This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json) Hash identifier: wfyg4SILljKUhFxsiKgUM0dVJHxx3Z9guThuMiDL5fM= Subject key identifier: DF:23:30:B4:6E:9D:8F:F7:4A:28:A9:E3:B4:E3:A2:23:54:50:39:6C Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f Certificate serial: 019C41D8F61CAD585A9BC313ED9633E8C016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 10:01:03 +0000 Manifest this update: Mon 09 Feb 2026 10:01:03 +0000 Manifest next update: Tue 10 Feb 2026 10:01:03 +0000 Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: TBn9TywFw7AAN6oBz1zQtz0k/fGtG8sD7GeGLIwv0HY=) 2: Wdloadg_jaSIWNimJpIr6kOshxY.roa (hash: xgmHkwMMNOck0R3y8/daNlcMrAkpPhMbZk/5vahLUtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:f6:1c:ad:58:5a:9b:c3:13:ed:96:33:e8:c0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f Validity Not Before: Feb 9 10:01:03 2026 GMT Not After : Feb 10 10:01:03 2026 GMT Subject: CN=df2330b46e9d8ff74a28a9e3b4e3a2235450396c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:5b:fd:3e:7d:e7:db:d9:16:ef:a0:5a:64: 59:b0:b0:67:10:65:11:1a:b7:71:6a:c5:5f:53:9d: f8:13:7f:6f:11:59:0a:e0:93:2b:c9:9a:6d:9d:75: 3b:ba:35:4b:27:fc:75:d3:6f:af:45:66:23:0b:d7: 9a:f8:65:07:58:69:82:ae:60:53:c0:99:27:0a:04: 7f:22:a8:e5:06:7f:d5:69:d8:50:37:2f:4e:6c:6e: c9:84:33:6d:a1:23:01:0e:9e:c4:dd:5f:84:b5:4e: a6:d4:bb:ca:a3:ed:97:08:8c:81:5b:1b:d3:e7:7f: cd:ab:8a:9c:51:3c:47:f9:9f:bd:26:a1:92:da:d3: 77:8e:e4:02:94:25:ea:b5:1c:51:74:a5:e3:97:53: f3:12:b3:19:e3:bb:8c:15:0b:1f:b5:3b:71:50:e6: bf:ec:19:d8:67:cd:0d:1f:aa:4e:d5:89:af:c8:3d: eb:e9:90:bb:e5:1f:8e:42:5c:01:a7:74:7e:3b:21: 89:c2:98:ce:a4:eb:20:69:ad:ba:69:1e:59:55:6f: 6a:82:3b:46:00:40:9e:5f:11:a0:41:cb:f2:d8:f6: 82:90:52:91:47:c4:07:5e:ac:9b:f5:d2:cc:3a:88: ef:e3:46:50:d1:97:c9:c5:4f:12:c8:ff:5c:a2:53: 36:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:23:30:B4:6E:9D:8F:F7:4A:28:A9:E3:B4:E3:A2:23:54:50:39:6C X509v3 Authority Key Identifier: keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e6:1b:3b:51:c5:ec:f9:eb:56:79:11:c6:58:5b:f1:de:a7: c7:48:43:5d:f4:f1:71:22:d3:c4:9b:91:1c:21:f4:ac:28:ea: 5a:c4:50:c8:3d:77:95:22:f2:d5:76:d0:39:ef:5a:65:ac:3a: 93:aa:1d:a2:4e:d7:eb:34:a1:7a:f5:89:12:ad:b2:3f:a7:44: d1:e3:c8:04:1e:17:d4:05:ff:7b:9b:b4:f7:fd:f5:de:9c:3d: a6:84:9d:31:c4:12:72:c4:65:e0:a9:c9:39:34:4c:66:92:04: 5d:54:c2:aa:3e:a0:09:e0:b8:e2:02:7c:0b:6d:12:51:5c:21: c9:cc:c0:7c:a5:0b:c3:d7:d7:a0:ba:4d:94:6a:8d:fc:58:11: b7:bb:ea:26:d7:bd:40:b8:ce:fb:ef:7a:5e:c4:6e:9e:ac:e3: 10:0e:55:84:93:90:1e:8b:55:50:47:8d:a0:60:c5:7f:6a:de: f6:15:e5:af:6a:1d:fa:0c:f1:83:64:e8:e1:29:84:3c:2e:61: 5b:3b:a5:c7:d8:c3:0f:12:b7:02:56:a9:9c:2f:f0:dc:1f:d3: 43:e8:2a:9e:05:e0:be:be:0e:5c:61:98:5c:6d:0c:46:91:4b: 83:05:1a:f4:b5:46:18:b8:bf:65:4c:64:e6:f0:13:0c:0a:19: 2a:36:b3:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2PYcrVham8MT7ZYz6MAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTAyZjYxMzFjZTVhNzQ2ZWI1OTgxZGQ0YzFkNmI0ZTE3 YjAzM2YwHhcNMjYwMjA5MTAwMTAzWhcNMjYwMjEwMTAwMTAzWjAzMTEwLwYDVQQD EyhkZjIzMzBiNDZlOWQ4ZmY3NGEyOGE5ZTNiNGUzYTIyMzU0NTAzOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVtb/T5959vZFu+gWmRZsLBnEGUR GrdxasVfU534E39vEVkK4JMryZptnXU7ujVLJ/x102+vRWYjC9ea+GUHWGmCrmBT wJknCgR/IqjlBn/VadhQNy9ObG7JhDNtoSMBDp7E3V+EtU6m1LvKo+2XCIyBWxvT 53/Nq4qcUTxH+Z+9JqGS2tN3juQClCXqtRxRdKXjl1PzErMZ47uMFQsftTtxUOa/ 7BnYZ80NH6pO1YmvyD3r6ZC75R+OQlwBp3R+OyGJwpjOpOsgaa26aR5ZVW9qgjtG AECeXxGgQcvy2PaCkFKRR8QHXqyb9dLMOojv40ZQ0ZfJxU8SyP9colM2zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8jMLRunY/3Siip47TjoiNUUDlsMB8GA1UdIwQY MBaAFNwQL2Exzlp0brWYHdTB1rThewM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQt YjA5N2Q5ZjhlYzIyLzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQtYjA5N2Q5ZjhlYzIy LzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+YbO1HF 7PnrVnkRxlhb8d6nx0hDXfTxcSLTxJuRHCH0rCjqWsRQyD13lSLy1XbQOe9aZaw6 k6odok7X6zShevWJEq2yP6dE0ePIBB4X1AX/e5u09/313pw9poSdMcQScsRl4KnJ OTRMZpIEXVTCqj6gCeC44gJ8C20SUVwhyczAfKULw9fXoLpNlGqN/FgRt7vqJte9 QLjO++96XsRunqzjEA5VhJOQHotVUEeNoGDFf2re9hXlr2od+gzxg2To4SmEPC5h Wzulx9jDDxK3AlapnC/w3B/TQ+gqngXgvr4OXGGYXG0MRpFLgwUa9LVGGLi/ZUxk 5vATDAoZKjazBw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:41 2026 by rpki-client