This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json) Hash identifier: if4ajIg4+Nj3d/WfAsKewM3vydiTJ+DPWgiXrcPFF6s= Subject key identifier: 3E:9A:0D:D7:22:68:9C:4C:B0:56:32:DE:09:74:3C:CE:26:93:CF:EE Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49 Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49 Certificate serial: 019C427D7470D8C1DC7D53B0CE03F2886AD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 13:00:43 +0000 Manifest this update: Mon 09 Feb 2026 13:00:43 +0000 Manifest next update: Tue 10 Feb 2026 13:00:43 +0000 Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: NtEMPHJ/ttCenM4uTGdozsI8T6SFSnYX2ZFJk6qgZoY=) 2: QVJESyUgcIDmNN8KuNewhKTn8O8.roa (hash: rsPEgVBQN8qb3Gf6bi1+pSFcHaV0wEFs/DT4FZ8+49I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:74:70:d8:c1:dc:7d:53:b0:ce:03:f2:88:6a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49 Validity Not Before: Feb 9 13:00:43 2026 GMT Not After : Feb 10 13:00:43 2026 GMT Subject: CN=3e9a0dd722689c4cb05632de09743cce2693cfee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6f:cf:e3:23:ab:eb:7e:ae:10:19:65:4d:3e: a7:7e:fb:fc:9c:64:13:ac:92:bf:ac:b5:f3:dd:31: 07:14:e2:7b:f1:7c:62:60:40:52:90:be:9a:f2:ca: f3:6a:83:0d:9e:5c:25:49:2c:8f:ca:d0:63:93:2f: 3b:6f:8e:fb:3a:9d:c8:bb:a3:47:b9:7c:3b:dc:97: b7:a9:d3:84:45:c4:e4:95:d7:b6:9f:20:6e:23:bc: c4:77:01:39:37:93:99:c4:7f:4f:f8:99:34:6e:66: 8f:83:5f:4e:7a:e9:1f:b6:ca:60:35:56:38:f4:89: 6f:22:bc:98:f6:7d:e2:ea:23:8b:80:2b:10:e7:39: 6d:7e:3b:53:72:15:14:a0:da:ee:0a:d4:ad:f0:a9: b0:49:da:d0:ba:e3:89:45:17:d5:98:dc:fb:3e:17: 79:25:d3:ba:04:3d:e3:ab:58:bc:07:64:2d:c5:0b: f3:f7:c3:c9:34:f1:fc:2f:fb:0f:3f:f7:e2:4d:5d: 55:2d:51:ea:33:7b:0d:24:48:78:3d:2d:6f:30:2c: be:e2:1f:9e:cd:1f:d8:ea:c4:26:24:96:35:2c:60: 10:5d:14:1c:23:92:86:0a:b0:af:0a:82:bc:3d:a8: fa:c3:df:82:23:b3:b5:3c:dc:98:4e:34:03:b6:69: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9A:0D:D7:22:68:9C:4C:B0:56:32:DE:09:74:3C:CE:26:93:CF:EE X509v3 Authority Key Identifier: keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:80:01:c9:6a:dc:6e:55:aa:d2:19:e1:9b:2f:be:3a:b8:a5: 97:d3:0c:d2:28:1b:4f:d3:df:be:c0:f0:69:81:a2:2e:81:79: b7:c5:8a:ef:88:ba:55:dd:f7:6a:f5:27:4f:e8:6d:41:33:82: a0:bb:c0:98:7b:25:43:f6:eb:7c:ed:6d:7a:81:85:16:2b:40: 03:8c:2f:e5:6c:f9:98:9b:96:00:3c:31:63:25:23:d2:ea:0a: 66:cc:10:f5:52:d1:40:69:3b:7c:46:64:88:bc:05:9e:b9:b9: 68:7e:06:e6:23:ed:ad:23:72:4d:e1:86:8e:d1:46:f8:f8:ae: fe:0c:4b:ee:29:29:bb:67:fb:6e:66:81:e4:33:4f:c5:fb:1e: d8:bd:c5:e6:b2:87:8b:ff:2d:f5:5f:9a:0f:b1:bd:85:87:a3: d7:32:80:29:e3:45:0f:b4:5d:44:77:0d:1f:d0:70:c2:57:18: 36:6a:40:27:54:b0:2d:00:b2:85:bc:4c:af:0f:b5:5f:ec:d7: bb:0a:57:71:82:bb:d6:2b:6c:c8:12:5f:28:44:2f:47:db:98: 3b:bf:5a:c0:8b:ca:71:45:b0:20:f3:6d:2d:68:e5:08:c6:dc: 34:55:34:a1:4d:af:6d:fb:59:6a:ca:9d:a6:2b:d7:cc:cd:59: 1d:39:f1:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXRw2MHcfVOwzgPyiGrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGY5ZWEwNDYzNmQ3ZTcxNDE4YjkzMDkxY2NkMGU1NzAx NWJlNDkwHhcNMjYwMjA5MTMwMDQzWhcNMjYwMjEwMTMwMDQzWjAzMTEwLwYDVQQD EygzZTlhMGRkNzIyNjg5YzRjYjA1NjMyZGUwOTc0M2NjZTI2OTNjZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W/P4yOr636uEBllTT6nfvv8nGQT rJK/rLXz3TEHFOJ78XxiYEBSkL6a8srzaoMNnlwlSSyPytBjky87b477Op3Iu6NH uXw73Je3qdOERcTklde2nyBuI7zEdwE5N5OZxH9P+Jk0bmaPg19OeukftspgNVY4 9IlvIryY9n3i6iOLgCsQ5zltfjtTchUUoNruCtSt8KmwSdrQuuOJRRfVmNz7Phd5 JdO6BD3jq1i8B2QtxQvz98PJNPH8L/sPP/fiTV1VLVHqM3sNJEh4PS1vMCy+4h+e zR/Y6sQmJJY1LGAQXRQcI5KGCrCvCoK8Paj6w9+CI7O1PNyYTjQDtmnySQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6aDdciaJxMsFYy3gl0PM4mk8/uMB8GA1UdIwQY MBaAFNwPnqBGNtfnFBi5MJHM0OVwFb5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wMWJmOTYtODFiNi00ZTRjLWFiODAt ZTBiYzQxMDc4NDI2LzEvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wMWJmOTYtODFiNi00ZTRjLWFiODAtZTBiYzQxMDc4NDI2 LzEvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYAByWrc blWq0hnhmy++Orill9MM0igbT9PfvsDwaYGiLoF5t8WK74i6Vd33avUnT+htQTOC oLvAmHslQ/brfO1teoGFFitAA4wv5Wz5mJuWADwxYyUj0uoKZswQ9VLRQGk7fEZk iLwFnrm5aH4G5iPtrSNyTeGGjtFG+Piu/gxL7ikpu2f7bmaB5DNPxfse2L3F5rKH i/8t9V+aD7G9hYej1zKAKeNFD7RdRHcNH9BwwlcYNmpAJ1SwLQCyhbxMrw+1X+zX uwpXcYK71itsyBJfKEQvR9uYO79awIvKcUWwIPNtLWjlCMbcNFU0oU2vbftZasqd pivXzM1ZHTnxjw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:47 2026 by rpki-client