This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json) Hash identifier: otzlRIg7B2jB+kzPeFVvOJ9/ZKX4/FVFg2Y4MXInV1k= Subject key identifier: 84:A2:B0:B0:2C:E8:42:22:5C:CE:A9:8B:81:9C:81:C2:AB:96:03:0B Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df Certificate serial: 019C421015D92CB646E3C2A56FF72650B5F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft Manifest number: 120B Signing time: Mon 09 Feb 2026 11:01:16 +0000 Manifest this update: Mon 09 Feb 2026 11:01:16 +0000 Manifest next update: Tue 10 Feb 2026 11:01:16 +0000 Files and hashes: 1: VZDwVhwIg3g9iM3qt-x-zwWp4Ao.roa (hash: 7a9BH9RzouuHFjB1cCK0b23ksnqE0jY9b0U+LyPMrtw=) 2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: zqbn4fdzEGraGV3uEyflZVFbCMnavTcvE41YNevjcvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:15:d9:2c:b6:46:e3:c2:a5:6f:f7:26:50:b5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df Validity Not Before: Feb 9 11:01:16 2026 GMT Not After : Feb 10 11:01:16 2026 GMT Subject: CN=84a2b0b02ce842225ccea98b819c81c2ab96030b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7f:14:6f:95:8e:22:f0:eb:dd:4a:9a:db:d2: 04:c8:8d:82:d7:27:40:89:63:f1:56:74:c3:9a:ea: 12:94:27:83:ef:35:4a:c2:30:d6:81:d5:45:f4:41: 8b:9d:b4:04:4c:b0:3e:41:ac:19:e4:f2:25:1b:aa: 17:b8:5b:71:e1:de:14:40:d8:4e:95:a0:56:c6:e3: fe:81:7c:58:e5:aa:a9:d6:d5:a8:75:4f:ae:1d:3d: 40:85:18:59:dc:f2:54:ef:13:8a:f7:23:d9:4f:e3: 01:55:49:39:b9:2c:0d:7b:c7:6f:63:01:94:f1:e9: 2d:de:26:bb:8a:e1:f7:f6:e0:54:a8:20:ab:be:39: c6:d8:ec:86:fc:34:03:53:83:f0:6c:50:dd:13:b0: e4:bb:f2:4e:b1:39:3d:1d:97:e0:5d:de:87:cf:12: f0:32:1c:de:4c:98:72:a5:af:18:3e:f8:79:8a:5c: a6:d3:30:d7:6f:56:8b:dc:20:d2:c5:76:ae:67:86: 9e:ea:81:e3:ec:8f:6f:2f:c4:a4:01:54:79:66:05: 5b:1e:e9:f0:71:de:75:62:61:3e:c4:49:ac:97:09: 8a:36:3e:aa:c7:ea:be:75:86:ee:80:02:5b:57:76: 70:57:bc:1a:29:95:b4:eb:a1:7f:50:3d:de:ec:9e: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A2:B0:B0:2C:E8:42:22:5C:CE:A9:8B:81:9C:81:C2:AB:96:03:0B X509v3 Authority Key Identifier: keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:53:ec:ba:91:f1:41:13:8e:4b:95:7b:67:50:60:da:3b:f9: 95:6b:60:03:5d:ab:3e:9d:03:c3:a3:71:c7:c7:1c:d0:e5:ec: 24:d1:de:d8:2c:22:a6:59:41:46:f9:fb:2d:fc:6a:98:a9:8d: ea:51:a6:49:1d:59:c8:b3:82:1c:36:e2:bc:8e:a8:83:6d:5c: 56:73:9c:6f:8f:2e:52:2e:32:8c:95:f0:38:bb:78:6d:35:ca: 24:6f:3d:3c:2a:44:1a:49:ac:c1:7d:0a:93:d4:66:e8:34:a3: 09:02:7e:22:d9:5d:6a:0e:00:57:a6:19:71:41:c5:ea:62:2c: 72:46:e7:d8:bd:72:1e:e7:98:a4:8d:47:a1:4a:46:e8:cb:01: 80:f6:3b:96:f5:02:8f:03:ea:d9:32:54:ce:3e:68:95:0b:c2: 8c:a5:88:8e:3e:30:47:ef:c7:b2:53:95:7a:d2:fc:15:68:be: 49:6d:bd:aa:dc:66:7d:86:94:b9:ea:fb:a2:a4:80:37:ad:d2: 0c:6c:a4:c6:3b:38:6d:ad:0b:c1:9c:c5:e6:b6:d4:99:cf:82: 17:96:d8:0c:76:e8:ba:90:f5:f6:12:d6:1c:03:41:4b:91:d1: a3:d7:4c:e3:de:19:2d:a6:33:08:fa:e8:fa:c7:1a:20:60:c2: 6f:ed:41:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEBXZLLZG48Klb/cmULXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzExMWVjNTU0OTExNWNiMzQ3NjU0ZDhmZTViMjcwOWQy N2Y3ZGYwHhcNMjYwMjA5MTEwMTE2WhcNMjYwMjEwMTEwMTE2WjAzMTEwLwYDVQQD Eyg4NGEyYjBiMDJjZTg0MjIyNWNjZWE5OGI4MTljODFjMmFiOTYwMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H8Ub5WOIvDr3Uqa29IEyI2C1ydA iWPxVnTDmuoSlCeD7zVKwjDWgdVF9EGLnbQETLA+QawZ5PIlG6oXuFtx4d4UQNhO laBWxuP+gXxY5aqp1tWodU+uHT1AhRhZ3PJU7xOK9yPZT+MBVUk5uSwNe8dvYwGU 8ekt3ia7iuH39uBUqCCrvjnG2OyG/DQDU4PwbFDdE7Dku/JOsTk9HZfgXd6HzxLw MhzeTJhypa8YPvh5ilym0zDXb1aL3CDSxXauZ4ae6oHj7I9vL8SkAVR5ZgVbHunw cd51YmE+xEmslwmKNj6qx+q+dYbugAJbV3ZwV7waKZW066F/UD3e7J5vjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISisLAs6EIiXM6pi4GcgcKrlgMLMB8GA1UdIwQY MBaAFMdxEexVSRFcs0dlTY/lsnCdJ/ffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lMmQxYWQtY2ZlMC00NDk0LWFhNzUt ZTBjMmI5NDc5MmNhLzEveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lMmQxYWQtY2ZlMC00NDk0LWFhNzUtZTBjMmI5NDc5MmNh LzEveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1PsupHx QROOS5V7Z1Bg2jv5lWtgA12rPp0Dw6Nxx8cc0OXsJNHe2CwipllBRvn7LfxqmKmN 6lGmSR1ZyLOCHDbivI6og21cVnOcb48uUi4yjJXwOLt4bTXKJG89PCpEGkmswX0K k9Rm6DSjCQJ+Itldag4AV6YZcUHF6mIsckbn2L1yHueYpI1HoUpG6MsBgPY7lvUC jwPq2TJUzj5olQvCjKWIjj4wR+/HslOVetL8FWi+SW29qtxmfYaUuer7oqSAN63S DGykxjs4ba0LwZzF5rbUmc+CF5bYDHboupD19hLWHANBS5HRo9dM494ZLaYzCPro +scaIGDCb+1BeA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:58:55 2026 by rpki-client