This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json) Hash identifier: LPhAZMJPQAS/pX6yqkhzuAQAzzbHQEo9PhTEpYELgQs= Subject key identifier: 36:8C:D4:25:53:00:5C:D0:63:3D:14:0A:BE:D3:C2:7B:90:6D:D3:39 Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf Certificate serial: 019C446B7D3CACD9DDEBE92A2DFE9FD97655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft Manifest number: 0503 Signing time: Mon 09 Feb 2026 22:00:20 +0000 Manifest this update: Mon 09 Feb 2026 22:00:20 +0000 Manifest next update: Tue 10 Feb 2026 22:00:20 +0000 Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: nun+6AeobPRiVdaEIiZeqHeSa+LjGMF1skwyNRiXAgo=) 2: PWpDsLMHEz8TOyrA-SyzsSx50x4.roa (hash: 3QKMuAcr+JgQ4o/2LQdy62QLuMBtccj8bJckjR3bodQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:7d:3c:ac:d9:dd:eb:e9:2a:2d:fe:9f:d9:76:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf Validity Not Before: Feb 9 22:00:20 2026 GMT Not After : Feb 10 22:00:20 2026 GMT Subject: CN=368cd42553005cd0633d140abed3c27b906dd339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:41:ba:a9:82:a5:cf:fa:42:6d:77:76:d1:e0: 29:e7:e1:d2:6b:c5:16:57:35:42:bc:0b:aa:15:26: e9:4f:8b:c8:7c:1d:97:9b:95:f9:38:01:1e:9b:2a: bb:f7:68:0c:39:5c:db:55:bf:b8:18:bf:80:3a:b3: fd:75:0f:88:e8:dd:81:64:4c:58:03:3e:a3:9f:4f: 83:59:d9:d1:47:6c:1d:91:eb:1c:09:f0:7e:c3:5e: d4:c1:c9:16:17:7b:ae:9c:b5:e1:2d:3b:0f:48:42: bb:23:eb:0b:9f:8c:0f:57:1c:ec:08:bb:6d:a4:9a: 43:1d:5d:a8:0c:e8:9c:8c:df:b1:5e:17:36:fd:b1: 88:7c:66:d2:26:1c:dc:c9:af:02:94:17:85:8c:ce: 25:55:af:6d:df:c4:a1:f1:93:46:05:34:f4:fe:6d: d1:f8:a5:a8:e4:d0:8b:c2:8f:c2:fb:d6:11:3c:5c: 65:29:51:aa:f8:73:e3:ec:d3:cb:86:66:a5:2c:e2: 81:d3:a8:30:40:43:c4:99:ee:37:43:88:45:54:d6: e1:d9:7b:8a:03:2b:44:cc:cd:4e:a8:11:ae:c7:a1: bd:98:e4:96:80:90:62:f8:41:8b:a9:d5:6d:8c:16: 48:a9:de:14:ef:3b:de:18:06:56:b7:0a:da:da:7c: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8C:D4:25:53:00:5C:D0:63:3D:14:0A:BE:D3:C2:7B:90:6D:D3:39 X509v3 Authority Key Identifier: keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cc:02:72:9a:80:89:ad:5f:69:e0:f2:6a:8a:11:4b:1c:59: 0e:90:df:70:04:38:5b:03:86:7b:23:9d:ce:51:3d:38:bd:dd: be:68:22:2f:a1:f2:d2:f0:9f:d7:e1:c2:e3:7b:a7:99:3f:df: c9:b9:be:d3:2b:a5:94:ce:e9:bb:9b:bf:09:4e:02:8d:a0:76: 16:6f:10:e8:fd:cd:8d:70:ee:c7:0a:94:ac:a6:d9:65:55:4d: 9e:1b:73:b8:86:76:40:73:d7:c3:52:ae:9d:fb:d1:99:39:d7: dc:46:13:0f:af:60:9d:9e:7f:00:7d:3b:ad:52:4b:c8:d9:ed: 4a:24:3c:b9:6a:44:01:36:37:f3:68:f6:ce:65:ae:26:09:46: d6:31:1b:07:e7:1f:02:de:ef:56:99:94:fc:ef:17:a3:92:7a: 3f:4b:cb:82:d0:73:89:37:43:4a:d0:fe:14:7a:a5:29:6b:8f: 22:d4:67:33:83:a6:4f:f9:a2:5c:e5:e4:6c:ee:78:56:0f:06: fa:5f:94:db:9b:58:23:c8:fd:da:63:9e:12:cb:ef:97:5d:c0: 96:fe:4a:0e:97:00:72:7b:3b:2b:10:9e:87:90:ce:12:ac:95: 53:f4:86:5f:45:8a:79:26:26:ba:2f:de:89:02:a6:28:c5:b2: ac:cf:54:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa308rNnd6+kqLf6f2XZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZmNmZmQxMDBkYzAwN2YxYTk2YTQ0MzBlYTg3MjM4OWM1 N2Q2Y2YwHhcNMjYwMjA5MjIwMDIwWhcNMjYwMjEwMjIwMDIwWjAzMTEwLwYDVQQD EygzNjhjZDQyNTUzMDA1Y2QwNjMzZDE0MGFiZWQzYzI3YjkwNmRkMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UG6qYKlz/pCbXd20eAp5+HSa8UW VzVCvAuqFSbpT4vIfB2Xm5X5OAEemyq792gMOVzbVb+4GL+AOrP9dQ+I6N2BZExY Az6jn0+DWdnRR2wdkescCfB+w17UwckWF3uunLXhLTsPSEK7I+sLn4wPVxzsCLtt pJpDHV2oDOicjN+xXhc2/bGIfGbSJhzcya8ClBeFjM4lVa9t38Sh8ZNGBTT0/m3R +KWo5NCLwo/C+9YRPFxlKVGq+HPj7NPLhmalLOKB06gwQEPEme43Q4hFVNbh2XuK AytEzM1OqBGux6G9mOSWgJBi+EGLqdVtjBZIqd4U7zveGAZWtwra2nwi2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaM1CVTAFzQYz0UCr7TwnuQbdM5MB8GA1UdIwQY MBaAFN38/9EA3AB/GpakQw6ocjicV9bPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yZmMzNzUtZGExNC00ZjdmLThmYWUt MTVhNmU3ZGY0NWM5LzEvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8yZmMzNzUtZGExNC00ZjdmLThmYWUtMTVhNmU3ZGY0NWM5 LzEvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHswCcpqA ia1faeDyaooRSxxZDpDfcAQ4WwOGeyOdzlE9OL3dvmgiL6Hy0vCf1+HC43unmT/f ybm+0yullM7pu5u/CU4CjaB2Fm8Q6P3NjXDuxwqUrKbZZVVNnhtzuIZ2QHPXw1Ku nfvRmTnX3EYTD69gnZ5/AH07rVJLyNntSiQ8uWpEATY382j2zmWuJglG1jEbB+cf At7vVpmU/O8Xo5J6P0vLgtBziTdDStD+FHqlKWuPItRnM4OmT/miXOXkbO54Vg8G +l+U25tYI8j92mOeEsvvl13Alv5KDpcAcns7KxCeh5DOEqyVU/SGX0WKeSYmui/e iQKmKMWyrM9UMg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:21 2026 by rpki-client