This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json) Hash identifier: 3iK8lUHDuP/AAQGhwp9gcrBk0P2RdiLn8GuDdHFv/PY= Subject key identifier: C2:7A:93:37:23:0D:51:70:0B:94:9A:E8:40:18:B0:5D:E3:B0:90:7C Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab Certificate serial: 019C41D873B24EE1FDAC28DD9BA4B878972D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft Manifest number: 14B4 Signing time: Mon 09 Feb 2026 10:00:30 +0000 Manifest this update: Mon 09 Feb 2026 10:00:30 +0000 Manifest next update: Tue 10 Feb 2026 10:00:30 +0000 Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: wRNVcvn1IWbVnByKuGD7/A97q5eLEj65up17J+9t8ks=) 2: INE61DSnT0byRQAlBRacyXpwM4M.roa (hash: ZjFf2bVbEAR4MMNRtk1mizzAeZIxKBJHJE2Ioiflxw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:73:b2:4e:e1:fd:ac:28:dd:9b:a4:b8:78:97:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab Validity Not Before: Feb 9 10:00:30 2026 GMT Not After : Feb 10 10:00:30 2026 GMT Subject: CN=c27a9337230d51700b949ae84018b05de3b0907c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a8:68:da:9b:41:6d:2e:94:8b:17:65:89:83: 71:c6:9f:9a:6f:4d:32:c4:35:23:90:aa:72:e5:33: 32:ad:92:a2:c5:10:c7:bc:fb:d8:53:67:98:77:ab: ce:5d:b0:65:ae:ad:8f:d7:ed:dc:2e:49:85:58:73: 63:b8:7a:d0:3a:68:06:b9:83:03:3b:68:ec:b7:ba: a5:1e:7a:3e:0c:76:f5:d4:6b:93:cf:67:f5:cf:d2: 1f:74:17:b8:f0:c6:61:13:e3:02:1c:09:7b:84:8a: 20:05:3f:9f:66:82:ee:df:fb:ce:b6:f7:c9:f5:92: 8a:0d:d8:11:a4:c0:38:56:f7:22:62:bf:85:90:60: 86:2f:b2:d1:4c:8a:b6:c3:21:60:3f:02:51:cf:5c: 38:0a:93:57:dc:66:6d:0c:48:e0:1e:0b:4a:a6:7b: 7c:ad:47:be:2c:45:05:20:90:bc:38:23:e9:f8:0c: 0b:b0:6c:c1:69:a7:ee:71:f4:85:4a:08:d6:40:10: 7f:36:e0:7c:bf:3c:c1:7a:4a:36:f7:44:9a:8a:23: a8:49:e3:58:85:08:bd:1c:a4:35:7f:04:27:21:ec: 33:3d:37:56:ad:cb:fc:ce:c7:88:c0:9f:9e:a3:02: 40:e7:6a:bb:42:15:60:0c:e8:d1:9e:a6:eb:e9:11: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7A:93:37:23:0D:51:70:0B:94:9A:E8:40:18:B0:5D:E3:B0:90:7C X509v3 Authority Key Identifier: keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d0:ee:18:5c:b9:ef:62:5a:92:8a:5a:50:77:c5:61:62:87: 7a:05:f4:27:f0:c7:98:43:64:1e:7e:06:dd:37:8c:d2:41:2c: 69:bb:79:10:09:c9:5f:31:0b:ca:7f:60:8c:02:61:33:60:69: 03:33:83:af:e1:81:d5:21:9e:fb:ce:25:99:7f:c0:21:4c:dc: ba:ec:72:30:3a:e0:77:95:75:0c:0f:5f:29:3b:f4:dc:b4:ed: 13:43:fb:7b:53:7f:c6:a0:35:09:d6:06:f0:a1:99:c3:c2:4d: 7b:9e:35:24:6d:70:f1:52:aa:e4:5a:76:ab:46:74:cb:4a:9c: 56:39:24:e8:f6:65:3e:3c:ea:44:da:6e:4c:b3:49:15:2a:8e: 50:88:84:71:e5:31:7e:cc:41:05:95:dc:9c:32:ac:1c:72:9f: a3:fa:04:ee:6f:ab:78:0e:3f:4e:df:2a:8a:f6:67:b4:56:11: d3:57:06:3c:40:96:b6:52:e9:05:33:14:38:81:ff:6d:a9:03: 70:96:d0:cb:e9:0a:af:ec:5a:0c:40:d4:a0:13:49:94:52:9c: 46:b3:f9:c4:f1:65:de:b3:52:43:3c:4e:01:b5:fc:f4:83:ff: ce:f3:0f:f1:70:8b:2a:82:f2:e7:b4:3f:39:f2:eb:7e:ba:77: a8:c5:ad:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2HOyTuH9rCjdm6S4eJctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5 OThlYWIwHhcNMjYwMjA5MTAwMDMwWhcNMjYwMjEwMTAwMDMwWjAzMTEwLwYDVQQD EyhjMjdhOTMzNzIzMGQ1MTcwMGI5NDlhZTg0MDE4YjA1ZGUzYjA5MDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qho2ptBbS6UixdliYNxxp+ab00y xDUjkKpy5TMyrZKixRDHvPvYU2eYd6vOXbBlrq2P1+3cLkmFWHNjuHrQOmgGuYMD O2jst7qlHno+DHb11GuTz2f1z9IfdBe48MZhE+MCHAl7hIogBT+fZoLu3/vOtvfJ 9ZKKDdgRpMA4VvciYr+FkGCGL7LRTIq2wyFgPwJRz1w4CpNX3GZtDEjgHgtKpnt8 rUe+LEUFIJC8OCPp+AwLsGzBaafucfSFSgjWQBB/NuB8vzzBeko290SaiiOoSeNY hQi9HKQ1fwQnIewzPTdWrcv8zseIwJ+eowJA52q7QhVgDOjRnqbr6RFDrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ6kzcjDVFwC5Sa6EAYsF3jsJB8MB8GA1UdIwQY MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtDuGFy5 72JakopaUHfFYWKHegX0J/DHmENkHn4G3TeM0kEsabt5EAnJXzELyn9gjAJhM2Bp AzODr+GB1SGe+84lmX/AIUzcuuxyMDrgd5V1DA9fKTv03LTtE0P7e1N/xqA1CdYG 8KGZw8JNe541JG1w8VKq5Fp2q0Z0y0qcVjkk6PZlPjzqRNpuTLNJFSqOUIiEceUx fsxBBZXcnDKsHHKfo/oE7m+reA4/Tt8qivZntFYR01cGPECWtlLpBTMUOIH/bakD cJbQy+kKr+xaDEDUoBNJlFKcRrP5xPFl3rNSQzxOAbX89IP/zvMP8XCLKoLy57Q/ OfLrfrp3qMWtSQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:36 2026 by rpki-client