This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json) Hash identifier: CjbQyrQiq1rHYlx8c0hlXIaAhQ6m1O9R16MAOpzyPzg= Subject key identifier: 4B:4E:83:39:02:B0:8E:5E:C8:33:B1:01:CE:57:95:94:9E:B2:F5:3C Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f Certificate serial: 019C427DFE8A06D6D2EC4FE603323D80162B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft Manifest number: 1815 Signing time: Mon 09 Feb 2026 13:01:19 +0000 Manifest this update: Mon 09 Feb 2026 13:01:19 +0000 Manifest next update: Tue 10 Feb 2026 13:01:19 +0000 Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: tOguIddtE2SkR6lOj478AeUdM/ObqAvteZIY9l+tAD8=) 2: ZpkUGalQzjbOCY8XhdJNlnimnsg.roa (hash: MXToSyiqqbrIQ6LzLNHLxYBkJdAsscwP6hbYfaiM+Jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:fe:8a:06:d6:d2:ec:4f:e6:03:32:3d:80:16:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f Validity Not Before: Feb 9 13:01:19 2026 GMT Not After : Feb 10 13:01:19 2026 GMT Subject: CN=4b4e833902b08e5ec833b101ce5795949eb2f53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:fe:aa:42:52:39:61:d0:f1:03:19:60:68: a5:26:37:26:6d:78:0f:8c:f9:d9:8e:a3:b9:47:be: 77:ed:62:0f:83:88:56:2e:dc:ae:82:ee:12:b4:78: d8:61:f0:2c:19:7d:f9:a4:5c:70:c2:e4:a8:0b:e5: 59:c9:28:49:38:a4:5a:18:57:8a:5b:11:dd:e8:cf: cf:fd:7f:1b:3b:ca:3f:c1:73:2d:68:e9:3e:18:4a: aa:ce:4f:99:aa:eb:9d:38:03:6f:d2:59:0d:14:e6: bc:cb:91:75:d8:5a:02:ac:1d:85:08:10:97:72:c1: 53:da:59:cc:2b:4e:57:35:63:a6:e7:2c:97:98:a8: f3:35:eb:11:6f:1c:0f:e6:1b:12:5e:f8:54:5d:cb: b5:3f:2e:fb:a9:72:78:59:6d:1a:72:8b:b6:09:57: be:60:80:b4:00:69:66:4d:06:af:1d:f3:5b:6b:ff: 1d:c9:54:c4:cc:be:7a:79:32:c7:71:fe:46:e1:91: 4c:ca:67:52:cd:9c:30:f4:b2:37:9f:a7:6b:78:40: e1:81:88:2d:25:8e:ec:88:6e:5a:54:6a:c8:dc:53: 5e:f4:ba:a0:b1:ba:b2:4f:43:d5:90:42:87:bd:6c: 91:4c:79:8c:d2:b8:9f:d0:4c:eb:da:b2:84:70:b9: 41:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4E:83:39:02:B0:8E:5E:C8:33:B1:01:CE:57:95:94:9E:B2:F5:3C X509v3 Authority Key Identifier: keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:61:df:ba:c3:05:fb:68:87:fd:ce:1f:b8:e8:c9:d3:17:67: 96:78:50:10:39:6e:6c:39:04:58:8f:a1:49:34:14:8f:da:c5: 09:1d:70:ae:59:1f:15:34:5e:a4:7c:c5:05:dd:09:14:25:0d: 2c:3e:21:fb:89:68:86:c9:22:22:db:09:11:4c:75:0d:47:df: c0:44:53:79:16:68:ce:5e:de:59:12:a1:20:8d:11:6e:d0:bd: 33:74:bf:1f:4b:c7:1f:78:a9:cd:f9:d0:e2:b0:36:0e:84:44: 99:4f:ab:29:94:a8:84:bc:dd:49:51:ef:40:2b:ae:a1:78:8c: e1:76:d5:01:7b:f2:6c:5e:b5:34:4b:b9:9d:20:82:be:bb:4d: c4:68:fa:84:c2:47:82:c8:88:d7:76:84:60:2d:44:b9:d7:16: 4d:9b:14:e5:0e:d3:94:56:bf:d1:5f:93:89:7c:d3:42:d4:b0: c5:9f:52:ef:5b:fa:3e:36:fc:10:77:6f:bc:fd:9b:cd:89:c6: c7:59:8c:b1:ec:88:f5:6c:7a:1a:dd:7e:69:e1:7b:b2:55:b4: 4f:0e:4f:2c:91:ef:64:d3:7b:dd:02:02:df:5c:46:34:47:53: 46:da:45:2f:4b:f4:07:6d:8e:ae:f2:be:c4:5b:f3:ad:44:c3: bd:e7:4e:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCff6KBtbS7E/mAzI9gBYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2I4MjAwNWZkYmU5NjEwMjBmNzQwYWI0M2M1NTRlNWEz ODQ1MWYwHhcNMjYwMjA5MTMwMTE5WhcNMjYwMjEwMTMwMTE5WjAzMTEwLwYDVQQD Eyg0YjRlODMzOTAyYjA4ZTVlYzgzM2IxMDFjZTU3OTU5NDllYjJmNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcX+qkJSOWHQ8QMZYGilJjcmbXgP jPnZjqO5R7537WIPg4hWLtyugu4StHjYYfAsGX35pFxwwuSoC+VZyShJOKRaGFeK WxHd6M/P/X8bO8o/wXMtaOk+GEqqzk+ZquudOANv0lkNFOa8y5F12FoCrB2FCBCX csFT2lnMK05XNWOm5yyXmKjzNesRbxwP5hsSXvhUXcu1Py77qXJ4WW0acou2CVe+ YIC0AGlmTQavHfNba/8dyVTEzL56eTLHcf5G4ZFMymdSzZww9LI3n6dreEDhgYgt JY7siG5aVGrI3FNe9LqgsbqyT0PVkEKHvWyRTHmM0rif0Ezr2rKEcLlB7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtOgzkCsI5eyDOxAc5XlZSesvU8MB8GA1UdIwQY MBaAFN87ggBf2+lhAg90CrQ8VU5aOEUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAt MzdjMTQwOTJlYjI3LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAtMzdjMTQwOTJlYjI3 LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWHfusMF +2iH/c4fuOjJ0xdnlnhQEDlubDkEWI+hSTQUj9rFCR1wrlkfFTRepHzFBd0JFCUN LD4h+4lohskiItsJEUx1DUffwERTeRZozl7eWRKhII0RbtC9M3S/H0vHH3ipzfnQ 4rA2DoREmU+rKZSohLzdSVHvQCuuoXiM4XbVAXvybF61NEu5nSCCvrtNxGj6hMJH gsiI13aEYC1EudcWTZsU5Q7TlFa/0V+TiXzTQtSwxZ9S71v6Pjb8EHdvvP2bzYnG x1mMseyI9Wx6Gt1+aeF7slW0Tw5PLJHvZNN73QIC31xGNEdTRtpFL0v0B22OrvK+ xFvzrUTDvedOgg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:28 2026 by rpki-client