This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json) Hash identifier: YADtUgQ7auTpIR3/VbLSBo2WmwZFvc8omU9qCaLGbFk= Subject key identifier: 33:75:52:F1:AA:37:78:20:11:9C:A3:F0:E8:CB:BD:68:38:71:B1:7A Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c Certificate serial: 019C4210198E1D8F0C2F44F55267B9494297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft Manifest number: 1322 Signing time: Mon 09 Feb 2026 11:01:16 +0000 Manifest this update: Mon 09 Feb 2026 11:01:16 +0000 Manifest next update: Tue 10 Feb 2026 11:01:16 +0000 Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: m8xDhEeTGbnbHqPwYk5/vauZGBi+8tCBI8IVAR2JiPM=) 2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:19:8e:1d:8f:0c:2f:44:f5:52:67:b9:49:42:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c Validity Not Before: Feb 9 11:01:16 2026 GMT Not After : Feb 10 11:01:16 2026 GMT Subject: CN=337552f1aa377820119ca3f0e8cbbd683871b17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:a4:77:f9:51:90:64:78:7c:08:a6:14:47: f7:ab:c5:6e:2c:f8:0d:55:5f:56:7c:1b:18:76:8d: f8:07:42:df:2f:6c:71:20:c3:a2:cb:1d:50:8e:46: e8:af:ea:9e:24:a0:e4:54:99:f1:ab:b0:96:30:78: 6c:a2:f3:f9:5d:24:26:b3:41:7e:e5:39:29:91:15: ac:4c:97:be:61:bf:4e:3b:28:a3:31:b0:17:3b:f2: 5f:2f:68:85:1d:b0:5d:06:fa:52:f5:50:fa:eb:3b: e3:48:8e:ef:49:f1:bc:8d:46:ad:18:64:dd:1d:10: 30:47:cc:a5:ce:b1:39:cf:e9:f8:e7:f0:a1:5a:28: 37:0c:8d:b5:8a:c3:8d:62:e0:41:48:d5:bf:d5:d4: d8:15:76:92:30:40:1f:d9:bb:c6:a5:bb:40:bd:46: f1:1c:9c:dc:39:3b:8a:c4:86:9c:27:3e:b5:46:71: 48:ba:30:bb:cc:a3:b3:ff:fc:77:39:c0:ef:b1:65: 7a:dc:1f:65:2a:9c:74:93:e2:8b:a5:88:16:86:ac: 22:a1:d6:c6:2b:9d:39:00:7b:78:2a:1c:71:1e:e6: ea:b7:ed:e1:c0:ee:f1:cc:4c:21:79:06:dd:78:c1: fb:6d:b6:d1:26:dd:17:f0:0c:64:b4:2d:3d:0d:29: 87:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:75:52:F1:AA:37:78:20:11:9C:A3:F0:E8:CB:BD:68:38:71:B1:7A X509v3 Authority Key Identifier: keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1f:0b:8f:8b:07:ce:88:d3:d5:e3:fb:bc:32:ec:4d:1b:55: cf:20:d9:ce:56:d0:9e:3c:af:ff:23:55:03:56:99:96:6b:e0: 08:af:03:c0:9c:03:f2:34:67:36:2b:0e:ee:19:e3:df:bf:29: 2e:63:65:d8:c5:99:53:d8:44:b6:9a:ef:93:df:db:53:bd:f6: 5c:2f:90:3c:19:d6:8f:43:8e:28:5e:97:77:f4:58:11:d0:b2: aa:56:28:c1:7a:c6:18:ad:6a:67:d3:37:92:f9:66:93:88:5d: 6d:79:90:b2:e4:a1:42:9b:46:21:3a:d8:2b:3e:b5:b9:1d:b7: bf:da:bf:33:af:21:3c:dd:f3:36:94:61:3c:83:60:e4:ca:10: cb:67:b4:96:16:c9:12:4e:69:c7:a6:e6:af:20:f1:eb:03:9c: 26:7e:c6:20:e6:5c:3d:04:42:a2:83:a5:7c:7d:80:53:7f:a1: 8b:ae:a6:43:af:cf:fe:23:70:a3:bf:f9:e9:88:57:dd:83:54: 70:a4:0d:03:7b:61:68:ae:e2:6e:4b:21:62:8a:11:3d:a2:3e: 99:5e:97:1a:35:fd:98:d4:c0:73:7b:65:4f:0f:f3:54:11:35: 2f:9b:fe:a8:58:2f:cf:eb:61:a5:39:14:f3:1d:6e:ca:70:b1: 8d:b0:84:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEBmOHY8ML0T1Ume5SUKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGUxYjkwZDUxMmNjMzQwMmY3NjE0MTQwNjI5Nzk1ZTRk NGFjNGMwHhcNMjYwMjA5MTEwMTE2WhcNMjYwMjEwMTEwMTE2WjAzMTEwLwYDVQQD EygzMzc1NTJmMWFhMzc3ODIwMTE5Y2EzZjBlOGNiYmQ2ODM4NzFiMTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKmkd/lRkGR4fAimFEf3q8VuLPgN VV9WfBsYdo34B0LfL2xxIMOiyx1Qjkbor+qeJKDkVJnxq7CWMHhsovP5XSQms0F+ 5TkpkRWsTJe+Yb9OOyijMbAXO/JfL2iFHbBdBvpS9VD66zvjSI7vSfG8jUatGGTd HRAwR8ylzrE5z+n45/ChWig3DI21isONYuBBSNW/1dTYFXaSMEAf2bvGpbtAvUbx HJzcOTuKxIacJz61RnFIujC7zKOz//x3OcDvsWV63B9lKpx0k+KLpYgWhqwiodbG K505AHt4KhxxHubqt+3hwO7xzEwheQbdeMH7bbbRJt0X8AxktC09DSmHOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDN1UvGqN3ggEZyj8OjLvWg4cbF6MB8GA1UdIwQY MBaAFNwOG5DVEsw0AvdhQUBil5Xk1KxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYt MTZmNTJjZWE0ZWIxLzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYtMTZmNTJjZWE0ZWIx LzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiB8Lj4sH zojT1eP7vDLsTRtVzyDZzlbQnjyv/yNVA1aZlmvgCK8DwJwD8jRnNisO7hnj378p LmNl2MWZU9hEtprvk9/bU732XC+QPBnWj0OOKF6Xd/RYEdCyqlYowXrGGK1qZ9M3 kvlmk4hdbXmQsuShQptGITrYKz61uR23v9q/M68hPN3zNpRhPINg5MoQy2e0lhbJ Ek5px6bmryDx6wOcJn7GIOZcPQRCooOlfH2AU3+hi66mQ6/P/iNwo7/56YhX3YNU cKQNA3thaK7ibkshYooRPaI+mV6XGjX9mNTAc3tlTw/zVBE1L5v+qFgvz+thpTkU 8x1uynCxjbCEqQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:53 2026 by rpki-client