This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json) Hash identifier: PLLjl1xGYBl515m1biPN2s2UKMP0CVJRZHzPZ1KP73o= Subject key identifier: E7:9C:FB:D3:C7:08:A6:DC:42:1A:BC:69:CB:3C:81:5C:F3:B1:DC:43 Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52 Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652 Certificate serial: 019C427DB0D06EB1067AD92793F3A8E121B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft Manifest number: 04B8 Signing time: Mon 09 Feb 2026 13:00:59 +0000 Manifest this update: Mon 09 Feb 2026 13:00:59 +0000 Manifest next update: Tue 10 Feb 2026 13:00:59 +0000 Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: jb/rmUFg95CrYujUTyEiw/7S4aFlridWeiEAdAzmeFI=) 2: GUtmTasoYg9vC_X6TeYo5LqnthI.roa (hash: h4pcOYZGVhmcTnXyyDF08GhSsY9jTxf6Vxsbll0E63Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:b0:d0:6e:b1:06:7a:d9:27:93:f3:a8:e1:21:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652 Validity Not Before: Feb 9 13:00:59 2026 GMT Not After : Feb 10 13:00:59 2026 GMT Subject: CN=e79cfbd3c708a6dc421abc69cb3c815cf3b1dc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:8e:a8:6e:81:4c:3f:17:9c:9d:e9:58:72: 99:20:43:0c:c8:3a:1a:8e:ec:93:cb:9e:f3:50:38: 72:aa:ce:33:67:58:06:82:9e:0c:a1:36:b4:96:cb: 4b:4f:04:94:e4:f4:37:9d:14:79:c5:20:d1:bc:e5: 0b:cd:e8:1e:03:2f:c0:37:cf:3f:28:91:e5:af:cb: 93:f6:47:8a:e3:01:33:ec:05:dd:95:04:c8:ea:3b: 6f:59:63:d1:85:1e:89:a7:e6:cc:ea:c2:9c:83:7c: 25:f0:2e:7b:57:1f:e8:ee:f9:8f:7d:fd:4b:bc:3d: f5:c4:3f:4e:ec:63:72:87:9b:06:ac:39:9d:b8:66: 8c:59:02:43:9f:4b:41:37:15:14:32:8c:f2:95:51: 3e:40:46:02:14:9b:5e:f9:b8:ca:4d:40:d1:ef:fb: fc:63:96:c1:c8:c7:18:f8:73:cd:eb:4f:29:2b:93: 91:07:4e:e9:d7:1d:f6:3f:2b:23:66:50:15:8b:bb: 38:29:ca:11:c3:36:f9:fa:40:3c:9f:11:e8:03:92: f9:5b:09:fe:c9:fc:ef:96:95:73:a0:fa:1d:bf:c5: ad:51:03:20:87:80:35:f4:05:a8:83:c9:77:a0:68: 55:18:9d:73:d8:e9:8b:87:5f:22:25:15:62:44:c8: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9C:FB:D3:C7:08:A6:DC:42:1A:BC:69:CB:3C:81:5C:F3:B1:DC:43 X509v3 Authority Key Identifier: keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2f:2a:a1:0f:e7:c1:8c:a4:2b:e3:7a:c5:df:85:29:46:65: 0f:03:5a:3c:91:63:4b:88:aa:f9:a7:8e:52:7d:a1:b8:ce:aa: 1f:82:83:db:c5:07:68:e7:61:76:52:c4:0a:c8:2e:93:e9:2c: 3a:be:cb:d6:ee:28:b3:58:a8:79:fa:1a:c8:16:63:02:cb:2b: 6e:e7:b3:1a:e6:b5:35:3d:cb:e0:45:32:d2:40:ce:30:43:37: 76:a8:da:01:c0:45:e7:93:59:82:f4:f6:68:06:41:eb:4f:81: a6:8d:01:f8:2d:03:cb:a0:a3:93:64:e4:26:2b:77:d6:50:13: 7f:05:90:a2:2b:ad:1e:c9:4f:fa:a3:fd:5c:f3:0a:f0:46:e2: f6:7e:e5:60:64:bf:76:90:a5:c1:76:df:86:ec:7c:2c:9f:cf: b3:f7:92:84:e3:93:c0:f1:f5:f3:c0:cf:50:70:1b:d7:d7:c8: 77:01:59:2f:57:4d:e9:17:c4:93:1e:3a:27:ff:2b:2d:9d:14: 80:e7:2d:48:07:26:cc:86:e1:0e:80:0d:95:1d:b1:f8:3c:06: 5a:09:19:77:9e:a6:8f:d3:ae:22:5e:b9:2f:9c:c8:4e:ec:d7: 66:1e:77:1d:33:a5:29:4e:55:da:78:b2:af:60:f5:bc:61:7b: 7c:92:1d:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbDQbrEGetknk/Oo4SG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMjNmMThjNTc2ZDZmYTYwOTEzMzUzM2MwZDBlMzhkNzcz MmM2NTIwHhcNMjYwMjA5MTMwMDU5WhcNMjYwMjEwMTMwMDU5WjAzMTEwLwYDVQQD EyhlNzljZmJkM2M3MDhhNmRjNDIxYWJjNjljYjNjODE1Y2YzYjFkYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn6OqG6BTD8XnJ3pWHKZIEMMyDoa juyTy57zUDhyqs4zZ1gGgp4MoTa0lstLTwSU5PQ3nRR5xSDRvOULzegeAy/AN88/ KJHlr8uT9keK4wEz7AXdlQTI6jtvWWPRhR6Jp+bM6sKcg3wl8C57Vx/o7vmPff1L vD31xD9O7GNyh5sGrDmduGaMWQJDn0tBNxUUMozylVE+QEYCFJte+bjKTUDR7/v8 Y5bByMcY+HPN608pK5ORB07p1x32PysjZlAVi7s4KcoRwzb5+kA8nxHoA5L5Wwn+ yfzvlpVzoPodv8WtUQMgh4A19AWog8l3oGhVGJ1z2OmLh18iJRViRMjg/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOec+9PHCKbcQhq8acs8gVzzsdxDMB8GA1UdIwQY MBaAFN4j8YxXbW+mCRM1M8DQ4413MsZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2lQeGpGZHRiNllKRXpVendORGpqWGN5eGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85OGM1ZDktZTJiZS00OTNiLTg2NTct NWU4NjAwNmUyMGFlLzEvM2lQeGpGZHRiNllKRXpVendORGpqWGN5eGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85OGM1ZDktZTJiZS00OTNiLTg2NTctNWU4NjAwNmUyMGFl LzEvM2lQeGpGZHRiNllKRXpVendORGpqWGN5eGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAai8qoQ/n wYykK+N6xd+FKUZlDwNaPJFjS4iq+aeOUn2huM6qH4KD28UHaOdhdlLECsguk+ks Or7L1u4os1ioefoayBZjAssrbuezGua1NT3L4EUy0kDOMEM3dqjaAcBF55NZgvT2 aAZB60+Bpo0B+C0Dy6Cjk2TkJit31lATfwWQoiutHslP+qP9XPMK8Ebi9n7lYGS/ dpClwXbfhux8LJ/Ps/eShOOTwPH188DPUHAb19fIdwFZL1dN6RfEkx46J/8rLZ0U gOctSAcmzIbhDoANlR2x+DwGWgkZd56mj9OuIl65L5zITuzXZh53HTOlKU5V2niy r2D1vGF7fJIdfQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:02 2026 by rpki-client