This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json) Hash identifier: X+PCFPCn3ioUrVh4pF/ZADn3TzJRX77XnE722XsLj68= Subject key identifier: B2:8D:C9:C9:D4:2F:F4:D1:92:1B:F5:A0:6C:D3:56:B5:1E:96:31:9E Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60 Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860 Certificate serial: 019C42100B697B9B7E3974E3ED4772283945 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft Manifest number: 11C4 Signing time: Mon 09 Feb 2026 11:01:13 +0000 Manifest this update: Mon 09 Feb 2026 11:01:13 +0000 Manifest next update: Tue 10 Feb 2026 11:01:13 +0000 Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: pPPwwmae18+2glyOZZuKhu5+XJjH+8yKZTbj/gn/G9k=) 2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:0b:69:7b:9b:7e:39:74:e3:ed:47:72:28:39:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860 Validity Not Before: Feb 9 11:01:13 2026 GMT Not After : Feb 10 11:01:13 2026 GMT Subject: CN=b28dc9c9d42ff4d1921bf5a06cd356b51e96319e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:db:08:3d:96:c3:71:8b:c9:b8:0b:3b:73: d3:ab:d9:0a:97:a8:2a:52:a8:8f:ec:e3:42:a9:c9: 7d:e0:0a:9a:4d:cf:e7:20:c6:45:8a:7d:3c:61:4b: e0:8a:f9:bb:09:dd:14:9a:0f:5a:c8:08:3d:7e:db: 0f:9a:d2:32:5c:f6:5b:34:08:65:06:f5:88:41:45: 65:b3:b1:d3:98:25:18:43:cb:21:50:29:76:a8:8e: b2:53:9a:2d:68:74:65:e0:1e:d2:48:a4:73:71:c9: 19:3e:a8:41:af:7c:82:98:f6:3e:c3:f0:40:5a:11: 88:78:d5:c0:4d:a8:12:75:b2:74:d9:f5:1c:cd:03: 5c:5a:df:7d:0f:37:43:ae:e9:ec:05:4e:fd:36:18: 23:2e:d4:71:f7:19:dd:14:d9:6b:2f:72:8b:fe:3e: aa:25:54:d0:01:17:8f:0e:a2:54:d8:04:a9:f3:50: d6:e0:ec:96:a8:1b:3e:19:de:78:ab:b9:c9:aa:32: a5:38:92:c3:2e:3c:67:96:aa:c2:ca:00:b8:51:6c: 4b:66:5c:da:61:19:87:fa:8c:60:5b:9e:a0:a6:55: 0f:fc:81:bd:29:a9:4e:4f:5f:68:cb:ea:3c:32:02: 42:3a:54:8c:f2:16:6c:9f:32:c6:30:00:20:1f:c1: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8D:C9:C9:D4:2F:F4:D1:92:1B:F5:A0:6C:D3:56:B5:1E:96:31:9E X509v3 Authority Key Identifier: keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:58:82:56:c9:c2:12:ac:c3:81:44:29:eb:d1:23:dc:a7:b9: 80:73:e1:f1:0c:d0:75:60:39:4d:a8:52:a3:58:30:a9:9e:47: f9:04:d4:ca:1a:8d:38:e3:02:19:5e:7b:13:53:d5:b3:10:24: e6:26:d8:94:44:c5:75:24:74:af:78:65:7b:43:ba:bd:0c:f6: 75:f5:02:3b:27:3f:a6:82:31:b8:7b:2c:35:e2:b1:9f:4d:9e: a6:ce:c3:78:d3:43:93:83:28:8e:97:d5:18:c0:35:30:da:c2: 6d:84:2a:4d:bf:b5:0a:7b:40:0a:d2:a1:cc:89:dc:f6:79:67: 82:1e:95:bd:19:d1:71:62:0c:96:98:83:17:e4:87:f6:da:a8: ac:76:32:fd:e8:55:61:bc:e3:0f:fd:26:77:29:b0:6b:c3:4f: 60:26:aa:66:bc:52:86:e6:18:b1:44:aa:10:97:72:47:8d:d2: e4:2a:09:7b:9e:44:00:d0:2e:06:ef:63:4b:59:78:00:e9:2e: 40:dc:7e:7d:48:05:78:01:d4:54:ac:2a:c0:ca:7f:7f:4e:5d: 36:be:39:b0:ed:d9:8b:54:1a:84:ef:de:a2:48:ae:a0:b9:58: 10:be:94:e8:da:80:8e:71:59:9b:57:f6:5b:03:31:78:5f:09: 4f:4e:55:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAtpe5t+OXTj7UdyKDlFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZWM1Yzk0NWQwMzUzNWQ5NjczMDk1MTEwNTQ2YjFjOThl NjE4NjAwHhcNMjYwMjA5MTEwMTEzWhcNMjYwMjEwMTEwMTEzWjAzMTEwLwYDVQQD EyhiMjhkYzljOWQ0MmZmNGQxOTIxYmY1YTA2Y2QzNTZiNTFlOTYzMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSvbCD2Ww3GLybgLO3PTq9kKl6gq UqiP7ONCqcl94AqaTc/nIMZFin08YUvgivm7Cd0Umg9ayAg9ftsPmtIyXPZbNAhl BvWIQUVls7HTmCUYQ8shUCl2qI6yU5otaHRl4B7SSKRzcckZPqhBr3yCmPY+w/BA WhGIeNXATagSdbJ02fUczQNcWt99DzdDrunsBU79NhgjLtRx9xndFNlrL3KL/j6q JVTQARePDqJU2ASp81DW4OyWqBs+Gd54q7nJqjKlOJLDLjxnlqrCygC4UWxLZlza YRmH+oxgW56gplUP/IG9KalOT19oy+o8MgJCOlSM8hZsnzLGMAAgH8FKXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKNycnUL/TRkhv1oGzTVrUeljGeMB8GA1UdIwQY MBaAFN/sXJRdA1NdlnMJURBUaxyY5hhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYt ZGRkZGVmMjQxMjE2LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYtZGRkZGVmMjQxMjE2 LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1iCVsnC EqzDgUQp69Ej3Ke5gHPh8QzQdWA5TahSo1gwqZ5H+QTUyhqNOOMCGV57E1PVsxAk 5ibYlETFdSR0r3hle0O6vQz2dfUCOyc/poIxuHssNeKxn02eps7DeNNDk4MojpfV GMA1MNrCbYQqTb+1CntACtKhzInc9nlngh6VvRnRcWIMlpiDF+SH9tqorHYy/ehV YbzjD/0mdymwa8NPYCaqZrxShuYYsUSqEJdyR43S5CoJe55EANAuBu9jS1l4AOku QNx+fUgFeAHUVKwqwMp/f05dNr45sO3Zi1QahO/eokiuoLlYEL6U6NqAjnFZm1f2 WwMxeF8JT05V8w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:53 2026 by rpki-client