This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json) Hash identifier: 5OiNj15symRtAkJjABLH+m5FlkiTH0FdgQ4qj7ZX2us= Subject key identifier: 61:F3:53:2E:73:04:25:3A:1F:ED:FE:85:8B:16:70:3C:41:37:0A:B6 Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93 Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993 Certificate serial: 019C4210103336FAB5B44E67C693170D9833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft Manifest number: 083F Signing time: Mon 09 Feb 2026 11:01:14 +0000 Manifest this update: Mon 09 Feb 2026 11:01:14 +0000 Manifest next update: Tue 10 Feb 2026 11:01:14 +0000 Files and hashes: 1: V1X5AoJuWVktixeEEeg847CrLW4.roa (hash: sDvrIAa5SeWcR7s8zM+NUTwaLMsawn+2eiUy7AxPXYo=) 2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: BijhaToPSP5enPv7erVS+yzARrdGy5m6gNZzZh81L/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:10:33:36:fa:b5:b4:4e:67:c6:93:17:0d:98:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993 Validity Not Before: Feb 9 11:01:14 2026 GMT Not After : Feb 10 11:01:14 2026 GMT Subject: CN=61f3532e7304253a1fedfe858b16703c41370ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:0c:9b:b0:c5:08:aa:e0:ba:59:fb:61:8b: fe:63:98:d3:42:fc:07:48:41:f4:f1:77:42:5b:a7: d0:f4:f6:f6:b6:21:25:61:9e:fc:7e:c2:48:5d:60: a7:88:9b:76:b2:f7:7a:c1:1a:bb:46:63:1a:b6:2e: e3:5a:6a:73:bf:67:ac:29:a6:a2:0d:c2:de:26:77: 7c:14:3a:57:ce:af:f8:40:78:e9:e3:31:cd:9e:2d: 7d:ed:d9:2c:3b:41:cb:17:02:a9:13:fa:fa:5a:43: 10:ae:b0:a7:b6:c6:87:1d:d3:f8:d1:0d:2c:3e:12: 9f:46:a1:b9:e5:ff:5c:2d:04:fe:31:d5:65:52:4e: d9:52:4b:e7:d6:66:21:d3:aa:82:14:04:2b:44:7d: da:e0:27:4f:7f:9d:30:6c:05:cf:3f:0a:06:54:06: e9:47:99:c7:02:2f:10:06:fa:b2:38:ad:6f:a4:97: c1:93:42:6a:b5:7b:f0:81:82:f0:86:1f:46:0b:a8: 5d:e8:0e:96:3c:25:25:2e:00:5c:39:03:eb:65:50: dd:17:41:91:11:1b:c0:80:a9:e4:d3:c2:4d:54:76: 55:25:eb:5d:69:ec:6b:95:2b:ad:86:56:f7:96:c0: f3:ac:48:a7:95:ff:10:d2:42:d7:21:04:2e:12:d6: 66:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F3:53:2E:73:04:25:3A:1F:ED:FE:85:8B:16:70:3C:41:37:0A:B6 X509v3 Authority Key Identifier: keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fe:5a:28:0d:2f:49:82:c1:b8:30:18:88:a1:0c:a8:6a:8a: 87:bb:ab:43:99:34:0f:6a:a5:d2:8e:fb:b5:40:3b:be:f0:29: de:c8:bd:5d:20:c3:a3:e2:5c:af:03:6d:f6:ce:7f:18:19:8c: 5a:c5:38:0c:42:91:a7:fc:9f:51:20:d9:ac:38:ef:91:1f:59: 8f:f8:e7:00:af:99:9f:e1:79:9e:6a:01:48:ae:64:18:44:80: f7:5c:77:e0:19:73:aa:ae:68:bc:0e:71:79:ea:3e:6b:c8:a0: 9d:f5:63:e8:66:32:e7:2e:93:64:2f:90:7a:30:42:cb:f9:ad: 0c:fa:d4:4a:96:0d:f7:07:61:e7:91:44:02:62:01:4b:31:45: 9a:ce:45:a2:ec:39:3c:51:04:6f:15:68:ef:82:b3:0b:bd:f6: ba:97:1d:ff:5e:90:57:32:a2:e9:66:2a:76:01:cc:cb:03:34: 18:fe:c6:21:31:07:c3:4d:bd:9f:7f:c6:ba:2c:a1:1d:1c:89: 5f:3b:d8:c4:dc:ed:4d:ff:b1:d0:ae:d2:b5:03:4c:e6:03:02: d7:fe:18:2a:cd:09:01:b8:f0:e4:96:9a:15:d4:5d:c5:ce:98: 18:74:bf:16:24:90:7f:0a:39:4b:5d:55:af:ce:2a:e6:e8:49: 87:7f:1c:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEBAzNvq1tE5nxpMXDZgzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2ExMWNjYWQxMmU0NTUyODZmNWQwZWIzMDQwZTg2M2Yz MGM5OTMwHhcNMjYwMjA5MTEwMTE0WhcNMjYwMjEwMTEwMTE0WjAzMTEwLwYDVQQD Eyg2MWYzNTMyZTczMDQyNTNhMWZlZGZlODU4YjE2NzAzYzQxMzcwYWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqssMm7DFCKrguln7YYv+Y5jTQvwH SEH08XdCW6fQ9Pb2tiElYZ78fsJIXWCniJt2svd6wRq7RmMati7jWmpzv2esKaai DcLeJnd8FDpXzq/4QHjp4zHNni197dksO0HLFwKpE/r6WkMQrrCntsaHHdP40Q0s PhKfRqG55f9cLQT+MdVlUk7ZUkvn1mYh06qCFAQrRH3a4CdPf50wbAXPPwoGVAbp R5nHAi8QBvqyOK1vpJfBk0JqtXvwgYLwhh9GC6hd6A6WPCUlLgBcOQPrZVDdF0GR ERvAgKnk08JNVHZVJetdaexrlSuthlb3lsDzrEinlf8Q0kLXIQQuEtZmQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHzUy5zBCU6H+3+hYsWcDxBNwq2MB8GA1UdIwQY MBaAFMd6EcytEuRVKG9dDrMEDoY/MMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgt MDkwZTViZDU4MGIzLzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgtMDkwZTViZDU4MGIz LzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALP5aKA0v SYLBuDAYiKEMqGqKh7urQ5k0D2ql0o77tUA7vvAp3si9XSDDo+JcrwNt9s5/GBmM WsU4DEKRp/yfUSDZrDjvkR9Zj/jnAK+Zn+F5nmoBSK5kGESA91x34Blzqq5ovA5x eeo+a8ignfVj6GYy5y6TZC+QejBCy/mtDPrUSpYN9wdh55FEAmIBSzFFms5Fouw5 PFEEbxVo74KzC732upcd/16QVzKi6WYqdgHMywM0GP7GITEHw029n3/GuiyhHRyJ XzvYxNztTf+x0K7StQNM5gMC1/4YKs0JAbjw5JaaFdRdxc6YGHS/FiSQfwo5S11V r84q5uhJh38c1g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:28 2026 by rpki-client