This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json) Hash identifier: UCinTw55ljMA0qMyqRvKFJ99sxOpBmmXqSE8CxIN2KU= Subject key identifier: 48:E6:60:3D:5B:19:64:06:DB:D0:48:C5:2E:D1:4A:31:F5:43:F0:9C Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c Certificate serial: 019C451051F7128F62788C9EA34BF0D2CC7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft Manifest number: 0509 Signing time: Tue 10 Feb 2026 01:00:23 +0000 Manifest this update: Tue 10 Feb 2026 01:00:23 +0000 Manifest next update: Wed 11 Feb 2026 01:00:23 +0000 Files and hashes: 1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: ls9k1aCEY4AeHlldqELcJQHt8BT68dbWTOanWKeMIM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:51:f7:12:8f:62:78:8c:9e:a3:4b:f0:d2:cc:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c Validity Not Before: Feb 10 01:00:23 2026 GMT Not After : Feb 11 01:00:23 2026 GMT Subject: CN=48e6603d5b196406dbd048c52ed14a31f543f09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ec:7c:90:4f:f1:dc:e8:b3:0d:ef:07:13:7e: e5:36:58:2a:0f:a8:5b:79:2f:d1:fc:20:10:86:a0: 0e:0b:30:b3:a4:58:28:1e:aa:11:f4:e7:a1:62:d3: 2f:08:33:73:dc:ba:c8:f3:fd:85:b1:69:f4:ee:3e: 00:03:31:f7:06:32:b6:07:e1:a9:37:81:7e:3d:80: ba:df:b0:84:2c:a0:fc:3e:47:11:3e:9e:a3:11:5b: 72:22:72:44:c7:30:38:ae:1a:01:ba:7b:6a:a3:53: bf:5c:18:3e:57:02:d0:e5:73:7f:04:ff:3f:10:49: b5:b2:82:d8:3a:65:cf:f9:a9:3c:f2:1a:34:81:54: 53:63:34:97:91:62:4f:5a:28:c2:6a:39:49:0a:0f: fa:4c:8d:ff:86:22:e1:b3:b8:8c:21:fa:f2:05:b2: 32:a7:85:3a:50:2f:0b:62:23:b0:37:bc:e7:34:41: d2:2a:35:e1:f2:cd:f2:0c:95:fe:af:88:41:82:c1: 9f:83:0c:80:bd:e8:48:a6:c4:6f:62:26:5f:f8:69: 4b:83:c9:d8:2e:a5:f2:36:70:21:6a:26:a3:63:1b: 77:b9:29:c8:fb:42:fb:12:c4:60:7a:09:86:ba:13: 3a:a4:f1:62:ec:cb:d1:40:9f:f7:a0:7a:2c:e2:60: 68:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E6:60:3D:5B:19:64:06:DB:D0:48:C5:2E:D1:4A:31:F5:43:F0:9C X509v3 Authority Key Identifier: keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:de:fa:06:6c:1d:d2:3f:9f:c8:61:7a:30:40:3f:fe:0f:28: d3:63:4f:7f:01:2c:d9:35:65:04:35:98:2e:4a:cb:1d:18:45: 78:9c:3b:08:48:c0:e6:25:46:12:d9:2a:9b:e2:38:66:fc:36: ff:5b:64:e4:b6:11:d8:69:f5:c4:65:d5:f7:68:41:43:fe:b7: 4d:00:df:07:16:1e:46:f6:e5:76:dd:30:0c:d2:9d:d5:6e:1d: 7f:45:40:4a:4c:6e:96:34:15:15:85:97:bc:bc:ce:ea:67:ba: 9c:a2:00:e9:bb:f5:a7:0d:15:72:22:2d:65:6a:06:71:ec:76: 4d:ff:95:30:c1:f4:42:4b:43:11:32:99:9f:5b:11:b5:c1:72: 9c:40:b0:51:e5:21:3a:e1:43:d5:21:01:9f:ca:71:de:0d:44: 7a:92:ec:19:a3:ab:d1:56:5d:c6:c2:f4:c1:40:63:bf:88:a9: 39:20:30:47:44:da:08:c0:ae:62:c7:94:a6:b7:27:af:92:95: 9b:0e:1f:7f:be:f0:6b:47:6f:76:e6:e9:ad:75:86:10:50:4f: 4b:d0:a2:4a:ca:a4:56:03:cd:b9:ec:76:8a:a2:58:dc:58:5e: 28:0c:f7:21:e1:ab:2a:8e:cb:99:b3:7d:a0:fa:5e:bf:cf:81: 42:87:68:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEFH3Eo9ieIyeo0vw0sx9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNzYwM2Q1NTU0MWMzNTlmOGU4NzQ0NzdjYmU4YWYyMWY2 OTc4N2MwHhcNMjYwMjEwMDEwMDIzWhcNMjYwMjExMDEwMDIzWjAzMTEwLwYDVQQD Eyg0OGU2NjAzZDViMTk2NDA2ZGJkMDQ4YzUyZWQxNGEzMWY1NDNmMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+x8kE/x3OizDe8HE37lNlgqD6hb eS/R/CAQhqAOCzCzpFgoHqoR9OehYtMvCDNz3LrI8/2FsWn07j4AAzH3BjK2B+Gp N4F+PYC637CELKD8PkcRPp6jEVtyInJExzA4rhoBuntqo1O/XBg+VwLQ5XN/BP8/ EEm1soLYOmXP+ak88ho0gVRTYzSXkWJPWijCajlJCg/6TI3/hiLhs7iMIfryBbIy p4U6UC8LYiOwN7znNEHSKjXh8s3yDJX+r4hBgsGfgwyAvehIpsRvYiZf+GlLg8nY LqXyNnAhaiajYxt3uSnI+0L7EsRgegmGuhM6pPFi7MvRQJ/3oHos4mBoDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjmYD1bGWQG29BIxS7RSjH1Q/CcMB8GA1UdIwQY MBaAFGt2A9VVQcNZ+Oh0R3y+ivIfaXh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTNZRDFWVkJ3MW40NkhSSGZMNks4aDlwZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYzU4OWYtMmJkMi00OWJkLWJkODEt NTdlNjMyMGIxMThmLzEvYTNZRDFWVkJ3MW40NkhSSGZMNks4aDlwZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zYzU4OWYtMmJkMi00OWJkLWJkODEtNTdlNjMyMGIxMThm LzEvYTNZRDFWVkJ3MW40NkhSSGZMNks4aDlwZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbd76Bmwd 0j+fyGF6MEA//g8o02NPfwEs2TVlBDWYLkrLHRhFeJw7CEjA5iVGEtkqm+I4Zvw2 /1tk5LYR2Gn1xGXV92hBQ/63TQDfBxYeRvbldt0wDNKd1W4df0VASkxuljQVFYWX vLzO6me6nKIA6bv1pw0VciItZWoGcex2Tf+VMMH0QktDETKZn1sRtcFynECwUeUh OuFD1SEBn8px3g1EepLsGaOr0VZdxsL0wUBjv4ipOSAwR0TaCMCuYseUprcnr5KV mw4ff77wa0dvdubprXWGEFBPS9CiSsqkVgPNuex2iqJY3FheKAz3IeGrKo7LmbN9 oPpev8+BQododw== -----END CERTIFICATE-----Generated at Tue Feb 10 03:00:02 2026 by rpki-client