This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft File: 3ZapfPzU67oF9hUkAJ8sFco0P8U.mft (raw, json) Hash identifier: 8b0dhO4V6mgJXDVV3ekdMgoBgLTRjWaYMeA291WSscc= Subject key identifier: 45:53:F6:E1:D6:A6:7B:6B:35:BD:E9:04:0B:1D:F7:EC:6D:4E:78:F0 Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5 Certificate issuer: /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5 Certificate serial: 019C421038C93B8B2C706C03571252F27955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft Manifest number: 6D Signing time: Mon 09 Feb 2026 11:01:25 +0000 Manifest this update: Mon 09 Feb 2026 11:01:25 +0000 Manifest next update: Tue 10 Feb 2026 11:01:25 +0000 Files and hashes: 1: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (hash: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg=) 2: 3ZapfPzU67oF9hUkAJ8sFco0P8U.crl (hash: 295JUdNlLaDBxilX+yn47On8W9i1C5HziiDaWlcC+6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:38:c9:3b:8b:2c:70:6c:03:57:12:52:f2:79:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5 Validity Not Before: Feb 9 11:01:25 2026 GMT Not After : Feb 10 11:01:25 2026 GMT Subject: CN=4553f6e1d6a67b6b35bde9040b1df7ec6d4e78f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:8f:89:78:79:82:71:de:0d:b5:ef:ef:89: 5d:ee:c1:6b:03:29:41:e3:d7:ba:e2:90:1b:fa:63: cd:1f:5b:91:ce:68:e7:9c:20:df:5a:e4:80:02:60: 74:cf:57:67:da:40:88:40:b4:47:5c:3d:0f:6a:76: ca:35:31:2b:11:29:33:9b:74:dc:3c:8d:55:56:cf: 66:af:ac:7f:9d:1e:28:0c:35:e5:de:21:e7:4a:85: fc:97:4d:b5:76:fb:d3:78:24:72:d2:3a:99:4c:ab: 33:51:4a:55:7a:6b:a8:20:45:ac:3e:52:6c:94:24: 7b:e3:bf:44:10:db:c7:73:76:99:81:d3:ce:f6:47: be:68:a0:ff:e6:d4:dc:7a:9e:34:0b:55:78:11:fc: ea:4e:ee:7f:58:8b:cb:4c:a2:97:a9:13:34:6d:fe: 43:b6:8e:9f:86:1e:69:04:45:d8:3d:22:ca:e8:11: 2b:b2:d3:1b:10:08:50:78:f2:11:2e:76:4b:b2:53: 48:d6:b1:86:0b:8d:9d:da:0d:6c:19:45:0b:74:09: 4c:c1:5e:46:b6:3b:00:11:02:b4:59:3b:e0:da:c0: ae:5c:e5:bf:15:25:f9:3f:75:ed:69:cb:4f:da:db: 89:9d:c1:be:7f:27:87:e2:1f:d2:6c:22:98:15:9e: 0e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:53:F6:E1:D6:A6:7B:6B:35:BD:E9:04:0B:1D:F7:EC:6D:4E:78:F0 X509v3 Authority Key Identifier: keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3f:ce:80:40:9a:34:ab:f8:b8:26:e8:08:33:3e:05:2c:5d: e2:6d:0c:0e:8d:96:86:41:16:2b:94:c5:fb:b0:44:28:19:b6: 02:f2:32:09:25:30:60:21:26:c8:e7:23:39:72:a1:f2:da:12: 71:f9:bc:c8:cd:ae:19:a0:fe:2d:e1:17:3d:df:18:c0:34:d5: 55:e3:72:93:11:23:fd:9e:0f:53:69:74:f3:97:48:13:00:f0: 7e:2a:1b:44:7a:e1:4a:41:d2:a9:0e:e2:ff:de:aa:1a:b6:c4: 0a:46:0e:9d:72:c1:85:cf:f5:24:c7:30:af:53:60:27:b2:31: ca:76:29:12:5f:e4:8f:79:19:4f:45:f6:a4:d2:6a:f6:e8:66: 9b:7c:08:07:e1:38:e6:e4:55:10:26:71:85:7d:09:28:08:4f: f3:ba:7b:c9:98:6c:6c:35:38:2b:97:c5:df:35:7e:52:2f:e3: cd:38:cc:cf:4f:e1:7f:2d:b5:83:8e:54:c2:9d:f9:98:ce:1b: f4:8b:10:5a:f8:8d:23:5e:87:5b:3c:d2:50:a9:08:77:94:26: 0e:e5:81:60:62:de:3d:4c:3b:b1:3e:e0:4a:d0:6b:38:d6:d7: ea:20:af:de:01:53:ba:da:06:d6:5f:5b:f2:ae:72:fb:2c:23: e2:c5:cd:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEDjJO4sscGwDVxJS8nlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTZhOTdjZmNkNGViYmEwNWY2MTUyNDAwOWYyYzE1Y2Ez NDNmYzUwHhcNMjYwMjA5MTEwMTI1WhcNMjYwMjEwMTEwMTI1WjAzMTEwLwYDVQQD Eyg0NTUzZjZlMWQ2YTY3YjZiMzViZGU5MDQwYjFkZjdlYzZkNGU3OGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbKPiXh5gnHeDbXv74ld7sFrAylB 49e64pAb+mPNH1uRzmjnnCDfWuSAAmB0z1dn2kCIQLRHXD0PanbKNTErESkzm3Tc PI1VVs9mr6x/nR4oDDXl3iHnSoX8l021dvvTeCRy0jqZTKszUUpVemuoIEWsPlJs lCR7479EENvHc3aZgdPO9ke+aKD/5tTcep40C1V4EfzqTu5/WIvLTKKXqRM0bf5D to6fhh5pBEXYPSLK6BErstMbEAhQePIRLnZLslNI1rGGC42d2g1sGUULdAlMwV5G tjsAEQK0WTvg2sCuXOW/FSX5P3XtactP2tuJncG+fyeH4h/SbCKYFZ4O0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVT9uHWpntrNb3pBAsd9+xtTnjwMB8GA1UdIwQY MBaAFN2WqXz81Ou6BfYVJACfLBXKND/FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1phcGZQelU2N29GOWhVa0FKOHNGY28wUDhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MzZiMTAtOTJlMS00ZDFkLThlZmIt YzFjNTQ4NjZiNjE2LzEvM1phcGZQelU2N29GOWhVa0FKOHNGY28wUDhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80MzZiMTAtOTJlMS00ZDFkLThlZmItYzFjNTQ4NjZiNjE2 LzEvM1phcGZQelU2N29GOWhVa0FKOHNGY28wUDhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfj/OgECa NKv4uCboCDM+BSxd4m0MDo2WhkEWK5TF+7BEKBm2AvIyCSUwYCEmyOcjOXKh8toS cfm8yM2uGaD+LeEXPd8YwDTVVeNykxEj/Z4PU2l085dIEwDwfiobRHrhSkHSqQ7i /96qGrbECkYOnXLBhc/1JMcwr1NgJ7IxynYpEl/kj3kZT0X2pNJq9uhmm3wIB+E4 5uRVECZxhX0JKAhP87p7yZhsbDU4K5fF3zV+Ui/jzTjMz0/hfy21g45Uwp35mM4b 9IsQWviNI16HWzzSUKkId5QmDuWBYGLePUw7sT7gStBrONbX6iCv3gFTutoG1l9b 8q5y+ywj4sXNZA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:09 2026 by rpki-client