This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft File: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json) Hash identifier: NGz5CTLrlR3FWqx09DqNc3vIGhDcCAd7+2C5sDfnmU8= Subject key identifier: D3:62:31:1E:78:46:6D:80:1C:9D:09:D3:D1:B6:DE:AD:89:BA:0C:05 Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5 Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5 Certificate serial: 019C41A205720E06DBAE527FCE268A76C9DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft Manifest number: 1731 Signing time: Mon 09 Feb 2026 09:01:03 +0000 Manifest this update: Mon 09 Feb 2026 09:01:03 +0000 Manifest next update: Tue 10 Feb 2026 09:01:03 +0000 Files and hashes: 1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: /SgQMJzTwz1vc45Qnr+B2lwGF/fOqTIU24zYaCCqm84=) 2: dypMPP_xvoxJHktjo8O416uma_g.roa (hash: f+g0dUATJyTuyFHPoe+0S/etj6BvEAVqOF7MMl9w8nY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:05:72:0e:06:db:ae:52:7f:ce:26:8a:76:c9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5 Validity Not Before: Feb 9 09:01:03 2026 GMT Not After : Feb 10 09:01:03 2026 GMT Subject: CN=d362311e78466d801c9d09d3d1b6dead89ba0c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:90:a6:35:93:b6:26:1c:65:29:b2:f9:d6:1b: d4:bd:cd:47:dc:97:e9:24:c1:db:98:6d:f7:a8:1d: 47:2f:26:35:51:f4:31:34:c2:7a:c7:d0:93:9a:27: f5:07:9e:01:50:8c:f6:d3:15:b5:97:9f:dc:14:ee: 60:93:2d:ec:4c:69:de:50:fe:4c:97:b4:8f:f3:0a: b2:99:1c:47:76:0d:57:52:c4:7b:e5:08:d0:6f:ea: ff:b6:1b:cf:38:3e:c0:2f:af:52:4c:2b:31:8f:b3: 8b:59:25:ef:a6:91:7e:c1:05:ac:47:cb:fc:27:e1: f6:8f:71:d6:07:a5:c4:b0:0d:34:84:f1:ec:d0:38: 4f:c5:1f:a1:60:25:5b:a5:5d:4a:61:07:51:64:84: 1a:6f:44:02:aa:e7:10:08:28:19:66:ed:d8:0e:ee: 51:c8:89:7a:e1:24:8f:25:09:34:a6:fa:b9:d4:ed: 3a:16:4e:b3:56:fd:0c:31:91:75:fa:bf:55:5b:2a: de:a3:59:27:ea:7b:75:65:b3:d4:87:db:60:c0:8d: c4:8c:9a:90:f6:5f:ac:c6:29:49:c3:0b:67:c5:2c: 28:fd:a6:96:a9:8c:c4:01:72:3f:01:c4:1e:e2:c7: 33:ff:ea:43:61:d2:9a:18:a6:80:39:3e:f3:14:0d: 08:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:62:31:1E:78:46:6D:80:1C:9D:09:D3:D1:B6:DE:AD:89:BA:0C:05 X509v3 Authority Key Identifier: keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:92:db:90:99:6f:18:06:47:5b:cd:0f:6c:b8:7f:10:e2:49: eb:b4:19:d5:32:9e:89:7e:b9:b1:6b:3c:1c:81:d0:13:b5:2e: d9:93:48:fa:66:db:94:61:58:93:93:66:f6:6a:ef:33:8d:fb: ee:48:e1:3a:2c:34:66:d7:dc:8e:93:b8:10:92:5c:f6:cf:5c: 08:cf:52:52:22:4b:f9:71:4a:62:3e:07:dc:51:19:d8:94:5a: 9d:29:64:52:30:1b:19:80:89:53:84:27:1d:41:81:5a:42:bd: 35:a4:2a:34:75:0a:54:50:c2:d2:97:05:ca:6b:6e:53:5e:7d: 3c:11:30:6d:9c:b8:f3:91:b7:a9:f4:4b:e9:97:93:e4:c8:f8: cf:7a:ca:0b:64:bf:eb:b0:66:18:87:5a:6c:89:56:0e:ed:bd: f4:4c:03:b5:53:42:54:2b:fa:e1:7c:c3:11:2b:02:eb:b4:76: f3:22:fd:59:a8:34:90:0c:3b:36:98:af:1a:77:34:1f:de:3f: b8:d3:07:55:3b:18:34:71:67:b0:b7:22:8b:a0:43:d9:09:d9: c9:14:2b:af:61:b4:d1:85:13:4e:2f:35:88:57:0e:8d:6b:ad: e3:6a:93:6c:cc:ce:d8:76:f3:c2:50:66:48:cf:ea:18:c3:46: d7:c6:be:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBogVyDgbbrlJ/ziaKdsnfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjM2YyNjM5ZmZjNzg4NzFhZDY0YmZlZDcxYjc5NTRiYzkw ZGVhYjUwHhcNMjYwMjA5MDkwMTAzWhcNMjYwMjEwMDkwMTAzWjAzMTEwLwYDVQQD EyhkMzYyMzExZTc4NDY2ZDgwMWM5ZDA5ZDNkMWI2ZGVhZDg5YmEwYzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZCmNZO2JhxlKbL51hvUvc1H3Jfp JMHbmG33qB1HLyY1UfQxNMJ6x9CTmif1B54BUIz20xW1l5/cFO5gky3sTGneUP5M l7SP8wqymRxHdg1XUsR75QjQb+r/thvPOD7AL69STCsxj7OLWSXvppF+wQWsR8v8 J+H2j3HWB6XEsA00hPHs0DhPxR+hYCVbpV1KYQdRZIQab0QCqucQCCgZZu3YDu5R yIl64SSPJQk0pvq51O06Fk6zVv0MMZF1+r9VWyreo1kn6nt1ZbPUh9tgwI3EjJqQ 9l+sxilJwwtnxSwo/aaWqYzEAXI/AcQe4scz/+pDYdKaGKaAOT7zFA0I5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNiMR54Rm2AHJ0J09G23q2JugwFMB8GA1UdIwQY MBaAFNw/Jjn/x4hxrWS/7XG3lUvJDeq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDct OWNmZjNmZTA1MTgwLzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDctOWNmZjNmZTA1MTgw LzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5LbkJlv GAZHW80PbLh/EOJJ67QZ1TKeiX65sWs8HIHQE7Uu2ZNI+mbblGFYk5Nm9mrvM437 7kjhOiw0ZtfcjpO4EJJc9s9cCM9SUiJL+XFKYj4H3FEZ2JRanSlkUjAbGYCJU4Qn HUGBWkK9NaQqNHUKVFDC0pcFymtuU159PBEwbZy485G3qfRL6ZeT5Mj4z3rKC2S/ 67BmGIdabIlWDu299EwDtVNCVCv64XzDESsC67R28yL9Wag0kAw7NpivGnc0H94/ uNMHVTsYNHFnsLcii6BD2QnZyRQrr2G00YUTTi81iFcOjWut42qTbMzO2HbzwlBm SM/qGMNG18a+tg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:52 2026 by rpki-client