This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json) Hash identifier: QlQ13URrJVL1dkC9MT7LXKm0h1WugylzhhkIPABTTqA= Subject key identifier: 99:14:44:B8:50:5B:A7:38:4F:00:16:F8:DB:DE:E2:B5:21:78:1B:01 Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67 Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67 Certificate serial: 019C4246A80BC7A88CF845257411A908392F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft Manifest number: 1153 Signing time: Mon 09 Feb 2026 12:00:52 +0000 Manifest this update: Mon 09 Feb 2026 12:00:52 +0000 Manifest next update: Tue 10 Feb 2026 12:00:52 +0000 Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: bJ298HnudnfeNFpI8U7pfASFICY8NAV2qE2h3Jg/1to=) 2: PPRaTVoWQxqgJS86OGcLmeFlqjs.roa (hash: m4L7LYwGypVuro0rB7cA22ndxC3bOW1LY8iuZIzj8bQ=) 3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:a8:0b:c7:a8:8c:f8:45:25:74:11:a9:08:39:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67 Validity Not Before: Feb 9 12:00:52 2026 GMT Not After : Feb 10 12:00:52 2026 GMT Subject: CN=991444b8505ba7384f0016f8dbdee2b521781b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:87:b9:e7:dd:74:88:26:64:d3:4e:8e:3f:f3: 15:62:f9:90:4f:30:84:32:c4:cc:82:6e:a2:1c:9c: 1e:6e:75:e2:63:d8:2a:54:81:7e:5e:f9:dc:20:81: 71:52:78:b0:f9:13:2d:03:d1:40:87:42:4b:97:11: 31:d7:19:2f:9e:d9:4c:fc:8d:c5:c5:6f:6f:97:76: 30:5c:d5:bb:e5:24:e1:e1:e1:88:5d:6c:60:70:91: 02:b6:7b:c5:38:12:79:1b:65:7c:f7:28:cb:8b:ee: 51:b0:71:8e:fe:da:39:39:31:b0:32:13:0e:0d:8b: 2b:fc:38:77:56:f4:54:3a:3b:13:c9:87:36:a2:f7: 84:76:22:d5:b9:00:a3:8d:10:2f:10:1c:b3:16:5f: b1:f2:e2:4c:63:af:d5:b6:f9:01:74:2a:dd:9f:7f: 1f:08:42:3f:f4:9a:24:69:ac:bc:16:c1:cf:b1:a2: da:ea:e5:f5:c7:a1:22:92:28:2f:0b:af:f2:1b:e8: ec:6e:d8:8d:79:08:80:b0:f5:9f:0c:6a:d4:b6:49: c9:96:e9:3e:5b:40:79:3a:07:42:ec:79:5b:2d:f6: 30:72:25:c8:57:2c:5b:43:23:c4:df:31:f5:ed:53: 2c:1c:55:b2:6e:0d:12:d3:c6:75:55:39:90:1c:df: 8d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:14:44:B8:50:5B:A7:38:4F:00:16:F8:DB:DE:E2:B5:21:78:1B:01 X509v3 Authority Key Identifier: keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:bf:98:35:fc:5d:a7:69:d7:27:85:1a:dc:c8:70:a8:af:c0: 3a:23:59:cc:8a:7b:b6:21:f6:3b:ee:1d:a9:2a:45:e8:8c:f4: 4c:68:55:23:3c:f6:ab:10:f6:d6:bf:81:51:d3:2e:5c:11:63: 65:e5:66:ed:77:9b:0e:39:e0:57:cd:df:6c:40:d7:22:e6:11: b3:0a:0c:61:bc:1f:73:ba:ac:fd:c0:da:c1:03:4e:ae:fd:c7: 23:75:26:ae:08:6d:93:98:fc:be:77:6f:b6:4c:65:d6:ae:48: f6:66:2e:ce:ab:fd:48:00:49:ff:25:b8:9c:df:1c:19:95:73: de:32:1e:22:de:ad:db:87:01:96:ac:d3:36:f7:9f:1d:3a:83: 62:58:cf:eb:e0:62:b2:09:ac:41:44:1f:fa:c6:78:bc:43:96: 24:74:a9:ad:2f:0b:e0:b8:af:1a:10:88:b0:c8:86:73:a7:7d: 75:18:6c:4a:63:90:b0:17:52:cb:d8:35:3d:2c:00:3d:10:d4: 48:e2:af:f9:02:6d:53:50:e2:8b:8e:b4:94:b0:75:b2:e3:80: 10:e3:a6:ca:1e:6c:e4:51:50:94:01:37:20:b1:23:88:34:14: 24:e7:8d:1a:a9:2b:ba:c7:c0:f2:b0:be:fe:60:64:da:66:e7: 07:4c:71:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqgLx6iM+EUldBGpCDkvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZTM2ZTk4MDIxMjY0ZjVhODA3MDEwNjc4MGJlMjlkNDhh MTZjNjcwHhcNMjYwMjA5MTIwMDUyWhcNMjYwMjEwMTIwMDUyWjAzMTEwLwYDVQQD Eyg5OTE0NDRiODUwNWJhNzM4NGYwMDE2ZjhkYmRlZTJiNTIxNzgxYjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4e55910iCZk006OP/MVYvmQTzCE MsTMgm6iHJwebnXiY9gqVIF+XvncIIFxUniw+RMtA9FAh0JLlxEx1xkvntlM/I3F xW9vl3YwXNW75STh4eGIXWxgcJECtnvFOBJ5G2V89yjLi+5RsHGO/to5OTGwMhMO DYsr/Dh3VvRUOjsTyYc2oveEdiLVuQCjjRAvEByzFl+x8uJMY6/VtvkBdCrdn38f CEI/9Jokaay8FsHPsaLa6uX1x6EikigvC6/yG+jsbtiNeQiAsPWfDGrUtknJluk+ W0B5OgdC7HlbLfYwciXIVyxbQyPE3zH17VMsHFWybg0S08Z1VTmQHN+NVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkURLhQW6c4TwAW+Nve4rUheBsBMB8GA1UdIwQY MBaAFN3jbpgCEmT1qAcBBngL4p1IoWxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NmFlZTEtZTIyMC00ZTIyLTljYjUt OGZlM2EwZjYxNDM3LzEvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NmFlZTEtZTIyMC00ZTIyLTljYjUtOGZlM2EwZjYxNDM3 LzEvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfr+YNfxd p2nXJ4Ua3MhwqK/AOiNZzIp7tiH2O+4dqSpF6Iz0TGhVIzz2qxD21r+BUdMuXBFj ZeVm7XebDjngV83fbEDXIuYRswoMYbwfc7qs/cDawQNOrv3HI3Umrghtk5j8vndv tkxl1q5I9mYuzqv9SABJ/yW4nN8cGZVz3jIeIt6t24cBlqzTNvefHTqDYljP6+Bi sgmsQUQf+sZ4vEOWJHSprS8L4LivGhCIsMiGc6d9dRhsSmOQsBdSy9g1PSwAPRDU SOKv+QJtU1Dii460lLB1suOAEOOmyh5s5FFQlAE3ILEjiDQUJOeNGqkrusfA8rC+ /mBk2mbnB0xxuQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:41 2026 by rpki-client