This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json) Hash identifier: SLek2ldkPpyaON+Zf+FSYwHzi3cztgGAm+63twgvFuw= Subject key identifier: D2:72:67:C6:FE:CA:60:6C:9D:E1:F0:0B:60:47:08:30:C4:2A:84:E8 Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53 Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53 Certificate serial: 019C420F8029BD5B347F60AB3041C8BA1262 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft Manifest number: 1343 Signing time: Mon 09 Feb 2026 11:00:37 +0000 Manifest this update: Mon 09 Feb 2026 11:00:37 +0000 Manifest next update: Tue 10 Feb 2026 11:00:37 +0000 Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: HaMojeOYZsUUYCpyS1OD+Vmsn7OD/ttKXavxgyvisLs=) 2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:80:29:bd:5b:34:7f:60:ab:30:41:c8:ba:12:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53 Validity Not Before: Feb 9 11:00:37 2026 GMT Not After : Feb 10 11:00:37 2026 GMT Subject: CN=d27267c6feca606c9de1f00b60470830c42a84e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:6b:80:df:7d:a2:e8:ea:cc:3b:fc:ad:75: 7a:60:f3:a1:92:db:39:39:55:a6:e9:3f:62:1a:f0: fc:01:ce:24:eb:f0:2f:9d:c4:9c:c4:cc:3a:61:0e: 44:59:60:bb:bf:ba:c3:c4:8a:0e:2a:22:c1:3a:95: 8e:87:36:7d:a8:c3:31:dc:3f:25:98:e6:17:b5:88: 63:2b:2a:cc:68:c9:96:89:49:9d:fa:16:b8:b1:1a: 00:9c:d0:c8:6e:21:a8:c7:cd:0c:83:c5:2e:6d:9d: 47:c0:88:46:f8:54:b9:a0:6e:b5:08:ad:4b:06:5f: 96:56:c6:d7:43:32:2e:02:7a:3f:71:84:29:b7:58: ad:44:a8:11:bf:cc:52:e4:90:85:44:2f:8c:ca:76: ab:da:08:0f:9d:cf:8e:8f:8b:69:40:ae:ca:8a:14: 1a:98:a8:8c:b0:70:0f:92:66:f7:9a:a7:34:26:a7: 6a:11:f6:bf:6a:98:97:01:eb:cf:d5:9c:11:2c:6a: 5c:66:25:96:c1:b1:0c:c0:c7:78:87:4e:34:a3:8f: 6a:1b:ae:4d:3d:2a:06:f3:f3:2a:a3:c8:fe:81:66: de:c2:0f:6b:f6:08:90:5b:22:0f:a5:9d:ee:71:f2: cb:37:3d:97:55:92:25:c3:e1:4b:6a:58:fd:c8:fa: 61:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:72:67:C6:FE:CA:60:6C:9D:E1:F0:0B:60:47:08:30:C4:2A:84:E8 X509v3 Authority Key Identifier: keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:71:38:c4:36:9f:da:79:b3:96:8f:65:0f:56:97:47:da:07: 3b:70:e7:0c:1b:ef:c8:37:72:a5:26:3d:3e:cc:98:ec:25:32: ab:90:84:26:d8:99:20:2f:02:58:1d:ed:29:51:ef:e9:f0:3e: ce:63:8e:62:5b:21:d9:3f:38:fd:59:a5:57:82:78:14:48:4c: e8:64:f8:83:7d:ec:cb:3b:87:e0:4c:f0:ed:0f:c2:7e:50:ee: 23:37:41:2a:8c:51:8a:30:ca:61:bf:a1:b5:5d:9a:f5:eb:5b: e0:0f:3d:da:14:30:65:8b:22:43:39:44:f5:97:f8:c1:8f:d0: d4:d3:c6:f8:11:55:ca:ed:34:a7:31:5a:90:f6:2d:75:77:94: a2:62:1f:d5:10:bc:4d:f5:51:bc:7f:a5:3c:59:b5:53:ff:58: f5:4c:90:59:a2:d1:2a:30:1d:16:10:9d:f7:ba:69:fc:c5:96: 33:66:33:24:bf:e9:e7:4c:c3:6f:42:6a:01:23:6d:1b:71:c8: 38:f2:c4:1d:cd:0b:a4:a1:92:52:63:02:e1:39:fa:55:4c:17: 5d:63:ee:6d:4d:d1:33:47:74:96:7f:25:c4:32:fd:5e:fd:f3: 85:c9:ef:2b:8d:b8:d6:ae:bc:3d:74:35:15:84:28:35:32:14: cc:08:a3:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD4ApvVs0f2CrMEHIuhJiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTU0NzJlYmUxMmI0YjU3MGY4MjcxNDM4NzkxN2VjYjRj NGRlNTMwHhcNMjYwMjA5MTEwMDM3WhcNMjYwMjEwMTEwMDM3WjAzMTEwLwYDVQQD EyhkMjcyNjdjNmZlY2E2MDZjOWRlMWYwMGI2MDQ3MDgzMGM0MmE4NGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ5rgN99oujqzDv8rXV6YPOhkts5 OVWm6T9iGvD8Ac4k6/AvncScxMw6YQ5EWWC7v7rDxIoOKiLBOpWOhzZ9qMMx3D8l mOYXtYhjKyrMaMmWiUmd+ha4sRoAnNDIbiGox80Mg8UubZ1HwIhG+FS5oG61CK1L Bl+WVsbXQzIuAno/cYQpt1itRKgRv8xS5JCFRC+Mynar2ggPnc+Oj4tpQK7KihQa mKiMsHAPkmb3mqc0JqdqEfa/apiXAevP1ZwRLGpcZiWWwbEMwMd4h040o49qG65N PSoG8/Mqo8j+gWbewg9r9giQWyIPpZ3ucfLLNz2XVZIlw+FLalj9yPphKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJyZ8b+ymBsneHwC2BHCDDEKoToMB8GA1UdIwQY MBaAFNzlRy6+ErS1cPgnFDh5F+y0xN5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjkt OWYwNWYxMzVkY2Y5LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjktOWYwNWYxMzVkY2Y5 LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnE4xDaf 2nmzlo9lD1aXR9oHO3DnDBvvyDdypSY9PsyY7CUyq5CEJtiZIC8CWB3tKVHv6fA+ zmOOYlsh2T84/VmlV4J4FEhM6GT4g33syzuH4Ezw7Q/CflDuIzdBKoxRijDKYb+h tV2a9etb4A892hQwZYsiQzlE9Zf4wY/Q1NPG+BFVyu00pzFakPYtdXeUomIf1RC8 TfVRvH+lPFm1U/9Y9UyQWaLRKjAdFhCd97pp/MWWM2YzJL/p50zDb0JqASNtG3HI OPLEHc0LpKGSUmMC4Tn6VUwXXWPubU3RM0d0ln8lxDL9Xv3zhcnvK4241q68PXQ1 FYQoNTIUzAijBA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:28 2026 by rpki-client