This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft File: 1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json) Hash identifier: cL10A9Kv3lemSoTGYrqZVwSyXQnbDqV7xo1GXZA7Rb4= Subject key identifier: 38:08:F9:C3:F6:99:93:66:F3:7A:E0:CD:7C:1C:8C:06:9B:4B:6C:59 Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8 Certificate issuer: /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8 Certificate serial: 019C427D8F5B2110A4EEB40E1B5BB0AB8B48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft Manifest number: 0420 Signing time: Mon 09 Feb 2026 13:00:50 +0000 Manifest this update: Mon 09 Feb 2026 13:00:50 +0000 Manifest next update: Tue 10 Feb 2026 13:00:50 +0000 Files and hashes: 1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: 148oN6arTf3e/DCb/bttUKoZMyAHqgarHzexA7YOHnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:8f:5b:21:10:a4:ee:b4:0e:1b:5b:b0:ab:8b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8 Validity Not Before: Feb 9 13:00:50 2026 GMT Not After : Feb 10 13:00:50 2026 GMT Subject: CN=3808f9c3f6999366f37ae0cd7c1c8c069b4b6c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:74:b1:b7:50:1c:50:fe:1b:f2:6f:a1:06: cc:51:81:17:a3:a8:b9:38:71:c6:43:c4:f5:71:26: c8:1b:77:ac:74:87:a0:3f:a9:8c:68:47:c9:5d:66: 2f:51:a8:1c:31:4f:b2:ac:8a:c5:e9:d8:fc:4d:b1: 88:fe:ab:14:16:b1:ce:3a:dc:e8:1a:2e:2f:e4:13: fd:92:d8:21:29:cd:fe:1a:54:c5:4a:97:48:61:05: d8:01:d8:74:5a:79:6d:5b:d3:63:67:96:4b:69:2f: 83:67:a4:44:92:a3:1a:08:c4:5d:42:b1:e7:3d:a8: 46:ed:7f:b8:c7:25:64:d3:fd:17:50:bf:48:e1:2f: 22:f1:11:12:0b:04:29:bd:84:a0:4f:2b:6e:8e:d2: 86:bc:db:02:04:cd:00:47:f3:5d:40:af:47:af:10: 37:09:ab:0e:23:ac:bf:b5:a9:c5:41:d8:48:b0:f8: fc:09:8d:4d:bb:9d:31:bb:5d:53:9a:e6:dc:f1:ef: 21:74:be:71:32:a9:1f:9a:ca:44:34:fc:90:7f:29: c9:1a:08:7b:93:cb:ce:ee:53:df:f9:50:32:de:bc: 73:fe:c0:60:8b:33:55:7b:67:6e:a7:e7:d3:14:13: 11:11:72:4d:80:07:07:ee:0e:91:2b:83:42:49:a1: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:08:F9:C3:F6:99:93:66:F3:7A:E0:CD:7C:1C:8C:06:9B:4B:6C:59 X509v3 Authority Key Identifier: keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:92:2f:2e:23:ad:d4:bc:ad:d2:36:0b:93:76:e7:9c:54:e9: 2d:52:86:c3:b3:df:5f:be:e6:50:53:b1:31:61:64:2d:b0:af: 67:17:57:9f:55:52:f9:5a:66:bb:fb:ef:e3:7b:fa:53:66:d9: bd:f7:74:8d:56:dc:06:6b:21:3a:78:73:25:e3:84:8a:28:a2: f1:4b:38:20:85:07:87:2b:f4:b0:6f:12:2a:f9:fa:47:29:64: 00:8b:9f:51:08:1b:00:b8:ab:d0:0e:16:23:19:e9:ff:44:ab: 6a:bc:c2:69:35:35:ae:92:f0:b4:d9:fc:77:b6:77:59:f9:29: 61:6f:55:ab:81:66:28:9c:12:0d:ac:96:21:4d:60:65:53:72: e9:7c:13:4e:d5:e4:4b:8e:1e:59:8d:ef:69:17:61:db:ac:ee: 04:5d:c2:54:c1:56:76:a4:1a:e9:ff:9e:25:e1:22:61:14:c5: 1b:15:c6:c0:87:56:8e:3b:db:14:6e:06:74:94:43:3f:f8:d2: 6c:4c:b2:41:f8:9e:3a:8e:06:f0:10:d7:33:e0:4b:a4:28:eb: ef:99:77:84:61:07:c4:b6:7f:f6:0f:e4:5b:e9:8c:6f:35:7e: 26:10:5f:f7:1f:bc:c8:1a:cd:29:b4:1c:6d:30:e2:c9:19:70: 06:a9:c3:04 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCfY9bIRCk7rQOG1uwq4tIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzQ3YjE4ZGI4MzBmM2ViZTMzODZmYzlmYzhkYTk1ZDkz MjdhZDgwHhcNMjYwMjA5MTMwMDUwWhcNMjYwMjEwMTMwMDUwWjAzMTEwLwYDVQQD EygzODA4ZjljM2Y2OTk5MzY2ZjM3YWUwY2Q3YzFjOGMwNjliNGI2YzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/V0sbdQHFD+G/JvoQbMUYEXo6i5 OHHGQ8T1cSbIG3esdIegP6mMaEfJXWYvUagcMU+yrIrF6dj8TbGI/qsUFrHOOtzo Gi4v5BP9ktghKc3+GlTFSpdIYQXYAdh0WnltW9NjZ5ZLaS+DZ6REkqMaCMRdQrHn PahG7X+4xyVk0/0XUL9I4S8i8RESCwQpvYSgTytujtKGvNsCBM0AR/NdQK9HrxA3 CasOI6y/tanFQdhIsPj8CY1Nu50xu11Tmubc8e8hdL5xMqkfmspENPyQfynJGgh7 k8vO7lPf+VAy3rxz/sBgizNVe2dup+fTFBMREXJNgAcH7g6RK4NCSaGwGwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDgI+cP2mZNm83rgzXwcjAabS2xZMB8GA1UdIwQY MBaAFPt0exjbgw8+vjOG/J/I2pXZMnrYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zUjdHTnVERHo2LU00YjhuOGphbGRreWV0Zy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvZjJmOWVmLWQ2N2YtNDk0Yy1iNzJk LWJiZjQ5Yzc3YWYzOC8xLzEtM1I3R051RER6Ni1NNGI4bjhqYWxka3lldGcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJjL2YyZjllZi1kNjdmLTQ5NGMtYjcyZC1iYmY0OWM3N2Fm MzgvMS8xLTNSN0dOdUREejYtTTRiOG44amFsZGt5ZXRnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJIv LiOt1Lyt0jYLk3bnnFTpLVKGw7PfX77mUFOxMWFkLbCvZxdXn1VS+Vpmu/vv43v6 U2bZvfd0jVbcBmshOnhzJeOEiiii8Us4IIUHhyv0sG8SKvn6RylkAIufUQgbALir 0A4WIxnp/0SrarzCaTU1rpLwtNn8d7Z3WfkpYW9Vq4FmKJwSDayWIU1gZVNy6XwT TtXkS44eWY3vaRdh26zuBF3CVMFWdqQa6f+eJeEiYRTFGxXGwIdWjjvbFG4GdJRD P/jSbEyyQfieOo4G8BDXM+BLpCjr75l3hGEHxLZ/9g/kW+mMbzV+JhBf9x+8yBrN KbQcbTDiyRlwBqnDBA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:07 2026 by rpki-client