This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json) Hash identifier: G8IF1aTwu3Pz8UDrp65P2LKwkj7Yba58m+kV5udyDjs= Subject key identifier: 81:AC:0F:08:02:F7:13:E0:EA:D5:E5:02:CE:DC:BD:2D:EE:0A:8D:87 Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad Certificate serial: 019C416A903024FC6A0383F9C8F4D33971B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft Manifest number: 1350 Signing time: Mon 09 Feb 2026 08:00:28 +0000 Manifest this update: Mon 09 Feb 2026 08:00:28 +0000 Manifest next update: Tue 10 Feb 2026 08:00:28 +0000 Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: pAgPD1yGDNNH4bg56qWjnjO9wfvgTDpTUFYNNZ0UMt0=) 2: ChsrIe_cFwpAiazbN6fxpmLK7t4.roa (hash: LuQhPrdzKvZLID91e7AArGX99lU+Hh7zxpmaut21ffs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:90:30:24:fc:6a:03:83:f9:c8:f4:d3:39:71:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad Validity Not Before: Feb 9 08:00:28 2026 GMT Not After : Feb 10 08:00:28 2026 GMT Subject: CN=81ac0f0802f713e0ead5e502cedcbd2dee0a8d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:cc:a6:92:8b:27:44:53:ef:a8:39:dd:09: 3a:0d:e0:b2:cd:1e:c7:3b:51:10:1f:f4:3d:dc:39: 1b:b4:d7:87:38:af:4c:a9:6c:7c:81:85:21:b7:ff: 97:47:5d:50:87:a1:9e:cd:c5:34:b2:b9:56:e1:a1: f4:46:75:67:bd:e3:7e:b2:f4:e8:4e:b6:1f:44:96: cd:e9:bf:43:7e:e0:8f:d2:b7:f4:2a:ea:5f:63:03: d1:44:0d:1c:29:22:e6:a3:0c:15:cd:a4:b2:32:24: cb:61:7d:79:d7:2c:bd:f4:80:23:f6:fc:e7:92:00: f4:23:57:a4:6f:01:c0:89:d3:a9:aa:b1:13:4f:14: f5:8a:35:20:ea:35:9a:49:0c:b9:cf:c4:1f:87:d6: 8a:b3:31:26:b8:86:fb:ce:ba:db:3d:cb:71:e8:48: 0e:29:59:26:bf:fd:09:5d:a5:6c:f4:eb:6b:7f:d8: 0c:3e:7a:9b:4f:2b:2e:0a:81:44:39:c8:01:e2:33: 48:c3:f6:c3:d4:4e:07:8e:4e:d8:8e:c7:16:6c:e7: 01:60:c8:c2:07:14:52:93:1c:d8:d1:ed:9d:92:4c: 9c:93:cb:51:fa:a2:ec:5e:a3:ab:46:24:24:1b:ba: b5:c2:d5:25:66:35:0f:fa:8e:c5:35:56:79:61:82: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AC:0F:08:02:F7:13:E0:EA:D5:E5:02:CE:DC:BD:2D:EE:0A:8D:87 X509v3 Authority Key Identifier: keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8f:bb:b6:80:37:ee:2a:a7:12:71:4f:22:68:70:5f:4e:1b: 6f:bc:3b:f2:92:ee:8b:d9:84:ac:95:91:e7:bd:63:b3:5d:67: e2:e9:c3:a0:6f:07:4b:7b:5c:b8:9c:8e:6b:67:3e:79:50:28: 7d:b6:f6:94:a9:2c:06:18:f6:fc:a7:9c:ef:69:c5:b9:fa:7b: 19:11:8f:d7:91:97:55:49:34:36:2c:df:c9:68:d6:01:d2:a3: a8:3f:a6:2d:4c:59:b2:f4:df:4e:82:8e:1f:ae:c3:c4:02:f5: a0:54:ea:57:ee:15:18:55:f3:9c:2c:33:8c:82:22:14:fc:a2: df:3d:70:82:0f:1e:22:f8:92:f8:0f:aa:38:5f:e6:83:8f:c5: a4:bc:37:d6:63:37:18:18:81:fa:d3:51:d4:25:fe:d5:06:18: 48:f1:a9:d0:81:b5:61:84:4e:89:83:9a:3b:66:69:f2:e8:34: 8f:94:5c:3f:d3:5a:86:95:0a:b8:31:5a:9f:0a:6e:6a:93:f7: f8:bc:22:b6:99:71:36:34:8f:d7:0d:01:53:75:c4:53:c3:33: 77:16:b2:d9:67:a7:a0:f5:25:6c:f1:8a:53:d6:25:d9:bb:ad: e4:58:92:4c:ba:54:8f:60:ea:09:01:4a:85:6a:ad:cd:81:3e: e5:ad:d5:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBapAwJPxqA4P5yPTTOXG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMjg2ZDAzYTM3M2JkNjg5ZWYwNDYxMGExYzhhZDg0NzNl YmRkYWQwHhcNMjYwMjA5MDgwMDI4WhcNMjYwMjEwMDgwMDI4WjAzMTEwLwYDVQQD Eyg4MWFjMGYwODAyZjcxM2UwZWFkNWU1MDJjZWRjYmQyZGVlMGE4ZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfHMppKLJ0RT76g53Qk6DeCyzR7H O1EQH/Q93DkbtNeHOK9MqWx8gYUht/+XR11Qh6GezcU0srlW4aH0RnVnveN+svTo TrYfRJbN6b9DfuCP0rf0KupfYwPRRA0cKSLmowwVzaSyMiTLYX151yy99IAj9vzn kgD0I1ekbwHAidOpqrETTxT1ijUg6jWaSQy5z8Qfh9aKszEmuIb7zrrbPctx6EgO KVkmv/0JXaVs9Otrf9gMPnqbTysuCoFEOcgB4jNIw/bD1E4Hjk7YjscWbOcBYMjC BxRSkxzY0e2dkkyck8tR+qLsXqOrRiQkG7q1wtUlZjUP+o7FNVZ5YYLTowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGsDwgC9xPg6tXlAs7cvS3uCo2HMB8GA1UdIwQY MBaAFN4obQOjc71onvBGEKHIrYRz692tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMt Y2FkZjBjYTFkZDBkLzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMtY2FkZjBjYTFkZDBk LzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALI+7toA3 7iqnEnFPImhwX04bb7w78pLui9mErJWR571js11n4unDoG8HS3tcuJyOa2c+eVAo fbb2lKksBhj2/Kec72nFufp7GRGP15GXVUk0NizfyWjWAdKjqD+mLUxZsvTfToKO H67DxAL1oFTqV+4VGFXznCwzjIIiFPyi3z1wgg8eIviS+A+qOF/mg4/FpLw31mM3 GBiB+tNR1CX+1QYYSPGp0IG1YYROiYOaO2Zp8ug0j5RcP9NahpUKuDFanwpuapP3 +LwitplxNjSP1w0BU3XEU8Mzdxay2WenoPUlbPGKU9Yl2but5FiSTLpUj2DqCQFK hWqtzYE+5a3Veg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:59 2026 by rpki-client