This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json) Hash identifier: fGRrO6GMIV2WEUN209YGJe4084BUItDd/4Sr1oK0BuE= Subject key identifier: E1:B0:A6:DF:5B:F6:D8:03:76:EB:7A:91:33:96:ED:EF:DB:DA:FA:F2 Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3 Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3 Certificate serial: 019C42B413B3040D43746E6B1B1525B8669C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft Manifest number: 17EC Signing time: Mon 09 Feb 2026 14:00:23 +0000 Manifest this update: Mon 09 Feb 2026 14:00:23 +0000 Manifest next update: Tue 10 Feb 2026 14:00:23 +0000 Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: nWFqZccLMQlDt7SRko6WVXyl5WU46S4GpsYvZQthfSE=) 2: I_klKsqV4Xc27UFkAneEsuB-gHk.roa (hash: AkW1e4Xf71kIFS8tvO/5F4giqlxcvlPyuHSMW67qHI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:13:b3:04:0d:43:74:6e:6b:1b:15:25:b8:66:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3 Validity Not Before: Feb 9 14:00:23 2026 GMT Not After : Feb 10 14:00:23 2026 GMT Subject: CN=e1b0a6df5bf6d80376eb7a913396edefdbdafaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b3:76:8f:d3:2f:c0:d3:44:7d:a6:1e:4a:f9: 2a:8e:8a:99:00:f2:b4:f7:6e:c8:8c:33:ab:f0:2b: b0:69:30:08:06:9f:09:08:20:0c:e4:7e:46:30:da: 97:8a:7b:b4:38:73:e7:7f:ff:72:3e:5d:c0:78:6b: 7d:fc:65:88:8b:21:0b:c2:80:36:43:f3:ca:dc:19: 05:f7:80:7e:d0:b1:2f:9c:70:12:2e:97:4c:71:4e: 55:76:b5:ac:d1:90:04:0f:40:d8:19:d4:fb:4a:ff: e0:d9:c1:e4:c7:4a:78:12:4d:f1:05:b6:60:f3:9c: 7e:cf:55:18:7e:48:70:d7:f1:e6:0c:0e:e0:03:6d: 0c:b5:e6:bf:f8:9b:63:b8:cf:94:5d:74:a7:db:18: 8e:7e:61:f8:70:9c:1d:51:3b:0e:6c:09:8f:19:3b: 50:6d:e1:61:c7:94:b0:c0:e2:21:e7:0a:3a:c6:91: 70:c8:89:02:0a:2f:f0:62:a9:fe:05:6f:a3:54:9b: 7c:f6:13:7a:7e:68:cf:fb:e6:dd:0f:38:93:30:3c: 84:8d:52:75:03:4c:28:6b:f7:ed:41:18:6b:8b:88: 10:b8:6b:a6:8a:08:8b:31:25:53:53:0b:58:e4:29: c3:e4:98:f2:00:c4:a9:07:d1:fb:39:3e:66:ad:c8: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B0:A6:DF:5B:F6:D8:03:76:EB:7A:91:33:96:ED:EF:DB:DA:FA:F2 X509v3 Authority Key Identifier: keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8a:ae:2b:90:69:c4:86:4f:ae:4a:96:ce:f4:b5:20:cc:c7: f9:9f:ef:98:22:dd:41:b4:31:06:db:a4:02:47:6d:89:73:9f: 72:cb:ed:03:dd:88:b1:75:58:c8:b2:f3:b1:a8:b9:24:2f:6d: f7:16:dc:0f:94:0d:09:8d:25:b1:e0:08:93:7a:08:e0:5e:5c: 94:47:35:75:48:48:bd:6e:6a:60:5c:a1:8e:ba:af:ba:a5:e1: 88:35:fb:5c:c9:c5:2e:91:19:fc:c2:a0:5c:fb:27:29:5e:10: d8:b6:0d:d3:0b:34:58:0f:8a:b2:ee:9a:21:58:4f:fa:98:aa: 23:81:af:f1:e5:f6:97:a6:df:71:59:0f:cf:eb:3e:71:24:4e: 03:b6:a6:4a:08:df:65:8a:dd:4a:74:11:94:11:24:23:9c:67: 90:9f:a8:7b:ad:1e:ca:6f:35:ac:45:fc:81:cb:fd:3a:4b:5d: 76:ca:ba:ce:88:f6:60:58:7f:44:92:63:d1:77:e3:07:b7:fe: ca:f0:9f:61:c6:65:2c:bf:95:3b:71:c0:0d:8d:96:60:ad:c3: f4:15:4d:fb:69:96:96:0d:89:b0:de:9a:a9:15:8e:f4:c6:cd: ef:b8:96:63:04:03:10:51:ad:33:6f:9f:92:cb:4b:e8:7c:f2: 45:48:05:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBOzBA1DdG5rGxUluGacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjVjYzQ4NDg5NDNiNGZlODlkMmNlNzFmZGMxZTRmZjdk N2YzZTMwHhcNMjYwMjA5MTQwMDIzWhcNMjYwMjEwMTQwMDIzWjAzMTEwLwYDVQQD EyhlMWIwYTZkZjViZjZkODAzNzZlYjdhOTEzMzk2ZWRlZmRiZGFmYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirN2j9MvwNNEfaYeSvkqjoqZAPK0 927IjDOr8CuwaTAIBp8JCCAM5H5GMNqXinu0OHPnf/9yPl3AeGt9/GWIiyELwoA2 Q/PK3BkF94B+0LEvnHASLpdMcU5VdrWs0ZAED0DYGdT7Sv/g2cHkx0p4Ek3xBbZg 85x+z1UYfkhw1/HmDA7gA20Mtea/+JtjuM+UXXSn2xiOfmH4cJwdUTsObAmPGTtQ beFhx5SwwOIh5wo6xpFwyIkCCi/wYqn+BW+jVJt89hN6fmjP++bdDziTMDyEjVJ1 A0woa/ftQRhri4gQuGumigiLMSVTUwtY5CnD5JjyAMSpB9H7OT5mrciyRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGwpt9b9tgDdut6kTOW7e/b2vryMB8GA1UdIwQY MBaAFN/1zEhIlDtP6J0s5x/cHk/31/PjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWIt MjY4OWM4NTg3OGFkLzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWItMjY4OWM4NTg3OGFk LzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4quK5Bp xIZPrkqWzvS1IMzH+Z/vmCLdQbQxBtukAkdtiXOfcsvtA92IsXVYyLLzsai5JC9t 9xbcD5QNCY0lseAIk3oI4F5clEc1dUhIvW5qYFyhjrqvuqXhiDX7XMnFLpEZ/MKg XPsnKV4Q2LYN0ws0WA+Ksu6aIVhP+piqI4Gv8eX2l6bfcVkPz+s+cSROA7amSgjf ZYrdSnQRlBEkI5xnkJ+oe60eym81rEX8gcv9Oktddsq6zoj2YFh/RJJj0XfjB7f+ yvCfYcZlLL+VO3HADY2WYK3D9BVN+2mWlg2JsN6aqRWO9MbN77iWYwQDEFGtM2+f kstL6HzyRUgF3w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:57 2026 by rpki-client