This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft File: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json) Hash identifier: g+b/DvUhsnc7bV52AFradyYPLVJEpB9vg7bQnA/EDEc= Subject key identifier: 0B:57:C3:4F:56:39:47:3C:0E:00:8E:D1:55:8C:D6:F5:87:C1:46:1D Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Certificate serial: 019C43C750DA02D2D7380CE41B680F59E476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft Manifest number: 13D6 Signing time: Mon 09 Feb 2026 19:01:01 +0000 Manifest this update: Mon 09 Feb 2026 19:01:01 +0000 Manifest next update: Tue 10 Feb 2026 19:01:01 +0000 Files and hashes: 1: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: ZRx1yz3F6sM0ssrkjc9IVQz3EeZy3WQp/F3iiKmFNy0=) 2: r_FLcT2tc4F6vUmQkNvpWkE0C4g.roa (hash: /09Y96qJxubCRG9li9cUUz3NScNzI4efXUDMFZocGUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:50:da:02:d2:d7:38:0c:e4:1b:68:0f:59:e4:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Validity Not Before: Feb 9 19:01:01 2026 GMT Not After : Feb 10 19:01:01 2026 GMT Subject: CN=0b57c34f5639473c0e008ed1558cd6f587c1461d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:ba:51:1b:7d:4a:89:89:40:8c:b5:e9:62: 66:54:59:44:aa:37:08:b8:15:6d:a0:62:0e:18:a2: 4a:47:37:45:0d:63:60:5b:63:36:6e:a3:af:d0:9c: 3b:80:b1:92:b5:df:0f:b9:f6:a2:70:7d:9c:89:14: b4:e7:6b:a4:db:6a:dd:60:58:31:17:aa:8b:f3:fd: 9e:db:46:72:5e:74:c6:1c:98:96:c3:8f:f2:09:6a: 63:62:46:3c:99:af:9a:76:8e:2c:26:23:ab:39:70: 86:09:48:0b:81:55:69:6e:51:9a:f3:91:53:83:aa: 4f:51:33:da:52:1f:ef:53:79:89:d4:f7:ea:fc:7b: d8:6d:af:e8:aa:d5:e2:25:6c:5f:be:c2:41:3c:4a: bc:97:ee:aa:0d:99:a9:a6:53:67:92:65:26:87:37: 54:8a:4f:27:3b:d7:1e:67:73:ed:51:0e:6b:0e:63: ce:3b:ff:c6:0f:e4:64:38:e7:f3:67:47:ed:8a:ff: 3c:c7:50:52:de:83:35:a5:9c:44:e3:96:19:f0:ba: 80:b6:92:fb:d4:a1:7e:c0:d7:57:a1:70:68:90:e2: 8b:06:bf:12:02:e7:1c:50:a7:55:2a:6f:5b:25:e1: 69:78:6f:f9:5e:bb:03:84:93:91:d3:9f:d7:69:6c: 80:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:57:C3:4F:56:39:47:3C:0E:00:8E:D1:55:8C:D6:F5:87:C1:46:1D X509v3 Authority Key Identifier: keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:7b:8e:72:df:7c:6f:a0:5f:e5:f0:e7:20:ed:00:cf:a8:f2: 77:6b:88:6b:92:69:40:36:e5:c0:72:fc:cd:62:f0:47:27:77: 7a:a3:e3:9b:86:1e:7c:17:28:33:b3:12:55:2b:0b:6f:85:99: 9a:9e:bb:16:56:15:eb:43:4b:52:65:f9:dc:d3:17:42:3f:5a: cd:77:7e:ec:91:b8:a9:d4:7d:b7:38:43:ba:2a:3e:fb:9d:ef: dc:9f:91:38:26:e1:ee:a3:24:0b:55:b7:36:1d:e1:96:1a:d0: f9:c9:1f:23:dd:ad:4f:cc:57:69:95:22:d1:82:4d:52:a6:68: d4:67:51:89:20:2c:6b:76:38:73:2d:09:7f:4e:5a:f0:7a:95: b4:20:d6:40:0e:33:e4:38:dd:70:9d:60:6e:c7:f8:aa:07:4f: 54:1a:75:67:ad:14:91:9c:b3:ca:6b:ba:51:12:70:fe:ad:d2: 57:16:89:86:3f:cb:b8:13:d8:94:e0:5e:93:37:7d:74:ec:49: 70:c2:c7:6b:81:97:67:a3:23:db:a9:77:c0:b0:9e:16:aa:3f: 2a:d5:5a:3a:4b:8a:06:bf:86:1b:4a:5e:ff:0c:c3:06:54:d3: cf:f3:0b:b0:6f:69:95:e4:84:93:60:14:c2:1e:49:98:ec:78: 1e:8d:39:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx1DaAtLXOAzkG2gPWeR2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2RkOGQzMmNmYzcxN2E2ZTY5MGViZTNlMWRiNDM4NmQ4 ZjZjNjQwHhcNMjYwMjA5MTkwMTAxWhcNMjYwMjEwMTkwMTAxWjAzMTEwLwYDVQQD EygwYjU3YzM0ZjU2Mzk0NzNjMGUwMDhlZDE1NThjZDZmNTg3YzE0NjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuum6URt9SomJQIy16WJmVFlEqjcI uBVtoGIOGKJKRzdFDWNgW2M2bqOv0Jw7gLGStd8PufaicH2ciRS052uk22rdYFgx F6qL8/2e20ZyXnTGHJiWw4/yCWpjYkY8ma+ado4sJiOrOXCGCUgLgVVpblGa85FT g6pPUTPaUh/vU3mJ1Pfq/HvYba/oqtXiJWxfvsJBPEq8l+6qDZmpplNnkmUmhzdU ik8nO9ceZ3PtUQ5rDmPOO//GD+RkOOfzZ0ftiv88x1BS3oM1pZxE45YZ8LqAtpL7 1KF+wNdXoXBokOKLBr8SAuccUKdVKm9bJeFpeG/5XrsDhJOR05/XaWyAFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtXw09WOUc8DgCO0VWM1vWHwUYdMB8GA1UdIwQY MBaAFK092NMs/HF6bmkOvj4dtDhtj2xkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQt M2JjZDIzOTllZTY0LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQtM2JjZDIzOTllZTY0 LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3uOct98 b6Bf5fDnIO0Az6jyd2uIa5JpQDblwHL8zWLwRyd3eqPjm4YefBcoM7MSVSsLb4WZ mp67FlYV60NLUmX53NMXQj9azXd+7JG4qdR9tzhDuio++53v3J+ROCbh7qMkC1W3 Nh3hlhrQ+ckfI92tT8xXaZUi0YJNUqZo1GdRiSAsa3Y4cy0Jf05a8HqVtCDWQA4z 5DjdcJ1gbsf4qgdPVBp1Z60UkZyzymu6URJw/q3SVxaJhj/LuBPYlOBekzd9dOxJ cMLHa4GXZ6Mj26l3wLCeFqo/KtVaOkuKBr+GG0pe/wzDBlTTz/MLsG9pleSEk2AU wh5JmOx4Ho05Qg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:44 2026 by rpki-client