This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft File: fAMRalBjzm8X_OpTUcneSgxosN0.mft (raw, json) Hash identifier: XOABqK6PGFSkB+wX6YLO+GZ/8XpvK+TAye3ELCE3ozQ= Subject key identifier: 3E:F3:E1:60:DC:CE:FC:15:08:F4:8E:70:B9:57:F1:3F:BD:D5:9A:03 Authority key identifier: 7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD Certificate issuer: /CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd Certificate serial: 019C40FCDC28BB6D3C10DE110F3EA8CEFE0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft Manifest number: 0CC6 Signing time: Mon 09 Feb 2026 06:00:39 +0000 Manifest this update: Mon 09 Feb 2026 06:00:39 +0000 Manifest next update: Tue 10 Feb 2026 06:00:39 +0000 Files and hashes: 1: fAMRalBjzm8X_OpTUcneSgxosN0.crl (hash: 5PrMBm3rsngZpZJ0PTGXXoAMecNNzVGIRcJ8QgC0gKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fc:dc:28:bb:6d:3c:10:de:11:0f:3e:a8:ce:fe:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd Validity Not Before: Feb 9 06:00:39 2026 GMT Not After : Feb 10 06:00:39 2026 GMT Subject: CN=3ef3e160dccefc1508f48e70b957f13fbdd59a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:5f:db:ec:46:d5:0d:25:9a:7a:5d:de:a2: 90:e7:e7:d7:96:a3:c8:ed:30:06:fe:a5:f2:37:fd: c7:c1:77:6e:98:57:a0:36:3b:a2:64:23:41:82:b9: 6e:69:91:5a:9c:e6:4d:fa:7b:02:c0:59:d2:d8:1a: 7a:7e:5d:8e:87:6f:d0:80:aa:cb:ee:bd:0e:17:aa: 93:20:99:a9:f5:40:fe:10:e3:0a:b6:e1:7e:24:02: 78:c1:38:71:1e:4a:49:69:90:41:83:f7:f6:e7:04: 81:c1:b9:b9:93:9c:c5:61:58:09:2f:73:98:08:ba: b1:0d:56:8a:1e:07:f9:94:a4:e3:2b:1a:e7:29:d2: 85:7e:09:7e:f7:58:0a:da:98:c2:7c:cd:7e:28:75: 1f:78:80:96:2c:07:66:3d:e6:44:67:ef:c4:95:39: fe:dc:5f:3e:2a:4b:a9:75:92:62:2a:86:eb:05:3c: 54:1f:a0:3b:18:91:48:52:a1:01:53:9e:0d:d6:a8: 94:b4:2e:f0:7e:23:b4:58:57:22:03:46:67:44:63: 18:ab:83:1a:c6:81:f1:de:bd:b1:59:65:a0:d2:a4: a8:cd:32:a7:56:86:6e:3b:98:71:f1:f6:55:46:d0: dd:d4:5c:44:07:21:b4:89:d5:86:da:f2:e9:14:16: 75:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F3:E1:60:DC:CE:FC:15:08:F4:8E:70:B9:57:F1:3F:BD:D5:9A:03 X509v3 Authority Key Identifier: keyid:7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:bd:22:e7:73:f3:0b:e7:1a:37:73:d4:90:5b:f9:b7:57:98: c3:d7:b8:d6:b4:9b:1c:eb:d6:a4:ba:dc:12:8d:aa:80:8e:11: b5:6e:8d:b1:57:a6:55:a1:4b:c5:72:fe:ea:b5:7e:d8:62:85: 5c:b6:05:b4:d0:03:97:d6:d9:84:21:9d:fb:4b:b4:34:7d:9e: 0e:5b:ab:09:77:d9:10:93:72:69:7e:11:40:83:d7:be:2c:d4: 73:6d:9e:4f:aa:c7:fb:4f:31:8d:03:4d:04:d7:73:e8:1e:5f: 67:f8:f3:1a:93:6c:c4:e1:ad:89:b0:36:c8:e9:a9:bf:4c:61: 24:b1:35:c9:c3:69:fd:c8:63:78:35:39:5c:f3:2f:66:89:ed: 52:f2:69:a0:24:16:45:8a:5c:ca:a1:60:cb:6f:e4:be:62:c2: a9:b5:de:ea:e6:4a:d2:ba:a8:94:32:6e:fe:f0:65:e2:48:f1: a6:a1:4f:60:e8:d8:44:ef:b2:e9:39:61:d9:99:ce:25:1b:25: 90:da:5d:60:5f:27:be:39:46:08:b9:c7:16:96:28:f9:82:0f: 8e:b2:76:c2:51:18:ad:6b:f2:25:a9:0d:e7:80:22:73:a7:4c: ba:96:fc:5b:3d:4d:e9:24:03:d6:60:5f:7b:a9:69:9d:65:43: 76:c4:c1:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/Nwou208EN4RDz6ozv4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMDMxMTZhNTA2M2NlNmYxN2ZjZWE1MzUxYzlkZTRhMGM2 OGIwZGQwHhcNMjYwMjA5MDYwMDM5WhcNMjYwMjEwMDYwMDM5WjAzMTEwLwYDVQQD EygzZWYzZTE2MGRjY2VmYzE1MDhmNDhlNzBiOTU3ZjEzZmJkZDU5YTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWVf2+xG1Q0lmnpd3qKQ5+fXlqPI 7TAG/qXyN/3HwXdumFegNjuiZCNBgrluaZFanOZN+nsCwFnS2Bp6fl2Oh2/QgKrL 7r0OF6qTIJmp9UD+EOMKtuF+JAJ4wThxHkpJaZBBg/f25wSBwbm5k5zFYVgJL3OY CLqxDVaKHgf5lKTjKxrnKdKFfgl+91gK2pjCfM1+KHUfeICWLAdmPeZEZ+/ElTn+ 3F8+KkupdZJiKobrBTxUH6A7GJFIUqEBU54N1qiUtC7wfiO0WFciA0ZnRGMYq4Ma xoHx3r2xWWWg0qSozTKnVoZuO5hx8fZVRtDd1FxEByG0idWG2vLpFBZ1+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7z4WDczvwVCPSOcLlX8T+91ZoDMB8GA1UdIwQY MBaAFHwDEWpQY85vF/zqU1HJ3koMaLDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkFNUmFsQmp6bThYX09wVFVjbmVTZ3hvc04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YmRjNGQtMDg5OS00NzA5LTk0MjQt ODkxYjQ1NWMyYzUzLzEvZkFNUmFsQmp6bThYX09wVFVjbmVTZ3hvc04wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80YmRjNGQtMDg5OS00NzA5LTk0MjQtODkxYjQ1NWMyYzUz LzEvZkFNUmFsQmp6bThYX09wVFVjbmVTZ3hvc04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAur0i53Pz C+caN3PUkFv5t1eYw9e41rSbHOvWpLrcEo2qgI4RtW6NsVemVaFLxXL+6rV+2GKF XLYFtNADl9bZhCGd+0u0NH2eDlurCXfZEJNyaX4RQIPXvizUc22eT6rH+08xjQNN BNdz6B5fZ/jzGpNsxOGtibA2yOmpv0xhJLE1ycNp/chjeDU5XPMvZontUvJpoCQW RYpcyqFgy2/kvmLCqbXe6uZK0rqolDJu/vBl4kjxpqFPYOjYRO+y6Tlh2ZnOJRsl kNpdYF8nvjlGCLnHFpYo+YIPjrJ2wlEYrWvyJakN54Aic6dMupb8Wz1N6SQD1mBf e6lpnWVDdsTB8A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:20 2026 by rpki-client