This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft File: h87xYB8_i1Dm11QuW7u9xgO1LZI.mft (raw, json) Hash identifier: /J2Z2g7i4PVmvZA4d28Imw3WuXeoIqcrFitkuoKmJUw= Subject key identifier: 01:2D:62:44:1C:3F:E3:F6:79:90:21:C5:18:48:82:E6:B0:B4:D9:5D Authority key identifier: 87:CE:F1:60:1F:3F:8B:50:E6:D7:54:2E:5B:BB:BD:C6:03:B5:2D:92 Certificate issuer: /CN=87cef1601f3f8b50e6d7542e5bbbbdc603b52d92 Certificate serial: 019C42EB3B0A0193DB4CF3F5A295E2414C03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h87xYB8_i1Dm11QuW7u9xgO1LZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft Manifest number: 21 Signing time: Mon 09 Feb 2026 15:00:38 +0000 Manifest this update: Mon 09 Feb 2026 15:00:38 +0000 Manifest next update: Tue 10 Feb 2026 15:00:38 +0000 Files and hashes: 1: h87xYB8_i1Dm11QuW7u9xgO1LZI.crl (hash: 6ffmF19vXZTRYG7HnVXh22Sq8zB9M3Rl8m5/oM3uvlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft rsync://rpki.ripe.net/repository/DEFAULT/h87xYB8_i1Dm11QuW7u9xgO1LZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:3b:0a:01:93:db:4c:f3:f5:a2:95:e2:41:4c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87cef1601f3f8b50e6d7542e5bbbbdc603b52d92 Validity Not Before: Feb 9 15:00:38 2026 GMT Not After : Feb 10 15:00:38 2026 GMT Subject: CN=012d62441c3fe3f6799021c5184882e6b0b4d95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:a1:a4:a1:bc:ad:d5:6e:0b:d9:70:ff:ed: ca:5c:f1:be:91:66:ed:14:91:ad:8e:3a:10:c9:56: be:e3:2e:81:65:dc:a2:34:7b:a7:60:51:a5:1a:04: 32:bf:6c:b7:5f:23:2c:85:fc:47:8e:d9:54:cf:4c: 11:a9:0e:6b:e7:d0:cb:94:29:82:df:e0:f3:23:e0: 01:d9:3a:86:64:14:5c:a6:43:e8:2e:70:2d:c6:61: f5:00:69:e8:95:70:a4:d6:13:c9:e5:d6:cb:2a:0d: 19:89:22:f5:93:0d:b8:12:88:38:a5:1d:a8:e4:fd: 94:05:9d:b9:a5:70:78:63:78:b9:cc:57:fa:75:91: 97:dd:d8:1d:82:20:9e:b5:ed:72:13:91:19:1d:9a: fc:a6:f1:96:3d:56:c1:13:b9:4c:bc:46:29:01:3c: 82:d1:6c:24:40:f2:6d:35:2d:7a:fb:70:b9:c6:67: b4:f5:3b:e6:64:0b:70:64:2f:c0:50:f7:cc:91:46: 0f:a0:ec:e3:0e:69:a4:6b:9f:7f:47:b8:2b:3a:a6: d5:6f:80:db:cb:57:21:d8:17:82:46:dc:e9:5b:d4: 53:b8:f5:7e:b1:ca:23:0b:32:27:40:aa:b1:50:94: 26:4f:24:5b:61:97:33:49:fc:7d:34:60:27:f0:95: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2D:62:44:1C:3F:E3:F6:79:90:21:C5:18:48:82:E6:B0:B4:D9:5D X509v3 Authority Key Identifier: keyid:87:CE:F1:60:1F:3F:8B:50:E6:D7:54:2E:5B:BB:BD:C6:03:B5:2D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h87xYB8_i1Dm11QuW7u9xgO1LZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:9e:98:e3:bb:61:0f:a7:3a:ad:40:56:35:a8:44:b2:2e:22: 