This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json) Hash identifier: ZMjiAvxvHlcXcRLsOvr2sbLdL23R1eZHKIcUqY0vuDA= Subject key identifier: 28:9B:26:85:9E:6D:C0:9F:45:4F:48:BD:3E:18:18:9D:D5:30:39:12 Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56 Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056 Certificate serial: 019C42EB11E38821FC452A12B8963AB37439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft Manifest number: 0ABB Signing time: Mon 09 Feb 2026 15:00:27 +0000 Manifest this update: Mon 09 Feb 2026 15:00:27 +0000 Manifest next update: Tue 10 Feb 2026 15:00:27 +0000 Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: Ru8JSo/PuxMwzr24qX7Js+AH8imBvjHNLRdUHpskvLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:11:e3:88:21:fc:45:2a:12:b8:96:3a:b3:74:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056 Validity Not Before: Feb 9 15:00:27 2026 GMT Not After : Feb 10 15:00:27 2026 GMT Subject: CN=289b26859e6dc09f454f48bd3e18189dd5303912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fe:9a:89:bd:a4:60:28:96:04:7e:e2:fa:b4: c3:98:98:a3:e2:87:f8:f9:74:bc:0f:56:89:01:c1: 17:5c:5c:cc:28:a7:b6:ea:41:b8:5a:71:a0:9b:a6: 17:ab:d5:9c:a5:64:1b:99:df:27:0a:5c:97:76:97: 18:f0:42:25:ad:6d:8c:51:36:45:fb:80:a2:38:8d: 38:92:24:7d:6b:dc:fa:d7:54:f2:98:7d:c8:da:c0: 50:a8:fe:15:24:6c:43:1e:62:82:aa:e9:55:27:16: 87:74:ee:93:ab:88:0c:83:f5:e4:c0:38:fe:da:6a: e7:82:6c:ef:01:7a:cd:a8:25:d5:e8:41:87:03:57: e3:34:6f:1c:a0:e1:c3:87:e5:65:20:5d:54:5e:d8: 6a:e8:bb:21:e8:73:33:93:9e:41:87:97:85:71:27: d3:37:43:61:d8:8a:d1:02:3a:8f:ca:c5:4e:8f:7e: 00:56:d1:d3:b4:1e:4a:71:8f:f2:a7:28:7c:ef:03: cc:b6:05:b8:12:73:e0:a4:7c:52:15:97:61:a9:98: 97:4f:bc:1e:52:16:c2:c7:7d:c7:51:c2:9c:1e:6e: e9:41:53:30:0d:9c:d4:ef:a4:d3:a2:be:cf:52:a6: 3e:7e:55:f1:ae:8b:5a:d1:21:27:75:21:01:ed:55: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9B:26:85:9E:6D:C0:9F:45:4F:48:BD:3E:18:18:9D:D5:30:39:12 X509v3 Authority Key Identifier: keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d2:7f:9d:92:7c:28:f8:6e:47:43:e0:bc:b8:da:f1:26:ce: 4d:5a:79:d1:27:0f:70:f7:31:b7:94:a1:3e:43:1b:55:04:98: 97:2f:1f:83:b9:6f:df:21:2f:d7:e4:dd:bd:d7:73:29:7c:c9: 9e:05:51:0e:b0:b3:05:08:d9:12:0f:9e:0a:66:81:47:44:28: c9:5d:1d:29:b8:35:e5:48:e3:20:5a:5b:08:d5:2f:88:97:7e: 70:4b:7b:8b:44:b9:17:28:cc:7a:eb:ce:d9:b1:8a:8c:95:99: c5:df:e1:59:c1:e7:25:d0:b6:48:38:23:03:67:75:ef:5c:65: 8f:c1:e8:75:44:ea:c5:4f:b6:5a:62:c7:66:60:54:ff:33:6c: c3:b4:8e:ba:f7:26:8b:fa:37:60:15:49:57:94:a1:39:12:e1: c4:33:fa:4a:5b:6c:22:0f:9e:4d:7a:27:e9:b4:c4:91:e1:ab: 81:92:88:4b:00:d6:42:34:ad:ee:95:97:13:c7:37:e0:db:f8: 46:4e:11:71:ae:30:ce:ec:fd:11:da:90:42:7b:84:6d:4c:f8: 1b:f7:e9:06:a4:e9:b4:62:e5:2c:3a:30:97:49:54:da:ba:19: fc:bd:7b:f3:89:c2:cb:89:49:76:2e:b4:fd:43:11:83:17:b1: ef:46:6e:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6xHjiCH8RSoSuJY6s3Q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjM2U3YTM5NGJiZjFiYmVjNDdmM2ZiYjY5YTE4OWY4YTNi MWQwNTYwHhcNMjYwMjA5MTUwMDI3WhcNMjYwMjEwMTUwMDI3WjAzMTEwLwYDVQQD EygyODliMjY4NTllNmRjMDlmNDU0ZjQ4YmQzZTE4MTg5ZGQ1MzAzOTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv6aib2kYCiWBH7i+rTDmJij4of4 +XS8D1aJAcEXXFzMKKe26kG4WnGgm6YXq9WcpWQbmd8nClyXdpcY8EIlrW2MUTZF +4CiOI04kiR9a9z611TymH3I2sBQqP4VJGxDHmKCqulVJxaHdO6Tq4gMg/XkwDj+ 2mrngmzvAXrNqCXV6EGHA1fjNG8coOHDh+VlIF1UXthq6Lsh6HMzk55Bh5eFcSfT N0Nh2IrRAjqPysVOj34AVtHTtB5KcY/ypyh87wPMtgW4EnPgpHxSFZdhqZiXT7we UhbCx33HUcKcHm7pQVMwDZzU76TTor7PUqY+flXxrota0SEndSEB7VW9dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCibJoWebcCfRU9IvT4YGJ3VMDkSMB8GA1UdIwQY MBaAFNw+ejlLvxu+xH8/u2mhifijsdBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Q1Nk9VdV9HNzdFZnotN2FhR0otS094MEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81YjY4NGEtZTQwOS00N2VhLTljY2It NDRiMjFhOGJlYmZkLzEvM0Q1Nk9VdV9HNzdFZnotN2FhR0otS094MEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81YjY4NGEtZTQwOS00N2VhLTljY2ItNDRiMjFhOGJlYmZk LzEvM0Q1Nk9VdV9HNzdFZnotN2FhR0otS094MEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdJ/nZJ8 KPhuR0PgvLja8SbOTVp50ScPcPcxt5ShPkMbVQSYly8fg7lv3yEv1+TdvddzKXzJ ngVRDrCzBQjZEg+eCmaBR0QoyV0dKbg15UjjIFpbCNUviJd+cEt7i0S5FyjMeuvO 2bGKjJWZxd/hWcHnJdC2SDgjA2d171xlj8HodUTqxU+2WmLHZmBU/zNsw7SOuvcm i/o3YBVJV5ShORLhxDP6SltsIg+eTXon6bTEkeGrgZKISwDWQjSt7pWXE8c34Nv4 Rk4Rca4wzuz9EdqQQnuEbUz4G/fpBqTptGLlLDowl0lU2roZ/L1784nCy4lJdi60 /UMRgxex70ZunQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:51 2026 by rpki-client