This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json) Hash identifier: tsiM2wBlsmgsDvAOvt9AoaNAG/Moc72uLQfaZlsWPmE= Subject key identifier: FE:38:DD:71:3C:44:50:C6:79:90:BB:65:40:55:21:74:CD:D3:27:61 Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2 Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2 Certificate serial: 019C4322A320F4ACF2AF04F0F20182BA9455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft Manifest number: 118E Signing time: Mon 09 Feb 2026 16:01:09 +0000 Manifest this update: Mon 09 Feb 2026 16:01:09 +0000 Manifest next update: Tue 10 Feb 2026 16:01:09 +0000 Files and hashes: 1: OW3GzUlbWQENnbfu4RMR0Aal4tU.roa (hash: T8dOCgn615KaYC2W+2ZIkt7KqeRP31QpTplo42gs07s=) 2: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: VwbWuSBxKx3Dt+xqq098wH0uGL6L2cWsM8LwkBI04Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a3:20:f4:ac:f2:af:04:f0:f2:01:82:ba:94:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2 Validity Not Before: Feb 9 16:01:09 2026 GMT Not After : Feb 10 16:01:09 2026 GMT Subject: CN=fe38dd713c4450c67990bb6540552174cdd32761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:d3:4d:bb:a8:7b:6e:02:fc:ea:1a:60:fd: 9a:0c:ee:9e:df:40:35:49:5d:da:94:cc:96:7f:f3: 1d:1c:da:f1:fd:01:7b:2a:86:68:05:bd:d7:00:38: 87:38:82:dd:03:22:d5:00:15:e2:56:35:99:bf:7b: da:96:b6:90:95:98:d6:d5:0d:2d:a5:59:69:5b:23: da:b7:43:01:6d:d0:19:af:a2:95:8f:e4:6b:b4:f1: 16:c3:98:ad:86:ce:8d:b3:1d:69:6a:35:6f:79:f7: ad:ce:64:be:ea:33:53:ea:53:7a:d3:b1:b9:17:72: 40:99:97:fa:01:16:c6:52:30:20:8b:f9:14:3f:53: e7:d7:63:0b:2d:68:9b:f8:4d:71:54:fd:65:06:8d: 7c:21:00:fb:fe:17:99:80:ea:92:98:3f:ec:b3:fb: 1e:ff:2b:22:7c:d0:27:84:2e:7c:3b:3e:a7:33:83: f5:3d:13:ba:81:ce:bb:ad:93:dc:82:d5:0b:69:06: 4b:df:93:51:45:fd:c4:ac:ca:06:0b:6a:69:9c:23: db:90:ff:be:ae:18:b4:34:54:c8:6d:d9:09:81:c4: 5b:fd:44:0a:d0:5b:2b:27:1b:79:bb:50:5d:47:a1: 77:84:95:f3:bb:f6:18:02:9d:ce:ac:16:d7:b1:38: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:38:DD:71:3C:44:50:C6:79:90:BB:65:40:55:21:74:CD:D3:27:61 X509v3 Authority Key Identifier: keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:19:37:1c:df:3c:60:ef:05:f3:de:a4:a3:32:6d:a4:68:6f: be:23:20:e0:16:c2:3a:e1:f8:1b:3a:a8:97:9f:5d:46:9f:d3: e5:88:f4:a1:cb:aa:94:bc:87:77:2d:5c:d9:68:93:79:7b:f0: 32:20:2c:78:3e:58:41:7b:75:8f:c6:d1:d2:59:75:7f:bb:b2: 04:bb:7b:08:e1:6f:04:c4:78:d1:01:29:ae:21:49:26:c9:6a: 91:a2:3c:de:c4:1b:96:d3:0e:8e:2c:91:ec:85:55:9f:a2:84: 40:8c:53:10:9f:3d:d9:db:08:82:cf:ff:c2:ec:cd:08:bc:ce: 13:c3:cd:87:d4:80:ee:e9:ec:78:4a:25:5f:f8:cc:96:3f:b7: b8:e2:23:f3:67:63:70:f3:2a:66:d1:c5:82:49:1b:22:5e:49: 40:4a:4b:c9:b5:9e:f8:92:04:13:c0:28:df:d3:34:f1:b4:10: ae:e7:19:a3:05:ce:41:9a:45:ed:99:4d:ca:e1:e5:b4:54:d1: 21:c0:f9:2e:f7:83:ba:79:4d:b0:7f:29:89:e2:71:31:b0:0a: 52:4a:dc:4f:19:03:25:af:78:1b:07:7d:6f:a9:62:74:90:44: 2a:d2:08:af:6a:33:8d:2b:a5:93:f3:3f:33:7f:bb:ee:f1:e0: db:a0:0f:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqMg9KzyrwTw8gGCupRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGRmZTEwOWRlODMxZDMyZmQ3OGE1OGNjNWMxZDE0OWE0 NTUzZDIwHhcNMjYwMjA5MTYwMTA5WhcNMjYwMjEwMTYwMTA5WjAzMTEwLwYDVQQD EyhmZTM4ZGQ3MTNjNDQ1MGM2Nzk5MGJiNjU0MDU1MjE3NGNkZDMyNzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPbTTbuoe24C/OoaYP2aDO6e30A1 SV3alMyWf/MdHNrx/QF7KoZoBb3XADiHOILdAyLVABXiVjWZv3valraQlZjW1Q0t pVlpWyPat0MBbdAZr6KVj+RrtPEWw5iths6Nsx1pajVvefetzmS+6jNT6lN607G5 F3JAmZf6ARbGUjAgi/kUP1Pn12MLLWib+E1xVP1lBo18IQD7/heZgOqSmD/ss/se /ysifNAnhC58Oz6nM4P1PRO6gc67rZPcgtULaQZL35NRRf3ErMoGC2ppnCPbkP++ rhi0NFTIbdkJgcRb/UQK0FsrJxt5u1BdR6F3hJXzu/YYAp3OrBbXsTgx6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP443XE8RFDGeZC7ZUBVIXTN0ydhMB8GA1UdIwQY MBaAFDyN/hCd6DHTL9eKWMxcHRSaRVPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNTc5NjktZWE1Zi00NTE4LTkyZTEt NTNhMDY4MGY5NzEwLzEvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNTc5NjktZWE1Zi00NTE4LTkyZTEtNTNhMDY4MGY5NzEw LzEvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxk3HN88 YO8F896kozJtpGhvviMg4BbCOuH4Gzqol59dRp/T5Yj0ocuqlLyHdy1c2WiTeXvw MiAseD5YQXt1j8bR0ll1f7uyBLt7COFvBMR40QEpriFJJslqkaI83sQbltMOjiyR 7IVVn6KEQIxTEJ892dsIgs//wuzNCLzOE8PNh9SA7unseEolX/jMlj+3uOIj82dj cPMqZtHFgkkbIl5JQEpLybWe+JIEE8Ao39M08bQQrucZowXOQZpF7ZlNyuHltFTR IcD5LveDunlNsH8pieJxMbAKUkrcTxkDJa94Gwd9b6lidJBEKtIIr2ozjSulk/M/ M3+77vHg26APMQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:10 2026 by rpki-client