This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft File: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json) Hash identifier: R2nEeV3eIEiA3duYMbxvD3dD38vnJ28a4Su6PZR15ZA= Subject key identifier: 20:BF:93:8F:D6:F0:64:A8:53:3C:C4:98:0B:8E:59:AB:2A:34:74:56 Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2 Certificate issuer: /CN=de0b59fb68151e21dc99d62faf03589be41fbea2 Certificate serial: 019C42B445DDD18EF2A8DCD1D1D6EB68EA73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft Manifest number: 0C15 Signing time: Mon 09 Feb 2026 14:00:36 +0000 Manifest this update: Mon 09 Feb 2026 14:00:36 +0000 Manifest next update: Tue 10 Feb 2026 14:00:36 +0000 Files and hashes: 1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: Pyp1cOdT3T3QC+nTvp1Y1B6i9za9HZ9+5cw5nO5V8pU=) 2: EpYfEYO_PBauG2EManfF8FgFl1Q.roa (hash: cXvNIHvNyPlxk30rEJGQL1sdKxLXm0Gvh2LNp2Lvi3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:45:dd:d1:8e:f2:a8:dc:d1:d1:d6:eb:68:ea:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2 Validity Not Before: Feb 9 14:00:36 2026 GMT Not After : Feb 10 14:00:36 2026 GMT Subject: CN=20bf938fd6f064a8533cc4980b8e59ab2a347456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:40:7d:0f:6b:c6:07:2a:28:1f:a3:af:48: 6b:64:a0:63:ab:88:9a:11:7f:b0:c0:e4:5e:98:bc: d6:c2:03:21:07:f2:df:24:a5:16:38:44:cd:c9:89: d7:16:5a:62:ac:4a:bf:97:65:23:6f:95:e5:7d:de: 86:77:4f:71:bb:a1:75:90:e9:a9:41:de:4b:d4:53: 78:7b:74:bf:a8:23:88:84:83:a1:67:f6:2c:3b:7f: 37:b2:c2:e1:a7:d5:46:94:0d:95:3f:96:4e:31:d4: 89:a3:f1:3f:35:4f:0f:2e:55:83:e7:b8:76:7e:cb: 88:ea:23:ac:0b:a7:5f:93:52:bf:d9:3f:b8:08:55: f9:63:c2:08:db:95:9b:3a:1b:17:2e:f7:6e:34:5e: 5e:15:be:13:66:c0:42:bf:bd:54:b3:5d:0a:6f:50: 61:4c:03:0e:0e:39:d9:b7:fd:81:b3:8c:6d:46:5c: 9e:f4:8d:e0:44:3f:02:6e:58:f5:f2:a9:75:2b:14: 63:de:28:06:4e:4f:0e:fa:36:82:e1:57:0e:36:6a: 36:48:c1:30:f2:1b:cb:bc:8e:64:6d:7d:08:33:f0: 49:6a:73:6e:9a:1d:ae:70:57:99:13:59:16:64:93: 41:dd:24:95:87:c1:32:2a:03:20:ee:94:42:eb:c3: 4a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BF:93:8F:D6:F0:64:A8:53:3C:C4:98:0B:8E:59:AB:2A:34:74:56 X509v3 Authority Key Identifier: keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7d:2d:4c:37:35:35:75:c9:a1:d3:16:6f:b5:48:de:f6:53: f0:ef:bd:ee:70:dd:e9:8a:2e:e5:c6:97:9c:b5:1a:c4:58:10: 18:0d:b2:63:d7:03:14:bd:69:56:46:12:02:63:45:70:bf:e9: 5d:a8:62:30:98:53:0d:5e:eb:62:ee:10:2a:e6:ab:88:b5:64: 02:eb:55:85:16:b9:f9:a1:c4:e7:20:48:4e:65:59:a2:69:67: 21:ba:17:7b:f9:1d:74:82:81:c2:fe:b4:b9:15:3a:98:3d:56: df:17:ea:1e:d1:a7:2f:4c:f7:c1:40:49:2e:4c:ac:b0:0d:21: 76:d7:fc:0e:3b:45:5d:75:f9:a2:67:9e:cf:b8:79:a8:38:8b: 34:29:46:c3:1f:3b:31:50:a6:87:d0:bf:3f:f9:8a:73:18:98: 35:66:20:c8:a9:f0:34:3c:47:ee:5e:49:15:14:d5:b4:2e:a5: 36:c2:80:ac:42:9c:46:15:d8:90:a3:30:fc:89:af:3b:9c:8b: 4e:f4:a5:c0:90:5d:bb:34:42:ff:c0:04:e5:23:c7:29:95:f1: fe:9f:4b:17:94:1e:01:37:cc:88:8b:43:19:9e:4e:51:30:9f: 61:9b:48:0a:52:a7:57:1a:79:c1:60:d9:c2:e9:6d:d1:9a:17: 90:4e:fc:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtEXd0Y7yqNzR0dbraOpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGI1OWZiNjgxNTFlMjFkYzk5ZDYyZmFmMDM1ODliZTQx ZmJlYTIwHhcNMjYwMjA5MTQwMDM2WhcNMjYwMjEwMTQwMDM2WjAzMTEwLwYDVQQD EygyMGJmOTM4ZmQ2ZjA2NGE4NTMzY2M0OTgwYjhlNTlhYjJhMzQ3NDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs11AfQ9rxgcqKB+jr0hrZKBjq4ia EX+wwORemLzWwgMhB/LfJKUWOETNyYnXFlpirEq/l2Ujb5Xlfd6Gd09xu6F1kOmp Qd5L1FN4e3S/qCOIhIOhZ/YsO383ssLhp9VGlA2VP5ZOMdSJo/E/NU8PLlWD57h2 fsuI6iOsC6dfk1K/2T+4CFX5Y8II25WbOhsXLvduNF5eFb4TZsBCv71Us10Kb1Bh TAMODjnZt/2Bs4xtRlye9I3gRD8Cblj18ql1KxRj3igGTk8O+jaC4VcONmo2SMEw 8hvLvI5kbX0IM/BJanNumh2ucFeZE1kWZJNB3SSVh8EyKgMg7pRC68NKkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCC/k4/W8GSoUzzEmAuOWasqNHRWMB8GA1UdIwQY MBaAFN4LWftoFR4h3JnWL68DWJvkH76iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YWQ1MDgtYmZjMS00YjhhLWJhZmMt Y2QwMjQ3ODhlZDNjLzEvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85YWQ1MDgtYmZjMS00YjhhLWJhZmMtY2QwMjQ3ODhlZDNj LzEvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARn0tTDc1 NXXJodMWb7VI3vZT8O+97nDd6You5caXnLUaxFgQGA2yY9cDFL1pVkYSAmNFcL/p XahiMJhTDV7rYu4QKuariLVkAutVhRa5+aHE5yBITmVZomlnIboXe/kddIKBwv60 uRU6mD1W3xfqHtGnL0z3wUBJLkyssA0hdtf8DjtFXXX5omeez7h5qDiLNClGwx87 MVCmh9C/P/mKcxiYNWYgyKnwNDxH7l5JFRTVtC6lNsKArEKcRhXYkKMw/ImvO5yL TvSlwJBduzRC/8AE5SPHKZXx/p9LF5QeATfMiItDGZ5OUTCfYZtIClKnVxp5wWDZ wult0ZoXkE78/Q== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:09 2026 by rpki-client