This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft File: 3AWXDmUMKq8atqOjOoNzJGahUS4.mft (raw, json) Hash identifier: W5pazRIwVyCTY2zXisF7r09uk6NelH2xFVROcmvpgsY= Subject key identifier: 67:C9:58:82:DB:D4:D8:03:7A:04:4C:E4:65:71:AC:F4:14:34:9F:3F Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E Certificate issuer: /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e Certificate serial: 019C41A20C6AF0881F033F0D8FB45A11F47D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 09:01:04 +0000 Manifest this update: Mon 09 Feb 2026 09:01:04 +0000 Manifest next update: Tue 10 Feb 2026 09:01:04 +0000 Files and hashes: 1: 36CB5eigCHYIuRmXqrnDW_-F3Xc.roa (hash: KcH/S3GFg0T0gWVpA5XkZVyUjTJRMZNW3hzXP6Ng0zo=) 2: 3AWXDmUMKq8atqOjOoNzJGahUS4.crl (hash: yaZQhl6I734emYLTWVSPh5wzPsa2uHvSY8djAwqr2Ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:0c:6a:f0:88:1f:03:3f:0d:8f:b4:5a:11:f4:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e Validity Not Before: Feb 9 09:01:04 2026 GMT Not After : Feb 10 09:01:04 2026 GMT Subject: CN=67c95882dbd4d8037a044ce46571acf414349f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6f:10:ba:66:58:82:7b:30:1b:f5:44:f6:dc: 32:d0:ad:96:49:61:2f:d3:f4:6f:cb:3d:b6:22:88: 4a:7f:43:cc:de:fe:66:fd:6d:25:4d:46:cb:2b:f4: 8d:78:88:38:99:0a:92:99:de:69:b7:9c:17:03:19: 71:48:48:d2:da:31:d2:4a:3a:bd:05:92:2e:03:35: 68:5a:91:1f:cc:ee:45:39:1d:c9:7c:df:50:cf:84: 25:fe:e6:ce:42:db:d7:8c:00:88:d2:2f:1d:85:0a: 6a:42:f7:36:fb:4d:aa:bf:f0:a2:eb:5a:c0:ba:2c: 9d:13:b3:4d:30:52:4b:04:3e:d3:0c:d5:90:24:02: ed:b8:0b:b9:d1:ac:55:bc:a9:97:24:ec:91:64:21: 29:37:0e:f1:a3:5b:7c:e9:79:5e:be:9b:0a:8c:63: bf:40:4c:ba:7a:b0:9d:13:07:a8:3f:18:44:b4:9b: b9:70:eb:14:23:95:49:9e:8f:ff:0e:16:42:23:55: ab:c5:68:4f:d0:c9:9a:4f:03:c1:e3:0d:22:21:65: 5d:c7:a7:56:1c:15:b3:e2:28:ab:b9:51:15:bb:45: e3:36:16:3c:cc:6b:ec:e5:52:8d:f1:94:a7:ca:78: f5:e9:18:62:33:b1:7a:fc:94:7b:38:21:ce:99:92: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C9:58:82:DB:D4:D8:03:7A:04:4C:E4:65:71:AC:F4:14:34:9F:3F X509v3 Authority Key Identifier: keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:f1:b7:b1:6b:73:75:e5:69:25:51:81:d2:19:f5:2a:8f:e0: 48:2f:a0:15:13:cc:14:2a:ca:4d:da:fe:ab:6f:85:46:1c:fc: 82:d5:78:64:09:b5:f7:1b:26:16:88:43:87:6e:0e:15:c5:cf: 34:dc:3a:dd:43:84:1a:63:69:f1:06:9c:7c:48:c7:dc:83:93: ab:32:d3:77:39:3d:66:e9:af:fb:fc:e2:f7:a4:ee:61:9d:b5: 89:cd:9a:45:14:f7:ed:b5:dd:10:09:40:0e:db:0e:14:1e:3b: fb:52:9a:e9:e6:eb:b7:38:c8:e8:c2:5b:67:2c:54:ae:da:ec: 09:b0:66:60:f9:29:1c:8b:31:ce:c3:1f:05:c9:f8:00:05:50: 7b:10:15:e2:c2:48:c9:e0:d9:ac:ff:e4:a4:06:03:d1:b2:4c: c1:54:f0:0e:b8:e2:79:3c:b6:91:68:03:96:f8:ef:2c:db:59: f7:03:db:14:ba:04:5a:b0:f1:1e:65:fe:24:e2:d1:cc:08:27: 9a:2c:8b:8b:b9:e3:ea:78:2e:12:1d:5a:a7:02:77:fc:c8:f6: 86:4f:d3:9e:1d:46:b7:71:41:ae:d4:96:4c:f4:fc:4e:d4:9c: dd:7a:4b:26:45:03:53:b9:b4:f8:56:d1:fd:04:a9:cb:ec:69: 8d:75:3f:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBogxq8IgfAz8Nj7RaEfR9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDU5NzBlNjUwYzJhYWYxYWI2YTNhMzNhODM3MzI0NjZh MTUxMmUwHhcNMjYwMjA5MDkwMTA0WhcNMjYwMjEwMDkwMTA0WjAzMTEwLwYDVQQD Eyg2N2M5NTg4MmRiZDRkODAzN2EwNDRjZTQ2NTcxYWNmNDE0MzQ5ZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA528QumZYgnswG/VE9twy0K2WSWEv 0/Rvyz22IohKf0PM3v5m/W0lTUbLK/SNeIg4mQqSmd5pt5wXAxlxSEjS2jHSSjq9 BZIuAzVoWpEfzO5FOR3JfN9Qz4Ql/ubOQtvXjACI0i8dhQpqQvc2+02qv/Ci61rA uiydE7NNMFJLBD7TDNWQJALtuAu50axVvKmXJOyRZCEpNw7xo1t86XlevpsKjGO/ QEy6erCdEweoPxhEtJu5cOsUI5VJno//DhZCI1WrxWhP0MmaTwPB4w0iIWVdx6dW HBWz4iiruVEVu0XjNhY8zGvs5VKN8ZSnynj16RhiM7F6/JR7OCHOmZLyBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfJWILb1NgDegRM5GVxrPQUNJ8/MB8GA1UdIwQY MBaAFNwFlw5lDCqvGrajozqDcyRmoVEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zYjlhNDgtOGI2My00ZDNiLWEzYTkt NjdhNTQwZTI5N2YwLzEvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zYjlhNDgtOGI2My00ZDNiLWEzYTktNjdhNTQwZTI5N2Yw LzEvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvG3sWtz deVpJVGB0hn1Ko/gSC+gFRPMFCrKTdr+q2+FRhz8gtV4ZAm19xsmFohDh24OFcXP NNw63UOEGmNp8QacfEjH3IOTqzLTdzk9Zumv+/zi96TuYZ21ic2aRRT37bXdEAlA DtsOFB47+1Ka6ebrtzjI6MJbZyxUrtrsCbBmYPkpHIsxzsMfBcn4AAVQexAV4sJI yeDZrP/kpAYD0bJMwVTwDrjieTy2kWgDlvjvLNtZ9wPbFLoEWrDxHmX+JOLRzAgn miyLi7nj6nguEh1apwJ3/Mj2hk/Tnh1Gt3FBrtSWTPT8TtSc3XpLJkUDU7m0+FbR /QSpy+xpjXU/0w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:32 2026 by rpki-client