This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft File: k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json) Hash identifier: L7vwPHoAG0f1MSmI0RFNe/iLoPwPYvxC/ELn+pYXTSw= Subject key identifier: 77:55:7C:1B:8D:C6:2F:C5:48:FF:17:75:6E:F5:9D:06:EE:3D:B5:D3 Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46 Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946 Certificate serial: 019C42EB454A864A8C269864A0346FAD527A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 15:00:40 +0000 Manifest this update: Mon 09 Feb 2026 15:00:40 +0000 Manifest next update: Tue 10 Feb 2026 15:00:40 +0000 Files and hashes: 1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: 97HY1MQu6rN1X3rQu0Fzx6mKTDNPEeM/x8TYFDTNkHA=) 2: lzqB-_xRsBzlfZC3i-581O0TRPA.roa (hash: p6cjxCw0yBX+JOEsw/uKDi48tVNBgWuDysGJUIAaJS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:45:4a:86:4a:8c:26:98:64:a0:34:6f:ad:52:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946 Validity Not Before: Feb 9 15:00:40 2026 GMT Not After : Feb 10 15:00:40 2026 GMT Subject: CN=77557c1b8dc62fc548ff17756ef59d06ee3db5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:08:2c:58:ae:c1:a3:87:dd:e9:c2:a8:2a:38: a4:b2:e0:81:20:2e:8e:38:fa:17:28:a6:ed:44:9b: 3e:59:f4:08:d3:73:34:a0:41:93:85:c9:89:d2:c7: d7:07:53:4b:2b:07:eb:9e:31:e9:6b:46:1e:d8:e9: 87:dc:16:e7:96:fb:4d:51:67:f8:96:5c:17:00:f3: 2d:69:e1:aa:4e:c5:5a:e7:dc:24:d5:66:c2:2c:04: d4:10:a8:1e:1a:d9:b1:e6:96:42:e4:c2:c3:31:75: c0:4f:0f:cb:22:a8:19:a5:06:d9:86:60:e5:93:1f: 9a:cc:7a:49:47:b0:8b:72:1b:9b:d5:ac:eb:a5:af: 14:43:d5:78:ae:5e:31:a8:ed:c0:de:f7:53:7c:c2: 83:e8:73:14:43:7b:90:0a:d3:97:d7:a7:54:e7:e3: 6c:93:77:ee:17:76:e9:45:1b:2e:99:2b:82:0f:21: 64:80:6a:bb:55:83:31:74:42:a2:6a:91:04:be:20: 70:36:40:cd:61:a8:fa:89:04:63:19:0f:6d:ce:a5: cb:79:25:5a:c5:6e:51:99:6c:21:b1:65:a2:13:eb: fe:9d:4a:93:8a:6c:34:ce:30:a7:55:3c:4c:fa:c1: 65:e9:27:8f:20:90:80:db:57:a6:30:ee:0b:e8:f8: cc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:55:7C:1B:8D:C6:2F:C5:48:FF:17:75:6E:F5:9D:06:EE:3D:B5:D3 X509v3 Authority Key Identifier: keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ee:0d:f4:c1:b9:a2:02:aa:14:c7:79:70:ca:65:1b:31:c3: b0:20:ed:49:77:ed:60:e4:f9:19:f0:5c:d4:4a:d4:bf:ad:79: cc:5f:73:19:a5:3d:ba:d3:33:3b:5d:47:28:61:aa:94:de:9d: 85:2d:47:cb:d1:4f:ce:65:b3:2e:7f:38:a9:ea:d8:77:0e:d9: 34:45:1f:89:9f:58:bb:cb:42:43:22:97:d5:dd:87:5d:a4:c6: 08:75:e9:e3:a0:f1:ce:1a:31:47:f4:27:57:83:f1:bc:53:09: 5a:2d:b2:d5:d7:a8:06:5c:c5:9e:2f:3b:58:ff:fd:27:d7:09: af:3a:40:29:5c:ca:4c:ef:99:13:59:f2:77:07:c8:8f:4d:47: 39:dc:a1:96:d6:1a:92:b7:61:a9:06:58:9a:e1:57:03:fd:47: 9d:d1:40:1b:4a:a4:b2:4f:2a:c7:d8:ad:42:a6:d8:0e:9e:5c: 12:ba:9c:df:1e:71:d2:58:49:fa:3f:04:60:fd:f9:ae:bd:21: 4f:dd:70:78:33:f3:23:1e:de:d0:98:82:88:a1:27:c5:43:44: 7f:04:f6:2a:c0:bd:16:a2:f6:e2:ce:f6:2a:5b:6b:0f:8e:5d: 12:28:8c:73:ab:bd:f5:4a:25:4c:2e:2c:be:8c:b4:05:de:38: 55:79:b5:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC60VKhkqMJphkoDRvrVJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNzg1YjNhOWUzM2M1MmI1OGI5ZWM5NWEzNzcyM2YwMDA4 YmY5NDYwHhcNMjYwMjA5MTUwMDQwWhcNMjYwMjEwMTUwMDQwWjAzMTEwLwYDVQQD Eyg3NzU1N2MxYjhkYzYyZmM1NDhmZjE3NzU2ZWY1OWQwNmVlM2RiNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwgsWK7Bo4fd6cKoKjiksuCBIC6O OPoXKKbtRJs+WfQI03M0oEGThcmJ0sfXB1NLKwfrnjHpa0Ye2OmH3BbnlvtNUWf4 llwXAPMtaeGqTsVa59wk1WbCLATUEKgeGtmx5pZC5MLDMXXATw/LIqgZpQbZhmDl kx+azHpJR7CLchub1azrpa8UQ9V4rl4xqO3A3vdTfMKD6HMUQ3uQCtOX16dU5+Ns k3fuF3bpRRsumSuCDyFkgGq7VYMxdEKiapEEviBwNkDNYaj6iQRjGQ9tzqXLeSVa xW5RmWwhsWWiE+v+nUqTimw0zjCnVTxM+sFl6SePIJCA21emMO4L6PjM4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdVfBuNxi/FSP8XdW71nQbuPbXTMB8GA1UdIwQY MBaAFJN4WzqeM8UrWLnslaN3I/AAi/lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80ODI5ODQtZDllNC00ZDMzLWE4ZWMt ZjRiYWI3MTllMDcwLzEvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80ODI5ODQtZDllNC00ZDMzLWE4ZWMtZjRiYWI3MTllMDcw LzEvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIu4N9MG5 ogKqFMd5cMplGzHDsCDtSXftYOT5GfBc1ErUv615zF9zGaU9utMzO11HKGGqlN6d hS1Hy9FPzmWzLn84qerYdw7ZNEUfiZ9Yu8tCQyKX1d2HXaTGCHXp46DxzhoxR/Qn V4PxvFMJWi2y1deoBlzFni87WP/9J9cJrzpAKVzKTO+ZE1nydwfIj01HOdyhltYa krdhqQZYmuFXA/1HndFAG0qksk8qx9itQqbYDp5cErqc3x5x0lhJ+j8EYP35rr0h T91weDPzIx7e0JiCiKEnxUNEfwT2KsC9FqL24s72KltrD45dEiiMc6u99UolTC4s voy0Bd44VXm1BA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:11 2026 by rpki-client