This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json) Hash identifier: pNLdtxeoIcnKw6bSIOd1lNWUHFQxnpopAuujh++kfk0= Subject key identifier: 96:7D:43:04:E4:77:21:D4:1D:D0:4B:A7:01:EC:D0:B0:3D:F0:F9:A5 Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb Certificate serial: 019C446C2C8D0B23BEBDDA39496888D14ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft Manifest number: 02D7 Signing time: Mon 09 Feb 2026 22:01:05 +0000 Manifest this update: Mon 09 Feb 2026 22:01:05 +0000 Manifest next update: Tue 10 Feb 2026 22:01:05 +0000 Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: FSiVu2qfI0NH2b6VC9DwDrL5UYRJZUk7IqSjkRhnaTg=) 2: j9kxk_tAwUgeNl7TqWWToAuo7-I.roa (hash: zHNTjJflclZYXilnm9iiED1a7nYrKcFrqoiJZmNUrRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:2c:8d:0b:23:be:bd:da:39:49:68:88:d1:4a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb Validity Not Before: Feb 9 22:01:05 2026 GMT Not After : Feb 10 22:01:05 2026 GMT Subject: CN=967d4304e47721d41dd04ba701ecd0b03df0f9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:66:81:0f:29:4a:b2:86:59:9f:55:14:90:c7: a4:b4:d9:60:44:04:67:c9:27:00:c7:84:89:a2:7c: 30:81:e9:3f:97:32:d8:49:c5:f0:29:56:a0:a1:f1: 10:6d:0c:15:f0:de:23:07:cf:b8:d4:ab:9a:f5:8a: 39:e0:84:43:70:0b:5e:71:17:1e:dd:36:f1:db:db: 19:58:1d:50:e6:2f:a0:48:93:87:49:b1:1f:c7:f4: 61:86:5f:f8:c8:71:7e:9d:5a:72:12:39:c7:cb:6c: 52:53:d7:6c:3a:3a:8a:0c:d6:7e:e5:38:3e:f0:74: 3f:91:01:f8:39:4b:5c:8b:d8:a5:f6:c8:52:0f:46: 57:e5:23:e5:19:11:b0:cf:8a:5c:7d:5e:55:b2:2a: ec:16:79:a6:41:60:d6:fd:5c:6b:a0:91:49:a9:f5: 99:aa:95:36:a2:15:77:a3:eb:d8:79:2b:01:e4:07: d1:73:5f:da:1b:92:a3:52:9f:c7:f9:62:d7:3d:f5: 8b:90:67:f8:db:d4:39:9d:e0:f9:3f:2c:f1:ea:a8: 75:ef:8d:dc:72:4b:25:46:c2:40:92:2b:49:91:a9: e1:a9:94:04:1c:7b:84:5b:a5:bd:bd:d6:e0:7a:ec: e7:80:8c:0b:70:83:d6:d2:61:44:2d:70:48:fa:a3: af:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7D:43:04:E4:77:21:D4:1D:D0:4B:A7:01:EC:D0:B0:3D:F0:F9:A5 X509v3 Authority Key Identifier: keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d7:ca:a3:5c:97:fb:cb:4e:59:a6:59:3b:a0:7c:a4:dd:6c: bb:fb:0c:11:4a:8e:51:26:72:5a:1b:b4:96:a0:09:41:5c:97: 9c:ee:fd:1e:94:6d:e5:a4:d7:83:ce:3e:d3:b2:9b:eb:77:ba: ef:40:03:dd:71:6b:3d:76:40:b2:44:3e:1e:58:3f:9a:e8:4c: 6e:e4:e4:c4:a3:30:59:e7:71:a7:cf:d6:af:3d:56:3f:57:64: ee:56:65:69:c6:3f:28:62:08:da:55:e9:f8:50:6b:f2:9d:79: 18:8c:96:64:af:32:73:08:07:c6:6d:c4:1e:92:b9:be:ae:45: b6:1f:8b:42:e9:d6:2c:b8:b2:c3:28:1a:ad:f9:b4:4d:81:66: 39:0e:08:68:56:52:07:df:b9:fc:43:fe:c5:b2:85:cf:5f:dc: 8b:b7:ac:65:92:b3:f9:79:b7:e4:f0:ec:64:96:16:4a:10:7a: 40:4b:4b:61:0d:b5:0b:0b:e5:47:02:65:e4:85:69:09:bb:8b: ca:03:5e:4b:03:72:8d:2d:87:a0:ab:24:36:8b:24:67:ad:36: 70:b7:b3:4d:f7:ff:21:a4:94:c6:07:52:07:e6:aa:7a:bb:2a: 90:0e:f9:ff:cc:58:86:12:8e:fc:91:c6:25:69:da:5c:69:30: 22:49:86:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbCyNCyO+vdo5SWiI0Uq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMDA2ZWQ4NzFhNWNlMDBkMmJiZjk2OGJjMDk0MGVlNTg2 YTNjZWIwHhcNMjYwMjA5MjIwMTA1WhcNMjYwMjEwMjIwMTA1WjAzMTEwLwYDVQQD Eyg5NjdkNDMwNGU0NzcyMWQ0MWRkMDRiYTcwMWVjZDBiMDNkZjBmOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1maBDylKsoZZn1UUkMektNlgRARn yScAx4SJonwwgek/lzLYScXwKVagofEQbQwV8N4jB8+41Kua9Yo54IRDcAtecRce 3Tbx29sZWB1Q5i+gSJOHSbEfx/Rhhl/4yHF+nVpyEjnHy2xSU9dsOjqKDNZ+5Tg+ 8HQ/kQH4OUtci9il9shSD0ZX5SPlGRGwz4pcfV5VsirsFnmmQWDW/VxroJFJqfWZ qpU2ohV3o+vYeSsB5AfRc1/aG5KjUp/H+WLXPfWLkGf429Q5neD5Pyzx6qh1743c ckslRsJAkitJkanhqZQEHHuEW6W9vdbgeuzngIwLcIPW0mFELXBI+qOvTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZ9QwTkdyHUHdBLpwHs0LA98PmlMB8GA1UdIwQY MBaAFN8Abthxpc4A0rv5aLwJQO5YajzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYt OTViOWUzNjJmMDc3LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYtOTViOWUzNjJmMDc3 LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdfKo1yX +8tOWaZZO6B8pN1su/sMEUqOUSZyWhu0lqAJQVyXnO79HpRt5aTXg84+07Kb63e6 70AD3XFrPXZAskQ+Hlg/muhMbuTkxKMwWedxp8/Wrz1WP1dk7lZlacY/KGII2lXp +FBr8p15GIyWZK8ycwgHxm3EHpK5vq5Fth+LQunWLLiywygarfm0TYFmOQ4IaFZS B9+5/EP+xbKFz1/ci7esZZKz+Xm35PDsZJYWShB6QEtLYQ21CwvlRwJl5IVpCbuL ygNeSwNyjS2HoKskNoskZ602cLezTff/IaSUxgdSB+aqersqkA75/8xYhhKO/JHG JWnaXGkwIkmGwg== -----END CERTIFICATE-----Generated at Tue Feb 10 05:51:22 2026 by rpki-client