This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json) Hash identifier: hchg8T96Aqo9WOqN/ETM2gFtRZUf86dtwONEdCV50UE= Subject key identifier: AC:33:29:3C:83:87:1C:4A:F2:EF:EA:9F:0B:BD:59:FF:0E:5F:54:F6 Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff Certificate serial: 019C25BC8D890DC2F0AF36BEB10E465F2EF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft Manifest number: 05B4 Signing time: Tue 03 Feb 2026 23:00:39 +0000 Manifest this update: Tue 03 Feb 2026 23:00:39 +0000 Manifest next update: Wed 04 Feb 2026 23:00:39 +0000 Files and hashes: 1: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: iODg5+0U9fjuiv8JmAo7l8DLvctT/ZmBrs4nsYXR+SI=) 2: iLwvUMhVfynA5xd6Et8gepqR46c.roa (hash: y86HIQxQ/85ZKsdLvkasHfGWoZD1Asr2cxN2bdn26cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:25:bc:8d:89:0d:c2:f0:af:36:be:b1:0e:46:5f:2e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff Validity Not Before: Feb 3 23:00:39 2026 GMT Not After : Feb 4 23:00:39 2026 GMT Subject: CN=ac33293c83871c4af2efea9f0bbd59ff0e5f54f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:65:5f:5d:b2:8e:81:81:d2:f2:ca:f3:a0: 93:60:cf:12:d5:d2:87:90:5a:76:91:4f:20:5b:0e: e6:86:df:aa:62:2b:6e:a5:ea:56:f4:db:74:fa:7f: 6c:e7:50:b5:a6:cf:4a:34:00:d5:bb:de:13:3f:99: 90:e0:45:d6:31:e0:ac:8f:30:c3:bb:bd:de:c2:b5: 0d:38:a4:54:6d:f2:11:81:15:5b:b6:a2:23:91:94: df:22:fb:5e:6e:2a:b7:ab:03:f5:ed:8b:4b:22:f0: 60:fc:00:56:22:3d:e2:90:ae:17:5f:e9:85:e5:c6: 84:3e:23:6a:3e:b7:6e:c0:81:6c:db:3d:49:7d:f3: dc:90:ad:09:0f:93:06:00:a8:d9:f4:25:56:2b:4f: 7f:d3:1b:e7:e8:93:76:ca:0f:c3:e7:04:c3:64:1a: 15:e5:f4:aa:b8:fe:ea:3e:f6:52:01:28:e2:5e:01: e1:73:93:9f:83:7b:11:23:10:56:76:c5:0f:2d:2d: 9d:25:be:21:34:05:2f:48:73:4b:43:a7:9c:ac:1f: f0:ea:33:55:3b:32:98:3a:18:1b:3d:76:5e:15:8d: 84:36:b4:40:0d:e9:90:8a:27:99:6f:37:c8:9b:7b: 87:16:0b:f4:dd:98:87:96:98:f5:84:39:3b:72:ff: 83:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:33:29:3C:83:87:1C:4A:F2:EF:EA:9F:0B:BD:59:FF:0E:5F:54:F6 X509v3 Authority Key Identifier: keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e7:39:bd:15:71:05:94:81:51:13:69:6c:0f:66:70:c0:87: 84:ea:0d:47:59:27:48:d1:38:f3:37:d9:e3:d9:ed:37:18:d9: f2:62:7c:ab:ce:3f:dd:d5:fe:e5:ad:5e:3d:19:91:dc:a2:33: 5b:85:8a:aa:93:ee:71:e0:ab:a3:c3:00:83:c1:f1:2c:6e:ab: 1f:55:de:9f:58:86:59:f6:c1:6a:24:43:29:04:da:0f:c3:93: a5:54:6c:77:a1:7b:f4:93:7d:6f:d7:82:35:05:30:94:ad:63: 10:f9:bf:ac:e8:5a:41:65:61:9d:10:3c:ee:22:34:55:f5:40: 20:8d:dd:df:59:60:1a:04:c1:60:24:1d:ef:c0:d7:c9:b2:84: 64:ec:45:5a:37:eb:c2:8f:fc:ac:ea:25:b2:11:a5:9d:17:cd: b4:38:be:5e:a5:32:78:b4:5c:b9:c7:51:53:a8:90:1e:6c:59: 50:ec:8b:e9:b0:ff:ec:e3:8e:20:16:03:3d:fc:d9:a4:8e:b6: 33:b1:6a:16:d9:c0:8f:3b:9e:63:cb:d0:49:ff:95:08:c0:cd: d2:b4:63:5f:40:a2:fb:54:4b:ac:d9:8e:99:c9:0f:af:e7:27: 84:27:51:fa:de:57:32:61:64:9b:23:63:41:77:b8:b9:82:f2: bb:2f:5f:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwlvI2JDcLwrza+sQ5GXy74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNzExMDU0YTg5NDQ2YTc2ZjQ5M2NlMmMxMjdhOTQ4ZWJh NGE4ZmYwHhcNMjYwMjAzMjMwMDM5WhcNMjYwMjA0MjMwMDM5WjAzMTEwLwYDVQQD EyhhYzMzMjkzYzgzODcxYzRhZjJlZmVhOWYwYmJkNTlmZjBlNWY1NGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN5lX12yjoGB0vLK86CTYM8S1dKH kFp2kU8gWw7mht+qYitupepW9Nt0+n9s51C1ps9KNADVu94TP5mQ4EXWMeCsjzDD u73ewrUNOKRUbfIRgRVbtqIjkZTfIvtebiq3qwP17YtLIvBg/ABWIj3ikK4XX+mF 5caEPiNqPrduwIFs2z1JffPckK0JD5MGAKjZ9CVWK09/0xvn6JN2yg/D5wTDZBoV 5fSquP7qPvZSASjiXgHhc5Ofg3sRIxBWdsUPLS2dJb4hNAUvSHNLQ6ecrB/w6jNV OzKYOhgbPXZeFY2ENrRADemQiieZbzfIm3uHFgv03ZiHlpj1hDk7cv+DyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwzKTyDhxxK8u/qnwu9Wf8OX1T2MB8GA1UdIwQY MBaAFP9xEFSolEanb0k84sEnqUjrpKj/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAt NDdhYzM4OWQzMjYxLzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAtNDdhYzM4OWQzMjYx LzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+c5vRVx BZSBURNpbA9mcMCHhOoNR1knSNE48zfZ49ntNxjZ8mJ8q84/3dX+5a1ePRmR3KIz W4WKqpPuceCro8MAg8HxLG6rH1Xen1iGWfbBaiRDKQTaD8OTpVRsd6F79JN9b9eC NQUwlK1jEPm/rOhaQWVhnRA87iI0VfVAII3d31lgGgTBYCQd78DXybKEZOxFWjfr wo/8rOolshGlnRfNtDi+XqUyeLRcucdRU6iQHmxZUOyL6bD/7OOOIBYDPfzZpI62 M7FqFtnAjzueY8vQSf+VCMDN0rRjX0Ci+1RLrNmOmckPr+cnhCdR+t5XMmFkmyNj QXe4uYLyuy9fow== -----END CERTIFICATE-----Generated at Wed Feb 4 05:27:02 2026 by rpki-client