This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json) Hash identifier: eYvWhCgBIXi4KfhiUMYkQi9NCXPHGK/7cIS5xc9G8VM= Subject key identifier: 40:B3:CF:7D:AB:DA:DE:84:15:27:64:BA:2E:7E:76:A6:18:A7:88:05 Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03 Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03 Certificate serial: 019C1D277EF169C91871BFD2AF0CFE0D6F92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft Manifest number: 12A3 Signing time: Mon 02 Feb 2026 07:00:53 +0000 Manifest this update: Mon 02 Feb 2026 07:00:53 +0000 Manifest next update: Tue 03 Feb 2026 07:00:53 +0000 Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: +jWE9Sr/ygJM1qnbmMithJrRsmWzviFTKvkXB7CBc64=) 2: bTQItgTZaz6y9BWkOV_7uy4A8tA.asa (hash: W+mQXmAe5LXb4oQS76AvMgQiEQnKAsQ/rixpE72aTEw=) 3: ctOHMPnfIdx6PydfkKnZ5gEcKQQ.roa (hash: qIj8QWfTmVSnfJJaltVtP4eb6W2W+l0cJ03A7Or6XNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:27:7e:f1:69:c9:18:71:bf:d2:af:0c:fe:0d:6f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03 Validity Not Before: Feb 2 07:00:53 2026 GMT Not After : Feb 3 07:00:53 2026 GMT Subject: CN=40b3cf7dabdade84152764ba2e7e76a618a78805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6a:53:ca:95:78:2a:6e:26:2b:63:73:a9:23: 15:3a:09:5e:ad:fa:ee:e0:d7:ab:f5:19:3f:9e:b3: c3:90:57:0f:85:ac:56:1f:89:21:2b:10:1f:69:ff: 74:aa:63:d5:58:29:88:a4:dc:a8:0e:4a:e3:f8:5d: cf:64:3f:32:d0:cc:0c:83:64:62:e0:21:a1:b6:d2: 7f:82:c4:30:86:40:a6:f2:69:6c:31:8a:bd:18:d4: c8:e5:cf:10:2c:87:c9:aa:80:6f:49:c1:40:cd:18: db:8d:47:69:67:38:b9:d3:23:ee:13:ea:82:25:db: 6e:c1:70:cd:94:6d:d8:03:db:8c:59:61:c3:7a:57: f1:8b:25:e6:98:fc:b3:42:b2:97:e1:e8:b2:f9:89: 5b:fe:40:ec:d5:9a:a3:df:31:10:16:fa:47:a7:f0: af:ed:e3:fb:92:c6:0d:79:0e:e9:bf:13:7b:e0:10: 85:7e:31:eb:c0:c6:2b:f6:de:31:2e:eb:23:a0:4c: 48:8c:10:39:56:4d:ef:de:92:f0:f9:3f:1b:05:8d: 35:55:ce:94:5d:15:02:fa:45:82:b5:89:5f:fc:b1: bd:46:19:d2:b8:f4:2b:45:24:40:d9:1f:8b:09:9e: 71:bb:4e:1d:ea:7b:00:9f:91:e4:91:6c:23:7a:3d: 23:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B3:CF:7D:AB:DA:DE:84:15:27:64:BA:2E:7E:76:A6:18:A7:88:05 X509v3 Authority Key Identifier: keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:fa:6d:7a:14:bf:13:19:4b:9e:19:42:28:66:27:49:a0:35: 22:3d:7a:28:e0:9e:5c:51:a9:fe:de:aa:c3:3d:c8:6a:f9:8a: 2c:90:52:1c:bf:e0:f4:8b:07:5d:4b:d1:5b:4e:0b:e5:81:36: b1:c4:77:ae:08:e9:37:40:71:00:5a:6f:d7:14:44:69:13:1d: 92:5a:55:d9:dc:37:0b:a3:72:90:79:53:43:05:a8:2b:c7:90: b5:a6:69:f4:bd:97:4b:8f:88:4a:ce:ba:a1:52:a9:99:c4:b9: 47:0c:e4:3f:f1:f3:e4:71:85:2c:df:d1:12:05:55:99:1a:ff: 14:b8:26:c8:b2:24:3a:86:73:89:87:6d:76:60:67:0a:36:ae: 35:1e:6b:1d:4a:2a:00:32:61:6b:f5:9c:d3:15:60:7e:24:10: 9f:5c:3d:cd:85:3c:7d:4c:bd:49:0d:94:5e:31:1a:35:a7:5b: 9c:d8:72:91:f0:8a:66:74:70:d8:47:a9:9d:24:63:93:4c:2d: 72:1d:a4:e7:16:89:eb:76:51:19:27:96:6e:f8:74:bc:dc:67: 25:e6:22:e4:70:8c:29:d1:07:36:a8:49:b9:e8:51:b3:95:a4: fe:a7:c2:18:fb:eb:b0:97:74:ea:3d:f4:f7:82:f8:e9:b8:dc: 08:3c:ce:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdJ37xackYcb/Srwz+DW+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2U1ZmYxMjNlYTdkMmU4M2NlMjc1MjBjOTg3ZDAzN2U2 NDlkMDMwHhcNMjYwMjAyMDcwMDUzWhcNMjYwMjAzMDcwMDUzWjAzMTEwLwYDVQQD Eyg0MGIzY2Y3ZGFiZGFkZTg0MTUyNzY0YmEyZTdlNzZhNjE4YTc4ODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GpTypV4Km4mK2NzqSMVOglerfru 4Ner9Rk/nrPDkFcPhaxWH4khKxAfaf90qmPVWCmIpNyoDkrj+F3PZD8y0MwMg2Ri 4CGhttJ/gsQwhkCm8mlsMYq9GNTI5c8QLIfJqoBvScFAzRjbjUdpZzi50yPuE+qC JdtuwXDNlG3YA9uMWWHDelfxiyXmmPyzQrKX4eiy+Ylb/kDs1Zqj3zEQFvpHp/Cv 7eP7ksYNeQ7pvxN74BCFfjHrwMYr9t4xLusjoExIjBA5Vk3v3pLw+T8bBY01Vc6U XRUC+kWCtYlf/LG9RhnSuPQrRSRA2R+LCZ5xu04d6nsAn5HkkWwjej0jKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECzz32r2t6EFSdkui5+dqYYp4gFMB8GA1UdIwQY MBaAFON+X/Ej6n0ug84nUgyYfQN+ZJ0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAt YjMwNDA4OTQ4Y2NlLzEvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAtYjMwNDA4OTQ4Y2Nl LzEvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPptehS/ ExlLnhlCKGYnSaA1Ij16KOCeXFGp/t6qwz3IavmKLJBSHL/g9IsHXUvRW04L5YE2 scR3rgjpN0BxAFpv1xREaRMdklpV2dw3C6NykHlTQwWoK8eQtaZp9L2XS4+ISs66 oVKpmcS5RwzkP/Hz5HGFLN/REgVVmRr/FLgmyLIkOoZziYdtdmBnCjauNR5rHUoq ADJha/Wc0xVgfiQQn1w9zYU8fUy9SQ2UXjEaNadbnNhykfCKZnRw2EepnSRjk0wt ch2k5xaJ63ZRGSeWbvh0vNxnJeYi5HCMKdEHNqhJuehRs5Wk/qfCGPvrsJd06j30 94L46bjcCDzOjA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:17:46 2026 by rpki-client