This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json) Hash identifier: 2HvwJXhUlsacuAASh50PaSmboO4SiJHbTDWaXlwWtts= Subject key identifier: 38:74:6E:0B:04:C3:9C:26:CC:46:08:B3:8A:EE:33:81:17:93:16:3A Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea Certificate serial: 019C4390423C47FAC6A3130722350C040BA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft Manifest number: 12AC Signing time: Mon 09 Feb 2026 18:00:53 +0000 Manifest this update: Mon 09 Feb 2026 18:00:53 +0000 Manifest next update: Tue 10 Feb 2026 18:00:53 +0000 Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: +oF4vnXOBt1en9vmVA29+K3XZhjLHnbiJ6n1kHdN7rc=) 2: 8LiOuIicwsY8-ml0zZmX3B_CKY0.roa (hash: PGF9mG8gxQZuhtHniYJ4M8QD71XqK/WXHLHoKAZKACI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:42:3c:47:fa:c6:a3:13:07:22:35:0c:04:0b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea Validity Not Before: Feb 9 18:00:53 2026 GMT Not After : Feb 10 18:00:53 2026 GMT Subject: CN=38746e0b04c39c26cc4608b38aee33811793163a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:58:35:37:98:9d:c7:bd:3b:21:e4:af:50:fd: 86:9d:82:fe:80:c3:94:fe:5a:3a:ac:c2:50:30:12: 36:a5:65:97:07:4e:c9:8a:1d:37:64:d8:7b:8a:2d: 29:4e:a2:cd:bf:c6:7e:69:15:28:1a:5b:7d:17:99: 85:00:d2:3b:97:30:d7:23:f0:df:d8:9d:e4:15:06: 1e:f6:a5:26:f5:88:1d:ea:c9:10:bf:fa:98:5c:6a: a2:57:40:e1:6e:78:c2:db:ea:cc:d1:ac:f8:b4:70: 96:7b:e6:3e:27:a6:1f:bb:57:b0:4b:34:27:2b:5c: 20:2e:c0:ae:53:b8:3d:eb:07:df:23:23:b4:80:be: 4b:66:c1:a7:15:ad:05:af:f1:2b:b3:16:47:ce:b7: 21:f2:74:6d:2c:4e:e5:23:f9:7a:40:ae:c6:81:d4: a3:52:91:81:ba:dc:c5:e4:5b:53:e2:14:87:07:af: d3:dc:0b:6a:6a:a3:5d:67:7a:8e:f7:6e:2d:c9:48: 45:08:5c:aa:ab:e7:c5:ff:0d:17:01:de:81:eb:b5: 50:6b:0b:ef:e2:59:d2:c6:e1:ca:ad:2c:ad:43:06: da:a0:ec:ed:78:19:08:31:39:ab:2b:f3:b6:84:3a: 89:0a:6e:a2:78:9b:8a:b0:e6:9d:94:af:d3:c9:08: 42:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:74:6E:0B:04:C3:9C:26:CC:46:08:B3:8A:EE:33:81:17:93:16:3A X509v3 Authority Key Identifier: keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:28:23:17:f0:eb:14:83:91:2d:18:20:f5:12:a3:77:ec:4f: 0c:9e:11:ee:8c:53:be:7e:0a:c5:b0:50:bf:bc:d5:7c:e3:90: 68:9d:4b:88:d6:c2:5f:f1:3d:c2:fa:6b:32:95:2b:7d:ba:63: 4b:9b:2d:a2:6b:05:d0:32:b9:3a:a7:93:09:09:93:63:67:35: 7f:0b:20:31:67:6e:b5:85:d6:18:fe:aa:f8:84:48:56:42:a3: de:31:1f:be:de:51:5b:c6:21:59:53:52:93:ea:d7:bd:40:ea: 18:55:ba:36:f0:3f:0b:26:cd:44:f5:87:6d:fd:a7:e4:5c:50: aa:3d:2f:b1:07:c7:01:32:12:37:82:8a:a4:10:77:61:29:1b: 63:c9:2b:ec:01:69:43:56:51:b7:63:51:d1:8e:dd:45:a0:5c: 13:5a:d8:2c:30:b5:1f:f7:f2:2b:7a:11:96:40:d8:56:4f:69: 61:8a:d0:8d:d7:92:70:ef:d8:14:8d:95:ee:82:49:f3:ef:c8: 5a:22:97:d2:8c:e7:b7:d6:6c:80:06:85:02:44:60:84:6f:36: 81:e4:65:ea:be:f8:36:92:92:77:47:fa:a1:6d:37:70:72:06: 9c:c5:05:e2:45:d8:9c:b3:98:0b:f4:9c:af:bc:8e:b3:56:c0: 60:95:e7:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkEI8R/rGoxMHIjUMBAukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYTA4MjQ4OWE0MTQwYzBhNzhlMDNkNTBiNmJmZDU0MDJi MDQ0ZWEwHhcNMjYwMjA5MTgwMDUzWhcNMjYwMjEwMTgwMDUzWjAzMTEwLwYDVQQD EygzODc0NmUwYjA0YzM5YzI2Y2M0NjA4YjM4YWVlMzM4MTE3OTMxNjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVg1N5idx707IeSvUP2GnYL+gMOU /lo6rMJQMBI2pWWXB07Jih03ZNh7ii0pTqLNv8Z+aRUoGlt9F5mFANI7lzDXI/Df 2J3kFQYe9qUm9Ygd6skQv/qYXGqiV0DhbnjC2+rM0az4tHCWe+Y+J6Yfu1ewSzQn K1wgLsCuU7g96wffIyO0gL5LZsGnFa0Fr/ErsxZHzrch8nRtLE7lI/l6QK7GgdSj UpGButzF5FtT4hSHB6/T3AtqaqNdZ3qO924tyUhFCFyqq+fF/w0XAd6B67VQawvv 4lnSxuHKrSytQwbaoOzteBkIMTmrK/O2hDqJCm6ieJuKsOadlK/TyQhCnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDh0bgsEw5wmzEYIs4ruM4EXkxY6MB8GA1UdIwQY MBaAFNyggkiaQUDAp44D1Qtr/VQCsETqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYjliYzgtNGIwNi00YmFmLThiYTgt ZGZjMDU2NTQ1YmU0LzEvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kYjliYzgtNGIwNi00YmFmLThiYTgtZGZjMDU2NTQ1YmU0 LzEvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSgjF/Dr FIORLRgg9RKjd+xPDJ4R7oxTvn4KxbBQv7zVfOOQaJ1LiNbCX/E9wvprMpUrfbpj S5stomsF0DK5OqeTCQmTY2c1fwsgMWdutYXWGP6q+IRIVkKj3jEfvt5RW8YhWVNS k+rXvUDqGFW6NvA/CybNRPWHbf2n5FxQqj0vsQfHATISN4KKpBB3YSkbY8kr7AFp Q1ZRt2NR0Y7dRaBcE1rYLDC1H/fyK3oRlkDYVk9pYYrQjdeScO/YFI2V7oJJ8+/I WiKX0oznt9ZsgAaFAkRghG82geRl6r74NpKSd0f6oW03cHIGnMUF4kXYnLOYC/Sc r7yOs1bAYJXnJA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:30 2026 by rpki-client