This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json) Hash identifier: WRx3JVxY7mSE/DTd9r0SVtUSbaAuuWZYtqm5ucrc+bc= Subject key identifier: 90:AF:CC:B7:4D:3B:4C:34:72:E6:89:F8:77:72:E1:49:6C:CB:DD:61 Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9 Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9 Certificate serial: 019C40FD194C8B9521550A3298ED94B1413C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft Manifest number: 136B Signing time: Mon 09 Feb 2026 06:00:54 +0000 Manifest this update: Mon 09 Feb 2026 06:00:54 +0000 Manifest next update: Tue 10 Feb 2026 06:00:54 +0000 Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: UO2y2KNNGaZb7PPPmuFRSYMPkpNQDPqrKkoS/3Dv9ps=) 2: FT--4t0eY_HMytLIaG7T71X7cUo.roa (hash: 095emcTK3nDAck/cjTBbtBo2FJ9TXj6HZHetumiraec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:19:4c:8b:95:21:55:0a:32:98:ed:94:b1:41:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9 Validity Not Before: Feb 9 06:00:54 2026 GMT Not After : Feb 10 06:00:54 2026 GMT Subject: CN=90afccb74d3b4c3472e689f87772e1496ccbdd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:25:33:57:e5:51:01:f9:84:a2:f9:7c:f1:25: ad:15:29:3f:b1:be:71:e1:7a:9f:e2:52:f9:8a:b2: 3e:60:74:25:42:f3:c2:12:a7:3f:f1:6e:1c:24:bd: 6d:45:c0:75:57:03:d3:4f:44:d1:1f:01:bf:16:3b: 85:84:e3:ac:df:cd:e1:69:d7:65:5f:00:aa:47:ba: a6:03:8b:2f:52:84:c9:09:b1:d8:58:c2:40:7d:d3: 70:37:09:f1:bc:2d:11:41:5a:93:33:76:a7:71:47: 01:26:fd:aa:72:34:cc:00:b2:a3:c7:e7:b5:17:88: 3f:26:dd:e6:ac:ce:ea:25:e2:c6:62:b3:10:90:82: 23:ea:89:66:3b:c1:82:b9:af:6f:01:bd:a5:5f:6f: e4:ab:f2:e3:7e:bb:cf:8f:3f:ca:20:cd:ac:8b:3c: 82:35:a8:95:91:86:b3:26:d0:4e:54:e8:75:ae:c2: e6:ac:db:78:01:11:59:8f:0b:44:0e:a8:45:63:71: 3f:78:39:f1:8a:6e:c6:d5:0a:9d:f3:d1:4e:81:43: ad:7d:15:1c:77:20:08:fc:0b:7d:2e:ba:81:79:4b: 6e:8d:f3:c4:da:1b:90:bc:4d:9d:9d:63:c5:08:d4: c1:c0:d5:db:bb:fc:72:bf:c9:88:80:c2:59:73:73: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AF:CC:B7:4D:3B:4C:34:72:E6:89:F8:77:72:E1:49:6C:CB:DD:61 X509v3 Authority Key Identifier: keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ac:dc:20:35:e3:48:e5:b7:6d:f5:54:44:d1:0e:87:b6:ff: db:b0:8e:1d:40:45:91:7c:29:03:5f:58:19:10:a0:d8:81:21: 2c:68:ce:06:f1:73:08:e7:2b:db:15:72:77:50:c4:a5:73:80: 56:e4:35:18:57:0d:42:5c:61:bf:7c:35:90:2a:56:59:03:31: e8:43:6b:0c:17:e7:c2:ab:3e:d6:47:1d:12:76:8c:cd:71:13: 15:61:35:78:b0:48:05:95:d6:49:fd:57:fb:f2:1c:e8:71:64: a6:70:99:28:8c:0f:af:8f:5c:45:1e:40:6e:9e:9d:5a:95:91: ae:22:b9:cc:d6:c2:cd:9b:8c:c4:81:7a:3b:49:85:0f:5c:a0: ec:94:98:51:53:5f:a0:41:45:a6:02:a3:40:e8:42:27:53:46: 47:c3:f0:bb:44:21:78:4e:87:26:6b:46:3d:7e:5c:c5:b5:ed: 61:a5:8f:48:7c:21:a6:60:d8:8b:50:be:ae:2a:b0:50:42:9a: 1c:7b:dc:97:b3:02:f3:1e:d9:f3:54:59:0e:0f:39:f4:49:fb: e8:2c:7c:65:8b:73:46:7b:11:08:5d:af:86:fd:30:3d:0f:6d: 04:a6:6c:a7:30:c4:7f:12:98:7f:8b:f0:62:1a:26:29:a3:cc: f3:37:aa:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/RlMi5UhVQoymO2UsUE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZmE4Njg2M2M1NTg2NTcwMDYzNGUxMTM1ZTYxN2U0MDc5 YWY4YjkwHhcNMjYwMjA5MDYwMDU0WhcNMjYwMjEwMDYwMDU0WjAzMTEwLwYDVQQD Eyg5MGFmY2NiNzRkM2I0YzM0NzJlNjg5Zjg3NzcyZTE0OTZjY2JkZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SUzV+VRAfmEovl88SWtFSk/sb5x 4Xqf4lL5irI+YHQlQvPCEqc/8W4cJL1tRcB1VwPTT0TRHwG/FjuFhOOs383haddl XwCqR7qmA4svUoTJCbHYWMJAfdNwNwnxvC0RQVqTM3ancUcBJv2qcjTMALKjx+e1 F4g/Jt3mrM7qJeLGYrMQkIIj6olmO8GCua9vAb2lX2/kq/LjfrvPjz/KIM2sizyC NaiVkYazJtBOVOh1rsLmrNt4ARFZjwtEDqhFY3E/eDnxim7G1Qqd89FOgUOtfRUc dyAI/At9LrqBeUtujfPE2huQvE2dnWPFCNTBwNXbu/xyv8mIgMJZc3OvmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCvzLdNO0w0cuaJ+Hdy4Ulsy91hMB8GA1UdIwQY MBaAFNz6hoY8VYZXAGNOETXmF+QHmvi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3Yzgt YzVjOWM2ODliNzQ1LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3YzgtYzVjOWM2ODliNzQ1 LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqzcIDXj SOW3bfVURNEOh7b/27COHUBFkXwpA19YGRCg2IEhLGjOBvFzCOcr2xVyd1DEpXOA VuQ1GFcNQlxhv3w1kCpWWQMx6ENrDBfnwqs+1kcdEnaMzXETFWE1eLBIBZXWSf1X +/Ic6HFkpnCZKIwPr49cRR5Abp6dWpWRriK5zNbCzZuMxIF6O0mFD1yg7JSYUVNf oEFFpgKjQOhCJ1NGR8Pwu0QheE6HJmtGPX5cxbXtYaWPSHwhpmDYi1C+riqwUEKa HHvcl7MC8x7Z81RZDg859En76Cx8ZYtzRnsRCF2vhv0wPQ9tBKZspzDEfxKYf4vw YhomKaPM8zeqkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:41 2026 by rpki-client