This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json) Hash identifier: YBpXSY6IWbiDRLZaqVPjXs0FSwyeACbl9vGJzJgezdk= Subject key identifier: A9:E5:85:A6:B1:91:D3:AA:48:3C:20:12:0F:6C:4D:EE:E1:58:A2:AB Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28 Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528 Certificate serial: 019C4246820E77E716150F2415D5C6E727FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 12:00:42 +0000 Manifest this update: Mon 09 Feb 2026 12:00:42 +0000 Manifest next update: Tue 10 Feb 2026 12:00:42 +0000 Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: LJzbcaJCZ1RZikyDW4BqKA0GtzkwfOF9t5V3Amh+Ijg=) 2: KNINNJg3cCwRIkadz_iFDjzCAZo.roa (hash: uyBgZTWuxKjfgaFUXeyVL4F1AHNOmaLe474fWdCTqys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:82:0e:77:e7:16:15:0f:24:15:d5:c6:e7:27:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528 Validity Not Before: Feb 9 12:00:42 2026 GMT Not After : Feb 10 12:00:42 2026 GMT Subject: CN=a9e585a6b191d3aa483c20120f6c4deee158a2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:80:85:df:56:6b:ee:d3:23:a4:e9:90:0d:de: 17:85:0f:c4:55:52:da:b1:e2:62:6b:a6:fd:8c:0c: 88:65:97:93:a5:af:8a:a1:3c:5d:03:2f:c3:43:e5: fd:34:22:52:f3:19:7a:a4:62:3b:2b:d9:17:97:80: 42:d7:36:f1:b5:59:69:0f:9b:5f:da:46:c7:9d:07: ed:0b:48:d3:5e:d2:8a:40:62:0d:46:36:08:b9:12: dc:2d:ad:4c:f1:fe:54:b2:cc:38:f2:d3:8f:f8:77: 26:08:5f:ce:80:e1:fa:ed:ef:2e:d9:3a:db:e4:4f: 8c:6e:73:5d:ae:82:d9:9e:0e:79:87:86:05:f6:a5: 91:af:96:57:3d:8c:e3:4f:65:d1:97:91:83:e6:4f: 18:50:01:30:01:e7:c2:55:e0:81:2a:34:aa:0f:1b: 90:7f:5e:1e:00:ae:65:65:13:a9:c9:79:50:7e:d0: ab:54:80:55:76:92:20:50:f1:c1:cc:bb:54:38:73: 88:5c:23:1c:3f:76:16:ad:27:1b:a2:b5:96:19:36: 4e:42:23:ad:db:2f:1e:7d:fb:fe:ab:1c:93:1a:f0: 85:1d:9f:56:a6:b2:9d:0f:ce:7b:47:f2:1c:5d:88: 2d:29:14:a3:ea:fa:2d:ba:1e:71:59:7d:4c:54:a5: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E5:85:A6:B1:91:D3:AA:48:3C:20:12:0F:6C:4D:EE:E1:58:A2:AB X509v3 Authority Key Identifier: keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:56:4c:d8:81:a5:6a:03:f4:d9:3b:6e:b7:46:6c:76:f0:fe: 55:c6:07:00:08:03:e6:34:16:e3:c6:01:f6:94:e1:0b:46:13: 4d:59:91:b9:6a:8b:00:17:2b:a8:04:40:e2:47:e3:3a:f1:6c: 60:1f:c5:fa:7c:31:e2:ea:59:b3:da:ea:4c:6f:47:cd:20:e9: 73:1f:dc:3f:65:0d:48:4a:b8:a9:55:e3:de:d7:aa:5a:d2:f4: b8:6b:e0:9e:2f:bb:3e:94:45:9b:a2:e7:e6:a8:fc:b9:7b:55: 96:15:b4:e6:3e:0b:74:9e:d4:3f:9e:cf:53:0b:92:fe:b0:ee: 9d:23:de:e7:d3:3e:34:bf:f6:fd:ad:8e:1e:72:5d:22:01:61: 8b:b2:4c:0f:34:77:6f:3f:74:34:c6:25:2a:f8:6b:5a:0c:95: 68:9d:06:49:27:d5:f6:82:b3:8e:e2:94:4c:f8:2d:9e:9f:e7: b0:b5:01:ee:b7:21:56:dd:39:aa:70:41:e2:c5:73:7d:09:0a: 22:14:d9:b7:41:8f:9a:6c:27:aa:fe:88:af:88:d5:1b:41:23: 3e:5c:47:bd:4e:19:14:64:c9:e0:a8:63:c0:c7:ab:d9:5a:2a: 1a:22:4e:7d:85:ac:1a:53:38:ad:23:7f:60:9f:2d:56:50:2b: f6:22:4d:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRoIOd+cWFQ8kFdXG5yf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOWYyYTkyNzM3OGJkMTQ1NWRhOGJkZjg1YmIxYWI4Njdl MWY1MjgwHhcNMjYwMjA5MTIwMDQyWhcNMjYwMjEwMTIwMDQyWjAzMTEwLwYDVQQD EyhhOWU1ODVhNmIxOTFkM2FhNDgzYzIwMTIwZjZjNGRlZWUxNThhMmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YCF31Zr7tMjpOmQDd4XhQ/EVVLa seJia6b9jAyIZZeTpa+KoTxdAy/DQ+X9NCJS8xl6pGI7K9kXl4BC1zbxtVlpD5tf 2kbHnQftC0jTXtKKQGINRjYIuRLcLa1M8f5Ussw48tOP+HcmCF/OgOH67e8u2Trb 5E+MbnNdroLZng55h4YF9qWRr5ZXPYzjT2XRl5GD5k8YUAEwAefCVeCBKjSqDxuQ f14eAK5lZROpyXlQftCrVIBVdpIgUPHBzLtUOHOIXCMcP3YWrScborWWGTZOQiOt 2y8effv+qxyTGvCFHZ9WprKdD857R/IcXYgtKRSj6votuh5xWX1MVKXwqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnlhaaxkdOqSDwgEg9sTe7hWKKrMB8GA1UdIwQY MBaAFN6fKpJzeL0UVdqL34W7Grhn4fUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQt NmRiMDkwMjE0MDM1LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQtNmRiMDkwMjE0MDM1 LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFZM2IGl agP02Ttut0ZsdvD+VcYHAAgD5jQW48YB9pThC0YTTVmRuWqLABcrqARA4kfjOvFs YB/F+nwx4upZs9rqTG9HzSDpcx/cP2UNSEq4qVXj3teqWtL0uGvgni+7PpRFm6Ln 5qj8uXtVlhW05j4LdJ7UP57PUwuS/rDunSPe59M+NL/2/a2OHnJdIgFhi7JMDzR3 bz90NMYlKvhrWgyVaJ0GSSfV9oKzjuKUTPgtnp/nsLUB7rchVt05qnBB4sVzfQkK IhTZt0GPmmwnqv6Ir4jVG0EjPlxHvU4ZFGTJ4KhjwMer2VoqGiJOfYWsGlM4rSN/ YJ8tVlAr9iJNiA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:46:05 2026 by rpki-client