This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json) Hash identifier: YU3x1Ty8tjnjJSwE1Q1Xavpn2GG4GVeyCkJTq620j2s= Subject key identifier: BB:CC:BA:D7:5A:95:48:25:1D:8F:92:11:82:8D:B8:19:88:08:85:89 Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81 Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81 Certificate serial: 019C4322DA6EA9769BC194EAF1D89DCAB2A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 16:01:23 +0000 Manifest this update: Mon 09 Feb 2026 16:01:23 +0000 Manifest next update: Tue 10 Feb 2026 16:01:23 +0000 Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: SzljNPBEzi6M7r/MUYOzYitBwWCD1cqbqYE8/AZQb7s=) 2: F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa (hash: VPrSJkixuSKsLbMS0Mdq/HH4JbtRsGR6fruBx7JJjhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:da:6e:a9:76:9b:c1:94:ea:f1:d8:9d:ca:b2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81 Validity Not Before: Feb 9 16:01:23 2026 GMT Not After : Feb 10 16:01:23 2026 GMT Subject: CN=bbccbad75a9548251d8f9211828db81988088589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:6d:33:48:33:5f:8a:36:84:b1:ff:1d:72: da:98:6f:87:14:0e:1b:c7:4f:55:46:a4:50:80:a9: 59:19:5f:96:82:92:34:59:33:5e:dd:45:3f:05:f9: 91:cb:80:fd:36:de:ac:f3:31:d6:46:2d:78:61:58: 84:85:f8:64:a3:94:4e:72:fe:46:44:e7:d9:66:95: ad:44:30:39:a8:f6:9c:fb:46:cd:81:1a:da:f1:3e: 3b:3c:0f:5c:06:1e:a0:33:8a:e2:c5:93:fe:51:d6: 69:b1:55:bf:22:3c:28:28:85:bc:fd:5e:9d:fe:75: 3d:75:ca:ae:fb:b9:1b:06:d6:af:c5:b3:96:94:72: 93:c9:58:de:39:60:8b:8e:25:19:0a:f4:9a:01:8a: c1:88:36:76:25:05:73:7e:8a:4f:aa:0c:1a:24:4f: 68:56:80:fa:63:f9:68:34:9e:a5:96:c0:6e:0c:8b: 51:07:dc:8c:68:de:85:85:44:1c:cd:a1:ee:92:d3: 16:a4:6f:98:0d:69:80:ee:eb:27:6f:4d:59:12:87: 17:dd:dd:4d:a1:ad:4e:6d:8a:77:06:6d:97:de:70: 3e:14:a6:c7:e8:e2:04:28:d3:6b:94:b0:da:65:56: 6b:3f:07:75:51:7b:1b:bb:e0:b3:fd:66:5d:28:d9: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CC:BA:D7:5A:95:48:25:1D:8F:92:11:82:8D:B8:19:88:08:85:89 X509v3 Authority Key Identifier: keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:16:61:90:b2:d2:a1:c9:bc:77:80:2a:60:f8:d4:63:4c:ce: c1:78:32:ef:e3:04:e5:9d:e4:81:ba:49:42:7a:ab:ff:18:49: 79:ef:8c:17:19:e9:6b:48:9b:ae:07:4d:69:7a:a1:d6:1e:35: e2:38:33:b1:b3:24:67:00:4f:7b:8b:9b:4f:f5:e7:64:47:77: 5a:1d:22:91:e1:9c:2c:f5:c9:bc:e2:0a:13:5e:14:ec:82:80: ae:b0:ba:d6:54:35:82:eb:0e:50:8e:24:08:25:8c:22:34:7b: b1:33:20:62:7a:53:72:e0:69:d4:cb:6d:d4:98:fe:a9:55:7a: 6d:ce:9d:e1:ea:fc:fd:4d:fc:3f:41:a9:13:39:5c:0d:ae:9d: b4:d3:31:06:09:fc:63:cc:20:05:00:72:94:92:ce:01:f0:bb: 89:3a:29:f5:d0:8b:d3:97:e1:c3:32:4a:84:36:86:2a:f7:a7: f0:06:0c:11:f7:f9:7d:bb:64:07:dd:40:bb:0e:2a:5e:c1:11: 7a:05:08:31:87:0f:2a:63:3f:c1:d0:f5:a6:2c:93:b6:23:2f: 14:44:7b:e3:2e:79:50:87:b2:49:c5:55:20:4a:cc:c3:c1:44: 05:fd:e0:0b:fd:52:2a:4c:98:f3:72:9e:d6:52:64:9d:03:1f: fe:94:bc:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItpuqXabwZTq8didyrKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOGU2MGJiMTExMDg3ZDA4MDNmYzNmY2M0YWYzMjdhYTg1 YzBiODEwHhcNMjYwMjA5MTYwMTIzWhcNMjYwMjEwMTYwMTIzWjAzMTEwLwYDVQQD EyhiYmNjYmFkNzVhOTU0ODI1MWQ4ZjkyMTE4MjhkYjgxOTg4MDg4NTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXxtM0gzX4o2hLH/HXLamG+HFA4b x09VRqRQgKlZGV+WgpI0WTNe3UU/BfmRy4D9Nt6s8zHWRi14YViEhfhko5ROcv5G ROfZZpWtRDA5qPac+0bNgRra8T47PA9cBh6gM4rixZP+UdZpsVW/IjwoKIW8/V6d /nU9dcqu+7kbBtavxbOWlHKTyVjeOWCLjiUZCvSaAYrBiDZ2JQVzfopPqgwaJE9o VoD6Y/loNJ6llsBuDItRB9yMaN6FhUQczaHuktMWpG+YDWmA7usnb01ZEocX3d1N oa1ObYp3Bm2X3nA+FKbH6OIEKNNrlLDaZVZrPwd1UXsbu+Cz/WZdKNlgIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvMutdalUglHY+SEYKNuBmICIWJMB8GA1UdIwQY MBaAFN6OYLsREIfQgD/D/MSvMnqoXAuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYt YTZmNTM0YzMwN2YxLzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYtYTZmNTM0YzMwN2Yx LzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChZhkLLS ocm8d4AqYPjUY0zOwXgy7+ME5Z3kgbpJQnqr/xhJee+MFxnpa0ibrgdNaXqh1h41 4jgzsbMkZwBPe4ubT/XnZEd3Wh0ikeGcLPXJvOIKE14U7IKArrC61lQ1gusOUI4k CCWMIjR7sTMgYnpTcuBp1Mtt1Jj+qVV6bc6d4er8/U38P0GpEzlcDa6dtNMxBgn8 Y8wgBQBylJLOAfC7iTop9dCL05fhwzJKhDaGKven8AYMEff5fbtkB91Auw4qXsER egUIMYcPKmM/wdD1piyTtiMvFER74y55UIeyScVVIErMw8FEBf3gC/1SKkyY83Ke 1lJknQMf/pS8yQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:38 2026 by rpki-client