This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft File: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json) Hash identifier: gLUqftobKMcoZVTmAaKDYr2GI2dFiVH31g0wVz16pIQ= Subject key identifier: A0:52:F4:1B:20:D8:E2:87:3B:3C:51:73:20:63:08:1B:FF:48:5B:36 Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d Certificate serial: 019C4547CE66D594F31A901FA5FEEB9821D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft Manifest number: 1812 Signing time: Tue 10 Feb 2026 02:00:59 +0000 Manifest this update: Tue 10 Feb 2026 02:00:59 +0000 Manifest next update: Wed 11 Feb 2026 02:00:59 +0000 Files and hashes: 1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: 3dxrSeoRlsd0pOyFpHGU2Oxv06up57Ir5SA2l9lfiVk=) 2: mgzdOFd8B2ya1Xohy6YCT8xW7b0.roa (hash: /7uRJWT90D6J/lwYKLHfljOz+L9OgupUQYidcbYQ5rU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:47:ce:66:d5:94:f3:1a:90:1f:a5:fe:eb:98:21:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d Validity Not Before: Feb 10 02:00:59 2026 GMT Not After : Feb 11 02:00:59 2026 GMT Subject: CN=a052f41b20d8e2873b3c51732063081bff485b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7a:f7:f3:cd:78:58:91:13:49:ad:e8:32:c7: 30:d0:f5:96:0e:79:a0:fb:e1:30:93:71:45:f1:21: 27:53:92:9d:53:ce:29:bf:d6:1e:3b:64:b8:4e:b0: f1:fd:51:80:b2:be:21:74:ad:48:2a:aa:2b:6a:5a: fb:a3:ed:6a:ae:19:73:02:5b:3d:a5:ca:ca:84:22: b6:b0:d3:6b:01:37:69:b9:18:2e:a1:26:cf:19:83: 99:30:8e:90:7e:08:d7:fb:54:ce:34:55:f6:a1:11: 15:1b:a6:bf:28:79:53:8c:a5:cb:c9:bb:d3:d1:91: 0b:98:67:43:b7:71:51:27:5a:fe:02:d0:5a:17:db: 01:e5:ac:c6:82:fb:ef:7d:bc:e0:73:1e:6c:13:af: e5:ea:d1:dd:ad:89:97:69:d2:cc:6e:1e:19:58:c0: 1f:09:68:45:1f:2d:f9:2d:4d:19:62:31:64:66:85: 9a:d1:f9:8c:58:f5:aa:e6:21:9f:96:f2:4b:cb:bf: a5:17:64:9f:eb:9d:b5:46:ca:dd:ca:b1:18:4a:1d: a2:d4:16:b3:d4:30:6a:21:00:ad:83:15:24:c4:5e: 54:74:fd:c6:6c:fe:8a:25:4b:ff:3a:e8:f2:ce:9f: eb:f8:cb:80:9d:7d:95:95:06:99:24:c1:0b:a3:d2: 61:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:52:F4:1B:20:D8:E2:87:3B:3C:51:73:20:63:08:1B:FF:48:5B:36 X509v3 Authority Key Identifier: keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:bd:f2:5a:0d:87:a9:60:fa:62:17:66:9b:0c:27:da:ad:5f: e4:1b:c5:ce:e3:37:c2:6b:14:b6:b9:f4:1d:1c:80:f5:e6:39: bb:41:cf:4b:86:c3:9f:9c:b0:cb:e3:ac:a5:a6:f7:0a:76:f6: 46:69:07:03:c3:1c:12:b9:7b:31:1a:77:c6:d5:f0:51:2b:a4: 9a:2f:a2:7d:87:91:fe:c8:48:0d:85:04:b2:23:4f:0a:ea:34: 48:83:2d:b1:d6:7e:c0:3c:32:29:fc:28:14:6f:6f:5a:67:f2: 24:99:60:ea:6c:d2:90:18:9d:11:e3:fd:0d:ce:a2:92:e5:79: ed:29:6c:64:b8:e7:1a:bc:78:d1:b7:67:bf:5f:32:f8:d6:72: 12:ce:7f:7f:05:62:70:2a:e1:06:07:79:95:90:99:5d:00:e3: 5a:2a:88:5d:fe:63:0a:98:e5:1a:fd:37:90:6b:32:51:bf:a0: 9b:38:32:d4:89:54:6d:09:12:46:0f:e4:4f:92:11:78:41:99: fc:59:ba:ac:91:f4:07:1a:7d:60:7d:15:db:68:d6:1b:dc:7b: 60:16:0b:e1:d6:8a:dc:e3:10:71:e7:91:b3:ec:c1:a4:c0:ac: 10:3b:4a:74:f7:8a:9c:99:80:34:4d:35:ee:03:24:d7:4b:cc: a2:19:f4:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFR85m1ZTzGpAfpf7rmCHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZDU3MDhmNDI5YWRhZGJhMWI0YTM4Yzk0ZGQ3NzY1NGFm YWY5N2QwHhcNMjYwMjEwMDIwMDU5WhcNMjYwMjExMDIwMDU5WjAzMTEwLwYDVQQD EyhhMDUyZjQxYjIwZDhlMjg3M2IzYzUxNzMyMDYzMDgxYmZmNDg1YjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3r38814WJETSa3oMscw0PWWDnmg ++Ewk3FF8SEnU5KdU84pv9YeO2S4TrDx/VGAsr4hdK1IKqoralr7o+1qrhlzAls9 pcrKhCK2sNNrATdpuRguoSbPGYOZMI6QfgjX+1TONFX2oREVG6a/KHlTjKXLybvT 0ZELmGdDt3FRJ1r+AtBaF9sB5azGgvvvfbzgcx5sE6/l6tHdrYmXadLMbh4ZWMAf CWhFHy35LU0ZYjFkZoWa0fmMWPWq5iGflvJLy7+lF2Sf6521RsrdyrEYSh2i1Baz 1DBqIQCtgxUkxF5UdP3GbP6KJUv/Oujyzp/r+MuAnX2VlQaZJMELo9JhJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBS9Bsg2OKHOzxRcyBjCBv/SFs2MB8GA1UdIwQY MBaAFN3VcI9CmtrbobSjjJTdd2VK+vl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2RWd2owS2EydHVodEtPTWxOMTNaVXI2LVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNzk0YTMtZjNhZS00ZmJlLTk4ZWEt MjBlMWMzZTNmOGUyLzEvM2RWd2owS2EydHVodEtPTWxOMTNaVXI2LVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9kNzk0YTMtZjNhZS00ZmJlLTk4ZWEtMjBlMWMzZTNmOGUy LzEvM2RWd2owS2EydHVodEtPTWxOMTNaVXI2LVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOL3yWg2H qWD6Yhdmmwwn2q1f5BvFzuM3wmsUtrn0HRyA9eY5u0HPS4bDn5ywy+Ospab3Cnb2 RmkHA8McErl7MRp3xtXwUSukmi+ifYeR/shIDYUEsiNPCuo0SIMtsdZ+wDwyKfwo FG9vWmfyJJlg6mzSkBidEeP9Dc6ikuV57SlsZLjnGrx40bdnv18y+NZyEs5/fwVi cCrhBgd5lZCZXQDjWiqIXf5jCpjlGv03kGsyUb+gmzgy1IlUbQkSRg/kT5IReEGZ /Fm6rJH0Bxp9YH0V22jWG9x7YBYL4daK3OMQceeRs+zBpMCsEDtKdPeKnJmANE01 7gMk10vMohn0TA== -----END CERTIFICATE-----Generated at Tue Feb 10 04:52:34 2026 by rpki-client