This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json) Hash identifier: zoe9XncB8qGcrOaVkG4vLPhKzdoVu7MvB0sj6SkDCOY= Subject key identifier: 58:86:24:D5:2C:DC:91:91:4F:EE:66:D3:F6:C7:30:9F:1B:DE:DE:A1 Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21 Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021 Certificate serial: 019C420F51EF606E9E3D0773A6A31778985E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft Manifest number: 1452 Signing time: Mon 09 Feb 2026 11:00:26 +0000 Manifest this update: Mon 09 Feb 2026 11:00:26 +0000 Manifest next update: Tue 10 Feb 2026 11:00:26 +0000 Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: blHqKWvDSTxWbFfjibOybPYONEcK0sSEMikY7vvBmwU=) 2: 7cYGhHG7YtiE08uGuW1-X_rHKII.roa (hash: hmnCIat4n3k5p2akfmzZ49cT/kokW1B90E1WUFaEO78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:51:ef:60:6e:9e:3d:07:73:a6:a3:17:78:98:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021 Validity Not Before: Feb 9 11:00:26 2026 GMT Not After : Feb 10 11:00:26 2026 GMT Subject: CN=588624d52cdc91914fee66d3f6c7309f1bdedea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:ec:dc:40:c7:fd:39:a2:b4:13:18:6c:6e: c7:1e:0f:5e:24:10:cb:ff:6d:05:10:5f:4c:54:09: 44:46:1d:cd:1e:fa:97:e4:b0:92:41:a2:f5:0a:27: 91:59:3a:63:53:77:19:50:e6:17:d1:d8:b1:af:bb: d3:de:d0:81:4c:f6:06:b1:94:f2:2d:11:2b:f5:2c: de:07:ab:d6:48:e5:94:90:2b:cb:48:4d:b8:04:89: f6:cd:61:63:ff:d8:3d:9c:f6:eb:f4:b7:38:28:2f: f2:cd:01:87:11:9a:aa:3d:4d:3e:36:38:6a:6d:5b: 44:d7:05:6b:05:bf:9e:68:26:62:74:a2:0f:65:92: f9:a1:41:5f:95:fd:ce:0f:64:25:8e:b0:7d:b8:5c: 38:46:05:8a:27:82:01:35:af:2d:37:10:3a:c4:49: ed:5d:41:d3:d1:52:de:d1:15:19:11:df:c4:f6:f3: 78:a4:2c:8e:3c:4f:1f:fc:d2:58:08:b2:48:0a:2e: 5e:5d:5d:91:a5:1b:12:0e:51:31:7b:ce:43:41:ea: 29:39:3c:65:df:0e:02:10:77:d5:c7:5a:f5:e4:9e: 56:84:1e:27:f5:49:42:7d:a6:74:f2:92:7f:88:15: de:35:49:c8:dc:55:7c:f8:28:6e:ee:b7:e9:76:69: 4c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:86:24:D5:2C:DC:91:91:4F:EE:66:D3:F6:C7:30:9F:1B:DE:DE:A1 X509v3 Authority Key Identifier: keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:4f:40:19:22:54:68:46:e3:68:c4:a0:e5:27:53:36:d3:99: ea:6e:c7:11:7d:f0:89:8c:d7:63:8a:03:6c:5f:f7:de:2e:17: 9e:27:e6:d1:c7:df:21:bb:59:ec:f7:23:bf:b9:36:59:da:b0: b3:a7:d9:9b:1d:f6:75:3f:e9:d1:24:8f:22:10:64:4f:8d:4e: a3:6e:0c:aa:24:32:bd:2f:9c:2e:9e:13:05:75:9c:fd:2f:d6: b3:f7:bb:d5:34:8b:5c:32:80:04:24:64:2c:5b:40:f2:6f:61: b7:c0:8c:c2:01:8a:ba:46:87:16:bd:8c:ef:2e:fe:8e:27:74: 7d:a3:03:6a:af:eb:77:81:70:10:91:c0:f8:e1:5b:c4:09:4e: a0:8c:34:18:57:4c:4d:de:9e:81:62:e8:ff:b7:6f:08:57:1b: 91:f2:a3:ab:ca:22:59:19:ea:bf:5a:c8:68:bf:dc:a6:b5:18: 78:ab:9f:07:8d:83:ee:f2:cd:ee:80:e2:48:6e:38:e0:3d:c9: bc:01:d5:9d:dd:bb:6a:8b:3e:58:37:a5:e8:07:46:a9:f2:97: 60:9b:4f:48:fd:54:ac:b1:86:30:d8:66:67:db:5f:b5:5a:94: d4:42:2e:30:64:04:f6:bf:3c:f7:a7:15:b8:40:00:49:21:98: e7:9e:43:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1HvYG6ePQdzpqMXeJheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWI1NDg3NjJjN2Q0Y2FjY2I2MTZkODE5Y2U5NWNmNjI3 YjIwMjEwHhcNMjYwMjA5MTEwMDI2WhcNMjYwMjEwMTEwMDI2WjAzMTEwLwYDVQQD Eyg1ODg2MjRkNTJjZGM5MTkxNGZlZTY2ZDNmNmM3MzA5ZjFiZGVkZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAbs3EDH/TmitBMYbG7HHg9eJBDL /20FEF9MVAlERh3NHvqX5LCSQaL1CieRWTpjU3cZUOYX0dixr7vT3tCBTPYGsZTy LREr9SzeB6vWSOWUkCvLSE24BIn2zWFj/9g9nPbr9Lc4KC/yzQGHEZqqPU0+Njhq bVtE1wVrBb+eaCZidKIPZZL5oUFflf3OD2QljrB9uFw4RgWKJ4IBNa8tNxA6xEnt XUHT0VLe0RUZEd/E9vN4pCyOPE8f/NJYCLJICi5eXV2RpRsSDlExe85DQeopOTxl 3w4CEHfVx1r15J5WhB4n9UlCfaZ08pJ/iBXeNUnI3FV8+Chu7rfpdmlM5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiGJNUs3JGRT+5m0/bHMJ8b3t6hMB8GA1UdIwQY MBaAFNzrVIdix9TKzLYW2BnOlc9ieyAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iZTIyMzYtYzJiYS00NzhhLWFiYzMt YjRjZWE1MTQ1NmI0LzEvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iZTIyMzYtYzJiYS00NzhhLWFiYzMtYjRjZWE1MTQ1NmI0 LzEvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIU9AGSJU aEbjaMSg5SdTNtOZ6m7HEX3wiYzXY4oDbF/33i4Xnifm0cffIbtZ7Pcjv7k2Wdqw s6fZmx32dT/p0SSPIhBkT41Oo24MqiQyvS+cLp4TBXWc/S/Ws/e71TSLXDKABCRk LFtA8m9ht8CMwgGKukaHFr2M7y7+jid0faMDaq/rd4FwEJHA+OFbxAlOoIw0GFdM Td6egWLo/7dvCFcbkfKjq8oiWRnqv1rIaL/cprUYeKufB42D7vLN7oDiSG444D3J vAHVnd27aos+WDel6AdGqfKXYJtPSP1UrLGGMNhmZ9tftVqU1EIuMGQE9r8896cV uEAASSGY555D2Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:27 2026 by rpki-client