This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json) Hash identifier: 2BO/0H1FdTmf/8NmzN7T/YEp1FGyHCDeYPC5vsPR6sk= Subject key identifier: 4E:F6:D0:92:93:FE:38:11:45:EF:D1:5C:49:9B:81:75:45:10:C3:EF Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Certificate serial: 019C42463CC3F20B68864F43164FFEF53D6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft Manifest number: 0538 Signing time: Mon 09 Feb 2026 12:00:25 +0000 Manifest this update: Mon 09 Feb 2026 12:00:25 +0000 Manifest next update: Tue 10 Feb 2026 12:00:25 +0000 Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: ptlBydmkBmsQ9HNNiryMXrV4tIczTiAhM1hr797UZ3k=) 2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:3c:c3:f2:0b:68:86:4f:43:16:4f:fe:f5:3d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Validity Not Before: Feb 9 12:00:25 2026 GMT Not After : Feb 10 12:00:25 2026 GMT Subject: CN=4ef6d09293fe381145efd15c499b81754510c3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:df:86:ac:2c:c6:25:f2:2d:98:78:51:59:49: 50:48:a8:53:68:51:9c:89:b8:6b:4a:14:6a:52:a6: e7:d5:49:b3:42:a3:e1:ff:23:56:af:63:f1:9f:ab: 9f:1b:c0:c8:c4:90:eb:56:a1:d4:ef:6e:91:71:53: 43:cd:73:5c:bd:e7:7a:ac:59:c6:a4:90:d0:36:90: 31:a8:06:a5:a2:92:aa:6b:fc:e9:7e:d6:e1:4c:05: b6:34:d1:0c:b0:56:76:fd:5a:0a:20:66:4f:f2:d4: a6:47:a4:2c:ec:7d:33:12:b8:7b:14:ee:94:ea:42: db:cb:d7:99:75:19:1c:c3:5c:6c:77:4f:c4:38:bc: 5d:d9:ff:68:50:46:2e:21:3a:07:57:38:69:6f:f1: 55:e2:83:0a:7b:52:6e:11:64:76:4f:29:b0:7c:ef: 01:c6:47:11:54:f4:5d:85:26:0e:2d:6a:d4:3b:72: 95:7f:5b:d7:c2:9b:41:da:09:fb:5f:cb:b6:b2:8f: e6:e5:95:a6:a9:5e:39:0a:81:6b:29:a2:45:40:3a: f5:5b:1b:56:c0:88:44:4b:91:4d:0a:95:c9:e8:2a: 9f:ba:62:71:53:4e:48:6f:55:74:22:97:41:9e:88: 06:9a:26:fa:8b:8c:72:f1:3b:40:8e:c6:07:02:d0: dc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F6:D0:92:93:FE:38:11:45:EF:D1:5C:49:9B:81:75:45:10:C3:EF X509v3 Authority Key Identifier: keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c9:82:11:4b:c7:65:3a:91:6f:72:8c:6c:82:ee:4c:08:b4: 17:06:d8:f7:7c:6c:0a:9c:50:33:2e:96:24:d5:82:a3:3c:50: 59:83:f9:ef:2a:02:55:a8:15:23:f4:72:32:ac:27:df:23:46: df:07:2c:72:3d:84:ba:8f:8d:e2:7c:9d:fe:01:27:a8:1d:3b: f1:c7:70:72:d1:7f:3c:ae:7b:50:fe:41:b9:0e:b9:3e:30:af: 7a:f8:88:1b:13:8d:72:5d:63:69:1d:3a:a4:61:9b:24:9d:35: cb:99:da:76:3e:33:8d:0f:d7:44:70:a5:00:14:df:a0:d7:62: de:86:02:28:43:08:ea:e7:ad:de:7c:7e:b3:d8:ef:92:86:1e: ff:01:12:4f:6e:dd:41:37:ee:a0:a2:70:12:c9:f4:7d:c8:42: 4a:b5:b6:1f:67:01:50:23:a9:97:ae:c1:ea:71:5e:99:3e:2a: 74:55:62:fa:5a:87:80:7e:68:89:0a:67:b2:93:84:85:d2:78: 75:f8:0f:50:6e:05:7e:b2:bd:86:d9:5e:07:b6:44:1a:df:ec: e6:59:be:dd:de:73:6d:e4:8a:ae:ca:cd:e1:79:24:ae:7b:fb: 53:10:4a:a9:02:76:4f:e5:cc:82:f1:be:17:b7:41:38:a5:5a: 69:71:2d:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRjzD8gtohk9DFk/+9T1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTE1OGUzZTQxZjYwZmZiZjdlY2FmZjcyMzA3ZDNkYzk1 Mjc3ZjUwHhcNMjYwMjA5MTIwMDI1WhcNMjYwMjEwMTIwMDI1WjAzMTEwLwYDVQQD Eyg0ZWY2ZDA5MjkzZmUzODExNDVlZmQxNWM0OTliODE3NTQ1MTBjM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt+GrCzGJfItmHhRWUlQSKhTaFGc ibhrShRqUqbn1UmzQqPh/yNWr2Pxn6ufG8DIxJDrVqHU726RcVNDzXNcved6rFnG pJDQNpAxqAalopKqa/zpftbhTAW2NNEMsFZ2/VoKIGZP8tSmR6Qs7H0zErh7FO6U 6kLby9eZdRkcw1xsd0/EOLxd2f9oUEYuIToHVzhpb/FV4oMKe1JuEWR2TymwfO8B xkcRVPRdhSYOLWrUO3KVf1vXwptB2gn7X8u2so/m5ZWmqV45CoFrKaJFQDr1WxtW wIhES5FNCpXJ6CqfumJxU05Ib1V0IpdBnogGmib6i4xy8TtAjsYHAtDcDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE720JKT/jgRRe/RXEmbgXVFEMPvMB8GA1UdIwQY MBaAFN2RWOPkH2D/v37K/3IwfT3JUnf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUt NDNkN2ViNzI1NTFkLzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUtNDNkN2ViNzI1NTFk LzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsmCEUvH ZTqRb3KMbILuTAi0FwbY93xsCpxQMy6WJNWCozxQWYP57yoCVagVI/RyMqwn3yNG 3wcscj2Euo+N4nyd/gEnqB078cdwctF/PK57UP5BuQ65PjCveviIGxONcl1jaR06 pGGbJJ01y5nadj4zjQ/XRHClABTfoNdi3oYCKEMI6uet3nx+s9jvkoYe/wEST27d QTfuoKJwEsn0fchCSrW2H2cBUCOpl67B6nFemT4qdFVi+lqHgH5oiQpnspOEhdJ4 dfgPUG4FfrK9htleB7ZEGt/s5lm+3d5zbeSKrsrN4Xkkrnv7UxBKqQJ2T+XMgvG+ F7dBOKVaaXEtdg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:47 2026 by rpki-client