This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json) Hash identifier: u2efzSPlNE+V4AVvnevGGJy22/rTCspzcMbOShX2EfI= Subject key identifier: 03:66:A1:00:FE:D0:82:4F:A4:59:1D:A0:C9:43:D6:FD:A2:76:D5:76 Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73 Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973 Certificate serial: 019C427DDFAFA3820EF07B6C918B0576A168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft Manifest number: 076F Signing time: Mon 09 Feb 2026 13:01:11 +0000 Manifest this update: Mon 09 Feb 2026 13:01:11 +0000 Manifest next update: Tue 10 Feb 2026 13:01:11 +0000 Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: wjqI9SEKPz0bg+VQL4902/AVTgkh96GA1WRzbSAqU98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:df:af:a3:82:0e:f0:7b:6c:91:8b:05:76:a1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477ec15ca4f924d966967545124f655310d2c973 Validity Not Before: Feb 9 13:01:11 2026 GMT Not After : Feb 10 13:01:11 2026 GMT Subject: CN=0366a100fed0824fa4591da0c943d6fda276d576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:c8:70:be:d1:b4:19:6f:74:65:17:1f:f9: 94:ac:a3:c1:cc:bb:f6:b8:aa:ec:d8:7e:75:b3:3c: 6c:e8:8c:9c:fa:64:c2:9d:9e:b9:5f:09:b9:9f:ce: bf:33:26:26:13:63:2c:39:91:5c:d9:36:fe:24:c9: 27:6b:73:a2:06:b3:5c:6f:73:9f:86:80:14:96:f9: d0:8d:8f:2d:1d:4c:f7:59:34:57:09:b9:99:d1:cd: 26:fb:66:50:b8:06:2c:db:0e:1a:94:d8:5c:55:a9: b5:92:c4:f9:b4:5a:bd:9a:7e:c3:db:f5:d1:9f:4a: 76:29:79:c8:e0:78:d3:fb:b2:31:b3:53:2d:ce:7a: ba:d8:ef:ce:a4:ee:52:80:93:19:04:66:d3:69:1d: 39:76:c2:31:06:88:99:0b:ce:34:52:87:48:8e:a2: 9e:5c:79:73:9a:a8:cf:93:3b:e7:2e:ef:50:33:6a: 41:d6:ea:b2:e7:bf:e7:98:9d:50:e4:c0:d8:04:4e: 63:08:00:73:e4:28:5e:38:6a:bb:a9:a8:bc:58:b4: 70:fb:99:e2:61:66:fc:c7:bc:f3:fb:14:44:87:f8: 9f:b2:f1:d0:a7:87:c4:2b:6d:84:d3:86:52:d3:4d: 6c:df:2b:90:ed:2e:6a:f0:67:5b:c0:32:3e:40:b6: 07:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:66:A1:00:FE:D0:82:4F:A4:59:1D:A0:C9:43:D6:FD:A2:76:D5:76 X509v3 Authority Key Identifier: keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:40:8a:a3:aa:e9:2b:12:b9:f6:21:d5:b1:78:8e:d8:0a:02: 24:d1:4f:61:95:6d:3e:93:18:3c:17:f9:d4:1b:e0:26:06:95: df:36:15:95:d3:e4:4a:e1:74:c7:a4:13:87:72:76:2f:3b:40: b0:eb:bf:2b:58:1a:ea:aa:6c:8d:ce:9d:17:be:fa:eb:3a:46: 59:df:4b:03:eb:cc:4c:66:e2:dc:a6:da:27:34:c1:ec:01:d2: eb:80:e1:e0:a3:f0:7f:f8:82:a0:b5:2f:5c:39:09:52:00:55: 2b:ce:47:f2:7c:52:94:b1:19:3d:ac:5b:a8:57:c5:c1:4c:8c: 0f:0c:9f:79:9c:53:06:98:07:e1:af:0f:6f:dc:ce:3d:80:af: 49:00:09:9e:26:33:a8:4e:e2:ef:97:2c:d5:67:a8:12:fc:0a: 2f:29:f9:53:f7:38:39:69:20:a2:12:5a:23:94:f7:40:4e:85: e2:28:27:f3:6d:4e:50:d6:4f:40:73:46:e5:cc:92:6b:a7:89: 7b:6d:a9:5a:cc:69:4d:89:a6:54:05:08:00:16:94:bd:6b:0e: 64:c3:c8:37:71:b1:76:c1:f1:04:bf:8d:66:9f:b4:ae:11:57: c3:38:e8:6f:0e:cb:6e:d5:fa:a8:66:80:2e:8f:03:d3:b1:6d: 4b:c0:9b:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfd+vo4IO8HtskYsFdqFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3N2VjMTVjYTRmOTI0ZDk2Njk2NzU0NTEyNGY2NTUzMTBk MmM5NzMwHhcNMjYwMjA5MTMwMTExWhcNMjYwMjEwMTMwMTExWjAzMTEwLwYDVQQD EygwMzY2YTEwMGZlZDA4MjRmYTQ1OTFkYTBjOTQzZDZmZGEyNzZkNTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRzIcL7RtBlvdGUXH/mUrKPBzLv2 uKrs2H51szxs6Iyc+mTCnZ65Xwm5n86/MyYmE2MsOZFc2Tb+JMkna3OiBrNcb3Of hoAUlvnQjY8tHUz3WTRXCbmZ0c0m+2ZQuAYs2w4alNhcVam1ksT5tFq9mn7D2/XR n0p2KXnI4HjT+7Ixs1Mtznq62O/OpO5SgJMZBGbTaR05dsIxBoiZC840UodIjqKe XHlzmqjPkzvnLu9QM2pB1uqy57/nmJ1Q5MDYBE5jCABz5CheOGq7qai8WLRw+5ni YWb8x7zz+xREh/ifsvHQp4fEK22E04ZS001s3yuQ7S5q8GdbwDI+QLYHJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANmoQD+0IJPpFkdoMlD1v2idtV2MB8GA1UdIwQY MBaAFEd+wVyk+STZZpZ1RRJPZVMQ0slzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjM3QlhLVDVKTmxtbG5WRkVrOWxVeERTeVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYTNlNDktYzVkNC00NjliLThlODUt M2M5YTY2YmFjMzk1LzEvUjM3QlhLVDVKTmxtbG5WRkVrOWxVeERTeVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYTNlNDktYzVkNC00NjliLThlODUtM2M5YTY2YmFjMzk1 LzEvUjM3QlhLVDVKTmxtbG5WRkVrOWxVeERTeVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakCKo6rp KxK59iHVsXiO2AoCJNFPYZVtPpMYPBf51BvgJgaV3zYVldPkSuF0x6QTh3J2LztA sOu/K1ga6qpsjc6dF7766zpGWd9LA+vMTGbi3KbaJzTB7AHS64Dh4KPwf/iCoLUv XDkJUgBVK85H8nxSlLEZPaxbqFfFwUyMDwyfeZxTBpgH4a8Pb9zOPYCvSQAJniYz qE7i75cs1WeoEvwKLyn5U/c4OWkgohJaI5T3QE6F4ign821OUNZPQHNG5cySa6eJ e22pWsxpTYmmVAUIABaUvWsOZMPIN3GxdsHxBL+NZp+0rhFXwzjobw7LbtX6qGaA Lo8D07FtS8Cb5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:40 2026 by rpki-client