This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft File: t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json) Hash identifier: Ox3iNYfgwFGJCw2cFvcDDL9K9DXSv9oOEPkQoxGtuxw= Subject key identifier: E7:E9:1B:5F:5B:08:7F:D4:50:A0:B7:76:84:28:37:78:A9:4A:B7:C1 Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63 Certificate issuer: /CN=b77452cd2535e3e9357dff881885ead91490a463 Certificate serial: 019C416AFC1E8A663A5EF8AC2CC96385ACFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft Manifest number: 07C4 Signing time: Mon 09 Feb 2026 08:00:56 +0000 Manifest this update: Mon 09 Feb 2026 08:00:56 +0000 Manifest next update: Tue 10 Feb 2026 08:00:56 +0000 Files and hashes: 1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: Qnw+vwgLCYo9OcTQpHo9mDPRoqRazESc+ftr1lTsuNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:fc:1e:8a:66:3a:5e:f8:ac:2c:c9:63:85:ac:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463 Validity Not Before: Feb 9 08:00:56 2026 GMT Not After : Feb 10 08:00:56 2026 GMT Subject: CN=e7e91b5f5b087fd450a0b77684283778a94ab7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:80:0a:26:22:36:00:8c:a9:1a:fe:d9:b7: 68:d2:c2:c6:27:7b:b2:ca:c8:69:bf:51:7d:54:46: dd:6a:88:84:d3:e0:0a:82:61:5b:ef:81:0e:c8:25: 06:9c:54:f7:fe:4e:ef:93:f6:1a:d4:99:8b:9c:f1: da:8e:4d:ce:87:3d:b4:66:5d:bc:87:e0:7b:ae:b7: ae:53:f5:d1:50:ee:8f:d5:95:c7:98:97:83:4d:5a: 48:b2:60:9d:07:51:6d:27:3a:00:15:c5:d0:d1:4a: a1:ea:fe:19:5b:78:7d:18:8d:2e:8e:d1:92:b8:76: c6:74:61:e3:1c:84:ed:28:60:4b:01:20:46:26:50: f8:af:c1:e6:15:1d:e4:38:77:a0:9e:5d:22:5f:00: 26:11:d8:31:4d:95:9d:fe:f4:b9:26:ea:5a:d0:af: 1f:ee:e5:17:be:ea:fb:27:ae:bd:6d:b3:34:36:ef: 86:68:5b:2e:80:96:a9:9c:e1:89:eb:b3:f1:ba:cf: 8b:c0:d3:48:fb:bd:0d:09:a6:d2:61:11:13:7a:9f: 32:a3:50:1e:a6:cd:43:13:1b:34:2d:44:86:66:61: 8a:d9:b4:8b:f5:4d:e2:fa:29:ae:1b:75:04:c4:60: e3:bb:18:04:45:2f:e7:60:3a:96:fa:f3:4e:75:3c: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E9:1B:5F:5B:08:7F:D4:50:A0:B7:76:84:28:37:78:A9:4A:B7:C1 X509v3 Authority Key Identifier: keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:66:dc:5e:d4:e6:77:d2:c2:1d:4a:93:1b:2e:40:e6:0b:1b: 32:0d:0f:0b:7c:33:ee:85:31:40:66:9a:25:19:56:c4:17:cb: c7:b9:55:40:0b:82:57:b0:6d:f2:96:51:93:84:6b:0c:c8:95: 8d:a5:1b:33:80:28:bc:64:39:01:2e:a4:10:34:b2:b2:5c:b9: 48:41:49:83:0a:f3:74:5f:6d:2f:3f:f9:37:a9:c0:7c:8c:67: 15:f1:a9:3d:d8:ab:77:76:a2:d2:ba:de:bf:2c:c5:d8:b1:0d: e3:31:b2:62:4d:19:2b:67:d7:c1:06:a0:08:a4:11:41:a2:84: c2:06:4d:87:b5:24:8f:eb:e9:de:55:a2:df:24:d9:db:28:7a: 1d:7d:d0:f9:9d:5b:c3:10:d5:8d:94:19:be:0c:8c:d6:ae:a7: 81:db:98:cd:68:18:03:cd:ef:c1:34:7b:84:af:9d:b0:34:3f: 4d:38:99:3f:92:b3:40:ed:fb:a7:a1:bb:e7:a6:8d:08:2f:5f: 25:31:79:c6:54:27:9f:de:c6:0e:42:eb:a0:62:6b:81:53:8d: 06:01:5d:f2:26:2f:29:f2:d1:1c:ac:1f:51:79:d4:09:1b:c9: 3d:ea:3e:0a:0c:1a:de:b6:0a:12:2b:63:d3:19:de:0c:ad:cc: 81:7d:c2:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBavweimY6XvisLMljhaz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzQ1MmNkMjUzNWUzZTkzNTdkZmY4ODE4ODVlYWQ5MTQ5 MGE0NjMwHhcNMjYwMjA5MDgwMDU2WhcNMjYwMjEwMDgwMDU2WjAzMTEwLwYDVQQD EyhlN2U5MWI1ZjViMDg3ZmQ0NTBhMGI3NzY4NDI4Mzc3OGE5NGFiN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh6ACiYiNgCMqRr+2bdo0sLGJ3uy yshpv1F9VEbdaoiE0+AKgmFb74EOyCUGnFT3/k7vk/Ya1JmLnPHajk3Ohz20Zl28 h+B7rreuU/XRUO6P1ZXHmJeDTVpIsmCdB1FtJzoAFcXQ0Uqh6v4ZW3h9GI0ujtGS uHbGdGHjHITtKGBLASBGJlD4r8HmFR3kOHegnl0iXwAmEdgxTZWd/vS5Jupa0K8f 7uUXvur7J669bbM0Nu+GaFsugJapnOGJ67Pxus+LwNNI+70NCabSYRETep8yo1Ae ps1DExs0LUSGZmGK2bSL9U3i+imuG3UExGDjuxgERS/nYDqW+vNOdTyIMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfpG19bCH/UUKC3doQoN3ipSrfBMB8GA1UdIwQY MBaAFLd0Us0lNePpNX3/iBiF6tkUkKRjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNSU3pTVTE0LWsxZmYtSUdJWHEyUlNRcEdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mNmM3MWMtMmQ0MC00YzQxLWJiYmIt Yzc1NzU5YWYyZmNmLzEvdDNSU3pTVTE0LWsxZmYtSUdJWHEyUlNRcEdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mNmM3MWMtMmQ0MC00YzQxLWJiYmItYzc1NzU5YWYyZmNm LzEvdDNSU3pTVTE0LWsxZmYtSUdJWHEyUlNRcEdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWbcXtTm d9LCHUqTGy5A5gsbMg0PC3wz7oUxQGaaJRlWxBfLx7lVQAuCV7Bt8pZRk4RrDMiV jaUbM4AovGQ5AS6kEDSysly5SEFJgwrzdF9tLz/5N6nAfIxnFfGpPdird3ai0rre vyzF2LEN4zGyYk0ZK2fXwQagCKQRQaKEwgZNh7Ukj+vp3lWi3yTZ2yh6HX3Q+Z1b wxDVjZQZvgyM1q6ngduYzWgYA83vwTR7hK+dsDQ/TTiZP5KzQO37p6G756aNCC9f JTF5xlQnn97GDkLroGJrgVONBgFd8iYvKfLRHKwfUXnUCRvJPeo+Cgwa3rYKEitj 0xneDK3MgX3C7A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:36 2026 by rpki-client