This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft File: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft (raw, json) Hash identifier: lR4mMqXHQrmpTyh9iPcJbXJsl/s+dSnHemqFpxnejXw= Subject key identifier: 93:33:AD:61:F5:1A:4C:7F:92:C4:BB:8F:88:E3:7D:00:9E:31:FE:F6 Authority key identifier: DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6 Certificate issuer: /CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6 Certificate serial: 019C41D88A7314A33C0D0622C21597FF06BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft Manifest number: 0344 Signing time: Mon 09 Feb 2026 10:00:36 +0000 Manifest this update: Mon 09 Feb 2026 10:00:36 +0000 Manifest next update: Tue 10 Feb 2026 10:00:36 +0000 Files and hashes: 1: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl (hash: Q9gYNSA2VxKuhEUtJEYn6B0ZSWMVJmNdhy/2PSEXDQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:8a:73:14:a3:3c:0d:06:22:c2:15:97:ff:06:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6 Validity Not Before: Feb 9 10:00:36 2026 GMT Not After : Feb 10 10:00:36 2026 GMT Subject: CN=9333ad61f51a4c7f92c4bb8f88e37d009e31fef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:f1:b7:97:03:34:75:ae:00:62:f5:a4:2a: fa:80:4e:b2:3f:2a:00:2f:8d:c1:23:fd:2a:89:c6: 27:b4:05:8f:4f:45:68:fe:9b:b1:39:d6:78:3a:29: 0c:8d:9b:fe:83:c7:b5:52:16:fd:b7:9e:89:9e:e2: 57:54:2d:d6:0f:06:7c:6f:a5:70:dd:00:29:8c:5f: 62:07:66:69:a7:ff:5e:be:31:8d:5a:f9:c8:c2:f3: 73:3b:1c:57:eb:03:a6:9e:1b:12:b6:d8:06:7d:91: f5:55:e1:07:55:f4:0f:61:db:14:0c:f3:1e:0c:33: 55:44:e2:2c:94:09:65:be:a7:92:ee:eb:16:59:d8: 88:90:ad:be:ff:dc:5d:76:17:c4:0e:e8:08:64:59: ec:27:77:64:f9:36:93:79:8d:47:73:28:01:28:37: c8:0c:fc:51:c4:53:32:03:5f:44:02:d0:6a:ef:40: 37:ea:b6:b4:af:b4:cd:34:17:1e:f4:f3:cf:02:e8: e1:ab:f5:af:15:cb:35:0c:2d:38:aa:31:bc:60:e6: 7a:c2:7c:4f:10:55:7b:09:68:7b:ae:97:0e:c3:24: 77:2f:1b:04:c6:7c:a3:cf:c6:40:3c:ab:8e:7c:91: 23:f6:fc:22:df:16:35:77:65:7a:8a:16:4b:f9:41: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:33:AD:61:F5:1A:4C:7F:92:C4:BB:8F:88:E3:7D:00:9E:31:FE:F6 X509v3 Authority Key Identifier: keyid:DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:95:3d:11:fd:ee:7b:d0:aa:a2:89:aa:22:ea:69:b4:6d:e1: b0:5b:f7:29:33:d7:00:c5:ce:0d:ca:83:ee:71:11:fa:fc:a9: 69:f8:c7:7b:99:17:3a:b5:81:ec:97:0a:69:80:a2:65:f9:f0: 4d:de:94:ce:78:a2:cb:3e:3a:97:c4:93:ed:f7:f7:62:b7:f1: 06:b2:84:87:20:09:dc:3b:2a:5d:c4:87:83:0d:ff:4d:c1:7a: 3a:5a:f1:20:33:dd:6b:ca:52:97:dc:4c:c4:f5:18:0a:8b:c1: ff:48:66:02:e3:23:25:08:48:3e:30:58:aa:a3:af:b7:6d:6a: 9d:bf:7c:20:6b:54:b3:7b:17:3a:e1:f1:69:39:5b:3e:12:0c: 83:2b:6a:0f:7c:6b:c0:53:0f:c3:8b:78:a7:fd:ee:80:fd:ff: b4:06:a3:0a:a1:c8:0c:30:35:85:b2:b7:2d:8c:ea:1d:9d:fd: 47:82:c0:92:5a:cd:dc:65:8a:72:1c:b4:01:00:81:17:c8:94: 74:46:d5:d9:2c:f2:a6:d4:2b:7b:c5:a4:98:ed:d7:f8:21:4e: e3:58:1f:0c:eb:d3:c4:86:b9:00:69:85:86:d4:ef:5d:e9:5e: 01:94:2b:3b:d1:8d:e6:d1:f2:ac:21:3c:00:ee:42:68:f3:16: ad:6d:15:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2IpzFKM8DQYiwhWX/wa/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTVkODFmMGE3ZjNkZDM0NDUxODQwYWUzMWNhZmY2Njdj ZWVhZjYwHhcNMjYwMjA5MTAwMDM2WhcNMjYwMjEwMTAwMDM2WjAzMTEwLwYDVQQD Eyg5MzMzYWQ2MWY1MWE0YzdmOTJjNGJiOGY4OGUzN2QwMDllMzFmZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFHxt5cDNHWuAGL1pCr6gE6yPyoA L43BI/0qicYntAWPT0Vo/puxOdZ4OikMjZv+g8e1Uhb9t56JnuJXVC3WDwZ8b6Vw 3QApjF9iB2Zpp/9evjGNWvnIwvNzOxxX6wOmnhsSttgGfZH1VeEHVfQPYdsUDPMe DDNVROIslAllvqeS7usWWdiIkK2+/9xddhfEDugIZFnsJ3dk+TaTeY1HcygBKDfI DPxRxFMyA19EAtBq70A36ra0r7TNNBce9PPPAujhq/WvFcs1DC04qjG8YOZ6wnxP EFV7CWh7rpcOwyR3LxsExnyjz8ZAPKuOfJEj9vwi3xY1d2V6ihZL+UHPxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMzrWH1Gkx/ksS7j4jjfQCeMf72MB8GA1UdIwQY MBaAFN4V2B8Kfz3TRFGECuMcr/Znzur2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hYWUh3cF9QZE5FVVlRSzR4eXY5bWZPNnZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84NzY4Y2ItYjQ4YS00NzhiLTk4N2Et OWNjNzg0NjkzNjY5LzEvM2hYWUh3cF9QZE5FVVlRSzR4eXY5bWZPNnZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84NzY4Y2ItYjQ4YS00NzhiLTk4N2EtOWNjNzg0NjkzNjY5 LzEvM2hYWUh3cF9QZE5FVVlRSzR4eXY5bWZPNnZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApU9Ef3u e9CqoomqIupptG3hsFv3KTPXAMXODcqD7nER+vypafjHe5kXOrWB7JcKaYCiZfnw Td6Uzniiyz46l8ST7ff3YrfxBrKEhyAJ3DsqXcSHgw3/TcF6OlrxIDPda8pSl9xM xPUYCovB/0hmAuMjJQhIPjBYqqOvt21qnb98IGtUs3sXOuHxaTlbPhIMgytqD3xr wFMPw4t4p/3ugP3/tAajCqHIDDA1hbK3LYzqHZ39R4LAklrN3GWKchy0AQCBF8iU dEbV2SzyptQre8WkmO3X+CFO41gfDOvTxIa5AGmFhtTvXeleAZQrO9GN5tHyrCE8 AO5CaPMWrW0Vcw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:33 2026 by rpki-client