This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json) Hash identifier: niExwE2GNN2j6XFPY1xUc2Msw2l3SsYI1luYAY+Kl34= Subject key identifier: 0F:DB:AD:55:ED:1B:52:D1:1C:26:87:1A:0D:D2:AE:38:46:F5:A9:23 Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02 Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302 Certificate serial: 019C416AF5197D420823ACEB9F3D2B24AD08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft Manifest number: 0498 Signing time: Mon 09 Feb 2026 08:00:54 +0000 Manifest this update: Mon 09 Feb 2026 08:00:54 +0000 Manifest next update: Tue 10 Feb 2026 08:00:54 +0000 Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: /11XIeGlZgCGbaB/dCFUnyHBCUWQMOa6d8/4ybmz8Mw=) 2: RPnqpd4QiTnwCz1MgHARgUiKRfA.roa (hash: EMQ9uAHdxhy6q4kC92RKeDGjFCm7FDg8EbfwYcj/lNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:f5:19:7d:42:08:23:ac:eb:9f:3d:2b:24:ad:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302 Validity Not Before: Feb 9 08:00:54 2026 GMT Not After : Feb 10 08:00:54 2026 GMT Subject: CN=0fdbad55ed1b52d11c26871a0dd2ae3846f5a923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:9c:33:9c:79:d4:f8:1b:bd:64:f3:07:9b: 17:97:14:9f:eb:bc:24:4d:05:ba:fc:92:c7:39:c1: b9:35:6d:e0:71:66:b4:6c:49:1f:2d:c7:df:85:b3: 6d:8f:09:cc:b3:76:d8:18:cb:8c:b8:9b:dd:ed:f7: 93:23:fa:ac:3d:66:1d:a4:9b:4b:61:77:46:af:fc: 5a:64:4c:36:c4:1d:14:43:85:2c:8e:5f:0f:33:1c: 54:ec:47:d1:90:8c:f2:13:d5:cd:50:9c:14:29:3e: 1c:d3:84:38:c5:2a:b8:50:f4:24:ef:12:53:ec:9f: 77:c7:b0:5a:f6:2f:95:0c:b0:1a:c6:65:8d:35:1e: 85:df:43:00:4b:67:d5:39:6d:f4:11:80:8e:0d:c8: ed:3e:9e:e9:dc:5f:98:c5:c9:13:3f:77:89:5a:89: 05:ff:33:08:75:e0:d4:34:20:cd:8a:e2:dc:60:34: a8:45:94:75:3a:ab:e9:57:a8:00:55:83:23:8a:5d: e4:a1:40:2e:4b:d2:2d:c5:94:ea:57:66:52:e3:82: 8a:d5:08:c7:ff:1c:33:08:05:db:2c:72:79:ac:2c: 12:2c:ca:1e:a2:00:84:dd:25:85:d6:a3:75:45:11: 9b:06:bd:74:a5:89:38:18:f1:f8:e8:1e:8f:d8:71: 33:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DB:AD:55:ED:1B:52:D1:1C:26:87:1A:0D:D2:AE:38:46:F5:A9:23 X509v3 Authority Key Identifier: keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:dc:22:0e:6f:2b:ad:41:13:eb:70:4b:c0:59:70:d9:c7:e2: 51:2e:34:fb:95:df:05:21:af:0c:dd:6c:52:b8:78:a7:4c:95: c8:9a:a7:eb:4e:2f:c6:95:82:a9:23:b8:41:c9:0c:a8:2c:11: fc:d1:2a:30:a8:ea:39:13:7c:b2:84:5e:03:a3:60:86:40:04: b1:2a:d0:81:75:22:d9:79:ee:a6:71:c9:7c:bd:64:d6:ec:9c: 04:9d:29:e6:1b:40:6b:88:6c:aa:4c:71:fd:47:de:1b:1d:37: 15:f3:6a:fa:55:5c:fc:d5:bb:67:c3:00:c1:22:70:98:cf:a2: 9e:9b:4d:41:70:68:eb:09:a2:bd:65:2b:47:43:ce:e8:ea:fd: c5:4e:f3:90:2f:cb:e8:6e:d7:76:5c:9d:26:92:65:a9:52:be: ef:8d:01:e7:00:da:ac:15:80:b3:93:b2:52:b2:6b:49:0f:a6: 47:76:c3:fa:c1:2a:14:40:d1:af:fb:b4:33:bd:63:fb:df:b4: 06:84:4c:54:d6:e2:3e:83:a7:aa:9a:46:8e:25:2e:1e:d8:57: e9:90:03:bc:c9:44:c2:1d:0a:61:a7:a7:4f:dd:95:d5:2c:94: 6c:25:dc:89:6f:af:09:24:5a:4d:b1:1d:67:9d:aa:fe:f8:0f: 35:f7:27:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBavUZfUIII6zrnz0rJK0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOGUzODE4N2FlNzBjYmM3YmVkNjk1NzU5ZjBlMDMyOTlm YmIzMDIwHhcNMjYwMjA5MDgwMDU0WhcNMjYwMjEwMDgwMDU0WjAzMTEwLwYDVQQD EygwZmRiYWQ1NWVkMWI1MmQxMWMyNjg3MWEwZGQyYWUzODQ2ZjVhOTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+KcM5x51PgbvWTzB5sXlxSf67wk TQW6/JLHOcG5NW3gcWa0bEkfLcffhbNtjwnMs3bYGMuMuJvd7feTI/qsPWYdpJtL YXdGr/xaZEw2xB0UQ4Usjl8PMxxU7EfRkIzyE9XNUJwUKT4c04Q4xSq4UPQk7xJT 7J93x7Ba9i+VDLAaxmWNNR6F30MAS2fVOW30EYCODcjtPp7p3F+YxckTP3eJWokF /zMIdeDUNCDNiuLcYDSoRZR1OqvpV6gAVYMjil3koUAuS9ItxZTqV2ZS44KK1QjH /xwzCAXbLHJ5rCwSLMoeogCE3SWF1qN1RRGbBr10pYk4GPH46B6P2HEzKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/brVXtG1LRHCaHGg3SrjhG9akjMB8GA1UdIwQY MBaAFN6OOBh65wy8e+1pV1nw4DKZ+7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMt NWIxZjQ4YjNlMjE0LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMtNWIxZjQ4YjNlMjE0 LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdwiDm8r rUET63BLwFlw2cfiUS40+5XfBSGvDN1sUrh4p0yVyJqn604vxpWCqSO4QckMqCwR /NEqMKjqORN8soReA6NghkAEsSrQgXUi2XnupnHJfL1k1uycBJ0p5htAa4hsqkxx /UfeGx03FfNq+lVc/NW7Z8MAwSJwmM+inptNQXBo6wmivWUrR0PO6Or9xU7zkC/L 6G7XdlydJpJlqVK+740B5wDarBWAs5OyUrJrSQ+mR3bD+sEqFEDRr/u0M71j+9+0 BoRMVNbiPoOnqppGjiUuHthX6ZADvMlEwh0KYaenT92V1SyUbCXciW+vCSRaTbEd Z52q/vgPNfcnMA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:31 2026 by rpki-client