0a:78:d1:f7:68:6a:c4:b5:f1:6f:78:41:37:35:8c:34:c8:2f: e4:0b:24:d3:9b:2d:24:2b:93:45:e7:11:c0:62:df:af:a3:9e: 23:7b:ab:b8:53:da:2a:d2:f2:ee:f2:93:27:5e:e4:37:a1:a0: d3:ae:18:99:5d:c2:83:d0:ef:78:51:ce:84:59:4c:e2:5b:6e: 02:e0:a3:36:92:e3:f6:90:e6:10:27:49:bd:b7:67:63:cd:48: d9:85:0b:f7:f6:17:41:df:23:8f:3b:ef:52:37:b2:23:b0:a6: 37:7c:57:b4:3e:8d:01:fa:dd:7c:af:af:91:bf:90:e0:0c:16: c8:f9:83:8f:54:3c:b5:cf:b7:07:f4:4a:9b:36:33:d4:e5:89: 02:53:72:90:6d:7e:b4:95:07:39:be:2e:45:22:ab:7c:dc:77: 22:65:82:7f:71:9d:64:b3:7e:bf:5d:fd:88:14:6e:89:7e:44: 10:83:4f:89:20:29:a9:dc:f9:4a:35:37:3f:45:49:af:11:c2: a8:ef:cd:fe:0d:4b:5d:38:97:53:85:62:ca:03:0d:39:aa:c6: db:64:77:a6:dd:47:03:92:3e:7c:43:01:c0:ce:dd:1a:01:a6: 04:96:08:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6zsKAZPbTPP1opXiQUwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3Y2VmMTYwMWYzZjhiNTBlNmQ3NTQyZTViYmJiZGM2MDNi NTJkOTIwHhcNMjYwMjA5MTUwMDM4WhcNMjYwMjEwMTUwMDM4WjAzMTEwLwYDVQQD EygwMTJkNjI0NDFjM2ZlM2Y2Nzk5MDIxYzUxODQ4ODJlNmIwYjRkOTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7+hpKG8rdVuC9lw/+3KXPG+kWbt FJGtjjoQyVa+4y6BZdyiNHunYFGlGgQyv2y3XyMshfxHjtlUz0wRqQ5r59DLlCmC 3+DzI+AB2TqGZBRcpkPoLnAtxmH1AGnolXCk1hPJ5dbLKg0ZiSL1kw24Eog4pR2o 5P2UBZ25pXB4Y3i5zFf6dZGX3dgdgiCete1yE5EZHZr8pvGWPVbBE7lMvEYpATyC 0WwkQPJtNS16+3C5xme09TvmZAtwZC/AUPfMkUYPoOzjDmmka59/R7grOqbVb4Db y1ch2BeCRtzpW9RTuPV+scojCzInQKqxUJQmTyRbYZczSfx9NGAn8JW9pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEtYkQcP+P2eZAhxRhIguawtNldMB8GA1UdIwQY MBaAFIfO8WAfP4tQ5tdULlu7vcYDtS2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDg3eFlCOF9pMURtMTFRdVc3dTl4Z08xTFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85ZTNmZmMtYTY1ZC00NjRjLTg4Nzct ZDFmOTA1ZjkxMWY3LzEvaDg3eFlCOF9pMURtMTFRdVc3dTl4Z08xTFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85ZTNmZmMtYTY1ZC00NjRjLTg4NzctZDFmOTA1ZjkxMWY3 LzEvaDg3eFlCOF9pMURtMTFRdVc3dTl4Z08xTFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt56Y47th D6c6rUBWNahEsi4iCnjR92hqxLXxb3hBNzWMNMgv5Ask05stJCuTRecRwGLfr6Oe I3uruFPaKtLy7vKTJ17kN6Gg064YmV3Cg9DveFHOhFlM4ltuAuCjNpLj9pDmECdJ vbdnY81I2YUL9/YXQd8jjzvvUjeyI7CmN3xXtD6NAfrdfK+vkb+Q4AwWyPmDj1Q8 tc+3B/RKmzYz1OWJAlNykG1+tJUHOb4uRSKrfNx3ImWCf3GdZLN+v139iBRuiX5E EINPiSApqdz5SjU3P0VJrxHCqO/N/g1LXTiXU4ViygMNOarG22R3pt1HA5I+fEMB wM7dGgGmBJYI8w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:22 2026 by rpki-client