This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json) Hash identifier: KZ1wPJDLe5N5er+uQBiVRXmjm2V22vvq4IvE+BnyNmk= Subject key identifier: 7E:C1:50:B7:BD:33:DB:AE:FB:32:4F:BD:6A:19:A6:08:6C:94:58:B9 Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75 Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75 Certificate serial: 019C41A25D2F67F510281D8E6983C3C4810F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft Manifest number: 17B0 Signing time: Mon 09 Feb 2026 09:01:25 +0000 Manifest this update: Mon 09 Feb 2026 09:01:25 +0000 Manifest next update: Tue 10 Feb 2026 09:01:25 +0000 Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: jl/WDvSSvV8qIBqdXb91+mPAwMKoqzyn99g9r6b14fg=) 2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:5d:2f:67:f5:10:28:1d:8e:69:83:c3:c4:81:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75 Validity Not Before: Feb 9 09:01:25 2026 GMT Not After : Feb 10 09:01:25 2026 GMT Subject: CN=7ec150b7bd33dbaefb324fbd6a19a6086c9458b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:32:f6:79:35:50:84:77:43:6c:92:ca:46: 40:24:c8:a6:6a:0b:67:a4:52:e3:20:a3:c6:21:a5: 85:ed:70:df:b6:c7:6b:9e:43:e4:26:0d:20:5f:af: 0b:67:e3:fd:ae:8f:22:c0:59:44:fc:f1:eb:5e:13: c9:be:50:01:d7:04:54:fb:43:ee:4c:06:5d:e1:09: 61:77:cc:97:58:e5:fa:e6:2f:af:f0:d8:80:9c:24: 9c:17:4b:58:16:5a:bd:a5:1d:70:b3:1f:aa:be:2f: f2:61:73:1b:ae:fa:8b:9c:85:f1:b5:0a:6d:3b:d1: 19:4a:b8:7a:b6:82:ca:6a:29:69:4f:7b:1c:6d:13: df:ef:6f:d4:f4:c7:9f:fe:4c:cb:0a:24:99:35:c3: 64:93:0d:8a:d5:c0:bd:44:5a:1a:13:8d:da:0b:02: 58:ab:af:f8:65:d3:92:d0:12:42:64:97:b8:08:cd: 71:6a:b0:c5:31:41:55:a9:fb:19:5e:71:35:6e:79: 50:70:af:03:e3:7f:94:44:cc:d4:d6:64:04:4f:0b: d9:57:f1:dc:6b:28:cd:d5:7e:54:47:39:92:00:ee: b0:d1:91:6a:60:0a:fc:ea:c9:76:d9:ff:53:cd:95: 52:15:4a:e9:72:97:66:47:ca:34:89:d1:37:73:f2: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C1:50:B7:BD:33:DB:AE:FB:32:4F:BD:6A:19:A6:08:6C:94:58:B9 X509v3 Authority Key Identifier: keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:92:29:f5:28:8e:ac:70:32:7c:6d:ec:4e:ae:29:bb:83:04: bf:c4:dc:33:c4:95:fc:97:e3:18:6b:c3:06:f1:22:dc:ba:54: d8:72:fc:86:e1:dc:95:62:0d:b1:c3:76:1b:bd:61:e1:08:33: 2a:ed:a2:06:c5:05:66:b3:f3:30:9c:4b:46:4d:9b:2a:d5:fa: 91:bb:60:c4:d6:61:23:9e:d2:47:78:0f:90:10:74:91:ac:1e: 34:41:57:9f:6f:1a:9d:f0:9e:ba:63:01:46:13:de:83:0a:c1: ea:0e:a1:99:a5:06:18:56:0f:b6:58:66:cb:7f:41:f1:76:5e: 90:e1:28:2f:c8:d1:28:ad:26:b5:9e:ac:44:70:d6:20:c7:2f: 5a:2b:eb:43:9f:33:0e:bd:99:43:83:59:e5:1d:4e:4e:ba:44: 1c:3d:07:58:64:43:09:2a:77:f6:26:da:b8:f8:28:a8:f5:84: bf:b5:28:c6:df:a3:3a:91:9d:d4:7f:c9:f0:7b:41:a9:41:18: a3:c2:76:61:1b:56:22:43:48:83:85:d1:7a:40:51:08:88:8b: 39:4b:e1:d6:92:4e:66:ce:4a:2d:36:2d:eb:53:20:9b:77:32: 6a:37:5c:33:c8:e8:15:a2:93:3f:77:ce:94:9e:11:7f:8c:5a: 0f:c4:39:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBol0vZ/UQKB2OaYPDxIEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2I3NmQzYzBjNjBkNjYzNTA2YTI1MjY3MWM1MjhlMzQz OWZmNzUwHhcNMjYwMjA5MDkwMTI1WhcNMjYwMjEwMDkwMTI1WjAzMTEwLwYDVQQD Eyg3ZWMxNTBiN2JkMzNkYmFlZmIzMjRmYmQ2YTE5YTYwODZjOTQ1OGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX0y9nk1UIR3Q2ySykZAJMimagtn pFLjIKPGIaWF7XDftsdrnkPkJg0gX68LZ+P9ro8iwFlE/PHrXhPJvlAB1wRU+0Pu TAZd4Qlhd8yXWOX65i+v8NiAnCScF0tYFlq9pR1wsx+qvi/yYXMbrvqLnIXxtQpt O9EZSrh6toLKailpT3scbRPf72/U9Mef/kzLCiSZNcNkkw2K1cC9RFoaE43aCwJY q6/4ZdOS0BJCZJe4CM1xarDFMUFVqfsZXnE1bnlQcK8D43+URMzU1mQETwvZV/Hc ayjN1X5URzmSAO6w0ZFqYAr86sl22f9TzZVSFUrpcpdmR8o0idE3c/IMdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7BULe9M9uu+zJPvWoZpghslFi5MB8GA1UdIwQY MBaAFN87dtPAxg1mNQaiUmccUo40Of91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYt ZDllMTEzN2YwMmI1LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYtZDllMTEzN2YwMmI1 LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpIp9SiO rHAyfG3sTq4pu4MEv8TcM8SV/JfjGGvDBvEi3LpU2HL8huHclWINscN2G71h4Qgz Ku2iBsUFZrPzMJxLRk2bKtX6kbtgxNZhI57SR3gPkBB0kaweNEFXn28anfCeumMB RhPegwrB6g6hmaUGGFYPtlhmy39B8XZekOEoL8jRKK0mtZ6sRHDWIMcvWivrQ58z Dr2ZQ4NZ5R1OTrpEHD0HWGRDCSp39ibauPgoqPWEv7Uoxt+jOpGd1H/J8HtBqUEY o8J2YRtWIkNIg4XRekBRCIiLOUvh1pJOZs5KLTYt61Mgm3cyajdcM8joFaKTP3fO lJ4Rf4xaD8Q5XA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:24 2026 by rpki-client