This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json) Hash identifier: /uin2KXwvvKwkHdMcbQj3trJYJqFAdrMisxWK71iiKk= Subject key identifier: DC:13:A3:3F:B2:59:2B:6F:C1:13:FD:B7:EF:01:30:92:0B:87:7E:E9 Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14 Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14 Certificate serial: 019C446C69CD0A2B51DBD255B5D29F502AA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft Manifest number: 161E Signing time: Mon 09 Feb 2026 22:01:21 +0000 Manifest this update: Mon 09 Feb 2026 22:01:21 +0000 Manifest next update: Tue 10 Feb 2026 22:01:21 +0000 Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: xAJiD685EpTrdqdbT1BsrDqjhR+qPiLtNeMVhi7ZW74=) 2: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (hash: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:69:cd:0a:2b:51:db:d2:55:b5:d2:9f:50:2a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14 Validity Not Before: Feb 9 22:01:21 2026 GMT Not After : Feb 10 22:01:21 2026 GMT Subject: CN=dc13a33fb2592b6fc113fdb7ef0130920b877ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:37:1a:b5:4f:c1:cd:6c:1e:15:7b:36:db: ed:96:0b:1c:94:22:74:89:29:8c:c9:0f:3b:a6:3f: bd:5c:ce:a2:55:1b:82:48:00:59:2a:a8:4f:db:19: 3e:72:c7:17:52:4f:10:7e:ee:67:0b:ae:18:56:fc: ad:0e:d8:ac:83:5b:9a:ed:c5:e9:6a:b0:d7:d6:78: 55:d7:fd:f8:7d:e9:0b:4f:9d:3e:b6:10:f3:68:81: a1:74:b9:db:b2:83:ba:35:22:13:36:42:77:4a:d1: 0d:69:25:da:e2:d2:9d:0f:ec:a2:10:95:dd:24:bb: 39:e5:c7:94:af:b7:28:64:b1:1c:0f:6e:f1:58:ee: 14:c2:6a:87:e1:36:2c:54:90:28:3f:d1:2c:8c:14: e0:f3:3a:2e:49:cf:e8:70:45:1d:5d:79:59:c2:9b: b9:4b:47:e6:56:43:a5:25:06:30:f8:e1:e5:43:be: 4f:ff:1c:86:47:2f:66:84:9b:22:1d:16:88:4e:71: 0e:71:e3:4e:99:4a:82:ef:bc:da:e3:b3:af:9c:08: 5e:f8:a7:cc:8c:ec:5f:99:63:eb:74:90:06:2b:3d: f8:89:f5:03:ab:82:4d:5f:29:b3:ec:fa:32:4c:a4: a5:5d:cf:e7:38:b7:66:a8:9e:8f:96:4a:89:7a:1f: e3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:13:A3:3F:B2:59:2B:6F:C1:13:FD:B7:EF:01:30:92:0B:87:7E:E9 X509v3 Authority Key Identifier: keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fe:66:7e:23:d2:74:d8:ae:a4:5d:c9:c7:a7:f8:91:76:22: bb:da:63:a3:ce:55:75:b0:53:df:29:19:b5:0a:04:fb:55:33: 9b:bb:0c:d8:c8:e8:9c:57:d5:62:3c:95:c9:5a:ed:d3:42:d9: ea:ad:f4:72:42:c5:0f:2a:35:8b:c5:34:2b:65:f8:89:14:d7: ca:96:64:79:04:35:07:84:56:cd:cf:c6:f8:f8:a0:7a:a2:84: 6e:ff:5c:4a:9f:c4:2d:ed:9a:da:e5:50:9d:64:c8:18:cf:a2: b9:9d:e8:06:68:30:16:76:13:14:f7:15:35:dc:20:9c:25:f5: ca:5b:c2:dc:ae:b7:6c:9d:48:9b:44:9c:f1:b7:bd:55:dd:96: 9d:c1:2b:5e:e3:43:e6:d6:b4:e6:83:87:84:24:ee:ef:9f:f4: 03:1a:83:c4:4e:08:a6:11:c0:10:fb:b4:12:21:71:cc:2e:d3: 93:c9:6f:81:f8:0d:90:57:be:b4:29:3b:ee:ae:5d:be:d9:ee: 7a:1e:84:16:35:3e:d0:c9:11:76:b2:31:e5:ef:3d:c6:05:64: c5:14:78:10:28:2b:e6:dc:cc:88:f5:db:65:f9:3e:b9:99:a5: e0:f1:66:cc:d0:bc:58:b1:5c:78:1b:d3:17:70:15:50:c8:ed: 97:13:b9:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbGnNCitR29JVtdKfUCqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWYxOWFkZmE2OTQ1NTg5YmMyZDEwMDE1NGU1YTU4YzQ0 OThhMTQwHhcNMjYwMjA5MjIwMTIxWhcNMjYwMjEwMjIwMTIxWjAzMTEwLwYDVQQD EyhkYzEzYTMzZmIyNTkyYjZmYzExM2ZkYjdlZjAxMzA5MjBiODc3ZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqU3GrVPwc1sHhV7NtvtlgsclCJ0 iSmMyQ87pj+9XM6iVRuCSABZKqhP2xk+cscXUk8Qfu5nC64YVvytDtisg1ua7cXp arDX1nhV1/34fekLT50+thDzaIGhdLnbsoO6NSITNkJ3StENaSXa4tKdD+yiEJXd JLs55ceUr7coZLEcD27xWO4UwmqH4TYsVJAoP9EsjBTg8zouSc/ocEUdXXlZwpu5 S0fmVkOlJQYw+OHlQ75P/xyGRy9mhJsiHRaITnEOceNOmUqC77za47OvnAhe+KfM jOxfmWPrdJAGKz34ifUDq4JNXymz7PoyTKSlXc/nOLdmqJ6PlkqJeh/jOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwToz+yWStvwRP9t+8BMJILh37pMB8GA1UdIwQY MBaAFNzvGa36aUVYm8LRABVOWljESYoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQt MjFkZWFkMGM1ZTljLzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQtMjFkZWFkMGM1ZTlj LzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMP5mfiPS dNiupF3Jx6f4kXYiu9pjo85VdbBT3ykZtQoE+1Uzm7sM2MjonFfVYjyVyVrt00LZ 6q30ckLFDyo1i8U0K2X4iRTXypZkeQQ1B4RWzc/G+PigeqKEbv9cSp/ELe2a2uVQ nWTIGM+iuZ3oBmgwFnYTFPcVNdwgnCX1ylvC3K63bJ1Im0Sc8be9Vd2WncErXuND 5ta05oOHhCTu75/0AxqDxE4IphHAEPu0EiFxzC7Tk8lvgfgNkFe+tCk77q5dvtnu eh6EFjU+0MkRdrIx5e89xgVkxRR4ECgr5tzMiPXbZfk+uZml4PFmzNC8WLFceBvT F3AVUMjtlxO5rg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:14 2026 by rpki-client