This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft File: 3liIYKFLOUpzUSmEKu-tGnBKMoc.mft (raw, json) Hash identifier: iM/eRNgYdzRQDwUyrCFVwPjzecSiG8NGbbmCivjZfh8= Subject key identifier: 12:69:F5:3B:1A:51:11:5D:3F:45:4C:28:3D:50:C0:2A:6F:10:B9:34 Authority key identifier: DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87 Certificate issuer: /CN=de588860a14b394a735129842aefad1a704a3287 Certificate serial: 019C427D3F494ED81E5AB22777A7F2CB4F6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft Manifest number: 0129 Signing time: Mon 09 Feb 2026 13:00:30 +0000 Manifest this update: Mon 09 Feb 2026 13:00:30 +0000 Manifest next update: Tue 10 Feb 2026 13:00:30 +0000 Files and hashes: 1: 3liIYKFLOUpzUSmEKu-tGnBKMoc.crl (hash: iueruzAj4ooxuiC5cM/6WbWY7qWH3OZtOzxvhS35aSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:3f:49:4e:d8:1e:5a:b2:27:77:a7:f2:cb:4f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de588860a14b394a735129842aefad1a704a3287 Validity Not Before: Feb 9 13:00:30 2026 GMT Not After : Feb 10 13:00:30 2026 GMT Subject: CN=1269f53b1a51115d3f454c283d50c02a6f10b934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:47:52:91:f6:f2:35:29:65:1e:0a:7a:c9:b8: bd:37:51:fd:75:ca:52:f4:2e:bd:b8:60:2d:0e:f4: a1:ed:19:d5:63:ef:9b:a4:7a:e1:90:e9:6c:ee:69: 27:72:86:a8:1d:c9:6a:0c:08:c9:ed:ad:07:8a:cc: 8e:86:44:42:9b:b8:79:57:d2:72:2a:fd:12:1d:e0: f0:41:39:a4:46:3c:be:7b:7d:e9:a8:61:59:e2:5c: b2:b2:95:86:04:08:ab:47:a3:b4:83:33:ae:36:2d: 65:0b:b9:36:88:3c:4d:4b:72:c5:a8:46:fc:da:62: 0e:c1:98:4f:d6:7c:ec:fb:03:e4:a0:e4:b1:eb:56: da:a6:5f:ee:12:5c:c3:92:d0:69:22:be:5d:d0:22: 58:4b:ce:14:c3:c5:84:ac:a8:dc:e4:8f:bf:85:2c: 60:3c:a1:48:26:93:f4:5e:7f:1d:31:9a:05:d2:22: 13:44:92:22:c6:b6:02:de:72:5b:64:03:84:b8:c2: 0c:44:80:3e:ce:2d:ff:d0:76:e2:c4:0d:ac:fa:e7: a5:c4:d7:06:a0:fc:1c:1f:f2:f8:32:26:39:00:4a: d6:6e:38:7d:50:8f:a9:87:2c:0a:65:23:b8:f9:2e: e1:27:7c:b1:da:17:3f:ee:94:b1:6d:da:75:80:05: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:69:F5:3B:1A:51:11:5D:3F:45:4C:28:3D:50:C0:2A:6F:10:B9:34 X509v3 Authority Key Identifier: keyid:DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4d:17:dc:59:0c:7b:79:00:bc:23:f1:ae:ed:bb:8e:0e:72: 43:73:d4:8b:0a:e3:9e:cc:94:78:0f:48:04:50:53:54:bf:43: 0e:d2:be:66:62:ac:b8:10:5c:12:72:73:f5:31:2a:fa:cb:b3: