This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json) Hash identifier: OJ9mUA4CT/xcQ805/UP8F+DiPFgnfMDnB+/XfSbut/k= Subject key identifier: 87:F7:0A:E6:18:B6:A3:38:53:17:11:B6:3B:32:B4:6A:FF:42:53:94 Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29 Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29 Certificate serial: 019C43FDBA1ED969505ACB5042E68AAE8C79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 20:00:27 +0000 Manifest this update: Mon 09 Feb 2026 20:00:27 +0000 Manifest next update: Tue 10 Feb 2026 20:00:27 +0000 Files and hashes: 1: 1TDkQYg3xQsNih1cBCwskUXwxLA.roa (hash: paiy4NkfuCpLerrMoZiJ1VXsmPdd6kHz6S2ynGEROuU=) 2: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: xM+P4Gckwd7u3Qg3IthRVDn3MGMUB0cr+GTPywBOpAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:ba:1e:d9:69:50:5a:cb:50:42:e6:8a:ae:8c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29 Validity Not Before: Feb 9 20:00:27 2026 GMT Not After : Feb 10 20:00:27 2026 GMT Subject: CN=87f70ae618b6a338531711b63b32b46aff425394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:b2:1d:8b:39:84:e4:d0:a6:ba:6f:ba:a2: 8d:8a:c5:e1:a4:65:1e:d6:61:3a:c1:6b:21:c7:48: 12:47:06:73:72:ad:ef:25:6b:d3:77:ef:18:0e:b9: e9:c3:b8:44:a9:99:b4:cb:61:9e:6d:4e:b6:63:3a: cd:a7:da:f6:e6:9c:58:85:c5:a0:ac:55:90:92:4b: fe:c7:86:60:a6:0f:92:ef:39:db:3e:06:43:b8:0f: c2:3b:a0:77:db:05:52:81:69:90:7d:05:17:a4:eb: bc:77:c5:ee:de:ef:8f:5a:ce:ea:d8:7c:f7:58:68: b3:5c:fb:b8:6f:0b:01:a7:63:f4:a0:6c:93:94:1a: c0:15:09:10:f0:d1:75:ab:89:d1:a8:43:e3:c2:8c: 1a:0f:65:df:9f:fd:1a:98:e0:ab:99:7c:71:b2:ff: 0f:5d:6e:af:7c:ad:26:56:fd:bb:06:58:1a:6f:46: 92:f7:4e:43:a3:24:1a:1f:2c:49:9f:fa:14:61:9d: 4b:87:74:59:da:bd:5b:68:99:07:c8:a8:68:a9:19: 46:df:a6:62:81:6b:8f:27:96:74:31:91:03:c6:9b: e8:32:4a:bd:98:9b:be:84:0a:9d:8c:c1:f6:34:81: 26:82:68:ac:c8:46:e1:fe:93:ef:b0:be:72:35:cf: c5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F7:0A:E6:18:B6:A3:38:53:17:11:B6:3B:32:B4:6A:FF:42:53:94 X509v3 Authority Key Identifier: keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a1:8b:57:e1:eb:08:e1:fc:20:75:71:fb:0a:28:73:11:16: 84:01:a6:3f:c8:ff:fd:b1:4b:5f:dc:22:33:53:18:7a:b0:a0: 5b:09:53:93:0c:c4:3e:e0:94:14:14:30:3d:d4:63:70:b2:37: 52:35:9b:c1:80:4b:31:eb:95:c1:60:ff:81:b9:c3:61:d0:38: 38:a5:77:f8:47:5d:29:1c:2f:f7:ef:b1:21:4f:12:84:df:df: f4:0c:ec:ad:5a:64:46:ab:7c:2c:cd:1f:34:f3:28:72:6a:9b: 86:b3:fe:2a:0a:7b:66:e1:1c:c4:16:47:bf:45:6b:88:05:a3: 1f:f4:76:9e:47:5d:8c:e3:ee:c1:8a:f7:32:97:a6:a4:d9:f6: a4:62:4c:24:23:47:8a:14:55:44:1f:93:61:9b:00:f8:25:75: 42:e3:f9:41:0a:4b:b7:a9:bf:c3:96:b3:c8:b3:ec:e9:0e:e7: d3:63:1d:1a:f5:6b:82:32:da:82:c7:83:dc:fe:32:ac:bb:3d: 15:85:16:9d:9b:f9:b1:07:20:e6:73:d1:95:20:11:54:66:9f: 55:e6:19:21:f4:ff:76:06:1f:b4:82:51:82:33:86:bf:d8:fa: 06:d1:d0:21:6d:5a:c2:98:a1:20:7e:5f:8e:d1:60:2b:95:d2: 2f:a6:33:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/boe2WlQWstQQuaKrox5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMjczZTFlMjE4NDFjZTJjMzM1ZmUxYzk2MWNlNzY4MDE3 ZWVlMjkwHhcNMjYwMjA5MjAwMDI3WhcNMjYwMjEwMjAwMDI3WjAzMTEwLwYDVQQD Eyg4N2Y3MGFlNjE4YjZhMzM4NTMxNzExYjYzYjMyYjQ2YWZmNDI1Mzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU2yHYs5hOTQprpvuqKNisXhpGUe 1mE6wWshx0gSRwZzcq3vJWvTd+8YDrnpw7hEqZm0y2GebU62YzrNp9r25pxYhcWg rFWQkkv+x4Zgpg+S7znbPgZDuA/CO6B32wVSgWmQfQUXpOu8d8Xu3u+PWs7q2Hz3 WGizXPu4bwsBp2P0oGyTlBrAFQkQ8NF1q4nRqEPjwowaD2Xfn/0amOCrmXxxsv8P XW6vfK0mVv27Blgab0aS905DoyQaHyxJn/oUYZ1Lh3RZ2r1baJkHyKhoqRlG36Zi gWuPJ5Z0MZEDxpvoMkq9mJu+hAqdjMH2NIEmgmisyEbh/pPvsL5yNc/FUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIf3CuYYtqM4UxcRtjsytGr/QlOUMB8GA1UdIwQY MBaAFNwnPh4hhBziwzX+HJYc52gBfu4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iNGE3MWEtZWIzNy00NjlhLThiYjUt Mjc4NDFmNTA3NzM1LzEvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iNGE3MWEtZWIzNy00NjlhLThiYjUtMjc4NDFmNTA3NzM1 LzEvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaGLV+Hr COH8IHVx+woocxEWhAGmP8j//bFLX9wiM1MYerCgWwlTkwzEPuCUFBQwPdRjcLI3 UjWbwYBLMeuVwWD/gbnDYdA4OKV3+EddKRwv9++xIU8ShN/f9AzsrVpkRqt8LM0f NPMocmqbhrP+Kgp7ZuEcxBZHv0VriAWjH/R2nkddjOPuwYr3MpempNn2pGJMJCNH ihRVRB+TYZsA+CV1QuP5QQpLt6m/w5azyLPs6Q7n02MdGvVrgjLagseD3P4yrLs9 FYUWnZv5sQcg5nPRlSARVGafVeYZIfT/dgYftIJRgjOGv9j6BtHQIW1awpihIH5f jtFgK5XSL6Yz7A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:22 2026 by rpki-client