This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft File: u3dSpxm3QKDgJE3SnGUy95FRZGs.mft (raw, json) Hash identifier: +SDUiHwUSnK4laKPo0ivIq4V6hSKyjUUE30Uqofs55o= Subject key identifier: B0:0F:BE:9C:35:D1:72:5F:A0:4A:76:26:07:C3:A3:88:60:14:AE:B7 Authority key identifier: BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B Certificate issuer: /CN=bb7752a719b740a0e0244dd29c6532f79151646b Certificate serial: 019C41D87CA8FFB1987C45E576D32D109508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft Manifest number: 02C6 Signing time: Mon 09 Feb 2026 10:00:32 +0000 Manifest this update: Mon 09 Feb 2026 10:00:32 +0000 Manifest next update: Tue 10 Feb 2026 10:00:32 +0000 Files and hashes: 1: L3gW4MNmdb0yfPJGEwYdlY8_fqM.roa (hash: ivdcntVpXSIka4vCYKhRHNsu6xqEGJkVPOsPAJlSsGA=) 2: u3dSpxm3QKDgJE3SnGUy95FRZGs.crl (hash: en8ZM7eQhND6tZ2dIZgPKnNzdol1gCORK7q1/XfWSlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:7c:a8:ff:b1:98:7c:45:e5:76:d3:2d:10:95:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb7752a719b740a0e0244dd29c6532f79151646b Validity Not Before: Feb 9 10:00:32 2026 GMT Not After : Feb 10 10:00:32 2026 GMT Subject: CN=b00fbe9c35d1725fa04a762607c3a3886014aeb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:45:0e:27:05:82:31:8b:b2:85:2b:82:60: 9b:c5:d3:6b:89:ac:61:42:35:0f:93:a2:ab:ed:e9: 26:6c:14:39:8d:2e:ef:30:ca:a5:30:54:a1:9b:eb: 72:f2:9b:6b:fe:d4:d7:1a:e4:92:4b:99:72:26:83: f7:9c:7e:50:92:37:34:7d:83:ee:e5:67:56:6a:6d: f7:d3:b3:6f:d3:ba:2b:9e:53:47:2b:8c:17:74:39: 30:d8:cc:ab:32:3b:73:b2:74:71:78:fa:29:74:ef: 9d:0f:43:86:13:1d:69:19:09:7c:36:48:c3:62:7d: 14:36:77:be:1b:3e:13:b5:d0:d2:50:96:9e:8f:4f: ed:84:4f:89:05:9e:80:26:af:5e:60:b5:6b:c6:96: 2e:4a:98:01:2b:43:23:73:aa:6e:06:cf:97:96:c6: 1b:3d:4c:58:a8:dd:3a:66:04:12:9a:a7:e3:12:94: 8f:7f:85:68:76:34:0b:27:06:8b:9e:a2:de:07:9d: b7:9a:a1:f7:a2:06:b5:6c:04:61:25:03:7e:91:2e: c4:da:a1:19:ac:19:12:52:4e:b4:16:70:31:bb:90: 6a:bf:88:f3:24:dd:a3:cc:cb:42:dc:18:c5:da:c5: 74:9b:a1:ae:f3:16:60:b8:24:05:06:ac:97:22:cc: 3e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0F:BE:9C:35:D1:72:5F:A0:4A:76:26:07:C3:A3:88:60:14:AE:B7 X509v3 Authority Key Identifier: keyid:BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:b1:7f:a4:4e:45:14:5a:cd:52:ad:82:c0:4c:17:fa:00:81: 3b:e2:e5:e7:74:f3:f7:f0:73:87:fa:a4:36:79:27:8e:38:85: f6:72:01:4f:96:1b:35:f0:cf:b2:ae:f1:16:c3:9f:74:1e:5b: 99:bd:d1:b7:bf:08:86:b9:e4:8e:93:67:6e:d7:47:44:8d:fb: 32:e9:ed:51:cf:7e:08:08:cd:37:7d:6e:33:01:af:9e:8b:37: 7b:e8:4f:1a:c6:d7:fa:01:10:c6:57:44:18:3f:5c:d4:f3:36: 31:63:84:b6:36:59:31:98:fb:00:33:2b:a0:62:ad:22:11:aa: 2d:3b:0e:1c:ae:00:51:99:64:4e:9f:ba:52:41:8b:ae:b9:24: 87:9f:ef:24:b1:b3:2a:b2:2d:6b:9e:24:d5:36:12:7a:ab:f3: 4e:64:66:8f:e1:77:b8:e1:26:d5:0c:d6:fa:cd:04:fa:7d:89: 75:b8:1a:84:aa:c5:0a:42:e4:d6:8b:3d:bf:61:50:d8:b1:be: 85:09:2f:fc:ba:e1:e6:24:dd:c7:8f:be:bf:17:92:31:f6:ce: 19:ab:f0:94:df:9a:80:58:f8:bd:66:a7:66:e8:5c:59:58:26: 0d:09:dd:84:07:69:56:22:d5:b4:3e:ee:57:57:25:bb:67:26: da:9b:a4:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Hyo/7GYfEXldtMtEJUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzc1MmE3MTliNzQwYTBlMDI0NGRkMjljNjUzMmY3OTE1 MTY0NmIwHhcNMjYwMjA5MTAwMDMyWhcNMjYwMjEwMTAwMDMyWjAzMTEwLwYDVQQD EyhiMDBmYmU5YzM1ZDE3MjVmYTA0YTc2MjYwN2MzYTM4ODYwMTRhZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO9FDicFgjGLsoUrgmCbxdNriaxh QjUPk6Kr7ekmbBQ5jS7vMMqlMFShm+ty8ptr/tTXGuSSS5lyJoP3nH5Qkjc0fYPu 5WdWam3307Nv07ornlNHK4wXdDkw2MyrMjtzsnRxePopdO+dD0OGEx1pGQl8NkjD Yn0UNne+Gz4TtdDSUJaej0/thE+JBZ6AJq9eYLVrxpYuSpgBK0Mjc6puBs+XlsYb PUxYqN06ZgQSmqfjEpSPf4VodjQLJwaLnqLeB523mqH3oga1bARhJQN+kS7E2qEZ rBkSUk60FnAxu5Bqv4jzJN2jzMtC3BjF2sV0m6Gu8xZguCQFBqyXIsw+RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAPvpw10XJfoEp2JgfDo4hgFK63MB8GA1UdIwQY MBaAFLt3UqcZt0Cg4CRN0pxlMveRUWRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYzMyYjUtYzBjOC00MzZhLTlhZDYt MzM1NGFkYmExMWIxLzEvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zYzMyYjUtYzBjOC00MzZhLTlhZDYtMzM1NGFkYmExMWIx LzEvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0bF/pE5F FFrNUq2CwEwX+gCBO+Ll53Tz9/Bzh/qkNnknjjiF9nIBT5YbNfDPsq7xFsOfdB5b mb3Rt78IhrnkjpNnbtdHRI37MuntUc9+CAjNN31uMwGvnos3e+hPGsbX+gEQxldE GD9c1PM2MWOEtjZZMZj7ADMroGKtIhGqLTsOHK4AUZlkTp+6UkGLrrkkh5/vJLGz KrIta54k1TYSeqvzTmRmj+F3uOEm1QzW+s0E+n2JdbgahKrFCkLk1os9v2FQ2LG+ hQkv/Lrh5iTdx4++vxeSMfbOGavwlN+agFj4vWanZuhcWVgmDQndhAdpViLVtD7u V1clu2cm2puktA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:26 2026 by rpki-client