a2:72:c6:25:d7:73:b9:55:30:9e:05:09:a4:e5:b2:66:49:8b: 44:e6:82:1b:d1:cb:5b:4e:51:0c:a5:bd:3d:d4:4c:8e:3c:d4: cb:44:a6:3c:c0:cc:88:11:1f:68:a4:44:85:0f:f6:a8:6f:c4: 34:ce:05:7f:49:ac:2f:0f:82:0e:6e:a5:7f:0d:13:ec:b0:88: ac:29:3b:df:ee:d5:2f:f9:e1:9d:0d:fc:45:d8:3b:cc:09:0d: 52:63:ae:f8:cc:26:59:42:b0:2b:0a:33:3e:d2:0f:86:b3:34: c1:ba:a2:30:35:16:e5:f6:8c:0f:6e:f5:4b:07:24:e8:cf:ba: 57:88:99:f1:0f:c1:f5:d8:ee:c8:58:f7:f9:7e:11:2d:ed:71: 37:23:45:d6:f9:21:c5:94:99:20:5b:19:ff:d3:b0:af:a3:7b: 31:c1:17:ff:2a:75:d9:0f:91:a8:7c:60:49:e8:53:f7:14:5d: 05:aa:e3:f9:7d:38:c4:45:10:35:e2:2d:d4:1b:8f:19:c5:a7: f1:63:2e:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfT9JTtgeWrInd6fyy09vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNTg4ODYwYTE0YjM5NGE3MzUxMjk4NDJhZWZhZDFhNzA0 YTMyODcwHhcNMjYwMjA5MTMwMDMwWhcNMjYwMjEwMTMwMDMwWjAzMTEwLwYDVQQD EygxMjY5ZjUzYjFhNTExMTVkM2Y0NTRjMjgzZDUwYzAyYTZmMTBiOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EdSkfbyNSllHgp6ybi9N1H9dcpS 9C69uGAtDvSh7RnVY++bpHrhkOls7mkncoaoHclqDAjJ7a0HisyOhkRCm7h5V9Jy Kv0SHeDwQTmkRjy+e33pqGFZ4lyyspWGBAirR6O0gzOuNi1lC7k2iDxNS3LFqEb8 2mIOwZhP1nzs+wPkoOSx61bapl/uElzDktBpIr5d0CJYS84Uw8WErKjc5I+/hSxg PKFIJpP0Xn8dMZoF0iITRJIixrYC3nJbZAOEuMIMRIA+zi3/0HbixA2s+uelxNcG oPwcH/L4MiY5AErWbjh9UI+phywKZSO4+S7hJ3yx2hc/7pSxbdp1gAUzCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJp9TsaURFdP0VMKD1QwCpvELk0MB8GA1UdIwQY MBaAFN5YiGChSzlKc1EphCrvrRpwSjKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xpSVlLRkxPVXB6VVNtRUt1LXRHbkJLTW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTcwMzYtZmE0Yi00NzE0LTgzNDAt NjNmNjc5ZDdlZTFkLzEvM2xpSVlLRkxPVXB6VVNtRUt1LXRHbkJLTW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hNTcwMzYtZmE0Yi00NzE0LTgzNDAtNjNmNjc5ZDdlZTFk LzEvM2xpSVlLRkxPVXB6VVNtRUt1LXRHbkJLTW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfU0X3FkM e3kAvCPxru27jg5yQ3PUiwrjnsyUeA9IBFBTVL9DDtK+ZmKsuBBcEnJz9TEq+suz onLGJddzuVUwngUJpOWyZkmLROaCG9HLW05RDKW9PdRMjjzUy0SmPMDMiBEfaKRE hQ/2qG/ENM4Ff0msLw+CDm6lfw0T7LCIrCk73+7VL/nhnQ38Rdg7zAkNUmOu+Mwm WUKwKwozPtIPhrM0wbqiMDUW5faMD271Swck6M+6V4iZ8Q/B9djuyFj3+X4RLe1x NyNF1vkhxZSZIFsZ/9Owr6N7McEX/yp12Q+RqHxgSehT9xRdBarj+X04xEUQNeIt 1BuPGcWn8WMuYA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:52 2026 by rpki-client