This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json) Hash identifier: SHGdgJJ+Ujw3To6XRS8tw/0DKvxhAkGfk3MjEG9vaTQ= Subject key identifier: 91:96:71:5A:8D:0D:82:43:91:05:36:E5:DE:33:B2:C0:6B:8B:8F:FB Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3 Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3 Certificate serial: 019C41D85E48D16649D145BEBA9D92D2F0CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft Manifest number: 1407 Signing time: Mon 09 Feb 2026 10:00:24 +0000 Manifest this update: Mon 09 Feb 2026 10:00:24 +0000 Manifest next update: Tue 10 Feb 2026 10:00:24 +0000 Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: SP58FOyeredyUdXOveZL3UfRrikpvieW5xs3r+CfVRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:5e:48:d1:66:49:d1:45:be:ba:9d:92:d2:f0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3 Validity Not Before: Feb 9 10:00:24 2026 GMT Not After : Feb 10 10:00:24 2026 GMT Subject: CN=9196715a8d0d8243910536e5de33b2c06b8b8ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c3:c7:0c:ac:aa:18:bf:b2:2a:3a:c2:9a:02: fe:2e:43:2a:15:08:86:22:c2:d5:10:3e:97:b6:41: a5:92:0f:d5:27:1d:e8:b4:50:7e:d1:19:a4:a5:3a: 64:b3:52:d6:67:ff:17:e8:38:bb:55:aa:11:32:ee: 6c:04:04:9d:b4:a2:c6:0b:25:c0:4a:f5:7b:aa:79: de:0c:e6:ff:c1:95:00:16:3c:52:bf:3d:5f:32:d2: a8:0e:64:99:97:34:a9:d6:a9:bd:c6:db:05:cc:07: 4b:28:20:23:76:db:9e:c0:19:28:6b:ef:a1:11:5e: ef:ca:51:cf:f4:78:54:25:9f:54:9b:d7:13:0b:33: e4:fa:56:14:a9:53:18:51:f6:36:cc:4a:70:39:09: 2f:da:ce:64:3e:76:c0:16:b8:11:70:0a:03:b9:a6: d1:2e:8e:1c:28:45:bc:72:df:f1:82:15:b8:b8:5f: 1a:a2:f8:46:b3:44:29:56:ab:ab:1d:2d:21:e1:eb: cf:58:be:f8:d1:45:c6:f4:c6:2e:74:b5:df:be:61: 0c:b0:ed:d6:fc:28:e7:3d:2b:ef:b0:d6:7c:d1:6e: eb:cb:db:82:22:76:72:ec:8e:4b:6e:ec:4d:b6:75: 55:2e:af:83:8a:e7:6e:21:94:c7:3d:3e:84:cd:0a: ec:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:96:71:5A:8D:0D:82:43:91:05:36:E5:DE:33:B2:C0:6B:8B:8F:FB X509v3 Authority Key Identifier: keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e3:67:e3:45:2a:83:13:60:24:e1:cd:57:1c:6d:3c:70:3f: 7c:58:61:2e:d0:ac:76:a1:1a:c4:8e:5e:08:e6:dd:47:13:e0: 6b:e8:a1:6d:2f:33:ce:6f:b8:95:0f:08:fe:39:cc:6c:1d:00: 7e:e3:6a:e4:47:51:a3:50:5f:18:b7:50:ba:d6:68:60:3e:46: 14:d2:ab:9c:31:5c:10:30:24:a2:83:16:b2:ed:31:05:8b:48: 45:91:7e:89:30:22:f4:76:ec:14:98:8d:e5:40:ef:65:54:55: 5e:9e:21:59:7b:1f:c2:35:66:dd:9f:b8:69:ea:8d:dc:82:1d: 4d:3e:82:0a:85:c1:58:02:0d:57:5d:ea:c3:06:c6:ff:12:44: 5d:f4:f9:ac:98:00:d6:ff:9e:c3:8d:e3:9a:35:05:34:cc:3a: c6:df:d1:ba:cb:81:5c:93:bb:06:0e:55:29:8f:c7:7c:26:24: d3:7a:a9:2f:17:3a:a1:dc:6e:94:2e:1c:46:a8:e4:57:10:cc: 01:dd:5e:94:10:1f:bd:f9:d1:bd:ae:3f:ca:8d:33:82:b1:40: cf:7d:39:cf:ea:07:30:7a:dd:f3:9d:11:f0:c5:75:6d:d5:be: 79:bd:b0:ae:b6:ce:86:84:d1:fc:c8:f5:25:71:7b:57:b6:b7: 8d:10:70:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2F5I0WZJ0UW+up2S0vDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYzAxNjc0MDY0NDFlYTE2YzQ3NDA2ZDA1MjJiNWM2NjMw YWJjYjMwHhcNMjYwMjA5MTAwMDI0WhcNMjYwMjEwMTAwMDI0WjAzMTEwLwYDVQQD Eyg5MTk2NzE1YThkMGQ4MjQzOTEwNTM2ZTVkZTMzYjJjMDZiOGI4ZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8PHDKyqGL+yKjrCmgL+LkMqFQiG IsLVED6XtkGlkg/VJx3otFB+0RmkpTpks1LWZ/8X6Di7VaoRMu5sBASdtKLGCyXA SvV7qnneDOb/wZUAFjxSvz1fMtKoDmSZlzSp1qm9xtsFzAdLKCAjdtuewBkoa++h EV7vylHP9HhUJZ9Um9cTCzPk+lYUqVMYUfY2zEpwOQkv2s5kPnbAFrgRcAoDuabR Lo4cKEW8ct/xghW4uF8aovhGs0QpVqurHS0h4evPWL740UXG9MYudLXfvmEMsO3W /CjnPSvvsNZ80W7ry9uCInZy7I5LbuxNtnVVLq+DiuduIZTHPT6EzQrsiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGWcVqNDYJDkQU25d4zssBri4/7MB8GA1UdIwQY MBaAFN3AFnQGRB6hbEdAbQUitcZjCryzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNjA3YjctMTg3Yi00NTQ1LWI2MTQt M2Q5YWVkYWMyYjMzLzEvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jNjA3YjctMTg3Yi00NTQ1LWI2MTQtM2Q5YWVkYWMyYjMz LzEvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeNn40Uq gxNgJOHNVxxtPHA/fFhhLtCsdqEaxI5eCObdRxPga+ihbS8zzm+4lQ8I/jnMbB0A fuNq5EdRo1BfGLdQutZoYD5GFNKrnDFcEDAkooMWsu0xBYtIRZF+iTAi9HbsFJiN 5UDvZVRVXp4hWXsfwjVm3Z+4aeqN3IIdTT6CCoXBWAINV13qwwbG/xJEXfT5rJgA 1v+ew43jmjUFNMw6xt/RusuBXJO7Bg5VKY/HfCYk03qpLxc6odxulC4cRqjkVxDM Ad1elBAfvfnRva4/yo0zgrFAz305z+oHMHrd850R8MV1bdW+eb2wrrbOhoTR/Mj1 JXF7V7a3jRBwiA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:39 2026 by rpki-client