This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json) Hash identifier: no3NqQ0jXRALzSNTAbabVzJmVVR1ntKI6BG5zvSVhaE= Subject key identifier: EC:11:F5:85:A5:55:8C:9A:3B:02:32:AB:A4:FE:AC:1F:5F:31:02:7C Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e Certificate serial: 019C41A2746353476128A0ED3B90FCCC1743 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft Manifest number: 0CB2 Signing time: Mon 09 Feb 2026 09:01:31 +0000 Manifest this update: Mon 09 Feb 2026 09:01:31 +0000 Manifest next update: Tue 10 Feb 2026 09:01:31 +0000 Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: b93ucvTfZK9PqSfh49VQvJ1EWec7UvyImophQzDez50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:74:63:53:47:61:28:a0:ed:3b:90:fc:cc:17:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e Validity Not Before: Feb 9 09:01:31 2026 GMT Not After : Feb 10 09:01:31 2026 GMT Subject: CN=ec11f585a5558c9a3b0232aba4feac1f5f31027c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:0b:55:6a:93:27:29:83:ce:89:7f:b5:1f: 9c:10:18:af:41:72:32:a6:2b:75:08:85:af:2f:b2: 7f:a7:75:c5:e2:d0:7e:79:39:82:2b:fd:b1:9c:07: 30:79:63:d8:6e:df:f3:14:8e:1e:d1:2c:0d:d6:57: f7:b5:68:7a:79:4a:37:62:1a:d1:9a:5b:f2:d5:09: ab:f6:09:29:f8:48:02:58:d4:92:fd:16:7c:de:6f: d0:f9:ad:b2:59:83:d5:e5:4e:9d:5e:f4:1c:e2:b7: 39:5a:b8:f2:24:c1:53:d1:cb:f0:85:8b:e3:8b:ac: fd:31:77:76:94:46:29:89:33:70:f6:6d:3f:ab:56: 6c:3e:3b:e6:e7:81:94:00:64:f7:c1:80:54:c7:62: 68:ff:2f:46:00:12:45:64:0d:54:70:01:3f:31:aa: b7:c0:f0:ad:00:ce:6f:e5:50:77:9f:c2:dd:32:c4: 19:b3:d4:67:99:42:a2:c0:14:8a:11:31:7e:72:eb: 0b:7d:a4:b4:32:eb:22:09:b9:e5:76:c4:5b:bb:d4: 05:42:e1:f0:07:7e:36:de:54:a8:de:78:44:fb:87: 88:b4:70:38:d6:ea:bf:2b:33:90:b0:46:df:80:33: 56:4c:66:1b:37:be:f6:14:8c:08:b7:28:d5:87:f0: e4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:11:F5:85:A5:55:8C:9A:3B:02:32:AB:A4:FE:AC:1F:5F:31:02:7C X509v3 Authority Key Identifier: keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:26:f9:27:84:58:6a:5d:2a:4d:62:93:6f:20:0f:42:46:18: c3:d0:ec:5a:39:73:13:f3:9e:9f:3c:3c:e8:62:4f:41:ab:a9: 17:51:c0:48:cc:2f:b9:da:88:fc:30:5e:79:2a:be:c1:5a:b9: 3d:8c:c6:74:48:6d:d3:4c:6e:30:f6:bf:9f:19:43:15:e1:4a: 71:62:f5:5c:f9:ee:d2:b1:2a:35:33:67:09:30:0b:f0:85:ae: fa:b8:d4:d2:a3:3c:bc:4b:77:13:e1:23:c2:b3:f3:39:b1:03: 62:8b:25:66:a9:b3:76:e0:3b:02:c3:6d:22:21:1c:17:b8:2d: e6:cf:7c:7e:e5:b3:33:8e:f6:10:97:2f:82:52:bb:47:66:c5: 2d:a8:60:4d:66:b9:7d:73:8a:99:30:a6:2e:5d:e0:83:76:e0: 81:88:ec:08:0c:dc:ad:e9:ab:cb:fa:73:59:50:c4:e9:76:7a: e7:86:8d:f1:15:dd:61:30:23:fd:99:03:57:66:c3:31:48:51: 28:53:13:21:97:df:b5:9a:a8:e7:e3:3e:14:47:6b:13:57:0e: 72:32:a3:0c:07:67:6a:96:a8:8d:94:2a:05:32:c1:48:7c:44: bd:47:8f:d0:5c:ac:89:4d:13:a4:7d:dc:d7:46:86:da:c4:ec: 90:b6:72:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBonRjU0dhKKDtO5D8zBdDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Nzk3OTFhNTM3MGMxY2Q1N2U0OTNkOTQ5ZjkxZWZiY2Rh NjYxN2UwHhcNMjYwMjA5MDkwMTMxWhcNMjYwMjEwMDkwMTMxWjAzMTEwLwYDVQQD EyhlYzExZjU4NWE1NTU4YzlhM2IwMjMyYWJhNGZlYWMxZjVmMzEwMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjwLVWqTJymDzol/tR+cEBivQXIy pit1CIWvL7J/p3XF4tB+eTmCK/2xnAcweWPYbt/zFI4e0SwN1lf3tWh6eUo3YhrR mlvy1Qmr9gkp+EgCWNSS/RZ83m/Q+a2yWYPV5U6dXvQc4rc5WrjyJMFT0cvwhYvj i6z9MXd2lEYpiTNw9m0/q1ZsPjvm54GUAGT3wYBUx2Jo/y9GABJFZA1UcAE/Maq3 wPCtAM5v5VB3n8LdMsQZs9RnmUKiwBSKETF+cusLfaS0MusiCbnldsRbu9QFQuHw B3423lSo3nhE+4eItHA41uq/KzOQsEbfgDNWTGYbN772FIwItyjVh/DkiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwR9YWlVYyaOwIyq6T+rB9fMQJ8MB8GA1UdIwQY MBaAFKd5eRpTcMHNV+ST2Un5HvvNpmF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80ZWViMjktNWJkZC00OGI2LTk5NTQt NGQ4YWNjYmE2OWRjLzEvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80ZWViMjktNWJkZC00OGI2LTk5NTQtNGQ4YWNjYmE2OWRj LzEvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyb5J4RY al0qTWKTbyAPQkYYw9DsWjlzE/Oenzw86GJPQaupF1HASMwvudqI/DBeeSq+wVq5 PYzGdEht00xuMPa/nxlDFeFKcWL1XPnu0rEqNTNnCTAL8IWu+rjU0qM8vEt3E+Ej wrPzObEDYoslZqmzduA7AsNtIiEcF7gt5s98fuWzM472EJcvglK7R2bFLahgTWa5 fXOKmTCmLl3gg3bggYjsCAzcremry/pzWVDE6XZ654aN8RXdYTAj/ZkDV2bDMUhR KFMTIZfftZqo5+M+FEdrE1cOcjKjDAdnapaojZQqBTLBSHxEvUeP0FysiU0TpH3c 10aG2sTskLZy1g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:12 2026 by rpki-client