This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json) Hash identifier: rcZ+ZhxwxUjG4SqGuu7wCp1+RlYRMwALglDgj4ABO4Q= Subject key identifier: 72:0A:58:5A:41:12:89:94:7B:74:38:30:42:9B:14:02:4F:FC:F3:6B Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3 Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3 Certificate serial: 019C420F3301E049F1FE34D5D82AC6845512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft Manifest number: 0113 Signing time: Mon 09 Feb 2026 11:00:18 +0000 Manifest this update: Mon 09 Feb 2026 11:00:18 +0000 Manifest next update: Tue 10 Feb 2026 11:00:18 +0000 Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: lsT+ab4CtY7P6iF5v3Qv8voN4jV/UUuUF0qNXLDg9bY=) 2: WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa (hash: 8pC1xGdRfwbbzKrCgP0LBKBZ1huDVz6z9MO3fLjaue8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:33:01:e0:49:f1:fe:34:d5:d8:2a:c6:84:55:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3 Validity Not Before: Feb 9 11:00:18 2026 GMT Not After : Feb 10 11:00:18 2026 GMT Subject: CN=720a585a411289947b743830429b14024ffcf36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:e7:66:31:c9:c2:86:60:34:d1:6b:53:80: 23:cf:f5:c9:16:bc:76:9d:93:b1:64:a7:4d:32:1c: 9a:2b:a4:6c:8e:4d:59:87:16:0d:4a:a9:04:c3:d3: 07:2e:ee:b8:e6:cb:1a:80:04:70:c7:99:85:15:c8: 20:df:72:56:79:6e:63:5c:4c:94:34:74:4b:a9:a8: d7:5d:db:50:74:d2:f8:f8:12:e5:be:dd:65:f8:8b: 78:f1:b8:f0:99:a2:51:0c:09:c4:b1:11:cd:0a:10: ec:d9:2e:6c:78:07:51:52:1d:9b:f1:ff:21:c0:98: 0d:bf:0c:e2:ee:29:e5:27:5c:af:0f:fa:27:6e:7e: 9f:b8:f1:2e:c1:6c:31:38:3e:25:72:15:94:b8:cc: 4e:af:b7:30:59:72:5e:09:54:b6:bf:68:5f:20:10: ff:b2:25:3d:3e:1b:45:2c:ec:ad:2e:c1:4d:c2:1c: 96:13:12:c0:70:c4:8e:ae:4f:9f:99:d4:74:2e:76: 8c:47:7d:ba:bc:7c:37:6c:c4:1c:4a:f0:b3:a1:c8: 2e:df:5a:4b:49:5d:72:57:34:b8:71:c9:27:cd:a2: da:9e:bd:bd:6d:b5:f5:e7:c6:3c:2c:c1:65:0d:64: 81:33:55:d5:7c:6b:b5:ff:e9:96:62:2a:49:f3:89: 2f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0A:58:5A:41:12:89:94:7B:74:38:30:42:9B:14:02:4F:FC:F3:6B X509v3 Authority Key Identifier: keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:05:2c:d7:b8:b5:44:5a:d4:a6:5e:02:69:61:f5:6e:b2:96: a5:db:cc:e3:de:87:2a:24:60:5d:3a:ea:f4:da:74:05:88:53: 6f:71:4b:31:c8:61:6e:4d:57:12:63:03:07:e9:6e:9e:dc:db: 9f:0b:5b:d4:6b:c8:d3:04:b6:51:a1:15:4c:59:31:bb:23:d2: 4c:90:20:2e:a9:13:f9:87:f9:4c:69:42:3b:4d:d7:85:5d:62: ae:84:bf:11:27:64:e1:a9:d1:ba:24:ef:19:08:2c:5b:b6:b5: 56:87:a9:3a:36:b6:a4:47:c1:f2:41:da:43:2b:0a:35:3b:80: f5:98:6a:0e:02:84:30:b0:4c:0d:f8:55:46:e6:c0:fe:44:80: d3:59:33:92:39:14:b9:b4:fb:14:2e:b2:ed:bf:d3:a8:eb:39: e3:ad:09:09:fa:ca:d9:a4:26:51:e9:9a:70:ad:a1:e5:b5:37: 86:e6:42:36:e0:d6:8d:f4:cd:1b:a9:0b:df:07:ba:a6:eb:43: 9c:23:6c:8f:a7:1d:32:46:18:b1:f8:ac:ba:00:66:e8:1c:28: 9c:15:a4:73:eb:74:e3:50:31:ba:5a:87:92:ae:04:ae:f6:af: e1:cc:8e:a6:d3:e1:99:09:74:e7:d5:cd:0b:ae:52:5a:c2:0d: c6:95:68:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDzMB4Enx/jTV2CrGhFUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMmExMjE3NjczZWIxMWNhOThhMzUxMzk1MjA0MDdjOTc2 OGRmYzMwHhcNMjYwMjA5MTEwMDE4WhcNMjYwMjEwMTEwMDE4WjAzMTEwLwYDVQQD Eyg3MjBhNTg1YTQxMTI4OTk0N2I3NDM4MzA0MjliMTQwMjRmZmNmMzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsrnZjHJwoZgNNFrU4Ajz/XJFrx2 nZOxZKdNMhyaK6Rsjk1ZhxYNSqkEw9MHLu645ssagARwx5mFFcgg33JWeW5jXEyU NHRLqajXXdtQdNL4+BLlvt1l+It48bjwmaJRDAnEsRHNChDs2S5seAdRUh2b8f8h wJgNvwzi7inlJ1yvD/onbn6fuPEuwWwxOD4lchWUuMxOr7cwWXJeCVS2v2hfIBD/ siU9PhtFLOytLsFNwhyWExLAcMSOrk+fmdR0LnaMR326vHw3bMQcSvCzocgu31pL SV1yVzS4ccknzaLanr29bbX158Y8LMFlDWSBM1XVfGu1/+mWYipJ84kvpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIKWFpBEomUe3Q4MEKbFAJP/PNrMB8GA1UdIwQY MBaAFN0qEhdnPrEcqYo1E5UgQHyXaN/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80YTkzYzYtMTcwYS00YWEyLThkZmMt NmI5NjQxODIzY2E0LzEvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80YTkzYzYtMTcwYS00YWEyLThkZmMtNmI5NjQxODIzY2E0 LzEvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQUs17i1 RFrUpl4CaWH1brKWpdvM496HKiRgXTrq9Np0BYhTb3FLMchhbk1XEmMDB+luntzb nwtb1GvI0wS2UaEVTFkxuyPSTJAgLqkT+Yf5TGlCO03XhV1iroS/ESdk4anRuiTv GQgsW7a1VoepOja2pEfB8kHaQysKNTuA9ZhqDgKEMLBMDfhVRubA/kSA01kzkjkU ubT7FC6y7b/TqOs5460JCfrK2aQmUemacK2h5bU3huZCNuDWjfTNG6kL3we6putD nCNsj6cdMkYYsfisugBm6BwonBWkc+t041AxulqHkq4Ervav4cyOptPhmQl059XN C65SWsINxpVo6g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:12 2026 by rpki-client