This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json) Hash identifier: BfjIxMRMtVvIyXLKfhzTHocFE8vAuDXudwFX4bIPYKk= Subject key identifier: 4A:D7:C9:F9:2A:93:61:7C:E6:C9:DA:8B:5F:E1:A8:7C:49:DF:9C:04 Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d Certificate serial: 019C1DCCE076FE39B512D8BBC87B3D25B17D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft Manifest number: 1527 Signing time: Mon 02 Feb 2026 10:01:31 +0000 Manifest this update: Mon 02 Feb 2026 10:01:31 +0000 Manifest next update: Tue 03 Feb 2026 10:01:31 +0000 Files and hashes: 1: 55zpSPIb8yRIbjJpUuTnrKNG7KE.roa (hash: h4Ec3W5AoQcpGRKZrj+SMm1p96ZddYSDTRq4GA8UC/E=) 2: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: 6aFTkHWiVoy9zjotPCdWUPOJfR/kLRhCigx7/q7jj8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 10:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:cc:e0:76:fe:39:b5:12:d8:bb:c8:7b:3d:25:b1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d Validity Not Before: Feb 2 10:01:31 2026 GMT Not After : Feb 3 10:01:31 2026 GMT Subject: CN=4ad7c9f92a93617ce6c9da8b5fe1a87c49df9c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:50:45:df:98:d5:2b:93:8e:7b:13:00:20: 33:2a:65:4e:f2:ca:3a:55:18:c3:6d:06:f3:21:f2: 3d:8b:a8:67:01:4a:aa:85:a8:72:92:85:14:d4:95: 0e:ab:b7:0f:dd:ca:9b:e8:b4:7d:0d:65:5c:cf:24: 9c:0e:fa:4b:6f:e7:4e:f9:86:db:78:f8:52:b2:9e: 03:d8:aa:ff:1f:1e:ac:ba:f7:db:e9:0e:8f:41:ae: 51:f1:1d:67:8e:45:37:bd:44:ea:06:85:8e:6d:1a: 05:84:9c:68:bc:2a:34:93:92:65:9d:85:37:53:c1: 29:f7:fa:fa:85:04:2d:ec:56:91:fe:88:6a:c8:0a: 1e:4f:ba:75:7d:51:dc:e9:f5:c8:40:fb:ca:ba:d9: da:27:0d:89:64:e7:d2:3b:fb:d1:fd:bc:8f:66:ce: 13:d5:db:95:f6:64:b9:03:3b:9a:e1:ad:d6:a7:a9: e0:4c:df:64:b6:51:ec:b6:88:6e:32:7e:6b:50:20: 73:10:60:cc:e4:cc:72:e2:52:fc:73:4e:3f:bc:6f: 8b:1d:86:c8:01:43:ce:04:c7:fb:a8:11:39:47:31: 7a:3b:4f:70:5e:d8:2d:60:fc:79:6b:35:4f:e5:a3: 09:6c:f7:0e:04:14:c3:32:90:3d:48:ea:99:59:2a: 89:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D7:C9:F9:2A:93:61:7C:E6:C9:DA:8B:5F:E1:A8:7C:49:DF:9C:04 X509v3 Authority Key Identifier: keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5d:aa:6e:52:c0:ea:62:b9:e7:46:e8:92:c5:00:03:ad:44: 98:9f:42:87:0b:96:c2:45:5a:4b:d9:b6:df:8b:42:3e:88:cf: fb:db:a0:d2:74:f9:09:9b:91:0e:a6:2c:f6:6e:d9:3a:36:5e: b9:76:b4:7c:a8:02:a0:27:f8:11:2d:23:1c:51:e1:20:21:b0: 1f:7a:7c:db:ed:e4:3f:ef:57:f8:1d:35:ab:76:02:08:93:e6: ad:0a:07:0a:f9:19:c5:59:4c:0e:b2:08:9d:35:25:3f:9c:d5: a2:2f:68:61:46:f2:47:57:39:a5:56:cc:1a:72:e6:b6:56:8b: b8:4b:13:0e:6d:8b:ec:c6:52:67:48:d7:a9:81:7a:ca:b8:6b: d8:a6:3d:4c:bc:59:29:08:ed:ab:35:7b:ab:7e:a5:10:1d:54: 30:a2:85:e6:9c:d7:64:03:a9:41:0f:3e:b3:6b:2a:a1:42:14: 11:11:c0:00:88:34:eb:d4:63:51:3d:16:73:5a:ff:07:56:5e: 61:41:ce:4d:13:1f:a8:27:da:cb:cd:a0:5a:c3:f8:f8:42:24: c8:a7:c0:8e:b5:3a:b0:53:13:4b:15:cd:0e:ee:eb:5a:59:1e: 8a:31:15:35:d5:58:fd:e3:9c:a8:e7:8c:18:e9:7e:a6:fd:eb: 79:e9:c1:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdzOB2/jm1Eti7yHs9JbF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2IzZGY2ZDc4Mzk5ZjAzMTgyODU1NmZjZDkwZWJmZGY0 ZDBkMmQwHhcNMjYwMjAyMTAwMTMxWhcNMjYwMjAzMTAwMTMxWjAzMTEwLwYDVQQD Eyg0YWQ3YzlmOTJhOTM2MTdjZTZjOWRhOGI1ZmUxYTg3YzQ5ZGY5YzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDlQRd+Y1SuTjnsTACAzKmVO8so6 VRjDbQbzIfI9i6hnAUqqhahykoUU1JUOq7cP3cqb6LR9DWVczyScDvpLb+dO+Ybb ePhSsp4D2Kr/Hx6suvfb6Q6PQa5R8R1njkU3vUTqBoWObRoFhJxovCo0k5JlnYU3 U8Ep9/r6hQQt7FaR/ohqyAoeT7p1fVHc6fXIQPvKutnaJw2JZOfSO/vR/byPZs4T 1duV9mS5Azua4a3Wp6ngTN9ktlHstohuMn5rUCBzEGDM5Mxy4lL8c04/vG+LHYbI AUPOBMf7qBE5RzF6O09wXtgtYPx5azVP5aMJbPcOBBTDMpA9SOqZWSqJGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErXyfkqk2F85snai1/hqHxJ35wEMB8GA1UdIwQY MBaAFAN7PfbXg5nwMYKFVvzZDr/fTQ0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgt YTQ3NWFlYmIwOGQ1LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgtYTQ3NWFlYmIwOGQ1 LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhF2qblLA 6mK550boksUAA61EmJ9ChwuWwkVaS9m234tCPojP+9ug0nT5CZuRDqYs9m7ZOjZe uXa0fKgCoCf4ES0jHFHhICGwH3p82+3kP+9X+B01q3YCCJPmrQoHCvkZxVlMDrII nTUlP5zVoi9oYUbyR1c5pVbMGnLmtlaLuEsTDm2L7MZSZ0jXqYF6yrhr2KY9TLxZ KQjtqzV7q36lEB1UMKKF5pzXZAOpQQ8+s2sqoUIUERHAAIg069RjUT0Wc1r/B1Ze YUHOTRMfqCfay82gWsP4+EIkyKfAjrU6sFMTSxXNDu7rWlkeijEVNdVY/eOcqOeM GOl+pv3reenBaQ== -----END CERTIFICATE-----Generated at Mon Feb 2 17:23:43 2026 by rpki-client