This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft File: r-us3hVZeiga4rspMG3E2m3Pt14.mft (raw, json) Hash identifier: pEip7RmH/Y6L38UEwDRGM1fJEFBAfS+Cjx3JoPoB9no= Subject key identifier: 2C:E9:00:A9:8B:8D:5B:97:DD:03:EF:B6:5E:0E:98:66:56:8B:C5:4F Authority key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E Certificate issuer: /CN=afebacde15597a281ae2bb29306dc4da6dcfb75e Certificate serial: 019C1BDD8F5497DCE6EC285651A0661BDF50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft Manifest number: 11 Signing time: Mon 02 Feb 2026 01:00:30 +0000 Manifest this update: Mon 02 Feb 2026 01:00:30 +0000 Manifest next update: Tue 03 Feb 2026 01:00:30 +0000 Files and hashes: 1: jdSx0T-sdrzr500OOr7Atdy3Z4E.asa (hash: nbjDNb/jtcCfwpceFtypmGiC8RlKHHL0LGrtqS6ZCo8=) 2: r-us3hVZeiga4rspMG3E2m3Pt14.crl (hash: pMU0kqvm5nDErGt482DUtxUkNPxWOfX3VhdpYxZq3Aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:dd:8f:54:97:dc:e6:ec:28:56:51:a0:66:1b:df:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e Validity Not Before: Feb 2 01:00:30 2026 GMT Not After : Feb 3 01:00:30 2026 GMT Subject: CN=2ce900a98b8d5b97dd03efb65e0e9866568bc54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:98:1a:60:6d:a9:14:81:c4:53:48:67:d6: f2:3f:42:fd:19:bf:f1:13:97:19:9c:5e:bc:6f:77: bd:ff:fb:8f:eb:ce:48:86:23:21:73:02:9d:00:e5: 56:d1:c6:7e:ff:2c:46:13:28:02:3f:89:59:db:1a: 4c:22:9e:d7:87:47:6a:ac:15:c1:3e:05:5d:85:d0: 50:f5:92:69:59:e8:eb:0b:c7:05:13:21:92:c6:a2: d4:58:63:54:50:04:23:e3:00:0c:53:33:27:00:1d: bb:cc:ad:68:ce:26:62:15:7a:78:98:07:e9:2b:0b: 95:34:1b:ef:9e:52:f4:f3:39:c4:5b:18:03:04:d0: 43:39:83:24:71:19:46:2a:df:71:cf:39:a3:d9:53: 8b:76:bc:b9:ee:3d:90:93:f6:0a:3c:fd:63:86:e3: c8:f9:25:27:48:ae:7c:f6:c8:41:a2:e2:8b:8a:0e: ee:8a:c3:31:da:f3:a8:71:7b:2e:d4:37:ef:8e:3a: 5e:07:b4:f2:54:8e:18:f5:22:0d:fe:d1:2d:f9:fa: 6d:83:20:b6:ef:e6:10:93:b3:ae:d6:75:51:ff:89: 36:93:f8:1a:cc:00:44:8d:82:9d:1d:d2:69:6b:1e: 38:0d:05:90:ab:8a:1c:83:7f:7e:6c:1c:01:7f:00: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E9:00:A9:8B:8D:5B:97:DD:03:EF:B6:5E:0E:98:66:56:8B:C5:4F X509v3 Authority Key Identifier: keyid:AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a5:7a:6b:c6:87:18:68:56:9e:d0:35:5d:e3:a0:28:06:46: 28:a7:b2:ce:7e:74:9b:1e:38:54:f6:28:61:6a:e8:9c:16:74: