This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json) Hash identifier: 94LC7TpAetenmq9hHUBdjf2mrYemSq9g5iYPY3R0oWY= Subject key identifier: 8F:98:3E:BD:BA:55:31:98:52:71:B8:0A:3B:70:78:4C:F1:E7:B8:80 Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd Certificate serial: 019C432200DC86DC329C1370097B38AF0101 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft Manifest number: 1182 Signing time: Mon 09 Feb 2026 16:00:27 +0000 Manifest this update: Mon 09 Feb 2026 16:00:27 +0000 Manifest next update: Tue 10 Feb 2026 16:00:27 +0000 Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: H+WuP3GQuNN8MMTVwJ/d/Ujzma1MN7M4T+fJYscpuOk=) 2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:00:dc:86:dc:32:9c:13:70:09:7b:38:af:01:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd Validity Not Before: Feb 9 16:00:27 2026 GMT Not After : Feb 10 16:00:27 2026 GMT Subject: CN=8f983ebdba5531985271b80a3b70784cf1e7b880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:2a:15:c5:48:a6:05:11:1b:45:6b:dd:8e: 67:a2:82:9b:ee:d8:9f:38:18:fc:06:4f:f1:b7:84: 1c:ec:75:e4:9d:59:4c:e1:bc:35:9b:55:62:ac:ab: e4:65:4d:48:42:44:9e:19:86:b3:75:00:12:4d:0a: c2:13:7b:e5:d4:0c:db:d1:9d:81:3d:3e:10:4d:4b: af:50:fe:2c:f6:ea:a8:f8:be:9a:cc:0a:fc:22:c7: bd:e7:58:0a:44:d0:ee:14:d5:fc:f7:63:2a:75:ca: fd:76:07:d0:98:62:96:9c:97:dc:6a:dd:c4:a2:a4: 4d:b3:ad:40:37:d6:b7:63:cc:2b:86:8e:03:6d:62: 71:57:5a:bf:af:ff:cd:7a:1e:17:bd:b4:65:dc:33: de:97:e1:6a:4d:39:7a:07:f0:f8:2d:fb:3b:6e:99: 80:68:ba:b9:b2:90:29:9a:57:86:3d:16:e8:06:81: 75:cb:f2:c1:f3:8d:f2:a2:72:f6:30:83:f2:5b:4b: e8:c9:68:e9:6d:4d:8c:4e:5d:e9:e4:72:74:d1:d1: 18:08:4e:9a:2e:9c:1c:01:94:9b:7f:bf:0e:99:c9: 90:d9:f2:49:85:db:71:15:f7:ca:7c:0c:a2:50:8b: 92:8d:61:de:f2:0d:c3:10:64:f0:79:e5:d2:23:ff: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:98:3E:BD:BA:55:31:98:52:71:B8:0A:3B:70:78:4C:F1:E7:B8:80 X509v3 Authority Key Identifier: keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d9:a3:d9:e5:2c:31:8e:be:13:36:a6:e8:56:41:c1:8b:c8: a5:73:c3:e5:15:11:36:19:15:26:bc:d2:f4:c0:28:2b:32:84: c7:79:79:6c:75:47:c7:76:05:8f:a6:8a:7f:ca:69:cb:49:34: 3f:2c:90:18:ef:c9:e0:66:fd:78:33:81:88:ef:00:64:2f:14: 24:0c:ef:31:f9:9a:49:c9:88:13:b3:d0:eb:4d:63:c6:ee:71: 28:7e:8c:5d:b5:7b:ea:ea:ea:af:e8:4a:10:53:9a:f3:af:f0: 11:60:74:f4:01:1f:08:5d:43:88:6a:18:8e:2a:a6:66:2f:6d: 8a:7c:df:49:45:a6:fc:b1:e2:a2:2b:5d:9a:51:65:7c:24:51: 8a:12:a6:79:db:d2:23:85:17:c6:bc:52:65:92:2e:42:87:22: f3:f1:44:62:6c:26:b9:ff:03:89:7d:21:12:d2:01:c9:e0:0f: 82:de:f8:8e:1d:4f:9a:0f:e2:66:34:4c:30:72:e4:26:cd:39: da:a2:e6:28:92:76:6b:70:7d:74:a2:1b:08:90:60:40:f9:14: 52:98:64:5f:28:f8:a1:33:f8:6c:d2:1c:20:1c:05:87:5f:8e: fb:1b:6a:24:32:8c:24:ba:6e:f5:27:00:38:4e:d0:4b:99:47: d6:94:a2:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgDchtwynBNwCXs4rwEBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNGUzODkyZjQ2YjEwNzg1MmMzZWFlMWIyN2RjY2Y2MGZh Yjk5YmQwHhcNMjYwMjA5MTYwMDI3WhcNMjYwMjEwMTYwMDI3WjAzMTEwLwYDVQQD Eyg4Zjk4M2ViZGJhNTUzMTk4NTI3MWI4MGEzYjcwNzg0Y2YxZTdiODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuygqFcVIpgURG0Vr3Y5nooKb7tif OBj8Bk/xt4Qc7HXknVlM4bw1m1VirKvkZU1IQkSeGYazdQASTQrCE3vl1Azb0Z2B PT4QTUuvUP4s9uqo+L6azAr8Ise951gKRNDuFNX892Mqdcr9dgfQmGKWnJfcat3E oqRNs61AN9a3Y8wrho4DbWJxV1q/r//Neh4XvbRl3DPel+FqTTl6B/D4Lfs7bpmA aLq5spApmleGPRboBoF1y/LB843yonL2MIPyW0voyWjpbU2MTl3p5HJ00dEYCE6a LpwcAZSbf78OmcmQ2fJJhdtxFffKfAyiUIuSjWHe8g3DEGTweeXSI/+h5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+YPr26VTGYUnG4CjtweEzx57iAMB8GA1UdIwQY MBaAFN1OOJL0axB4UsPq4bJ9zPYPq5m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTkt M2I1YjcxY2JiMzIyLzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTktM2I1YjcxY2JiMzIy LzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtmj2eUs MY6+Ezam6FZBwYvIpXPD5RURNhkVJrzS9MAoKzKEx3l5bHVHx3YFj6aKf8ppy0k0 PyyQGO/J4Gb9eDOBiO8AZC8UJAzvMfmaScmIE7PQ601jxu5xKH6MXbV76urqr+hK EFOa86/wEWB09AEfCF1DiGoYjiqmZi9tinzfSUWm/LHioitdmlFlfCRRihKmedvS I4UXxrxSZZIuQoci8/FEYmwmuf8DiX0hEtIByeAPgt74jh1Pmg/iZjRMMHLkJs05 2qLmKJJ2a3B9dKIbCJBgQPkUUphkXyj4oTP4bNIcIBwFh1+O+xtqJDKMJLpu9ScA OE7QS5lH1pSimg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:44 2026 by rpki-client