This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json) Hash identifier: uTmRchzvcD2ETJ4CGQ5H+K/2hgf7XUbyZ+PHPoi1YD0= Subject key identifier: C1:7B:ED:3E:50:BF:1E:3F:0E:95:11:6F:07:F5:40:C6:FB:50:15:23 Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4 Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4 Certificate serial: 019C4390CCF2BEBFABC9864FCB6B587F1B22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft Manifest number: 1692 Signing time: Mon 09 Feb 2026 18:01:28 +0000 Manifest this update: Mon 09 Feb 2026 18:01:28 +0000 Manifest next update: Tue 10 Feb 2026 18:01:28 +0000 Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: 07eIneArJLHrk4vKRkTZfc2bfPjFVHD1GMVHDfQPQcg=) 2: aZCXcydPk-76cgt6cZKKvGpKk5A.roa (hash: gewDOlWApHrr+Yml3oxtgkzNGGb0SqqLcvSrquabjoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:cc:f2:be:bf:ab:c9:86:4f:cb:6b:58:7f:1b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4 Validity Not Before: Feb 9 18:01:28 2026 GMT Not After : Feb 10 18:01:28 2026 GMT Subject: CN=c17bed3e50bf1e3f0e95116f07f540c6fb501523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:55:2c:33:c4:87:2b:2e:08:9f:7b:c7:c1:90: 28:63:d9:9c:4d:0a:25:f4:27:6c:0e:fb:71:b0:cd: 24:d6:dc:71:e1:2e:34:8d:b1:cf:ac:87:72:6a:2b: 8f:40:a6:f2:96:b0:2a:8f:5e:60:cf:05:a4:6e:4d: b2:ca:c3:cf:3e:2b:5b:92:49:54:37:18:11:6b:9b: 4f:11:8b:03:38:0c:43:e6:fb:37:de:8e:a5:e6:bd: bc:35:b3:2f:cf:75:1f:ca:86:35:cd:53:82:a6:94: 1c:a7:3c:ba:59:d7:29:da:4d:87:a7:16:8d:b5:ed: c5:d0:fb:d8:39:64:7f:cf:04:bd:c0:46:6e:5c:dd: 86:0a:04:4d:26:9a:c2:91:86:7e:4d:2a:f8:60:73: 38:8c:e1:01:d0:ab:0a:4e:41:e8:14:cb:13:96:cb: 87:1f:72:23:49:90:14:55:83:12:6a:b8:f9:62:e3: c5:7e:7f:34:d1:dc:46:22:a2:2b:1f:b3:f2:e3:b5: d9:1b:8c:e5:84:d4:d4:1a:cf:6c:cd:c2:bf:7c:68: 9e:b1:58:81:cb:68:44:10:6c:d8:6f:18:cd:1d:af: de:cf:34:ca:f4:58:a8:5f:10:8d:82:fa:b8:36:e6: f3:9b:f6:05:e2:f1:c6:44:88:ff:7d:cd:72:dd:85: 7f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7B:ED:3E:50:BF:1E:3F:0E:95:11:6F:07:F5:40:C6:FB:50:15:23 X509v3 Authority Key Identifier: keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ed:ef:df:2d:85:d8:0a:ed:04:85:50:48:7d:9c:bf:25:c1: 34:ca:86:4d:57:5d:4d:35:3a:fd:b0:06:bd:e9:0e:8e:23:cc: 57:51:d9:63:d1:60:5c:bf:46:44:29:a2:f1:80:2d:f8:53:51: 59:d1:50:ce:84:e2:bd:86:96:82:02:da:07:f0:4c:db:a6:9b: 7d:3c:bb:e4:db:e2:d8:9d:9a:bc:d0:ba:9d:c9:ec:4f:15:c6: 80:5f:ff:58:9c:b1:5d:07:d0:3e:4e:cd:5b:6a:d6:8f:9b:76: e8:39:30:30:93:6d:98:2d:1b:8c:88:24:e8:54:66:41:7a:22: 68:39:99:27:d1:c3:d5:04:89:7d:2f:f7:8e:d7:18:8c:53:66: 0d:5f:67:64:44:07:a7:cd:28:44:6e:df:9d:6c:0a:9e:85:48: a0:08:d2:b3:13:88:0f:02:ab:c7:5d:dd:ff:6f:7c:60:49:8c: 15:3e:2b:10:5f:bc:02:d5:98:ea:77:27:94:71:ca:0d:21:b4: 7f:68:7f:c7:31:77:0d:88:b5:d2:89:ed:72:1c:a6:26:f3:c9: aa:9d:db:0a:00:0e:4b:57:a2:0d:dc:17:07:e4:27:c5:8c:d1: 26:88:f2:bd:7c:e8:59:b3:48:be:d8:57:11:b3:73:4d:b5:d9: 0c:cc:94:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMzyvr+ryYZPy2tYfxsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMjljMzcwNDYwYmVjNzUzMDEwZmM3ZTY4MzY1YzU3NzBi ZjQ1ZTQwHhcNMjYwMjA5MTgwMTI4WhcNMjYwMjEwMTgwMTI4WjAzMTEwLwYDVQQD EyhjMTdiZWQzZTUwYmYxZTNmMGU5NTExNmYwN2Y1NDBjNmZiNTAxNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlUsM8SHKy4In3vHwZAoY9mcTQol 9CdsDvtxsM0k1txx4S40jbHPrIdyaiuPQKbylrAqj15gzwWkbk2yysPPPitbkklU NxgRa5tPEYsDOAxD5vs33o6l5r28NbMvz3UfyoY1zVOCppQcpzy6Wdcp2k2HpxaN te3F0PvYOWR/zwS9wEZuXN2GCgRNJprCkYZ+TSr4YHM4jOEB0KsKTkHoFMsTlsuH H3IjSZAUVYMSarj5YuPFfn800dxGIqIrH7Py47XZG4zlhNTUGs9szcK/fGiesViB y2hEEGzYbxjNHa/ezzTK9FioXxCNgvq4Nubzm/YF4vHGRIj/fc1y3YV/gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMF77T5Qvx4/DpURbwf1QMb7UBUjMB8GA1UdIwQY MBaAFN0pw3BGC+x1MBD8fmg2XFdwv0XkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYt MTM0YzQ3Yjk0OTEzLzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYtMTM0YzQ3Yjk0OTEz LzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+3v3y2F 2ArtBIVQSH2cvyXBNMqGTVddTTU6/bAGvekOjiPMV1HZY9FgXL9GRCmi8YAt+FNR WdFQzoTivYaWggLaB/BM26abfTy75Nvi2J2avNC6ncnsTxXGgF//WJyxXQfQPk7N W2rWj5t26DkwMJNtmC0bjIgk6FRmQXoiaDmZJ9HD1QSJfS/3jtcYjFNmDV9nZEQH p80oRG7fnWwKnoVIoAjSsxOIDwKrx13d/298YEmMFT4rEF+8AtWY6ncnlHHKDSG0 f2h/xzF3DYi10ontchymJvPJqp3bCgAOS1eiDdwXB+QnxYzRJojyvXzoWbNIvthX EbNzTbXZDMyU8A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:01 2026 by rpki-client