:7b:c0: 87:4f:7e:47:8a:b7:45:e8:29:de:ca:00:df:52:3d: dc:61:ca:cf:4f:0c:02:76:b2:df:7d:2d:f0:04:e5: da:27:de:ad:12:bc:3f:52:c7:bf:ab:d3:bc:10:2f: 1a:e1:93:5f:7f:cb:57:9e:5b:6f:6b:e1:40:69:ef: 8f:84:8e:5b:11:40:77:1e:29:cc:82:f8:b8:3b:0a: bb:47:ee:03:5e:64:10:37:f9:e7:a8:68:e6:fe:a3: 21:1a:48:ab:00:78:69:2d:79:cc:2d:70:00:0c:30: 30:4c:f5:de:f0:85:0f:de:4e:5a:75:ef:da:1c:f6: e8:8f:a1:db:7a:c0:c0:17:f5:a6:37:ea:eb:91:c0: 40:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EA:C9:BD:E9:09:DF:17:27:4F:1F:3C:01:7F:89:E9:41:EC:37:42 X509v3 Authority Key Identifier: keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f7:c6:3f:86:a3:0c:df:29:11:5c:4a:60:92:a3:2d:1e:e3: 38:7e:d4:ec:a5:db:d2:8a:60:b6:80:34:90:78:c8:45:4e:18: 1f:ad:72:cf:8f:8c:05:73:d8:da:d8:9c:92:26:ee:ce:67:4c: 21:92:bc:da:8e:87:78:a7:07:a5:a8:43:a3:36:8f:2a:39:46: ac:c1:07:f5:66:97:fa:92:7e:40:95:64:8f:b5:5a:6c:66:10: 25:75:11:33:ab:e9:10:ce:c2:61:ce:4a:b1:93:3f:44:e1:e5: 35:cd:e1:8a:77:e7:ed:f3:f1:58:c8:08:da:c9:1a:75:51:a9: 71:23:23:48:02:45:2a:03:d1:08:cb:fa:81:19:90:39:58:ee: cd:26:38:b2:b5:74:ec:ef:59:dc:18:02:21:86:d0:8f:10:89: 5a:21:6f:39:c5:09:ba:ef:3b:ab:4a:19:72:58:ca:c3:96:c6: d7:be:4d:1d:73:ec:73:a0:cb:46:92:c6:14:5b:89:b3:b5:61: 83:ad:a5:da:60:70:f0:af:14:97:94:b2:a1:b8:ae:66:3a:14: 5d:40:79:d9:5f:ff:19:53:7c:06:5c:9d:76:8a:88:da:df:3f: 7d:7a:bd:9b:04:40:ed:77:4e:d6:2e:b8:d4:49:db:9f:fb:d3: bb:9c:e9:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfSzs9QM2ubCBQUm0oOQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh OWQzNzAwHhcNMjYwMjA5MTMwMDI1WhcNMjYwMjEwMTMwMDI1WjAzMTEwLwYDVQQD EyhlNWVhYzliZGU5MDlkZjE3Mjc0ZjFmM2MwMTdmODllOTQxZWMzNzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfc1UuIShcu46gowwqSOv9Gqe21s PvvZOiCay9m9OVYUMrigN0f8fTJFbDrPmn77P+zBoCQCNmbYOxS3sUZuXkxnv8a9 rhctk84iRocZLzQz3NzFdt68Owocw9pWDDnJc/Jz4qXkWD9EpJpWigOlD9nEJ8fM e8CHT35HirdF6CneygDfUj3cYcrPTwwCdrLffS3wBOXaJ96tErw/Use/q9O8EC8a 4ZNff8tXnltva+FAae+PhI5bEUB3HinMgvi4Owq7R+4DXmQQN/nnqGjm/qMhGkir AHhpLXnMLXAADDAwTPXe8IUP3k5ade/aHPboj6HbesDAF/WmN+rrkcBAgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXqyb3pCd8XJ08fPAF/ielB7DdCMB8GA1UdIwQY MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt YzZkMmI4ZDFmNTY2LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2 LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPfGP4aj DN8pEVxKYJKjLR7jOH7U7KXb0opgtoA0kHjIRU4YH61yz4+MBXPY2tickibuzmdM IZK82o6HeKcHpahDozaPKjlGrMEH9WaX+pJ+QJVkj7VabGYQJXURM6vpEM7CYc5K sZM/ROHlNc3hinfn7fPxWMgI2skadVGpcSMjSAJFKgPRCMv6gRmQOVjuzSY4srV0 7O9Z3BgCIYbQjxCJWiFvOcUJuu87q0oZcljKw5bG175NHXPsc6DLRpLGFFuJs7Vh g62l2mBw8K8Ul5SyobiuZjoUXUB52V//GVN8BlyddoqI2t8/fXq9mwRA7XdO1i64 1Enbn/vTu5zpFw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:46 2026 by rpki-client