This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json) Hash identifier: IkpSd2INTV7gliSnWhbOHlrL3z0LOEs8cv56cMafKtE= Subject key identifier: 72:90:B7:CC:CD:50:76:6A:54:86:ED:54:0E:42:E8:3A:D3:EC:2D:46 Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4 Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4 Certificate serial: 019C446C6F1E3F640CDB32C0D34AEDD844AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft Manifest number: 0FF2 Signing time: Mon 09 Feb 2026 22:01:22 +0000 Manifest this update: Mon 09 Feb 2026 22:01:22 +0000 Manifest next update: Tue 10 Feb 2026 22:01:22 +0000 Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: C2LaLV8Ena4ObzfvoPih3aFPgEGYMG8daxjm2xjPIPs=) 2: ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa (hash: 8lfURhp4+6wvfeyaLwrd59nHvD9zLaiHI+8CWa149w4=) 3: uRzlID_nfuupcIGUXbHpyyUrxts.roa (hash: 5LvqBXGtCHTt2jvIwKxCsctM10tlaiQJ5CWlpcE9cx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:6f:1e:3f:64:0c:db:32:c0:d3:4a:ed:d8:44:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4 Validity Not Before: Feb 9 22:01:22 2026 GMT Not After : Feb 10 22:01:22 2026 GMT Subject: CN=7290b7cccd50766a5486ed540e42e83ad3ec2d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:eb:e6:85:33:15:ea:ff:19:a8:66:f2:e4:25: a3:f9:ce:34:d6:19:60:3f:e9:6e:9d:82:e3:02:a0: dd:c2:e4:51:28:d6:75:fc:e8:7f:37:f2:85:59:9b: 82:17:0e:a5:57:b1:db:f0:3a:4c:22:1d:79:8a:c2: 4c:12:b3:fc:e6:b8:52:00:c9:84:69:d1:44:de:da: 90:11:1b:74:ba:95:dd:33:9d:ff:c1:7c:46:5b:31: a9:b9:e4:0c:e5:73:6d:af:85:f0:b1:d4:78:4f:2b: 4e:4c:94:d3:f6:2f:ab:8b:f6:69:11:56:d5:50:56: 64:87:88:63:59:24:f1:13:34:dd:9d:42:4a:d1:f7: 59:b4:ae:32:28:de:0e:89:d8:7a:86:36:d6:bc:c0: 9a:f4:dd:e1:85:4a:d5:1c:cf:d9:11:96:49:03:ff: 11:20:6c:82:e9:31:3b:42:54:54:a7:65:04:b6:b8: 51:bf:06:3c:63:bd:67:fa:5f:48:0d:83:16:9f:3d: 21:d8:c2:9f:32:1a:08:20:6a:e8:dd:ed:9f:13:8d: 88:a2:7a:1a:d2:51:40:1b:25:d7:ae:ec:c3:f2:b7: b4:c9:ee:c1:df:63:54:aa:23:a7:55:6d:9b:fb:39: fa:91:0b:ab:fc:d6:c2:54:f0:dc:7a:26:fe:a8:25: d1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:90:B7:CC:CD:50:76:6A:54:86:ED:54:0E:42:E8:3A:D3:EC:2D:46 X509v3 Authority Key Identifier: keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:4b:82:4c:56:e8:63:10:a6:67:ec:5c:93:02:ad:21:46:4c: 02:de:7b:05:55:75:80:4d:b7:48:e4:5f:41:f3:a0:38:28:b7: 4a:8a:20:44:12:0c:de:c8:5b:47:d6:f1:51:4b:25:62:f9:45: f3:65:5e:3f:44:8c:a1:1b:1e:1e:b1:92:4c:db:63:3c:de:3b: a5:3d:72:3f:56:42:5a:d9:db:bb:27:eb:0f:3d:bc:ed:81:2e: b7:fd:fe:d8:e8:51:cf:70:bc:51:04:4c:16:1d:b8:14:4c:19: 1d:11:23:1c:ab:a7:4b:7f:0c:65:3c:52:72:4e:07:d4:ac:53: 71:4a:aa:cd:a4:62:30:c3:d4:48:3e:20:8f:86:8a:4d:65:b1: 87:d4:f7:c0:56:d1:d7:a2:81:ff:3c:f5:fc:24:eb:fb:24:81: ad:a1:01:e9:d1:e3:a5:07:31:9b:2d:f2:17:96:67:d5:06:90: f0:67:42:db:4f:4b:9f:1e:e5:f9:1d:75:65:83:0e:6c:c5:e2: 99:f5:83:c2:37:df:2c:27:9c:5a:a5:d7:a3:21:9d:f7:9a:c1: 17:fe:5a:53:b7:03:41:3d:e8:14:03:a6:e3:ff:68:90:7e:55: ad:25:0a:69:c3:82:7e:95:96:7a:de:92:1f:f6:7a:fb:64:c6: 29:d7:fc:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbG8eP2QM2zLA00rt2ESuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNjkxNzY0NWQ5ZDIyMDQzNWY5MWM3ZTQ2YzgxMTBjZjg5 YWNiZTQwHhcNMjYwMjA5MjIwMTIyWhcNMjYwMjEwMjIwMTIyWjAzMTEwLwYDVQQD Eyg3MjkwYjdjY2NkNTA3NjZhNTQ4NmVkNTQwZTQyZTgzYWQzZWMyZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuvmhTMV6v8ZqGby5CWj+c401hlg P+lunYLjAqDdwuRRKNZ1/Oh/N/KFWZuCFw6lV7Hb8DpMIh15isJMErP85rhSAMmE adFE3tqQERt0upXdM53/wXxGWzGpueQM5XNtr4XwsdR4TytOTJTT9i+ri/ZpEVbV UFZkh4hjWSTxEzTdnUJK0fdZtK4yKN4Oidh6hjbWvMCa9N3hhUrVHM/ZEZZJA/8R IGyC6TE7QlRUp2UEtrhRvwY8Y71n+l9IDYMWnz0h2MKfMhoIIGro3e2fE42Ionoa 0lFAGyXXruzD8re0ye7B32NUqiOnVW2b+zn6kQur/NbCVPDceib+qCXRowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKQt8zNUHZqVIbtVA5C6DrT7C1GMB8GA1UdIwQY MBaAFNxpF2RdnSIENfkcfkbIEQz4msvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2Et NDI4YmU5MDA4ZmJhLzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2EtNDI4YmU5MDA4ZmJh LzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUuCTFbo YxCmZ+xckwKtIUZMAt57BVV1gE23SORfQfOgOCi3SoogRBIM3shbR9bxUUslYvlF 82VeP0SMoRseHrGSTNtjPN47pT1yP1ZCWtnbuyfrDz287YEut/3+2OhRz3C8UQRM Fh24FEwZHREjHKunS38MZTxSck4H1KxTcUqqzaRiMMPUSD4gj4aKTWWxh9T3wFbR 16KB/zz1/CTr+ySBraEB6dHjpQcxmy3yF5Zn1QaQ8GdC209Lnx7l+R11ZYMObMXi mfWDwjffLCecWqXXoyGd95rBF/5aU7cDQT3oFAOm4/9okH5VrSUKacOCfpWWet6S H/Z6+2TGKdf8Hg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:12:34 2026 by rpki-client