This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json) Hash identifier: gnsqHXFeovySj5m4tOAiygtLpa5OYSiWrBaIH+OF2rg= Subject key identifier: 42:B1:8F:33:AA:B9:CD:3A:B4:6A:9E:B9:14:1B:46:A9:3B:51:69:B6 Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95 Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395 Certificate serial: 019C4359174E0A6CCEB1ED91BD482C477796 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 17:00:37 +0000 Manifest this update: Mon 09 Feb 2026 17:00:37 +0000 Manifest next update: Tue 10 Feb 2026 17:00:37 +0000 Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: YcI/nWDDBdZhCiR+mpzuJNils2XblNkwnOeBmP8AlNk=) 2: 9unExc-u2klcvykG9A7nqtJ0jEo.roa (hash: fK53zNSLF8dtN9JmssE7wAYgASom2B/ybWqpgUFg/kU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:17:4e:0a:6c:ce:b1:ed:91:bd:48:2c:47:77:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395 Validity Not Before: Feb 9 17:00:37 2026 GMT Not After : Feb 10 17:00:37 2026 GMT Subject: CN=42b18f33aab9cd3ab46a9eb9141b46a93b5169b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bd:6d:5b:1f:db:4e:7d:a8:7e:88:3a:89:65: e2:64:07:73:ee:90:56:87:91:8c:a3:f7:2e:9d:eb: 3f:e5:26:c8:bf:a5:67:73:88:f9:12:11:40:ef:2f: fa:68:fd:8c:d4:d6:99:a5:a0:42:54:73:62:5d:6d: 16:11:4c:c4:2c:83:6a:ff:0b:2d:be:3d:5a:3e:33: b9:38:77:bb:fc:c4:6e:f1:8f:b0:02:1f:26:ab:75: 33:74:ea:0a:2a:28:b0:51:00:6f:e8:f0:eb:5c:fe: 2f:5c:02:c4:80:20:6b:62:2a:79:a7:59:57:9c:5a: 75:93:f9:70:f0:41:52:31:03:77:26:52:32:4b:bd: 46:de:1c:46:f5:71:ed:a5:af:57:14:68:23:45:e8: 06:ec:06:6c:59:27:e9:88:a4:9e:35:8d:bb:ca:1e: 7d:3c:fe:b8:bd:08:e5:51:92:c3:6c:01:a1:79:2f: 86:1a:69:f1:1a:9f:8b:3a:15:c9:77:a4:39:67:64: 72:c9:60:59:96:b8:35:ef:d4:fc:18:d3:52:12:a1: 13:af:37:0d:8c:ab:2a:95:e2:13:d2:c8:63:37:fe: 0e:13:a7:de:6c:ee:58:fc:9b:d4:02:32:60:fd:df: 6d:db:85:c1:4c:b3:da:06:53:81:0c:25:d4:5e:2a: fd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B1:8F:33:AA:B9:CD:3A:B4:6A:9E:B9:14:1B:46:A9:3B:51:69:B6 X509v3 Authority Key Identifier: keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b1:a3:30:54:be:17:2e:e6:01:04:03:a0:4c:44:92:5b:54: b2:26:8c:f0:6e:36:8e:aa:9a:c4:58:81:ef:df:4e:b0:ed:b2: b8:54:62:dc:e0:12:cd:c5:b5:78:c5:18:ab:93:27:ff:87:a7: a3:c5:c3:95:76:8a:c5:5e:b9:65:3f:70:87:bf:ea:f1:54:f1: dd:7a:4c:af:d5:ec:b1:67:5b:02:54:b7:b0:fc:aa:aa:47:c5: 76:ba:d8:6a:a7:a5:47:b6:93:bb:86:fd:d4:2c:f9:df:29:d7: 72:5a:ef:27:38:fe:48:e9:ff:e9:dc:a5:ea:f1:04:4a:0d:26: af:49:35:03:aa:a8:b6:a8:32:eb:74:82:95:a8:f7:b6:b0:ae: 5c:26:af:97:33:6d:61:13:e0:dc:97:d3:3f:ce:76:75:32:29: 04:07:48:c5:63:18:01:da:79:7e:08:0f:d7:52:b4:84:64:9b: 1e:82:8a:9c:33:65:b0:d2:fe:71:ef:e7:9d:bd:f8:f9:37:47: ca:27:ab:b0:3b:09:7b:20:3b:73:d0:00:e9:ac:0a:43:59:a0: 4a:58:05:ef:36:c1:ad:f1:9d:2e:45:7b:9c:58:3e:bd:b8:73: 26:48:3f:7d:f6:ed:50:f8:ac:ae:e5:b7:0d:9f:fe:86:ca:66: 91:aa:ad:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWRdOCmzOse2RvUgsR3eWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGNjZDIzOTFmYTMyYzBhZGUyOTdjNWZjODgzMDkwYjM5 OTEzOTUwHhcNMjYwMjA5MTcwMDM3WhcNMjYwMjEwMTcwMDM3WjAzMTEwLwYDVQQD Eyg0MmIxOGYzM2FhYjljZDNhYjQ2YTllYjkxNDFiNDZhOTNiNTE2OWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L1tWx/bTn2ofog6iWXiZAdz7pBW h5GMo/cunes/5SbIv6Vnc4j5EhFA7y/6aP2M1NaZpaBCVHNiXW0WEUzELINq/wst vj1aPjO5OHe7/MRu8Y+wAh8mq3UzdOoKKiiwUQBv6PDrXP4vXALEgCBrYip5p1lX nFp1k/lw8EFSMQN3JlIyS71G3hxG9XHtpa9XFGgjRegG7AZsWSfpiKSeNY27yh59 PP64vQjlUZLDbAGheS+GGmnxGp+LOhXJd6Q5Z2RyyWBZlrg179T8GNNSEqETrzcN jKsqleIT0shjN/4OE6febO5Y/JvUAjJg/d9t24XBTLPaBlOBDCXUXir9LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKxjzOquc06tGqeuRQbRqk7UWm2MB8GA1UdIwQY MBaAFN4MzSOR+jLAreKXxfyIMJCzmROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQt NjdjMWE2M2M1MTUwLzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQtNjdjMWE2M2M1MTUw LzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbGjMFS+ Fy7mAQQDoExEkltUsiaM8G42jqqaxFiB799OsO2yuFRi3OASzcW1eMUYq5Mn/4en o8XDlXaKxV65ZT9wh7/q8VTx3XpMr9XssWdbAlS3sPyqqkfFdrrYaqelR7aTu4b9 1Cz53ynXclrvJzj+SOn/6dyl6vEESg0mr0k1A6qotqgy63SClaj3trCuXCavlzNt YRPg3JfTP852dTIpBAdIxWMYAdp5fggP11K0hGSbHoKKnDNlsNL+ce/nnb34+TdH yiersDsJeyA7c9AA6awKQ1mgSlgF7zbBrfGdLkV7nFg+vbhzJkg/ffbtUPisruW3 DZ/+hspmkaqtgw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:18 2026 by rpki-client