This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json) Hash identifier: S8S80096d6RHInQWg5SNKpwolPvjlVwoksnLMmpDbDw= Subject key identifier: 0B:F0:05:5B:5D:D0:C0:D4:53:CC:DE:AD:75:37:A6:DF:C9:03:B9:E9 Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6 Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6 Certificate serial: 019C427DB21EE8F341AA0F8053A801F40C61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft Manifest number: 1815 Signing time: Mon 09 Feb 2026 13:00:59 +0000 Manifest this update: Mon 09 Feb 2026 13:00:59 +0000 Manifest next update: Tue 10 Feb 2026 13:00:59 +0000 Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: bFeO+GohaVTZJ5H/CLDiyM2/Xl6oLoy2CMa7QMKEH9M=) 2: XlkFVkF--DH6a3m4HUUOHqI0Vwc.roa (hash: k4WPfbMFjDQqLKA715ECgm8KNngpmBPkDKMv0Wo+8X0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:b2:1e:e8:f3:41:aa:0f:80:53:a8:01:f4:0c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6 Validity Not Before: Feb 9 13:00:59 2026 GMT Not After : Feb 10 13:00:59 2026 GMT Subject: CN=0bf0055b5dd0c0d453ccdead7537a6dfc903b9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:22:e5:54:91:74:8b:55:f6:72:5b:5a:c8: b3:72:2a:39:2c:2a:70:a1:49:fd:c9:6d:02:14:93: fb:3c:dc:83:22:3d:72:f1:33:31:69:0a:10:11:ad: 52:65:00:8e:c7:6c:56:4d:d4:6a:2c:82:7e:90:8b: f4:b8:14:e9:38:a5:52:16:06:87:34:dd:01:3f:83: f9:82:79:2b:d5:13:20:1f:ad:e6:a5:17:12:a1:69: 61:18:26:85:85:4f:34:db:f2:15:0d:6d:b9:e0:0e: 8f:c0:47:6e:51:67:3f:9a:65:9f:2e:b1:ab:ec:3d: f0:bf:00:e4:d8:ea:39:f3:89:dd:1e:e8:90:eb:30: 5b:54:74:2a:7d:ad:3f:be:14:e4:f7:4f:37:99:5d: 75:88:63:a5:a9:13:b9:ea:29:20:64:01:7a:91:3f: bd:bf:3b:4b:3d:91:20:ab:4f:d5:22:f7:9a:6c:80: 41:2a:3b:84:21:16:59:b5:bc:b2:ee:28:0e:3b:51: dd:42:11:53:f5:8b:3c:7d:f8:60:a4:24:c0:f1:e9: bb:4f:b2:18:7c:7e:49:26:d1:b9:e2:9c:c6:88:cc: e5:a5:43:54:8a:93:a8:45:1f:cc:af:8a:67:b2:e6: 77:1d:73:f3:6c:91:0b:38:bf:97:8a:35:a1:48:bf: 12:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F0:05:5B:5D:D0:C0:D4:53:CC:DE:AD:75:37:A6:DF:C9:03:B9:E9 X509v3 Authority Key Identifier: keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5f:b5:90:d4:7d:b4:fc:4d:da:ca:f0:a4:be:ac:f7:06:7b: b1:2b:62:e3:56:db:12:98:cc:f0:ce:c1:47:21:a1:37:42:c6: 05:90:e3:14:23:57:0c:ee:fd:5f:1c:63:1c:9a:9b:59:c2:34: ce:9b:0e:31:dd:d3:0b:b4:11:b7:81:23:34:79:81:60:db:a2: 81:ad:d3:c9:76:18:c5:2d:c9:2a:54:24:c3:67:81:24:25:f4: 7c:95:d7:7c:86:e6:74:cf:b7:1a:b0:32:38:3d:b9:b4:30:33: c5:5e:9e:5c:11:04:2f:69:68:c4:38:b4:7c:f7:c6:47:02:54: e8:4e:18:f8:2e:25:e9:b9:97:87:ae:43:99:11:f8:3c:e5:92: 55:30:86:64:a7:3a:6c:8d:45:30:bc:d0:86:32:fd:8a:63:78: 9b:3e:7b:73:ed:94:5c:b3:80:13:4c:bf:75:92:83:19:bd:40: b1:0e:fd:9c:67:63:21:d8:3d:26:0e:7b:84:bf:cc:25:0e:1e: 1d:b1:3c:33:3d:79:b4:67:f2:f3:f0:a8:4a:96:55:e4:8e:a2: 85:75:b2:ce:83:dc:00:df:4f:b6:1a:b6:43:96:85:68:ae:37: d8:97:db:6e:a3:ff:df:4a:6a:7f:4d:91:53:77:ac:08:be:bb: 8c:7c:d2:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbIe6PNBqg+AU6gB9AxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZWFkOTE5Yjg1YTEzMDUxZDAyMDhiN2UyOGRkY2NiMzk4 YjE0ZDYwHhcNMjYwMjA5MTMwMDU5WhcNMjYwMjEwMTMwMDU5WjAzMTEwLwYDVQQD EygwYmYwMDU1YjVkZDBjMGQ0NTNjY2RlYWQ3NTM3YTZkZmM5MDNiOWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Ui5VSRdItV9nJbWsizcio5LCpw oUn9yW0CFJP7PNyDIj1y8TMxaQoQEa1SZQCOx2xWTdRqLIJ+kIv0uBTpOKVSFgaH NN0BP4P5gnkr1RMgH63mpRcSoWlhGCaFhU802/IVDW254A6PwEduUWc/mmWfLrGr 7D3wvwDk2Oo584ndHuiQ6zBbVHQqfa0/vhTk9083mV11iGOlqRO56ikgZAF6kT+9 vztLPZEgq0/VIveabIBBKjuEIRZZtbyy7igOO1HdQhFT9Ys8ffhgpCTA8em7T7IY fH5JJtG54pzGiMzlpUNUipOoRR/Mr4pnsuZ3HXPzbJELOL+XijWhSL8SjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvwBVtd0MDUU8zerXU3pt/JA7npMB8GA1UdIwQY MBaAFN3q2Rm4WhMFHQIIt+KN3Ms5ixTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQt NDhiOGI1YTliNDExLzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQtNDhiOGI1YTliNDEx LzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1+1kNR9 tPxN2srwpL6s9wZ7sSti41bbEpjM8M7BRyGhN0LGBZDjFCNXDO79XxxjHJqbWcI0 zpsOMd3TC7QRt4EjNHmBYNuiga3TyXYYxS3JKlQkw2eBJCX0fJXXfIbmdM+3GrAy OD25tDAzxV6eXBEEL2loxDi0fPfGRwJU6E4Y+C4l6bmXh65DmRH4POWSVTCGZKc6 bI1FMLzQhjL9imN4mz57c+2UXLOAE0y/dZKDGb1AsQ79nGdjIdg9Jg57hL/MJQ4e HbE8Mz15tGfy8/CoSpZV5I6ihXWyzoPcAN9Pthq2Q5aFaK432JfbbqP/30pqf02R U3esCL67jHzSkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:51 2026 by rpki-client