This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json) Hash identifier: Ijx9nbajdwuoXUmX4Y7Zr/8E6xzLc/AbPDnZR4aa5NI= Subject key identifier: 56:0B:A8:58:04:D0:77:BE:DD:E9:E4:15:8D:12:E4:01:73:6F:E6:EA Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec Certificate serial: 019C427DD079000B6001CF99B3740B53D9A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 13:01:07 +0000 Manifest this update: Mon 09 Feb 2026 13:01:07 +0000 Manifest next update: Tue 10 Feb 2026 13:01:07 +0000 Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: ZRxnJ38W4GHfvyYJ9agxtqdAUxlCWW6uN2uJuGTjsUY=) 2: 6jm1c5ao4TIq41DDCm24Gn-cCvM.roa (hash: DHj5HqftZAg5kJDUChpZMa9puMwdu/NpQqmWhiH73fE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:d0:79:00:0b:60:01:cf:99:b3:74:0b:53:d9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec Validity Not Before: Feb 9 13:01:07 2026 GMT Not After : Feb 10 13:01:07 2026 GMT Subject: CN=560ba85804d077bedde9e4158d12e401736fe6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ee:c2:54:d2:9a:cd:5f:66:71:1a:f1:42:a0: 82:fd:65:1b:13:e2:8d:32:48:d7:5d:89:f5:f4:a2: 6a:32:eb:13:f7:fd:07:38:c2:c9:fb:e5:a0:c2:22: 94:12:d6:26:df:3b:15:5b:97:b9:2a:d5:02:e1:68: 8d:06:1b:c6:49:df:76:5b:a8:46:13:d4:28:26:06: d9:2f:e4:ca:e0:ce:35:48:e7:f5:5b:bd:84:85:e8: 7d:c9:5d:96:0b:7e:51:5f:a7:53:a9:a9:48:14:ec: 8d:75:12:a4:9f:1d:0e:36:65:50:7b:df:45:31:d3: f3:7a:c1:00:fc:7c:08:bf:29:ec:75:2d:20:e4:4d: 85:f4:98:48:8a:75:3f:34:26:d4:1a:db:09:7e:5b: b7:56:dc:c8:29:18:b8:7a:52:09:87:4c:aa:a4:48: 63:9e:18:69:c4:6c:77:62:76:4c:35:15:37:7c:58: 8f:61:01:b1:b1:87:d1:3b:80:e5:9d:00:bd:3d:4b: d4:a0:11:79:4b:e3:a4:01:5b:5c:0d:f8:9b:d1:15: 89:21:e6:07:a6:ec:17:05:af:c1:8d:6b:4e:4a:b8: 58:31:f1:6f:60:eb:88:2e:42:74:e9:47:e6:2b:0d: 5c:11:3c:28:dc:ee:22:8f:e7:91:20:3c:cb:e7:c1: 21:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0B:A8:58:04:D0:77:BE:DD:E9:E4:15:8D:12:E4:01:73:6F:E6:EA X509v3 Authority Key Identifier: keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d8:a3:fe:a7:ec:95:b6:c1:22:ec:cc:2a:4d:a7:96:7a:84: ac:d0:9c:80:90:40:cd:2b:57:18:b8:f0:04:30:f2:8d:a3:82: 58:1b:10:5b:12:70:69:03:c8:ed:e6:67:6e:d1:4b:1e:e1:64: 7f:ba:e9:c5:c7:e2:c9:dc:6f:f4:e9:9b:f3:46:c1:c2:32:91: 33:b4:87:bb:39:28:94:7c:80:31:04:03:f9:28:c1:2c:3d:7c: 29:39:5f:19:5f:f8:8f:b0:3c:8f:3b:b2:78:8c:7e:2c:73:5d: c0:88:b9:bb:e4:1b:e9:c7:23:8b:34:ff:3c:82:5e:0e:3a:df: fa:7f:03:db:98:c8:36:cb:6f:0a:5b:e0:b6:1e:80:c9:35:35: 58:de:d9:09:e3:6e:a6:07:10:91:41:d5:74:47:6d:50:fc:c9: c7:ed:f5:f9:4a:0e:cd:fb:4b:11:fb:7c:ad:c7:46:10:f1:40: d9:a5:94:31:32:23:6e:b3:f3:ca:a1:2e:cd:74:4f:bd:d0:8c: de:aa:18:38:83:41:b5:27:4f:97:ca:96:73:10:d6:7d:e3:8e: 08:d9:0a:a3:82:b1:16:d9:00:57:8c:47:41:5e:88:9a:4b:4c: d8:23:0d:44:28:c8:8a:ed:8c:3f:17:a4:51:37:63:77:52:a3: f3:d1:97:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdB5AAtgAc+Zs3QLU9moMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYzBmMTRmYWM4ZGRiMzQ4MDM3MjgwMDc2Y2MzNjYxNGRh MzA1ZWMwHhcNMjYwMjA5MTMwMTA3WhcNMjYwMjEwMTMwMTA3WjAzMTEwLwYDVQQD Eyg1NjBiYTg1ODA0ZDA3N2JlZGRlOWU0MTU4ZDEyZTQwMTczNmZlNmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7e7CVNKazV9mcRrxQqCC/WUbE+KN MkjXXYn19KJqMusT9/0HOMLJ++WgwiKUEtYm3zsVW5e5KtUC4WiNBhvGSd92W6hG E9QoJgbZL+TK4M41SOf1W72Eheh9yV2WC35RX6dTqalIFOyNdRKknx0ONmVQe99F MdPzesEA/HwIvynsdS0g5E2F9JhIinU/NCbUGtsJflu3VtzIKRi4elIJh0yqpEhj nhhpxGx3YnZMNRU3fFiPYQGxsYfRO4DlnQC9PUvUoBF5S+OkAVtcDfib0RWJIeYH puwXBa/BjWtOSrhYMfFvYOuILkJ06UfmKw1cETwo3O4ij+eRIDzL58EhfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYLqFgE0He+3enkFY0S5AFzb+bqMB8GA1UdIwQY MBaAFN7A8U+sjds0gDcoAHbMNmFNowXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMt ZWViNmZkMzJlOTJmLzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMtZWViNmZkMzJlOTJm LzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtij/qfs lbbBIuzMKk2nlnqErNCcgJBAzStXGLjwBDDyjaOCWBsQWxJwaQPI7eZnbtFLHuFk f7rpxcfiydxv9Omb80bBwjKRM7SHuzkolHyAMQQD+SjBLD18KTlfGV/4j7A8jzuy eIx+LHNdwIi5u+Qb6ccjizT/PIJeDjrf+n8D25jINstvClvgth6AyTU1WN7ZCeNu pgcQkUHVdEdtUPzJx+31+UoOzftLEft8rcdGEPFA2aWUMTIjbrPzyqEuzXRPvdCM 3qoYOINBtSdPl8qWcxDWfeOOCNkKo4KxFtkAV4xHQV6ImktM2CMNRCjIiu2MPxek UTdjd1Kj89GXvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:40 2026 by rpki-client