This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json) Hash identifier: xcwuYlzYAqncCz5t0MFT/Zjs7AagWh/U/iB+YHtdI68= Subject key identifier: 40:82:FF:C3:B0:8D:BC:09:6B:73:24:0D:CF:58:59:AD:1E:79:1B:01 Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a Certificate serial: 019C322EB4A67DC11ED66D51EFA8F5D44F94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft Manifest number: 079A Signing time: Fri 06 Feb 2026 09:00:47 +0000 Manifest this update: Fri 06 Feb 2026 09:00:47 +0000 Manifest next update: Sat 07 Feb 2026 09:00:47 +0000 Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: Udg/KGKQCtzzP5FvAWBE8ElQDh0TX8FH22RqX9RDl5U=) 2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=) 3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:2e:b4:a6:7d:c1:1e:d6:6d:51:ef:a8:f5:d4:4f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a Validity Not Before: Feb 6 09:00:47 2026 GMT Not After : Feb 7 09:00:47 2026 GMT Subject: CN=4082ffc3b08dbc096b73240dcf5859ad1e791b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:be:a7:ee:82:c6:0e:58:15:3c:21:0a:9a:7a: cb:cd:dd:50:c3:3f:30:0d:ca:30:ac:cc:26:da:65: 84:28:cd:45:b8:54:f8:49:5d:93:a7:31:fc:7f:08: 1a:d9:d2:21:75:34:1e:83:f7:16:0d:08:64:f1:60: c2:9f:3f:3b:f3:8f:f5:b1:a0:8e:3a:1a:eb:96:33: c6:3c:10:ba:b4:9e:62:ee:73:66:0b:e1:72:03:55: d2:fc:ed:1d:c5:41:a8:a2:1f:6c:27:26:15:34:8b: 78:6c:37:4b:06:69:5a:78:b7:10:d2:ce:c1:0a:cf: 85:0b:8c:1f:8a:89:5b:18:1d:ab:c0:38:73:a4:5b: 1b:37:5f:17:8e:b7:27:f3:68:e5:7c:19:05:fb:3c: e4:04:35:ad:64:ac:ed:3b:89:df:6b:17:1e:72:25: 3b:0e:ce:ed:75:e6:07:df:c2:d2:e9:be:98:93:7b: ea:4a:b0:16:3e:45:75:50:ae:ae:82:bc:cf:d6:01: 11:21:e4:e6:d6:7c:ff:ad:0d:0d:bb:b7:2b:20:f7: d8:c7:17:76:3b:bf:6d:2d:23:29:dc:6a:96:88:51: 10:2e:fd:b9:ed:77:d4:01:c0:7d:3d:75:95:87:8f: e4:f5:5f:bb:04:44:4b:08:5d:dc:7a:32:bc:6f:88: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:82:FF:C3:B0:8D:BC:09:6B:73:24:0D:CF:58:59:AD:1E:79:1B:01 X509v3 Authority Key Identifier: keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1f:18:fa:fc:21:96:da:f2:56:06:eb:db:f0:82:1d:66:5c: 05:dd:e1:f8:55:e8:be:19:7e:3f:76:a8:64:34:db:1f:70:04: 89:57:46:86:04:33:8e:41:21:9e:6d:c7:ba:3f:8c:3c:1f:6f: c7:7e:d5:1a:81:be:7f:55:6b:86:3b:8d:d4:03:26:20:92:fb: e7:ce:61:55:2a:81:6a:ff:16:d4:d1:01:64:f7:56:bb:7a:18: 39:e1:55:bb:99:6b:14:6b:f7:fd:00:e4:31:b8:d8:37:8e:81: bf:c2:84:4f:a3:ef:3c:df:b4:92:a4:95:3d:b3:6f:6a:e1:0c: 2d:81:d0:1a:22:24:ba:01:47:87:0e:f7:d3:dc:ad:89:d1:b4: db:1f:10:07:e0:38:b7:d7:9e:cd:43:e5:d3:0c:4b:61:d0:06: 20:8d:30:1c:b6:c5:b5:aa:5b:f3:05:f0:ae:9f:3c:43:90:6b: 37:9f:57:52:46:85:e3:78:65:e0:ca:d7:c4:e4:75:aa:33:59: c0:a3:9d:4b:8e:47:0f:f3:03:1c:59:a8:24:8f:b2:9d:8b:1d: 9d:b2:54:40:af:0c:95:8c:ad:89:1e:9e:a4:b5:61:e5:c6:e2: 4c:a7:d3:20:91:e9:dc:8c:55:46:69:8a:5c:2f:ef:5c:f8:ea: 4d:16:2f:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwyLrSmfcEe1m1R76j11E+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNzVmYzhjNDVkMzYxMDEwMDg4MzcxMTljYmZhODRhZWUx OWUyOWEwHhcNMjYwMjA2MDkwMDQ3WhcNMjYwMjA3MDkwMDQ3WjAzMTEwLwYDVQQD Eyg0MDgyZmZjM2IwOGRiYzA5NmI3MzI0MGRjZjU4NTlhZDFlNzkxYjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r6n7oLGDlgVPCEKmnrLzd1Qwz8w DcowrMwm2mWEKM1FuFT4SV2TpzH8fwga2dIhdTQeg/cWDQhk8WDCnz8784/1saCO OhrrljPGPBC6tJ5i7nNmC+FyA1XS/O0dxUGooh9sJyYVNIt4bDdLBmlaeLcQ0s7B Cs+FC4wfiolbGB2rwDhzpFsbN18Xjrcn82jlfBkF+zzkBDWtZKztO4nfaxceciU7 Ds7tdeYH38LS6b6Yk3vqSrAWPkV1UK6ugrzP1gERIeTm1nz/rQ0Nu7crIPfYxxd2 O79tLSMp3GqWiFEQLv257XfUAcB9PXWVh4/k9V+7BERLCF3cejK8b4jnxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECC/8OwjbwJa3MkDc9YWa0eeRsBMB8GA1UdIwQY MBaAFN11/IxF02EBAIg3EZy/qEruGeKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMt MGNjNTE2OGVhMTVhLzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMtMGNjNTE2OGVhMTVh LzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhB8Y+vwh ltryVgbr2/CCHWZcBd3h+FXovhl+P3aoZDTbH3AEiVdGhgQzjkEhnm3Huj+MPB9v x37VGoG+f1VrhjuN1AMmIJL7585hVSqBav8W1NEBZPdWu3oYOeFVu5lrFGv3/QDk MbjYN46Bv8KET6PvPN+0kqSVPbNvauEMLYHQGiIkugFHhw7309ytidG02x8QB+A4 t9eezUPl0wxLYdAGII0wHLbFtapb8wXwrp88Q5BrN59XUkaF43hl4MrXxOR1qjNZ wKOdS45HD/MDHFmoJI+ynYsdnbJUQK8MlYytiR6epLVh5cbiTKfTIJHp3IxVRmmK XC/vXPjqTRYvLA== -----END CERTIFICATE-----Generated at Fri Feb 6 14:38:23 2026 by rpki-client