This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json) Hash identifier: 1IA5ZYy4X4yCgb8AIiBqGB8FQp2oykNuFZX+ZUpMS3Y= Subject key identifier: 66:08:96:56:E3:4F:5B:97:53:51:24:FD:75:32:DE:5A:98:1A:69:19 Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76 Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176 Certificate serial: 019C348ACF96346603BDB0CD7B03E8DC0B6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft Manifest number: 1810 Signing time: Fri 06 Feb 2026 20:00:38 +0000 Manifest this update: Fri 06 Feb 2026 20:00:38 +0000 Manifest next update: Sat 07 Feb 2026 20:00:38 +0000 Files and hashes: 1: jSg-FBkeg1R-PLxCirXbhqCALA8.roa (hash: lF16qfXyhlcBonE6Swph7S7GMbK5m+Lvc5sCLsaOquY=) 2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: M9yXp8DaxxnXC4CDvmqG5cMPjI08ZnRoIprigc7TDa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 15:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:34:8a:cf:96:34:66:03:bd:b0:cd:7b:03:e8:dc:0b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176 Validity Not Before: Feb 6 20:00:38 2026 GMT Not After : Feb 7 20:00:38 2026 GMT Subject: CN=66089656e34f5b97535124fd7532de5a981a6919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:84:9e:3f:44:74:27:03:4a:e5:22:20:0e: a2:7f:fd:0f:ba:d7:64:df:1c:fc:51:54:6d:85:f2: f9:95:22:a9:8f:ec:eb:2e:09:73:ef:ed:ed:d9:76: 89:a8:66:ac:f6:bd:d3:89:bc:a9:e4:75:38:c4:8e: 3c:9b:ae:1e:43:fc:ec:dd:13:19:73:cb:06:79:ba: 75:04:63:3d:ae:6e:cf:4b:cb:2e:db:d1:22:3d:e1: 0a:ed:00:86:c1:b5:7e:06:dd:47:e1:8e:7f:49:43: 88:7d:ce:3e:99:66:20:2d:ca:76:20:4d:7a:8e:fa: 2e:e6:c8:11:c8:3c:24:7a:46:ed:0e:de:f8:b0:10: f3:b4:2e:b4:d5:36:2c:f1:3b:83:70:de:0a:11:e4: 0a:09:9e:73:61:95:95:71:4b:d8:0f:79:46:2a:1a: 8d:41:67:5b:5b:ac:d5:b3:99:da:ee:a1:c8:fd:a7: ff:91:61:fb:b9:c5:ee:7a:f3:28:50:76:23:08:e9: c1:b2:72:25:b0:e4:a6:ae:72:88:82:6a:b9:e6:f6: f7:92:dc:74:5c:4e:50:cb:8c:bf:83:44:79:59:dd: ea:a8:7c:13:76:d8:ae:c6:f5:51:9a:57:a3:30:be: aa:a9:f1:d8:8b:ea:94:9e:4f:25:9b:c6:01:96:ae: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:08:96:56:E3:4F:5B:97:53:51:24:FD:75:32:DE:5A:98:1A:69:19 X509v3 Authority Key Identifier: keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bc:ba:5b:7e:b3:a4:98:2f:aa:47:f3:d8:eb:5d:f3:c2:5b: 14:b1:22:57:a1:53:4e:04:02:b9:b2:99:b1:fc:d2:e5:6e:79: 69:36:28:68:5e:a8:b4:0b:29:7b:9b:34:67:d5:fa:11:fa:2f: 55:22:95:52:6c:a3:9c:f4:c1:0c:ef:a2:a6:86:53:7b:59:47: 84:c2:02:97:ac:84:ba:91:c4:7c:99:06:bb:bd:76:d9:f1:a7: 5b:ab:f5:a7:9a:b9:78:d1:65:ee:01:8a:de:0d:61:2e:32:0d: 7d:39:72:b4:d6:79:69:c3:f7:15:8d:d1:23:e7:b7:d6:0b:95: ab:1e:a1:a6:13:51:4c:1d:46:00:8e:07:f2:0f:50:5b:cd:7b: ce:52:70:ee:3f:9d:a0:39:17:f7:9a:3b:ae:e5:18:21:23:be: 0e:2b:b7:57:58:4e:7d:78:54:f9:ab:a7:3e:08:cf:ac:1b:63: 7d:dd:bc:d4:e7:a9:c3:ec:bd:a5:68:5e:2a:e2:da:3b:5d:d4: 70:5c:bc:7c:5f:29:4c:cc:54:b3:e2:83:42:ce:65:55:51:c0: f3:6c:27:f2:28:58:16:f3:86:1b:4a:d3:e1:c6:bd:65:0d:ee: fd:52:59:ee:51:5b:8c:97:e6:23:b0:8d:d5:20:38:48:ba:e8: 05:4a:aa:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZw0is+WNGYDvbDNewPo3AtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YmRjMzc2YTE1OWQwNWUyYWY5NzE3NmEzZWJhODM2MGU2 MGQxNzYwHhcNMjYwMjA2MjAwMDM4WhcNMjYwMjA3MjAwMDM4WjAzMTEwLwYDVQQD Eyg2NjA4OTY1NmUzNGY1Yjk3NTM1MTI0ZmQ3NTMyZGU1YTk4MWE2OTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7qEnj9EdCcDSuUiIA6if/0Putdk 3xz8UVRthfL5lSKpj+zrLglz7+3t2XaJqGas9r3Tibyp5HU4xI48m64eQ/zs3RMZ c8sGebp1BGM9rm7PS8su29EiPeEK7QCGwbV+Bt1H4Y5/SUOIfc4+mWYgLcp2IE16 jvou5sgRyDwkekbtDt74sBDztC601TYs8TuDcN4KEeQKCZ5zYZWVcUvYD3lGKhqN QWdbW6zVs5na7qHI/af/kWH7ucXuevMoUHYjCOnBsnIlsOSmrnKIgmq55vb3ktx0 XE5Qy4y/g0R5Wd3qqHwTdtiuxvVRmlejML6qqfHYi+qUnk8lm8YBlq66ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYIllbjT1uXU1Ek/XUy3lqYGmkZMB8GA1UdIwQY MBaAFLS9w3ahWdBeKvlxdqPrqDYOYNF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUt MjhkMDEwNjAzNTI5LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUtMjhkMDEwNjAzNTI5 LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7y6W36z pJgvqkfz2Otd88JbFLEiV6FTTgQCubKZsfzS5W55aTYoaF6otAspe5s0Z9X6Efov VSKVUmyjnPTBDO+ipoZTe1lHhMICl6yEupHEfJkGu7122fGnW6v1p5q5eNFl7gGK 3g1hLjINfTlytNZ5acP3FY3RI+e31guVqx6hphNRTB1GAI4H8g9QW817zlJw7j+d oDkX95o7ruUYISO+Diu3V1hOfXhU+aunPgjPrBtjfd281Oepw+y9pWheKuLaO13U cFy8fF8pTMxUs+KDQs5lVVHA82wn8ihYFvOGG0rT4ca9ZQ3u/VJZ7lFbjJfmI7CN 1SA4SLroBUqqFQ== -----END CERTIFICATE-----Generated at Fri Feb 6 23:59:33 2026 by rpki-client