This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json) Hash identifier: l5YWiIWbMDTDe7UecHiW3GFHSqg+s8nu1MKwf2j7p7g= Subject key identifier: 3C:6D:2B:FF:B8:00:52:46:61:1C:6D:A4:BA:83:05:39:9B:60:C2:08 Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e Certificate serial: 019C4246C2A3005BCCB4685C4FA83DEA2380 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft Manifest number: 0209 Signing time: Mon 09 Feb 2026 12:00:59 +0000 Manifest this update: Mon 09 Feb 2026 12:00:59 +0000 Manifest next update: Tue 10 Feb 2026 12:00:59 +0000 Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: 8qPmlXCxpdOL/ESygIMpSAl8zCRQEqs3DBbop5yr8vM=) 2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:c2:a3:00:5b:cc:b4:68:5c:4f:a8:3d:ea:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e Validity Not Before: Feb 9 12:00:59 2026 GMT Not After : Feb 10 12:00:59 2026 GMT Subject: CN=3c6d2bffb8005246611c6da4ba8305399b60c208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fe:66:79:58:a3:dc:c3:7b:f4:96:08:44:bd: 1a:dd:9e:ee:a2:e4:24:63:31:92:66:c2:37:d6:84: 53:68:68:b8:d4:d3:5a:1e:d3:ac:52:66:2f:87:50: 89:1e:5c:77:b4:f6:0d:7c:9a:42:7b:ec:c0:f5:90: c1:5a:bc:7a:35:6d:3f:e3:17:71:09:31:58:5b:5c: 4f:28:79:11:f4:65:69:7d:92:6b:2f:7a:92:bb:17: ad:5b:1b:1b:98:bc:91:46:21:e4:f4:36:87:27:40: 04:35:c8:d0:38:b9:0a:67:96:a9:b8:67:fa:96:e9: eb:bb:52:7e:c7:55:1f:32:84:94:17:99:8e:4a:99: e0:75:3d:7a:85:86:bc:db:07:8c:71:cb:93:c8:98: da:70:84:1d:d6:6f:4a:62:22:f5:35:08:c4:35:f2: c0:c3:ee:5d:c3:0b:d5:2b:43:ac:6f:96:85:71:6f: a2:42:e6:d5:07:4c:e3:1c:62:8a:4d:af:fb:11:ae: 07:a6:aa:b4:9e:a4:d4:47:9c:f0:e1:b7:76:68:4d: 05:54:6c:2d:e4:30:4e:d9:0d:31:cb:a9:0f:e5:5b: 51:f7:0b:86:ec:a6:df:61:ed:6d:2d:f1:bd:7f:82: a1:aa:f9:bb:63:65:bd:38:cd:7a:e4:64:11:dc:45: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6D:2B:FF:B8:00:52:46:61:1C:6D:A4:BA:83:05:39:9B:60:C2:08 X509v3 Authority Key Identifier: keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:48:7a:85:d1:3a:fe:e0:8c:7a:50:56:73:df:f7:07:ab:82: 48:22:92:3b:4f:66:98:fb:9a:7c:98:f7:fa:aa:2b:1b:31:5f: b5:a3:65:12:c8:a2:4a:ef:82:9f:ec:82:33:f3:73:54:19:6d: 17:e3:ab:99:ea:26:dc:4d:62:b3:6a:e5:02:03:ec:aa:f0:6e: 07:ed:39:5a:ab:61:14:75:34:87:a4:a4:25:53:3f:0b:df:e1: 3c:0a:07:4d:00:01:95:37:3a:bd:03:35:77:87:5d:64:60:c3: 2f:db:81:ee:04:51:47:7a:1a:e8:d4:6c:7b:00:b0:36:c0:db: 34:38:a9:03:00:57:27:f3:57:a5:84:b5:4d:f5:8d:83:2e:06: 96:7a:a6:99:d7:3c:32:59:cc:bc:4b:9c:f6:f5:14:77:fd:54: b9:02:bd:82:8b:56:97:5d:e8:79:da:96:87:ce:85:ea:2e:fd: f5:98:d5:ef:12:a1:76:43:41:cd:f5:ea:cb:26:c6:f3:1c:37: 7a:99:c8:e8:d6:01:14:f7:f4:0c:52:e0:38:80:c0:b7:fe:ca: 9a:52:dc:84:6e:d0:0c:a5:5a:b0:d6:e0:b7:db:5a:a5:75:b3: 50:44:e8:6c:26:02:8d:c3:b1:23:57:cc:f5:77:1a:af:4f:7d: 17:15:32:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRsKjAFvMtGhcT6g96iOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTQzN2JjYWQ5YmFjZmEzYjc2YjdkZDA0NTQxMzNmYjRk OGNiM2UwHhcNMjYwMjA5MTIwMDU5WhcNMjYwMjEwMTIwMDU5WjAzMTEwLwYDVQQD EygzYzZkMmJmZmI4MDA1MjQ2NjExYzZkYTRiYTgzMDUzOTliNjBjMjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf5meVij3MN79JYIRL0a3Z7uouQk YzGSZsI31oRTaGi41NNaHtOsUmYvh1CJHlx3tPYNfJpCe+zA9ZDBWrx6NW0/4xdx CTFYW1xPKHkR9GVpfZJrL3qSuxetWxsbmLyRRiHk9DaHJ0AENcjQOLkKZ5apuGf6 lunru1J+x1UfMoSUF5mOSpngdT16hYa82weMccuTyJjacIQd1m9KYiL1NQjENfLA w+5dwwvVK0Osb5aFcW+iQubVB0zjHGKKTa/7Ea4Hpqq0nqTUR5zw4bd2aE0FVGwt 5DBO2Q0xy6kP5VtR9wuG7KbfYe1tLfG9f4Khqvm7Y2W9OM165GQR3EUTmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxtK/+4AFJGYRxtpLqDBTmbYMIIMB8GA1UdIwQY MBaAFP/kN7ytm6z6O3a33QRUEz+02Ms+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUt ZDEyMWM1YTc1ZDk4LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUtZDEyMWM1YTc1ZDk4 LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUh6hdE6 /uCMelBWc9/3B6uCSCKSO09mmPuafJj3+qorGzFftaNlEsiiSu+Cn+yCM/NzVBlt F+Ormeom3E1is2rlAgPsqvBuB+05WqthFHU0h6SkJVM/C9/hPAoHTQABlTc6vQM1 d4ddZGDDL9uB7gRRR3oa6NRsewCwNsDbNDipAwBXJ/NXpYS1TfWNgy4Glnqmmdc8 MlnMvEuc9vUUd/1UuQK9gotWl13oedqWh86F6i799ZjV7xKhdkNBzfXqyybG8xw3 epnI6NYBFPf0DFLgOIDAt/7KmlLchG7QDKVasNbgt9tapXWzUETobCYCjcOxI1fM 9Xcar099FxUyhA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:32 2026 by rpki-client