This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json) Hash identifier: DIKifKFC0UUn1OM6v27On9h/lH1gyBfIGwM5sy0S6o0= Subject key identifier: 27:D1:77:C4:67:F5:9F:31:B6:A7:B0:E5:B9:10:31:92:DB:48:6A:81 Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96 Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796 Certificate serial: 019C45103779C28D014CFC684A241C589730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft Manifest number: 0FFA Signing time: Tue 10 Feb 2026 01:00:16 +0000 Manifest this update: Tue 10 Feb 2026 01:00:16 +0000 Manifest next update: Wed 11 Feb 2026 01:00:16 +0000 Files and hashes: 1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: dDcrEWiV9WZyuROKPUeh0EKNqQ3L4lhjYIXLmZeK+0s=) 2: 41nL5ZV4qJFS5Q2xxQRuLMPoip0.roa (hash: BJiNQu65WQwhnTLfbv69MpyE5IwMrQPr3mJhDc7s1uM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:37:79:c2:8d:01:4c:fc:68:4a:24:1c:58:97:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796 Validity Not Before: Feb 10 01:00:16 2026 GMT Not After : Feb 11 01:00:16 2026 GMT Subject: CN=27d177c467f59f31b6a7b0e5b9103192db486a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4f:ad:23:79:81:db:43:cc:5b:e3:f9:ea:bf: ca:0b:be:74:b3:3d:ea:02:f9:3a:b2:d9:9f:4d:48: e6:52:42:26:18:64:ba:e7:a7:54:68:3c:8a:0b:3e: a6:10:09:f2:f2:52:28:89:0f:21:06:dd:49:67:83: 76:6a:23:7b:47:4e:d8:d8:12:8a:cf:04:c7:bf:cd: 7d:cb:36:78:f9:d3:c5:97:eb:f2:4f:c5:b7:a0:f0: 13:23:0f:7f:d9:19:24:6f:6b:67:21:a3:60:6b:03: 7e:0f:03:52:22:b0:69:f9:f0:6b:d8:2b:84:0d:3c: b2:07:a2:1b:38:82:42:15:99:0a:18:8d:c1:d1:c5: 8e:6a:ab:38:90:2b:27:aa:71:3d:79:65:f7:95:b2: f4:ec:d6:36:53:20:dd:0d:3f:72:a3:97:4a:2e:b1: d1:d4:61:c9:0b:d6:97:37:f4:ee:15:d2:42:be:0a: d3:e8:68:15:54:f7:f8:af:1b:26:2f:af:b6:3b:d5: 59:e8:3c:03:41:5e:e6:60:44:95:af:24:73:8b:c7: bb:68:08:6f:31:ba:e9:ce:14:d5:b6:45:02:01:b8: 60:58:e6:82:05:f3:7a:e9:77:12:8c:25:23:b0:7b: e0:59:5d:92:6a:79:2b:a7:df:62:51:0f:a8:a2:cf: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D1:77:C4:67:F5:9F:31:B6:A7:B0:E5:B9:10:31:92:DB:48:6A:81 X509v3 Authority Key Identifier: keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:e4:76:ce:b9:7d:41:aa:9e:35:89:c2:f6:e2:30:b2:09:49: cf:3b:19:f7:b7:12:fa:53:35:8c:8b:0d:6a:61:8b:77:55:68: 73:18:fe:b7:8a:db:a8:7e:73:91:fd:93:82:1f:07:72:99:be: f9:e1:ba:94:c8:46:57:2d:c3:95:50:92:f7:7d:35:0e:02:d0: b0:8e:a1:20:89:a6:20:77:11:e9:d8:65:a4:dd:9e:bc:23:85: 1a:11:e3:e5:4b:eb:50:57:39:fe:ae:58:a4:a5:20:74:a4:df: a7:2b:4a:b0:17:3b:6b:81:12:0e:05:d2:c6:31:8e:0a:72:90: 9f:f2:57:9d:21:12:cf:62:c8:23:12:eb:7d:ac:36:ac:60:53: 1f:94:f7:b4:10:c3:77:f3:d1:3f:d9:14:18:48:21:6a:77:bb: 4d:97:03:48:c3:29:5c:f7:b3:ce:48:ce:66:a3:e3:3e:e2:0e: f2:fa:5c:e3:c7:29:b2:9c:bb:fb:44:0c:77:f2:17:dc:70:ae: e5:39:2c:b7:06:a7:38:a4:b5:14:4f:4b:70:db:7c:8f:34:27: a6:77:27:51:0a:6b:7b:13:15:dc:37:0a:9e:1b:ed:7f:22:72: d3:a0:57:33:c6:23:b6:ab:17:46:a1:55:74:d5:b2:1e:66:87: 02:0a:f7:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEDd5wo0BTPxoSiQcWJcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNjQwMzM5ZTU5YWRkYzc1ZmQ5NzgxMDFiNDAwODJiNWQy Yjg3OTYwHhcNMjYwMjEwMDEwMDE2WhcNMjYwMjExMDEwMDE2WjAzMTEwLwYDVQQD EygyN2QxNzdjNDY3ZjU5ZjMxYjZhN2IwZTViOTEwMzE5MmRiNDg2YTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E+tI3mB20PMW+P56r/KC750sz3q Avk6stmfTUjmUkImGGS656dUaDyKCz6mEAny8lIoiQ8hBt1JZ4N2aiN7R07Y2BKK zwTHv819yzZ4+dPFl+vyT8W3oPATIw9/2Rkkb2tnIaNgawN+DwNSIrBp+fBr2CuE DTyyB6IbOIJCFZkKGI3B0cWOaqs4kCsnqnE9eWX3lbL07NY2UyDdDT9yo5dKLrHR 1GHJC9aXN/TuFdJCvgrT6GgVVPf4rxsmL6+2O9VZ6DwDQV7mYESVryRzi8e7aAhv MbrpzhTVtkUCAbhgWOaCBfN66XcSjCUjsHvgWV2Sankrp99iUQ+oos84pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfRd8Rn9Z8xtqew5bkQMZLbSGqBMB8GA1UdIwQY MBaAFN1kAznlmt3HX9l4EBtACCtdK4eWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAt NjFiNzMzNTRhYmRiLzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAtNjFiNzMzNTRhYmRi LzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzOR2zrl9 QaqeNYnC9uIwsglJzzsZ97cS+lM1jIsNamGLd1Vocxj+t4rbqH5zkf2Tgh8Hcpm+ +eG6lMhGVy3DlVCS9301DgLQsI6hIImmIHcR6dhlpN2evCOFGhHj5UvrUFc5/q5Y pKUgdKTfpytKsBc7a4ESDgXSxjGOCnKQn/JXnSESz2LIIxLrfaw2rGBTH5T3tBDD d/PRP9kUGEghane7TZcDSMMpXPezzkjOZqPjPuIO8vpc48cpspy7+0QMd/IX3HCu 5TkstwanOKS1FE9LcNt8jzQnpncnUQprexMV3DcKnhvtfyJy06BXM8YjtqsXRqFV dNWyHmaHAgr3ow== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:41 2026 by rpki-client