This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json) Hash identifier: FyGPUmIn/Sc7svyah8g4+khQnBE2m+mVhe/y0+RI/lU= Subject key identifier: 85:27:D1:2B:26:10:9A:BA:B0:2F:C5:12:3D:B5:A8:89:96:2C:04:78 Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66 Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566 Certificate serial: 019C427DF56F16C85996AF569F089C9FA313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft Manifest number: 1126 Signing time: Mon 09 Feb 2026 13:01:16 +0000 Manifest this update: Mon 09 Feb 2026 13:01:16 +0000 Manifest next update: Tue 10 Feb 2026 13:01:16 +0000 Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: UUUSd6Nv5MlLcojvbx6u/tY7+v7NjM8YzjleJpsGUSc=) 2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f5:6f:16:c8:59:96:af:56:9f:08:9c:9f:a3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566 Validity Not Before: Feb 9 13:01:16 2026 GMT Not After : Feb 10 13:01:16 2026 GMT Subject: CN=8527d12b26109abab02fc5123db5a889962c0478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:14:43:96:0a:32:4d:17:8e:74:7e:50:bb: 58:57:06:80:d4:7a:ca:96:e9:97:ef:55:ee:15:fa: c0:dd:2f:8e:0a:f9:08:9d:ee:04:3b:e9:87:b8:8a: 7a:c0:78:75:ec:f5:72:2f:2a:94:f1:f2:2d:45:61: 55:77:fb:4f:f9:67:62:d1:0c:94:4f:f2:5e:f1:28: b8:96:57:50:2a:b7:04:3c:3e:4e:48:c5:eb:7b:dc: 39:a7:7c:48:a1:4b:d9:39:fc:f4:94:38:80:2d:8a: cc:2f:02:73:7f:35:e6:8e:9e:53:bf:27:c0:8b:b4: 40:15:9c:e7:ed:a7:0d:35:d3:d6:85:db:3e:2b:fc: 6b:21:a9:d5:61:d8:72:3e:a7:24:91:1d:bb:a0:38: 0f:19:00:6f:c8:34:fd:2a:09:1e:f0:96:7a:c3:41: b8:a6:47:77:c8:82:b2:a3:d0:04:7e:d5:b1:76:eb: 8b:6e:a9:9c:f0:2a:c9:e9:5e:21:69:45:8f:9e:8c: 76:21:d1:ae:94:52:5f:49:9b:03:a2:24:35:09:9d: df:3b:18:ca:08:2e:17:1f:45:2a:a3:29:48:29:3a: b2:ba:4c:61:2d:99:ab:81:f4:c0:56:7b:55:61:63: 8a:1a:68:5b:88:b9:91:2f:16:36:b9:bc:f4:69:0e: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:27:D1:2B:26:10:9A:BA:B0:2F:C5:12:3D:B5:A8:89:96:2C:04:78 X509v3 Authority Key Identifier: keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:4b:b4:20:66:9c:ca:1d:77:d9:65:ed:40:14:4a:9b:e6:e0: c9:15:9f:d7:84:8a:05:2c:63:1d:ac:71:f3:ab:7b:b8:73:7c: 2a:bc:9c:2a:9c:d3:5b:25:81:e8:f2:d8:a5:7a:11:fd:31:e2: e8:44:ae:3e:23:9a:fb:08:5b:0b:f8:60:fa:30:f2:c9:29:c5: 3d:c0:77:b1:bf:7c:38:61:0d:b4:58:c3:13:3c:35:ed:1e:10: d2:48:4f:bb:58:ff:6c:be:7c:df:fb:a3:0f:70:fd:35:2e:fd: d8:be:6d:5a:bf:1f:d3:27:02:59:12:7d:b0:60:70:67:ef:92: 89:b6:7e:ef:1c:6b:25:18:24:94:75:eb:f8:8f:20:8e:7b:69: 34:95:6f:59:4c:26:23:9f:c7:c2:64:fe:0b:66:18:8c:f2:34: 51:45:96:df:5c:87:a6:f0:4a:1d:6c:7a:24:86:ea:bb:37:c5: 09:56:44:33:0a:a5:cd:77:95:28:5b:e8:1c:97:f0:1e:64:ec: 89:b3:6d:8e:41:95:12:84:1f:31:b3:40:46:f4:6b:f2:00:1a: a0:00:83:4c:4f:de:67:f4:7f:9a:91:05:ce:7f:86:70:5a:4a: 26:8f:a8:c9:06:2f:ff:76:33:c8:bb:8d:86:84:de:46:fd:6a: e1:8d:89:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffVvFshZlq9Wnwicn6MTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNDhkNTA4MjE1MzQwZWFjMGYxNGYwYjc0NzQ5ZDFjOGVj OWY1NjYwHhcNMjYwMjA5MTMwMTE2WhcNMjYwMjEwMTMwMTE2WjAzMTEwLwYDVQQD Eyg4NTI3ZDEyYjI2MTA5YWJhYjAyZmM1MTIzZGI1YTg4OTk2MmMwNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumoUQ5YKMk0XjnR+ULtYVwaA1HrK lumX71XuFfrA3S+OCvkIne4EO+mHuIp6wHh17PVyLyqU8fItRWFVd/tP+Wdi0QyU T/Je8Si4lldQKrcEPD5OSMXre9w5p3xIoUvZOfz0lDiALYrMLwJzfzXmjp5TvyfA i7RAFZzn7acNNdPWhds+K/xrIanVYdhyPqckkR27oDgPGQBvyDT9Kgke8JZ6w0G4 pkd3yIKyo9AEftWxduuLbqmc8CrJ6V4haUWPnox2IdGulFJfSZsDoiQ1CZ3fOxjK CC4XH0UqoylIKTqyukxhLZmrgfTAVntVYWOKGmhbiLmRLxY2ubz0aQ7rMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUn0SsmEJq6sC/FEj21qImWLAR4MB8GA1UdIwQY MBaAFN1I1QghU0DqwPFPC3R0nRyOyfVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjkt NDVlNDc0MDAyM2RiLzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjktNDVlNDc0MDAyM2Ri LzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUu0IGac yh132WXtQBRKm+bgyRWf14SKBSxjHaxx86t7uHN8KrycKpzTWyWB6PLYpXoR/THi 6ESuPiOa+whbC/hg+jDyySnFPcB3sb98OGENtFjDEzw17R4Q0khPu1j/bL583/uj D3D9NS792L5tWr8f0ycCWRJ9sGBwZ++SibZ+7xxrJRgklHXr+I8gjntpNJVvWUwm I5/HwmT+C2YYjPI0UUWW31yHpvBKHWx6JIbquzfFCVZEMwqlzXeVKFvoHJfwHmTs ibNtjkGVEoQfMbNARvRr8gAaoACDTE/eZ/R/mpEFzn+GcFpKJo+oyQYv/3YzyLuN hoTeRv1q4Y2Jjw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:02 2026 by rpki-client