ca:11:9c:b8:bc:95:ce:d7:a4:80:22:69:4a:85:98:db:5d:4c: 5d:55:34:c1:76:e6:81:54:88:bd:71:12:64:c4:1d:4d:fc:cc: 0a:a8:bc:ac:65:ed:a7:59:ca:6d:a0:32:0b:ae:d4:aa:aa:62: 0b:6f:03:bb:a2:55:e4:ad:9b:fa:4f:c7:6c:97:7f:2d:66:c5: 7a:da:a5:ed:cc:88:ab:d7:c0:8b:1b:0c:2c:20:97:f2:e8:13: 30:66:07:ff:9f:39:d8:25:d0:95:a2:f5:9e:ce:bc:5c:86:24: 63:ce:90:7f:eb:e8:6e:bb:4f:9d:7f:7c:37:a2:18:7d:b8:c0: 6c:82:fe:4b:12:56:47:3b:c9:94:ad:bd:ea:11:f4:9c:bb:cf: 75:ec:d8:c0:35:bc:02:4b:0b:be:5d:24:74:6a:8f:c9:0b:f1: 30:77:01:19:a3:a4:46:47:64:11:04:20:23:b4:52:2f:98:5c: 8a:6e:72:68:ee:fe:c0:f0:4e:64:7e:74:4a:1b:76:06:c7:be: d6:47:84:a1:d9:03:57:33:d7:27:69:e3:d2:10:27:4c:6b:00: 8a:ce:57:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3Y9Ul9zm7ChWUaBmG99QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZWJhY2RlMTU1OTdhMjgxYWUyYmIyOTMwNmRjNGRhNmRj ZmI3NWUwHhcNMjYwMjAyMDEwMDMwWhcNMjYwMjAzMDEwMDMwWjAzMTEwLwYDVQQD EygyY2U5MDBhOThiOGQ1Yjk3ZGQwM2VmYjY1ZTBlOTg2NjU2OGJjNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEyYGmBtqRSBxFNIZ9byP0L9Gb/x E5cZnF68b3e9//uP685IhiMhcwKdAOVW0cZ+/yxGEygCP4lZ2xpMIp7Xh0dqrBXB PgVdhdBQ9ZJpWejrC8cFEyGSxqLUWGNUUAQj4wAMUzMnAB27zK1oziZiFXp4mAfp KwuVNBvvnlL08znEWxgDBNBDOYMkcRlGKt9xzzmj2VOLdry57j2Qk/YKPP1jhuPI +SUnSK589shBouKLig7uisMx2vOocXsu1DfvjjpeB7TyVI4Y9SIN/tEt+fptgyC2 7+YQk7Ou1nVR/4k2k/gazABEjYKdHdJpax44DQWQq4ocg39+bBwBfwDNsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzpAKmLjVuX3QPvtl4OmGZWi8VPMB8GA1UdIwQY MBaAFK/rrN4VWXooGuK7KTBtxNptz7deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci11czNoVlplaWdhNHJzcE1HM0UybTNQdDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kMjExYzItNmNhOS00ODAzLTk2YjMt MmUxOTRhYzFhZDZmLzEvci11czNoVlplaWdhNHJzcE1HM0UybTNQdDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kMjExYzItNmNhOS00ODAzLTk2YjMtMmUxOTRhYzFhZDZm LzEvci11czNoVlplaWdhNHJzcE1HM0UybTNQdDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqV6a8aH GGhWntA1XeOgKAZGKKeyzn50mx44VPYoYWronBZ0yhGcuLyVztekgCJpSoWY211M XVU0wXbmgVSIvXESZMQdTfzMCqi8rGXtp1nKbaAyC67UqqpiC28Du6JV5K2b+k/H bJd/LWbFetql7cyIq9fAixsMLCCX8ugTMGYH/5852CXQlaL1ns68XIYkY86Qf+vo brtPnX98N6IYfbjAbIL+SxJWRzvJlK296hH0nLvPdezYwDW8AksLvl0kdGqPyQvx MHcBGaOkRkdkEQQgI7RSL5hcim5yaO7+wPBOZH50Sht2Bse+1keEodkDVzPXJ2nj 0hAnTGsAis5X1g== -----END CERTIFICATE-----Generated at Mon Feb 2 08:04:05 2026 by rpki-client