This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json) Hash identifier: ayagmcqc2DmbTIR1LYIGrjfCLzNr1VJHgHniwLpZVIw= Subject key identifier: 87:DB:6E:41:17:78:50:3E:8E:31:FC:1B:42:39:62:15:E6:F5:2B:ED Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Certificate serial: 019C44A2F317673B9005531FBBB95384F5D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft Manifest number: 0C7B Signing time: Mon 09 Feb 2026 23:00:55 +0000 Manifest this update: Mon 09 Feb 2026 23:00:55 +0000 Manifest next update: Tue 10 Feb 2026 23:00:55 +0000 Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: vWQE/itWQ8JSebwm6zWVCg0ZdYKYFRUAx7D9cypRUts=) 2: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (hash: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:f3:17:67:3b:90:05:53:1f:bb:b9:53:84:f5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Validity Not Before: Feb 9 23:00:55 2026 GMT Not After : Feb 10 23:00:55 2026 GMT Subject: CN=87db6e411778503e8e31fc1b42396215e6f52bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a7:aa:52:d5:a1:cf:b1:39:12:26:ea:be:d1: 8a:90:2b:66:33:ae:9c:5b:4b:33:4a:b6:6b:50:97: f6:ed:a9:59:15:e4:12:07:ac:f2:ed:26:dc:d5:3e: ae:ff:e5:42:e6:91:2f:ee:b3:f6:bf:d5:df:75:d3: a6:1d:d8:a2:50:99:2b:b8:25:a4:72:a5:23:b0:77: 09:64:08:51:8f:1e:76:f6:5b:7a:be:2f:1b:97:49: 3a:6f:ab:29:6d:5f:78:0b:2b:f2:68:7a:2d:55:c1: 4e:4d:54:c8:03:a2:48:08:66:3d:08:09:e8:a6:7b: 3e:44:fc:40:fc:fa:00:df:3c:2c:11:ee:19:d9:b4: 21:9c:4c:d6:ca:35:63:76:72:31:a9:f6:5a:eb:36: 9a:c4:bc:ac:49:f5:e4:00:27:88:90:9a:4d:89:8b: 9d:b4:a6:f3:5e:ac:29:37:fe:66:08:56:b8:71:1a: 5f:45:2a:52:6c:76:c1:1c:a1:bc:63:bc:e7:ba:e2: 13:f6:9b:69:99:0d:36:e0:fd:8e:f3:90:4b:e9:48: 5d:09:41:0a:e8:0d:f4:b6:e1:d3:14:f9:e8:0a:cb: 24:7d:dc:4d:d4:dd:81:72:33:51:a9:f7:8e:8f:3a: 9b:5c:96:6a:b8:03:cb:51:83:7d:86:94:45:95:1d: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DB:6E:41:17:78:50:3E:8E:31:FC:1B:42:39:62:15:E6:F5:2B:ED X509v3 Authority Key Identifier: keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:ca:75:18:da:10:43:ff:2c:b7:e7:11:c6:0f:6c:af:7e:4e: b5:84:17:81:07:56:76:fb:87:db:de:d0:d1:6d:68:30:b1:0b: 5c:77:89:62:8c:29:ed:9e:d0:74:d6:4d:ce:86:06:f2:cf:17: 3e:40:2c:e9:1d:50:9e:e1:e3:8b:a3:4e:fb:88:0f:4a:d7:64: 32:d0:57:98:ab:c2:8e:50:a4:ad:4a:e5:59:9d:17:7b:53:4e: aa:ea:29:90:80:3b:ed:74:8b:9c:6c:3d:40:3e:01:53:ca:81: 41:49:16:8f:fb:65:69:48:57:03:70:54:8f:f6:2a:2c:3b:07: 31:c4:fc:85:ee:76:8e:fa:28:88:ea:ea:e3:4c:64:8c:23:65: b4:97:aa:4d:e9:84:aa:ee:51:f7:24:b7:45:8b:43:58:c6:46: 9b:c5:e9:11:48:7d:51:04:66:82:9d:a8:eb:34:26:7f:bc:63: ba:2b:3d:c3:58:95:5a:58:bb:4c:f1:c0:b4:fd:6d:ef:dc:b8: e6:25:28:9a:fb:ac:32:7a:2f:d3:60:5b:4b:37:fc:88:6e:d5: 0e:fd:e7:ea:83:59:de:b2:72:41:01:40:cd:23:51:98:c9:8d: f6:44:cd:a9:ce:b6:0f:9b:14:b4:3c:87:56:e8:56:b2:4f:45: 0e:60:4a:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEovMXZzuQBVMfu7lThPXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOWMzMDM5OWY2Mzg1NTVmNGMwMmU4ZDFiNTViYzkyNzIy NWNiNTEwHhcNMjYwMjA5MjMwMDU1WhcNMjYwMjEwMjMwMDU1WjAzMTEwLwYDVQQD Eyg4N2RiNmU0MTE3Nzg1MDNlOGUzMWZjMWI0MjM5NjIxNWU2ZjUyYmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaeqUtWhz7E5EibqvtGKkCtmM66c W0szSrZrUJf27alZFeQSB6zy7Sbc1T6u/+VC5pEv7rP2v9XfddOmHdiiUJkruCWk cqUjsHcJZAhRjx529lt6vi8bl0k6b6spbV94CyvyaHotVcFOTVTIA6JICGY9CAno pns+RPxA/PoA3zwsEe4Z2bQhnEzWyjVjdnIxqfZa6zaaxLysSfXkACeIkJpNiYud tKbzXqwpN/5mCFa4cRpfRSpSbHbBHKG8Y7znuuIT9ptpmQ024P2O85BL6UhdCUEK 6A30tuHTFPnoCsskfdxN1N2BcjNRqfeOjzqbXJZquAPLUYN9hpRFlR2NXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfbbkEXeFA+jjH8G0I5YhXm9SvtMB8GA1UdIwQY MBaAFN2cMDmfY4VV9MAujRtVvJJyJctRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTIt MGU1MTQwNjJjNTkwLzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTItMGU1MTQwNjJjNTkw LzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxcp1GNoQ Q/8st+cRxg9sr35OtYQXgQdWdvuH297Q0W1oMLELXHeJYowp7Z7QdNZNzoYG8s8X PkAs6R1QnuHji6NO+4gPStdkMtBXmKvCjlCkrUrlWZ0Xe1NOquopkIA77XSLnGw9 QD4BU8qBQUkWj/tlaUhXA3BUj/YqLDsHMcT8he52jvooiOrq40xkjCNltJeqTemE qu5R9yS3RYtDWMZGm8XpEUh9UQRmgp2o6zQmf7xjuis9w1iVWli7TPHAtP1t79y4 5iUomvusMnov02BbSzf8iG7VDv3n6oNZ3rJyQQFAzSNRmMmN9kTNqc62D5sUtDyH VuhWsk9FDmBK1w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:06 2026 by rpki-client