This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json) Hash identifier: xgxmoJkXWUraYuTMBSYmco+lI2mp6Sk54JWDUr63ZYY= Subject key identifier: E3:20:AC:8D:D0:E3:7B:A6:7F:E3:76:B3:5F:91:C0:AD:99:71:00:76 Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39 Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239 Certificate serial: 019C42467D125F4AA315A04590B7E532C385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft Manifest number: 0569 Signing time: Mon 09 Feb 2026 12:00:41 +0000 Manifest this update: Mon 09 Feb 2026 12:00:41 +0000 Manifest next update: Tue 10 Feb 2026 12:00:41 +0000 Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: WZyDkTzPMIGHN9H1FraAx2BPR0OLYQB97Ij54gaq7XU=) 2: 5ejH3yejqFEyn6aqh86TLRcJtvk.roa (hash: vwjQJrlUMM+ImHTAGzl34TDgOISTLZWm5ODvkzATioc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:7d:12:5f:4a:a3:15:a0:45:90:b7:e5:32:c3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239 Validity Not Before: Feb 9 12:00:41 2026 GMT Not After : Feb 10 12:00:41 2026 GMT Subject: CN=e320ac8dd0e37ba67fe376b35f91c0ad99710076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:cd:52:0d:ee:19:68:c7:6e:11:e1:94:dc: a8:02:a3:40:b6:7d:2c:34:36:a2:58:29:b0:5c:f3: 4d:fe:7c:6a:24:04:fa:7d:93:1f:8d:fb:f0:0a:dd: 1b:c2:5d:11:b1:49:d2:ab:92:9e:f0:83:05:9d:8d: c3:49:90:ff:e9:b6:6d:a3:5f:65:64:d9:ee:e8:ef: 10:3e:cc:18:a7:53:7f:3a:ab:4e:8a:09:8d:a3:5a: eb:3e:79:d9:22:31:41:40:2f:0b:d8:c1:42:2c:69: 24:ce:eb:87:d0:f3:01:e0:6e:51:0c:07:87:23:7f: 91:f4:6e:07:22:81:55:4c:13:3a:bf:6e:c8:6b:f2: 68:d5:58:24:52:e0:5b:14:6c:b0:67:a3:f1:6b:e2: ba:6c:5e:b2:ff:21:f4:3d:52:28:d1:89:8c:58:cc: 38:af:c0:33:27:31:e9:3c:8c:71:f1:09:ff:ff:4d: af:fd:8c:cf:1e:1d:bc:32:46:9d:67:37:4e:a7:9d: 97:e3:6c:d9:21:03:51:aa:7b:65:f7:b3:ca:53:96: c3:91:32:88:74:a1:c4:96:22:aa:5e:bd:ee:69:5e: fd:d5:34:6f:54:2e:f4:d3:15:05:28:8e:51:68:27: 4d:20:b0:e8:93:f7:88:df:2e:52:ea:bc:36:99:5e: 48:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:20:AC:8D:D0:E3:7B:A6:7F:E3:76:B3:5F:91:C0:AD:99:71:00:76 X509v3 Authority Key Identifier: keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:98:6a:2e:55:a0:40:a7:34:5c:53:01:a0:38:9c:13:97:19: 4b:94:3e:d7:e8:cb:b2:c0:25:54:39:12:ad:fb:70:49:58:c6: 42:18:7e:8f:ac:e8:50:e9:80:a4:62:1a:b4:68:02:ab:da:72: ab:7b:bf:09:1d:3f:cf:23:2c:da:c1:79:cb:39:12:44:a6:35: 98:cb:ce:c7:85:c6:c8:31:41:88:fb:21:68:2d:d8:63:5b:1f: a9:34:c7:47:01:86:94:29:3f:ca:f9:1f:0b:9a:67:2d:80:97: 1a:41:09:9b:b4:0c:ed:12:97:04:5d:87:15:41:d1:06:3a:85: 85:c2:8e:18:d5:69:51:bd:2c:f4:84:cb:d5:52:69:6f:f4:96: e2:92:71:7c:93:75:6f:0e:a9:ed:e8:d5:7f:79:41:4a:0a:20: 33:79:0c:fa:94:ed:80:98:b7:46:6f:99:43:a4:54:6e:64:da: c9:6a:e0:6a:ff:a9:7f:5d:1d:56:ef:b7:a2:d2:6c:74:ef:f5: 64:4e:86:a7:a4:82:11:1b:51:2e:ce:57:b5:d9:e9:20:28:e1: 9b:e8:5f:c5:9f:cc:f8:45:9b:de:f3:c6:64:03:e3:e7:b8:00: 6a:4e:25:04:c5:04:06:db:38:13:c8:a6:4f:ed:4c:a9:9a:6e: 8b:f7:64:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRn0SX0qjFaBFkLflMsOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWIyYjBlMWNlNzgzZWI3YTJlMzkzZmZkZDEyOGM2YTlj MDIyMzkwHhcNMjYwMjA5MTIwMDQxWhcNMjYwMjEwMTIwMDQxWjAzMTEwLwYDVQQD EyhlMzIwYWM4ZGQwZTM3YmE2N2ZlMzc2YjM1ZjkxYzBhZDk5NzEwMDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF7NUg3uGWjHbhHhlNyoAqNAtn0s NDaiWCmwXPNN/nxqJAT6fZMfjfvwCt0bwl0RsUnSq5Ke8IMFnY3DSZD/6bZto19l ZNnu6O8QPswYp1N/OqtOigmNo1rrPnnZIjFBQC8L2MFCLGkkzuuH0PMB4G5RDAeH I3+R9G4HIoFVTBM6v27Ia/Jo1VgkUuBbFGywZ6Pxa+K6bF6y/yH0PVIo0YmMWMw4 r8AzJzHpPIxx8Qn//02v/YzPHh28MkadZzdOp52X42zZIQNRqntl97PKU5bDkTKI dKHEliKqXr3uaV791TRvVC700xUFKI5RaCdNILDok/eI3y5S6rw2mV5IBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMgrI3Q43umf+N2s1+RwK2ZcQB2MB8GA1UdIwQY MBaAFNwbKw4c54Prei45P/3RKMapwCI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUt YWRmZTdlNzNkZmVlLzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUtYWRmZTdlNzNkZmVl LzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5hqLlWg QKc0XFMBoDicE5cZS5Q+1+jLssAlVDkSrftwSVjGQhh+j6zoUOmApGIatGgCq9py q3u/CR0/zyMs2sF5yzkSRKY1mMvOx4XGyDFBiPshaC3YY1sfqTTHRwGGlCk/yvkf C5pnLYCXGkEJm7QM7RKXBF2HFUHRBjqFhcKOGNVpUb0s9ITL1VJpb/SW4pJxfJN1 bw6p7ejVf3lBSgogM3kM+pTtgJi3Rm+ZQ6RUbmTayWrgav+pf10dVu+3otJsdO/1 ZE6Gp6SCERtRLs5XtdnpICjhm+hfxZ/M+EWb3vPGZAPj57gAak4lBMUEBts4E8im T+1MqZpui/dkYQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:33 2026 by rpki-client