This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json) Hash identifier: Z/Ww8tDkoBl2GqAeNUJQ+tb4+m6CllT6suA+X59hdiI= Subject key identifier: E1:58:3B:AA:28:BA:11:F6:00:BA:EE:8B:E4:D2:BC:1B:DB:04:4E:AA Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48 Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448 Certificate serial: 019C42EB09AA02DAEA0E59362EF9920CC4FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft Manifest number: 17A5 Signing time: Mon 09 Feb 2026 15:00:25 +0000 Manifest this update: Mon 09 Feb 2026 15:00:25 +0000 Manifest next update: Tue 10 Feb 2026 15:00:25 +0000 Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: Clou/C4vz8BBYxV0sdjE/0HwQE3m20BvQNhLkj00DW8=) 2: Ul8b11My9gvvpOwu_4T6lfCZjCI.roa (hash: ihknx/rKkWDFephobjW9oz0pq89+mPfWzCnTBwHVamY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:09:aa:02:da:ea:0e:59:36:2e:f9:92:0c:c4:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448 Validity Not Before: Feb 9 15:00:25 2026 GMT Not After : Feb 10 15:00:25 2026 GMT Subject: CN=e1583baa28ba11f600baee8be4d2bc1bdb044eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:36:b9:b7:42:88:27:6e:7d:af:ad:8a:b9: ca:d5:b0:32:77:1c:46:08:37:b2:c0:91:1f:c6:80: 67:10:85:e0:61:1a:9d:4d:09:3e:cb:73:f4:55:31: ea:9f:4f:54:1f:d6:f9:6e:8f:bf:f2:63:2f:9d:19: c9:b8:68:c7:66:cb:6c:4d:fe:b8:49:e0:c6:8f:24: 94:d8:25:e7:06:fb:15:0a:ed:97:03:39:6e:8d:70: 05:3a:63:4e:ea:d9:b2:5b:b6:19:57:2d:1c:1a:2f: 4d:14:8d:b0:ac:8e:8f:e6:75:b5:df:a7:16:47:dd: c8:b1:b6:4f:29:9d:50:9b:e0:c2:e6:68:15:2f:0a: b0:2d:0a:bd:fe:db:8e:89:cb:99:d7:45:70:23:e6: d9:79:ad:cb:27:c1:23:c6:10:f0:31:45:be:ea:5d: 96:71:ad:98:e5:9f:21:ef:d9:7f:15:ab:2b:b6:46: 0d:c9:c4:b2:54:93:a0:6a:93:8f:7c:a8:cf:fa:a1: 4b:36:74:a4:f8:67:d4:3e:ae:ef:4d:c2:4c:67:f4: ad:6e:2b:43:e3:b8:49:d4:d9:6f:fb:46:8a:20:bb: e9:90:8f:29:f7:a8:42:5e:34:4f:26:07:3f:c6:f2: 38:a5:fd:c6:24:42:f6:be:53:a7:39:16:f2:f4:3b: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:58:3B:AA:28:BA:11:F6:00:BA:EE:8B:E4:D2:BC:1B:DB:04:4E:AA X509v3 Authority Key Identifier: keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c5:da:00:6e:05:9e:fa:ba:ed:a6:b8:f5:00:57:98:f2:0b: 52:23:44:d3:19:54:6a:ec:79:00:2d:6b:a6:f8:f8:de:b6:fb: 22:fe:9a:c1:7b:e9:01:0f:60:01:a7:00:3d:d6:f8:15:42:5a: f7:df:7f:ba:60:16:ce:1b:85:50:11:06:91:fb:87:d2:47:d3: b5:20:ab:cb:37:d9:60:d4:e1:ca:be:bc:77:00:5e:d5:98:5b: 0b:89:66:79:f8:28:a5:27:b3:9d:f4:05:50:7b:33:00:42:2c: c8:8d:ab:be:2e:cc:8e:e7:3a:bc:6d:a3:fc:2b:ec:c1:ba:87: 6d:4b:40:37:65:58:7c:d5:9e:ef:80:0f:2f:2e:3d:ba:05:ad: 7d:5c:ad:63:32:ad:15:b6:22:42:15:e3:9d:44:67:37:0e:c0: 60:ef:22:45:b8:1a:9e:b9:ce:90:91:f5:2d:fe:b8:e2:c3:93: 19:67:a7:67:5f:8f:7a:2d:34:dd:2d:00:e6:e5:62:d0:68:25: e0:e8:16:39:e9:63:b6:e5:8a:71:4c:3a:c7:f7:93:38:b5:31: 77:74:43:02:f3:6f:20:7a:e0:af:e5:6c:65:0f:32:32:88:e7: 9e:7c:c2:50:ca:05:25:e2:35:56:19:47:63:a4:09:10:fe:34: 60:33:ee:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wmqAtrqDlk2LvmSDMT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzZkMmY0M2VjMTdkZmM4MDVjZGIwNWYwMDBhMTU3OTg5 ZWQ0NDgwHhcNMjYwMjA5MTUwMDI1WhcNMjYwMjEwMTUwMDI1WjAzMTEwLwYDVQQD EyhlMTU4M2JhYTI4YmExMWY2MDBiYWVlOGJlNGQyYmMxYmRiMDQ0ZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM02ubdCiCdufa+tirnK1bAydxxG CDeywJEfxoBnEIXgYRqdTQk+y3P0VTHqn09UH9b5bo+/8mMvnRnJuGjHZstsTf64 SeDGjySU2CXnBvsVCu2XAzlujXAFOmNO6tmyW7YZVy0cGi9NFI2wrI6P5nW136cW R93IsbZPKZ1Qm+DC5mgVLwqwLQq9/tuOicuZ10VwI+bZea3LJ8EjxhDwMUW+6l2W ca2Y5Z8h79l/FasrtkYNycSyVJOgapOPfKjP+qFLNnSk+GfUPq7vTcJMZ/StbitD 47hJ1Nlv+0aKILvpkI8p96hCXjRPJgc/xvI4pf3GJEL2vlOnORby9Dt40wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFYO6oouhH2ALrui+TSvBvbBE6qMB8GA1UdIwQY MBaAFNx20vQ+wX38gFzbBfAAoVeYntRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjFlNDAtYWMwOS00NzU2LTk0ZWYt OTNjNjQ1N2NhZjMzLzEvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jNjFlNDAtYWMwOS00NzU2LTk0ZWYtOTNjNjQ1N2NhZjMz LzEvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8XaAG4F nvq67aa49QBXmPILUiNE0xlUaux5AC1rpvj43rb7Iv6awXvpAQ9gAacAPdb4FUJa 999/umAWzhuFUBEGkfuH0kfTtSCryzfZYNThyr68dwBe1ZhbC4lmefgopSeznfQF UHszAEIsyI2rvi7Mjuc6vG2j/CvswbqHbUtAN2VYfNWe74APLy49ugWtfVytYzKt FbYiQhXjnURnNw7AYO8iRbganrnOkJH1Lf644sOTGWenZ1+Pei003S0A5uVi0Ggl 4OgWOeljtuWKcUw6x/eTOLUxd3RDAvNvIHrgr+VsZQ8yMojnnnzCUMoFJeI1VhlH Y6QJEP40YDPuCA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:34 2026 by rpki-client