This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json) Hash identifier: xB6rGZ2R8fNBy33AJE7Mc/U2h965nEtgxfnXwqrkRzQ= Subject key identifier: FB:9D:EA:36:62:C6:4C:0F:E9:C4:50:DB:A8:08:32:06:1D:FE:98:5F Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07 Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807 Certificate serial: 019C41A1C96188BA2920C5CED2260D2DF972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft Manifest number: 0F40 Signing time: Mon 09 Feb 2026 09:00:47 +0000 Manifest this update: Mon 09 Feb 2026 09:00:47 +0000 Manifest next update: Tue 10 Feb 2026 09:00:47 +0000 Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: 0na+WPIeKS05UZIo+Bi4l68tz0mmcmoolWqd/c9dhuI=) 2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:c9:61:88:ba:29:20:c5:ce:d2:26:0d:2d:f9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807 Validity Not Before: Feb 9 09:00:47 2026 GMT Not After : Feb 10 09:00:47 2026 GMT Subject: CN=fb9dea3662c64c0fe9c450dba80832061dfe985f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a3:62:bc:02:43:17:13:d2:e5:f0:8a:0a:bb: 5b:94:da:cf:65:69:63:f0:7e:03:a4:d7:75:f5:8c: d2:60:5c:af:55:4e:c7:43:75:bb:2b:3f:6e:c7:5f: d7:cd:a7:b4:d0:55:3b:b1:45:34:a8:18:2d:31:45: bf:f9:5c:7b:a9:a5:ed:6b:c1:68:d9:e8:07:0e:61: 84:4d:2b:1f:8a:60:db:c8:66:b9:97:6d:4d:6e:e2: 82:60:8e:ae:31:7c:80:78:58:ad:09:d7:21:90:d0: bc:61:2e:e9:7a:26:48:dd:05:9c:4c:db:0e:a2:6c: fb:34:89:a8:5a:cd:e3:26:64:0b:db:bf:e4:9d:11: 16:d1:01:96:9c:f7:65:17:06:dd:d8:17:de:42:55: f9:ae:33:93:f9:f3:04:cc:e4:5e:bb:36:f5:88:04: 5f:3b:95:8d:f4:a7:98:3f:59:b8:78:21:dc:ab:03: 61:59:f1:fe:a7:67:89:da:39:d1:e5:c9:9e:f4:77: c8:da:fd:81:e5:42:76:c4:4e:09:38:57:08:76:d9: 62:e6:01:37:3e:bb:88:e9:5f:04:44:28:e3:82:ec: 10:2b:ab:90:20:4e:8c:99:6d:55:4f:54:93:af:de: d1:dd:0f:9c:95:7f:1e:2c:cb:62:15:ea:70:b1:07: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9D:EA:36:62:C6:4C:0F:E9:C4:50:DB:A8:08:32:06:1D:FE:98:5F X509v3 Authority Key Identifier: keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f4:20:ad:90:d4:59:cb:54:86:61:d3:ac:8b:77:d5:c3:dc: c7:ca:ac:e7:6e:c0:9b:33:78:e7:af:9d:6c:ad:4a:02:4b:35: 44:92:13:00:ba:fd:c2:64:ae:ff:f4:a4:a7:b7:e4:7d:6c:35: 65:e1:7a:83:55:ee:47:88:a0:78:6c:51:be:90:1d:8b:a2:70: 36:ac:4d:1d:8b:4b:92:e0:eb:2e:68:8a:ba:20:3e:f4:81:3f: 80:b5:93:c5:85:50:60:2c:52:92:e3:1b:e6:9d:27:fc:c9:39: 0a:2e:81:b0:41:17:d5:9a:93:58:e1:94:7b:ad:72:ca:b5:d9: 10:ee:ea:6f:b4:54:72:87:1c:2e:1e:b4:0b:32:db:aa:75:18: 1f:11:4b:68:e6:35:07:0b:7c:7c:4e:80:51:08:2e:9d:a3:fd: ca:c1:5b:a4:f7:dc:52:ff:8d:b5:d8:c7:a8:f7:06:f8:b0:a3: 4a:b4:55:06:d9:ef:73:02:50:39:fd:32:9a:63:7a:23:b2:a1: 0e:8e:62:a1:6c:76:a7:e0:76:22:ad:8f:79:46:6b:69:80:15: e5:da:29:c7:9f:be:c4:67:99:9c:ec:91:b3:20:08:f1:8a:10: 41:1f:9c:57:46:af:2b:3f:50:d6:73:58:e3:cf:ac:a8:d2:7b: eb:81:3c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoclhiLopIMXO0iYNLflyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOGUwNTlkNWViNzc2NDlmYmYxOWI4NGFmMzVmNjg5MWQ5 YzU4MDcwHhcNMjYwMjA5MDkwMDQ3WhcNMjYwMjEwMDkwMDQ3WjAzMTEwLwYDVQQD EyhmYjlkZWEzNjYyYzY0YzBmZTljNDUwZGJhODA4MzIwNjFkZmU5ODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aNivAJDFxPS5fCKCrtblNrPZWlj 8H4DpNd19YzSYFyvVU7HQ3W7Kz9ux1/Xzae00FU7sUU0qBgtMUW/+Vx7qaXta8Fo 2egHDmGETSsfimDbyGa5l21NbuKCYI6uMXyAeFitCdchkNC8YS7peiZI3QWcTNsO omz7NImoWs3jJmQL27/knREW0QGWnPdlFwbd2BfeQlX5rjOT+fMEzOReuzb1iARf O5WN9KeYP1m4eCHcqwNhWfH+p2eJ2jnR5cme9HfI2v2B5UJ2xE4JOFcIdtli5gE3 PruI6V8ERCjjguwQK6uQIE6MmW1VT1STr97R3Q+clX8eLMtiFepwsQe9GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPud6jZixkwP6cRQ26gIMgYd/phfMB8GA1UdIwQY MBaAFNyOBZ1et3ZJ+/GbhK819okdnFgHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80ZjZlZTQtZmE2ZS00MzZlLWIzNDkt NmVmN2UxMTk5Njk4LzEvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80ZjZlZTQtZmE2ZS00MzZlLWIzNDktNmVmN2UxMTk5Njk4 LzEvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPQgrZDU WctUhmHTrIt31cPcx8qs527AmzN456+dbK1KAks1RJITALr9wmSu//Skp7fkfWw1 ZeF6g1XuR4igeGxRvpAdi6JwNqxNHYtLkuDrLmiKuiA+9IE/gLWTxYVQYCxSkuMb 5p0n/Mk5Ci6BsEEX1ZqTWOGUe61yyrXZEO7qb7RUcoccLh60CzLbqnUYHxFLaOY1 Bwt8fE6AUQgunaP9ysFbpPfcUv+NtdjHqPcG+LCjSrRVBtnvcwJQOf0ymmN6I7Kh Do5ioWx2p+B2Iq2PeUZraYAV5dopx5++xGeZnOyRsyAI8YoQQR+cV0avKz9Q1nNY 48+sqNJ764E8eQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:30 2026 by rpki-client