This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json) Hash identifier: Ul75fnrW7lpNspjJxZ07rJRf+mtsaMkBIrCdvZt9nCw= Subject key identifier: 8A:85:53:FC:E4:EE:40:D5:BD:57:12:34:92:6A:CF:1B:F6:65:0D:D6 Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e Certificate serial: 019C41D8431A98CA002848E1E59E93C7805F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft Manifest number: 0B2E Signing time: Mon 09 Feb 2026 10:00:17 +0000 Manifest this update: Mon 09 Feb 2026 10:00:17 +0000 Manifest next update: Tue 10 Feb 2026 10:00:17 +0000 Files and hashes: 1: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (hash: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk=) 2: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: PSSWQwEaZWU66n3vR8WwbBM2JuXU9mqD5V8P3xsrhsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:43:1a:98:ca:00:28:48:e1:e5:9e:93:c7:80:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e Validity Not Before: Feb 9 10:00:17 2026 GMT Not After : Feb 10 10:00:17 2026 GMT Subject: CN=8a8553fce4ee40d5bd571234926acf1bf6650dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:39:a1:17:b5:c6:f5:1d:54:01:8d:69:5d: f6:c3:fd:57:e0:b1:81:a8:94:58:f1:64:7f:60:76: eb:3b:b6:f3:8c:1b:54:63:0b:88:d1:6c:1d:6f:fc: 04:b7:c5:a8:e9:08:66:48:14:8b:90:12:19:0a:72: ac:5f:c9:a6:5c:c1:44:b0:b0:19:03:a3:da:8f:58: 5a:d1:eb:8c:63:c8:a7:38:b1:4a:18:b3:26:da:27: ed:3e:67:86:1e:e3:96:c2:da:df:00:83:3c:ee:c1: fe:74:11:76:25:53:83:97:e6:c2:5d:93:fe:6b:f5: bc:1b:fe:26:82:6d:76:b9:8d:ed:0f:11:4e:31:1a: c4:ab:51:a7:2e:12:42:1f:ea:52:32:b3:c2:6e:3a: d2:2f:35:9a:72:7a:12:41:42:82:c9:ab:50:fa:2b: 0f:6a:e2:17:2d:64:5c:ff:39:d0:c9:72:22:2f:a2: 7d:78:97:c5:68:94:e8:75:50:a9:6e:a7:4a:19:8b: 2f:20:0a:46:64:46:83:a5:fb:51:b5:d4:09:47:01: 08:a6:27:20:7d:20:ef:b6:31:c3:f0:fc:82:62:be: b8:1a:af:24:9e:e5:8b:6d:17:6c:98:8b:bd:10:c3: 68:7e:e3:8f:0e:00:dc:bf:fc:df:6c:7f:12:ca:6a: 00:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:85:53:FC:E4:EE:40:D5:BD:57:12:34:92:6A:CF:1B:F6:65:0D:D6 X509v3 Authority Key Identifier: keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:6f:9d:b5:6e:b5:31:b4:d4:61:b3:da:4e:56:37:68:6a:4c: 1f:7d:ee:df:8b:91:27:ae:6c:8a:16:5c:ca:47:4b:3d:f8:df: c5:5b:21:20:57:d7:df:9a:c2:72:e4:33:b0:ec:66:21:b3:54: fa:b8:ef:cc:a2:2f:53:d5:d6:5d:be:55:77:16:ce:09:03:ad: 8d:85:ad:ae:e7:8e:0a:1c:db:cd:8d:c3:ab:7a:af:1b:b8:6a: 8f:3a:80:d6:f4:4a:95:c1:cd:e7:2c:c7:26:07:c6:64:91:ad: b5:2e:69:23:5b:86:f1:b4:54:4d:31:fe:7f:f0:a1:96:51:4d: 63:99:10:23:b4:4c:cd:cc:30:4d:55:18:3e:35:13:25:c9:1d: c6:f3:88:42:ae:5a:4b:6f:4d:de:18:20:01:31:5f:dc:1d:a2: a2:28:b3:9d:19:3f:fa:55:94:de:f8:2c:2c:f6:76:3a:3d:cb: 16:43:a0:d0:99:71:36:85:5b:74:f8:07:2c:ef:9d:56:99:23: 6c:2a:66:56:df:99:bf:65:3c:74:c3:0d:67:33:f9:38:57:09: 94:75:7f:d7:7e:78:94:2d:97:c2:17:73:5c:00:b7:c8:fc:bb: 17:0b:3d:1a:27:f8:b7:23:d2:ad:1b:3c:4a:88:b4:55:4f:a5: 37:08:f3:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2EMamMoAKEjh5Z6Tx4BfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjIwYTA2ODViNmZlOTc1NGNhMjI0ODY3NzViMmQ4YTdl OWMxMWUwHhcNMjYwMjA5MTAwMDE3WhcNMjYwMjEwMTAwMDE3WjAzMTEwLwYDVQQD Eyg4YTg1NTNmY2U0ZWU0MGQ1YmQ1NzEyMzQ5MjZhY2YxYmY2NjUwZGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFs5oRe1xvUdVAGNaV32w/1X4LGB qJRY8WR/YHbrO7bzjBtUYwuI0Wwdb/wEt8Wo6QhmSBSLkBIZCnKsX8mmXMFEsLAZ A6Paj1ha0euMY8inOLFKGLMm2iftPmeGHuOWwtrfAIM87sH+dBF2JVODl+bCXZP+ a/W8G/4mgm12uY3tDxFOMRrEq1GnLhJCH+pSMrPCbjrSLzWacnoSQUKCyatQ+isP auIXLWRc/znQyXIiL6J9eJfFaJTodVCpbqdKGYsvIApGZEaDpftRtdQJRwEIpicg fSDvtjHD8PyCYr64Gq8knuWLbRdsmIu9EMNofuOPDgDcv/zfbH8SymoAiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqFU/zk7kDVvVcSNJJqzxv2ZQ3WMB8GA1UdIwQY MBaAFN3yCgaFtv6XVMoiSGd1stin6cEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTRjNzgtNGJkMC00M2Q4LTgxNGYt NTgzNDlmNzQwZTk2LzEvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81OTRjNzgtNGJkMC00M2Q4LTgxNGYtNTgzNDlmNzQwZTk2 LzEvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdG+dtW61 MbTUYbPaTlY3aGpMH33u34uRJ65sihZcykdLPfjfxVshIFfX35rCcuQzsOxmIbNU +rjvzKIvU9XWXb5VdxbOCQOtjYWtrueOChzbzY3Dq3qvG7hqjzqA1vRKlcHN5yzH JgfGZJGttS5pI1uG8bRUTTH+f/ChllFNY5kQI7RMzcwwTVUYPjUTJckdxvOIQq5a S29N3hggATFf3B2ioiiznRk/+lWU3vgsLPZ2Oj3LFkOg0JlxNoVbdPgHLO+dVpkj bCpmVt+Zv2U8dMMNZzP5OFcJlHV/1354lC2XwhdzXAC3yPy7Fws9Gif4tyPSrRs8 Soi0VU+lNwjzbg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:53 2026 by rpki-client