This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json) Hash identifier: nBm938X9Pge5qE0PLctmpxqa1Nw/+/f28lw3VfUM3Es= Subject key identifier: 2E:8B:FE:D3:DE:6C:08:6E:F9:28:F0:24:16:33:02:D2:83:25:1C:4C Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1 Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1 Certificate serial: 019C41A1A7DB79E6545FB2ACDF5E48D8B3FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft Manifest number: 13C3 Signing time: Mon 09 Feb 2026 09:00:39 +0000 Manifest this update: Mon 09 Feb 2026 09:00:39 +0000 Manifest next update: Tue 10 Feb 2026 09:00:39 +0000 Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: RBNdN/6SAMVaIKg4cxBu/xeI93XVRnIpYzL1i2g2gC8=) 2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:a7:db:79:e6:54:5f:b2:ac:df:5e:48:d8:b3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1 Validity Not Before: Feb 9 09:00:39 2026 GMT Not After : Feb 10 09:00:39 2026 GMT Subject: CN=2e8bfed3de6c086ef928f024163302d283251c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:b1:14:e4:dd:2b:24:98:4e:55:27:9c:1b: 62:1e:9a:13:a6:aa:dc:54:7e:d3:5c:7c:d2:c0:86: 06:cd:fe:54:66:b0:ae:42:1f:9c:79:d1:86:7a:1e: 7d:61:71:95:38:32:fc:04:af:26:53:5d:82:b0:d0: 27:06:32:bd:6b:15:48:50:78:cd:3a:19:c4:70:39: 15:fd:55:8e:d5:8b:8b:cd:1d:1e:5a:78:f7:de:c4: 48:d8:aa:b2:41:e0:55:07:56:96:36:1c:1e:47:78: ea:ff:77:c4:7d:03:38:79:ce:e5:b4:9d:80:c4:c8: 23:ad:0f:f5:4e:a9:ec:f0:9f:9c:46:40:15:0f:49: 80:ef:6d:73:58:d6:56:fa:97:57:62:4c:5b:9c:ad: 22:fb:fe:ae:28:88:0b:c0:dd:a4:02:dc:f5:fa:da: 16:74:cc:07:f8:50:f7:70:16:7d:c7:98:df:52:9a: b2:6a:a5:81:5c:bc:92:e9:b6:1a:9a:2a:d5:dd:5a: 0b:d4:7e:aa:cb:59:3b:74:18:46:68:14:6d:08:f8: b4:65:87:5f:49:92:8d:cf:8b:7c:35:87:d0:8b:03: 72:9c:ac:07:48:e2:49:9e:8d:a1:b3:6d:fd:23:6b: 9a:89:dd:0d:a4:f3:c6:20:c0:d4:83:80:14:66:84: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8B:FE:D3:DE:6C:08:6E:F9:28:F0:24:16:33:02:D2:83:25:1C:4C X509v3 Authority Key Identifier: keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:70:40:85:41:ac:11:e6:ff:55:4c:14:e7:e2:2f:e9:7d:0d: fa:1f:ab:65:88:c7:f4:a1:91:84:e8:9d:67:fe:70:36:25:dd: 8b:1a:7f:2b:52:a6:bf:82:0e:82:85:04:0a:26:0c:2f:d7:bd: 9f:36:d3:d7:66:8e:57:62:ab:a0:0a:20:62:33:1c:f0:e4:59: 87:49:a9:e3:44:50:f4:f3:e4:54:be:bb:d7:21:af:26:e8:88: e0:91:37:a7:6d:6b:e6:77:e5:a0:8f:8d:68:9e:eb:f8:40:91: cf:eb:b2:bf:61:81:05:2a:fa:7e:ee:c3:3e:80:99:5b:78:66: 89:db:68:78:3f:41:96:8a:2d:34:a1:20:f9:a9:c2:7a:91:03: 99:eb:a6:f5:21:01:36:24:ce:80:8a:ff:72:fa:c1:c2:3b:06: 6e:e5:bd:1a:76:ae:ad:cc:8d:31:00:86:de:7d:97:60:1c:34: b9:cb:d8:0e:b1:fe:29:30:8d:2b:a7:98:10:4f:bb:13:cf:7f: 16:03:c1:42:60:dd:be:12:d9:24:ce:dc:f1:b3:9e:f8:4f:43: e4:8f:63:65:bf:22:f0:fa:64:4f:67:fd:39:e6:e3:03:bd:92: f3:bf:4f:a3:08:3f:7a:0c:b2:e5:78:08:49:f1:13:50:b4:4a: f2:1f:48:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoafbeeZUX7Ks315I2LP8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjN2Q4ZWQ5ODQ0M2RlNmM2ODhkMTc0ZjFmMDA1NWJlNGRl MTgyYTEwHhcNMjYwMjA5MDkwMDM5WhcNMjYwMjEwMDkwMDM5WjAzMTEwLwYDVQQD EygyZThiZmVkM2RlNmMwODZlZjkyOGYwMjQxNjMzMDJkMjgzMjUxYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHWxFOTdKySYTlUnnBtiHpoTpqrc VH7TXHzSwIYGzf5UZrCuQh+cedGGeh59YXGVODL8BK8mU12CsNAnBjK9axVIUHjN OhnEcDkV/VWO1YuLzR0eWnj33sRI2KqyQeBVB1aWNhweR3jq/3fEfQM4ec7ltJ2A xMgjrQ/1Tqns8J+cRkAVD0mA721zWNZW+pdXYkxbnK0i+/6uKIgLwN2kAtz1+toW dMwH+FD3cBZ9x5jfUpqyaqWBXLyS6bYamirV3VoL1H6qy1k7dBhGaBRtCPi0ZYdf SZKNz4t8NYfQiwNynKwHSOJJno2hs239I2uaid0NpPPGIMDUg4AUZoTFRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6L/tPebAhu+SjwJBYzAtKDJRxMMB8GA1UdIwQY MBaAFNx9jtmEQ95saI0XTx8AVb5N4YKhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYt YjgwMjA1MjgzMmNmLzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYtYjgwMjA1MjgzMmNm LzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonBAhUGs Eeb/VUwU5+Iv6X0N+h+rZYjH9KGRhOidZ/5wNiXdixp/K1Kmv4IOgoUECiYML9e9 nzbT12aOV2KroAogYjMc8ORZh0mp40RQ9PPkVL671yGvJuiI4JE3p21r5nfloI+N aJ7r+ECRz+uyv2GBBSr6fu7DPoCZW3hmidtoeD9BlootNKEg+anCepEDmeum9SEB NiTOgIr/cvrBwjsGbuW9GnaurcyNMQCG3n2XYBw0ucvYDrH+KTCNK6eYEE+7E89/ FgPBQmDdvhLZJM7c8bOe+E9D5I9jZb8i8PpkT2f9OebjA72S879Powg/egyy5XgI SfETULRK8h9IoA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:10 2026 by rpki-client