This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft File: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft (raw, json) Hash identifier: k+WuNSQO7Uav7kGqvOICfCTX3sqtOBucA0Xv0ma8f6o= Subject key identifier: C6:98:3E:8D:81:3C:05:26:4F:28:F1:D0:5A:FE:78:3E:7A:0E:A3:40 Authority key identifier: DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D Certificate issuer: /CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d Certificate serial: 019C1C4B6F7D248371EB696CDE54543821EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft Manifest number: 044B Signing time: Mon 02 Feb 2026 03:00:31 +0000 Manifest this update: Mon 02 Feb 2026 03:00:31 +0000 Manifest next update: Tue 03 Feb 2026 03:00:31 +0000 Files and hashes: 1: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl (hash: Hsbj9NUE+TE+ynnBmvX4lzFBPVByVq5TqBjsbkAdFzs=) 2: _tzPs4jJj87d7Cluh9sgQm06Oy8.asa (hash: zWtQvDfWVHth5+g0jzyRaLgIhTdtWs7KPbDKeSI3a2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:4b:6f:7d:24:83:71:eb:69:6c:de:54:54:38:21:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d Validity Not Before: Feb 2 03:00:31 2026 GMT Not After : Feb 3 03:00:31 2026 GMT Subject: CN=c6983e8d813c05264f28f1d05afe783e7a0ea340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fc:7e:ea:d1:34:b9:a3:4a:37:53:97:ec:60: 56:99:95:88:7e:fa:c6:9c:a6:4d:59:5d:6a:41:71: 04:ad:e0:41:bc:45:b3:21:e0:64:15:6f:25:9e:86: 0b:0c:44:89:8c:6d:26:72:1d:25:6e:bc:6e:2e:7a: e9:28:9a:2a:e7:4c:bc:17:1d:c5:97:82:7d:02:2b: 96:e6:db:2c:67:b0:a1:57:b2:cb:29:46:09:8a:53: c6:0c:0b:c3:b0:51:e8:99:ca:b1:cf:65:37:69:1d: 18:b3:a3:2f:c9:30:58:89:c5:4a:bf:c3:af:64:a9: 73:84:45:0c:d7:e1:07:aa:59:89:bd:0b:3b:3e:f0: 91:d6:e2:91:6d:56:b1:da:27:29:a1:a0:71:8f:4f: da:9d:71:3e:dd:08:79:1b:1a:c2:22:69:c6:c7:bb: d8:e2:97:00:fe:ec:23:7b:91:f2:5b:59:ff:e8:fb: df:55:1b:68:80:9a:f0:7f:fd:dc:f9:77:57:db:bd: 84:cf:4c:1f:34:56:81:7d:ce:b1:a5:c3:fc:57:63: 19:a0:2b:1a:6f:0f:56:bf:7b:70:54:34:5a:d6:30: 7e:7e:14:2e:15:11:15:50:04:7b:ba:30:d7:77:de: 1e:20:e2:d6:84:fe:b3:fa:f2:31:02:52:a5:6e:19: bf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:98:3E:8D:81:3C:05:26:4F:28:F1:D0:5A:FE:78:3E:7A:0E:A3:40 X509v3 Authority Key Identifier: keyid:DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:14:2f:a5:fb:b0:4c:8c:29:25:e8:9b:3e:a3:fa:de:c4:7b: 1b:82:a9:26:c3:d7:d4:07:bd:a1:4e:e9:59:c8:36:68:9d:d8: 4a:25:9f:00:f7:4b:fd:7e:a8:ea:01:9c:ab:b4:04:5c:a7:fe: ff:12:ed:8f:a9:36:02:ae:c3:63:df:13:66:84:43:d2:1d:cd: a4:4e:6f:63:b9:d9:ae:18:cd:57:2d:ca:ff:58:af:be:9a:4a: 58:a9:a3:7a:a0:23:3f:20:8c:3f:3d:f6:16:93:f7:6b:fe:57: 9b:b5:24:de:b1:37:85:67:90:46:4d:7b:e8:70:73:86:9a:ee: c2:54:39:b0:28:ec:b6:b6:3d:54:12:25:5e:fa:c8:06:00:9d: 14:fb:73:cd:22:ce:2c:55:42:9e:bc:1a:74:d1:c7:77:8f:25: 16:06:3c:ae:91:dc:a3:3c:2c:78:f5:d6:18:9c:67:ff:23:35: 5c:f5:b7:32:de:db:aa:c7:be:3b:b4:1d:11:f0:04:55:2f:79: 08:2a:95:d2:4b:ce:3f:90:8c:a6:1e:6e:c8:de:aa:3f:de:d4: 9f:0d:17:b3:cc:47:91:79:56:e7:18:5f:1a:c6:a3:4e:1f:44: 60:89:a9:23:72:35:0c:7b:fc:0e:75:c2:a7:b4:b1:cd:cf:b3: 16:a5:63:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcS299JINx62ls3lRUOCHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlM2QzYTk4NDk1YzI3YjljZTM1MGFlNWI4OWY5OTE0NGIw YTRjOWQwHhcNMjYwMjAyMDMwMDMxWhcNMjYwMjAzMDMwMDMxWjAzMTEwLwYDVQQD EyhjNjk4M2U4ZDgxM2MwNTI2NGYyOGYxZDA1YWZlNzgzZTdhMGVhMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifx+6tE0uaNKN1OX7GBWmZWIfvrG nKZNWV1qQXEEreBBvEWzIeBkFW8lnoYLDESJjG0mch0lbrxuLnrpKJoq50y8Fx3F l4J9AiuW5tssZ7ChV7LLKUYJilPGDAvDsFHomcqxz2U3aR0Ys6MvyTBYicVKv8Ov ZKlzhEUM1+EHqlmJvQs7PvCR1uKRbVax2icpoaBxj0/anXE+3Qh5GxrCImnGx7vY 4pcA/uwje5HyW1n/6PvfVRtogJrwf/3c+XdX272Ez0wfNFaBfc6xpcP8V2MZoCsa bw9Wv3twVDRa1jB+fhQuFREVUAR7ujDXd94eIOLWhP6z+vIxAlKlbhm/vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaYPo2BPAUmTyjx0Fr+eD56DqNAMB8GA1UdIwQY MBaAFN49OphJXCe5zjUK5bifmRRLCkydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2owNm1FbGNKN25PTlFybHVKLVpGRXNLVEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jYjQxMjctOGUwNi00N2Q5LWJkZjEt Yzg4OGIyMDQ4OWZjLzEvM2owNm1FbGNKN25PTlFybHVKLVpGRXNLVEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jYjQxMjctOGUwNi00N2Q5LWJkZjEtYzg4OGIyMDQ4OWZj LzEvM2owNm1FbGNKN25PTlFybHVKLVpGRXNLVEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxQvpfuw TIwpJeibPqP63sR7G4KpJsPX1Ae9oU7pWcg2aJ3YSiWfAPdL/X6o6gGcq7QEXKf+ /xLtj6k2Aq7DY98TZoRD0h3NpE5vY7nZrhjNVy3K/1ivvppKWKmjeqAjPyCMPz32 FpP3a/5Xm7Uk3rE3hWeQRk176HBzhpruwlQ5sCjstrY9VBIlXvrIBgCdFPtzzSLO LFVCnrwadNHHd48lFgY8rpHcozwsePXWGJxn/yM1XPW3Mt7bqse+O7QdEfAEVS95 CCqV0kvOP5CMph5uyN6qP97Unw0Xs8xHkXlW5xhfGsajTh9EYImpI3I1DHv8DnXC p7Sxzc+zFqVjpw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:17:34 2026 by rpki-client