This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json) Hash identifier: VxZZZGe7zTuXSM8OYoeTt235rebFiHwIQwcBV8N7Gfo= Subject key identifier: 13:C4:1D:25:3F:CF:17:72:A4:5F:7E:FC:34:32:36:E4:E2:FE:76:24 Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13 Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13 Certificate serial: 019C4321F22EFA8217D0E6A07303F215E183 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft Manifest number: 140A Signing time: Mon 09 Feb 2026 16:00:24 +0000 Manifest this update: Mon 09 Feb 2026 16:00:24 +0000 Manifest next update: Tue 10 Feb 2026 16:00:24 +0000 Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: bKi1A/gZT8X3X2RSTKp6NtAwO7k+7xACJdmcUgd7+nY=) 2: rK_eXiPCuOjW-auhckDc_o9LpbU.roa (hash: 9zrMuRy0E1ETZnPDy8ZqKg+/z8n/i1oHLCCis26nPQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f2:2e:fa:82:17:d0:e6:a0:73:03:f2:15:e1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13 Validity Not Before: Feb 9 16:00:24 2026 GMT Not After : Feb 10 16:00:24 2026 GMT Subject: CN=13c41d253fcf1772a45f7efc343236e4e2fe7624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:45:bd:92:f6:fc:81:d1:95:83:a0:e8:0c:4b: 86:4f:db:47:5b:42:74:0b:5f:78:0a:2b:14:dd:86: 93:51:a4:62:a8:18:c1:c7:47:d6:ff:c4:4f:2c:a5: a2:63:cd:e6:08:0d:a8:20:33:85:2d:85:20:ff:1a: f8:f3:e2:19:72:94:4b:2b:f3:f4:e5:9c:0c:2c:99: ca:75:da:e1:d8:7f:89:25:04:1b:46:3e:6e:69:20: 2f:a9:6b:d5:14:e5:b5:5e:3e:58:0a:af:d1:b8:4b: 25:57:9b:6e:c5:7c:97:f6:ed:22:7d:2d:24:8c:e4: ca:5d:8a:d3:e1:5b:51:88:18:35:a8:83:05:08:50: 01:5d:23:fc:81:83:71:83:64:31:dd:e2:06:1c:7c: 0a:c4:f4:10:e6:73:a6:16:63:be:41:af:6f:47:40: f5:05:34:cf:8e:36:d3:23:96:df:62:a6:d5:31:c8: 5c:93:6d:74:77:b7:f2:bd:fb:a3:f8:2f:f0:ce:42: 7c:ec:f6:3e:cc:18:44:9b:6f:f0:47:61:3d:bc:65: d1:e0:14:37:9f:09:9e:cb:17:98:81:40:73:2f:ff: ec:0c:ae:1d:c5:6a:d8:fd:d7:ef:39:bd:ce:a6:78: 8d:2e:a3:94:31:61:4b:6e:2d:2b:d9:c2:6c:80:9a: b4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C4:1D:25:3F:CF:17:72:A4:5F:7E:FC:34:32:36:E4:E2:FE:76:24 X509v3 Authority Key Identifier: keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ca:f9:f2:ec:9f:ad:10:e5:ee:74:8d:e5:c9:d4:2a:d9:95: 8d:93:bb:16:8f:7e:a8:76:0f:fc:9a:58:de:82:b3:a2:69:98: 4f:d6:ef:a2:2d:ce:1e:8c:1d:06:d7:67:11:0c:c0:c3:15:2a: fb:86:17:67:ab:64:62:f9:1f:b6:bc:55:a0:70:dd:fa:50:3d: 72:ad:54:bf:34:64:25:a3:c8:a6:ac:e1:41:33:46:b0:49:c5: a7:ec:05:e3:b0:ee:b1:33:a1:0f:b4:64:86:0a:c6:8c:45:5c: 15:bc:50:c7:11:12:01:c7:c5:ea:03:e1:e1:94:8b:9f:e1:a3: e7:d9:2b:13:bc:76:0b:90:52:8b:a6:1f:21:e0:3a:4d:4f:22: f1:c2:83:5c:42:f3:8d:2a:55:c8:c1:19:d2:bd:b3:ad:e0:fe: 19:74:52:36:11:a6:90:e4:ce:34:57:4a:9b:72:2e:da:02:63: c6:bb:e3:5f:f9:45:e3:97:8f:6a:d6:19:f0:8e:d0:53:13:6b: 61:8b:5e:c1:f5:49:07:24:9b:f3:c1:bc:51:27:23:38:f1:65: a8:58:37:20:c7:c7:d2:b1:8c:e1:c6:c8:1d:79:9a:50:b8:f6: 0f:e2:13:78:a9:b9:c7:62:20:c0:1d:99:9f:34:09:4c:c5:7d: 50:ed:06:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfIu+oIX0OagcwPyFeGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMTRmZTZjZGE5MGM5YWZlODA3NTkwZDJkNTAzNzRhNzZh MjhlMTMwHhcNMjYwMjA5MTYwMDI0WhcNMjYwMjEwMTYwMDI0WjAzMTEwLwYDVQQD EygxM2M0MWQyNTNmY2YxNzcyYTQ1ZjdlZmMzNDMyMzZlNGUyZmU3NjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUW9kvb8gdGVg6DoDEuGT9tHW0J0 C194CisU3YaTUaRiqBjBx0fW/8RPLKWiY83mCA2oIDOFLYUg/xr48+IZcpRLK/P0 5ZwMLJnKddrh2H+JJQQbRj5uaSAvqWvVFOW1Xj5YCq/RuEslV5tuxXyX9u0ifS0k jOTKXYrT4VtRiBg1qIMFCFABXSP8gYNxg2Qx3eIGHHwKxPQQ5nOmFmO+Qa9vR0D1 BTTPjjbTI5bfYqbVMchck210d7fyvfuj+C/wzkJ87PY+zBhEm2/wR2E9vGXR4BQ3 nwmeyxeYgUBzL//sDK4dxWrY/dfvOb3OpniNLqOUMWFLbi0r2cJsgJq0FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPEHSU/zxdypF9+/DQyNuTi/nYkMB8GA1UdIwQY MBaAFN8U/mzakMmv6AdZDS1QN0p2oo4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAt ZGE3MzhhMzkwZjZlLzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAtZGE3MzhhMzkwZjZl LzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8r58uyf rRDl7nSN5cnUKtmVjZO7Fo9+qHYP/JpY3oKzommYT9bvoi3OHowdBtdnEQzAwxUq +4YXZ6tkYvkftrxVoHDd+lA9cq1UvzRkJaPIpqzhQTNGsEnFp+wF47DusTOhD7Rk hgrGjEVcFbxQxxESAcfF6gPh4ZSLn+Gj59krE7x2C5BSi6YfIeA6TU8i8cKDXELz jSpVyMEZ0r2zreD+GXRSNhGmkOTONFdKm3Iu2gJjxrvjX/lF45ePatYZ8I7QUxNr YYtewfVJBySb88G8UScjOPFlqFg3IMfH0rGM4cbIHXmaULj2D+ITeKm5x2IgwB2Z nzQJTMV9UO0GHg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:41 2026 by rpki-client