This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json) Hash identifier: y8UbXSKCr8KS75AgWsO/VhcvxR2vShVrN0H3Ox1IOXA= Subject key identifier: 12:9D:8D:C2:DB:A7:66:DE:AC:1A:F8:74:01:28:03:4C:DA:96:4F:23 Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c Certificate serial: 019C42466908926DB89ADBDB2DA5C3DD2010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft Manifest number: 0D48 Signing time: Mon 09 Feb 2026 12:00:36 +0000 Manifest this update: Mon 09 Feb 2026 12:00:36 +0000 Manifest next update: Tue 10 Feb 2026 12:00:36 +0000 Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: OOjkz7hJpWWj+i12dRTw8Hmo19nD1EP29jD1nVZKzPk=) 2: y2Yw6-Xzss6T6oXyrYGmZ001q9U.roa (hash: d8IrU4kU0qWnxL1m5NsiZ0ByNC3CpvcAWEyIv/Y47HA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:69:08:92:6d:b8:9a:db:db:2d:a5:c3:dd:20:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c Validity Not Before: Feb 9 12:00:36 2026 GMT Not After : Feb 10 12:00:36 2026 GMT Subject: CN=129d8dc2dba766deac1af8740128034cda964f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:db:af:30:48:06:29:e8:e4:dd:e2:0e:1d:15: 52:5b:f1:8d:6c:08:b4:75:80:fc:8f:6b:92:2a:72: 0c:1d:f9:8e:6f:f2:e4:00:d7:f7:8f:e5:5e:7e:85: 10:45:94:ad:4c:e8:49:3a:09:d1:1a:ba:04:d3:9c: 90:c8:2f:62:7a:fd:6d:ab:c3:b6:f2:69:df:31:25: 27:5f:ad:e7:c0:35:e6:91:ca:1d:5e:dd:e0:db:f0: 9e:b8:8b:61:12:bb:7a:05:88:91:81:46:ca:cc:dd: f5:1e:3d:9b:7b:82:c6:75:0d:8d:6b:74:58:72:c6: 64:0b:9f:c4:a1:7d:86:de:7c:d8:28:9f:4d:f8:3f: ff:dc:59:1e:34:ab:4a:c7:01:e7:72:5d:a9:e0:80: 61:2a:6f:65:24:3e:c4:37:4f:49:d6:6c:5f:81:3e: 48:e3:07:37:c5:79:5c:82:bf:b7:fb:bb:6c:fc:28: a8:c5:47:d9:d4:b7:a8:c9:25:37:b9:02:d7:08:9f: a6:53:23:32:8c:fa:cb:c2:03:f4:e3:96:5c:7e:6b: 32:5a:04:cf:a0:b7:03:a7:c4:a1:86:be:0d:78:69: f3:e1:3b:b4:71:e4:c7:3e:25:1d:6a:e8:04:6b:4a: cf:28:2c:78:7c:e7:8b:ba:61:f9:36:38:b9:2b:df: 71:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9D:8D:C2:DB:A7:66:DE:AC:1A:F8:74:01:28:03:4C:DA:96:4F:23 X509v3 Authority Key Identifier: keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4b:56:3e:12:59:85:38:b5:22:bd:3c:36:fc:f1:2b:eb:2a: ce:f3:c3:5f:52:53:07:64:f8:23:05:30:dc:78:49:2a:95:ff: c9:93:d6:88:f7:4c:2b:d5:53:ef:60:f8:6a:8b:3e:e2:41:14: 3d:6b:fe:06:dc:9f:f1:bc:98:6d:9b:d5:18:7b:3a:78:bb:3f: 37:7d:c0:af:d0:e2:30:1c:cd:e6:ab:64:56:f8:c7:68:e9:ed: 6a:be:32:f3:c9:ac:b6:08:f8:f4:55:41:d7:2d:e7:8f:37:75: b1:47:e3:89:91:c2:af:d0:48:a9:46:97:62:0c:02:2d:98:5c: 6d:3e:6a:5e:5d:b0:58:f2:72:fe:24:98:09:2c:f2:1f:a7:31: d8:31:f2:06:48:60:09:d7:f4:b9:7f:65:54:98:30:d2:c6:2c: 35:a9:05:8e:ff:ca:c9:4b:8d:b8:ff:09:bb:5b:fd:93:22:98: e2:c3:f0:26:2c:f4:47:f3:19:4f:7a:7a:fd:50:25:fc:d9:82: d9:90:5f:3c:ce:29:79:cd:fe:f3:da:a2:25:73:5a:9a:27:34: 42:61:8d:a9:43:20:f9:7e:e1:c3:44:95:cf:29:ba:c0:92:3d: a2:80:ab:f8:ca:bd:76:14:d9:53:a7:c5:00:53:9d:1c:7e:8d: 95:fe:a7:df -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCRmkIkm24mtvbLaXD3SAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzIzNzA2ZDBlODM3NThiYTUyMTM4ZTlkYjQyMDdiNWE1 YzE4OWMwHhcNMjYwMjA5MTIwMDM2WhcNMjYwMjEwMTIwMDM2WjAzMTEwLwYDVQQD EygxMjlkOGRjMmRiYTc2NmRlYWMxYWY4NzQwMTI4MDM0Y2RhOTY0ZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNuvMEgGKejk3eIOHRVSW/GNbAi0 dYD8j2uSKnIMHfmOb/LkANf3j+VefoUQRZStTOhJOgnRGroE05yQyC9iev1tq8O2 8mnfMSUnX63nwDXmkcodXt3g2/CeuIthErt6BYiRgUbKzN31Hj2be4LGdQ2Na3RY csZkC5/EoX2G3nzYKJ9N+D//3FkeNKtKxwHncl2p4IBhKm9lJD7EN09J1mxfgT5I 4wc3xXlcgr+3+7ts/CioxUfZ1LeoySU3uQLXCJ+mUyMyjPrLwgP045ZcfmsyWgTP oLcDp8Shhr4NeGnz4Tu0ceTHPiUdaugEa0rPKCx4fOeLumH5Nji5K99x1wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBKdjcLbp2berBr4dAEoA0zalk8jMB8GA1UdIwQY MBaAFPtyNwbQ6DdYulITjp20IHtaXBicMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zSTNCdERvTjFpNlVoT09uYlFnZTFwY0dKdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvY2ZhYzMxLTgzNTYtNDMyZC1hMzRk LWI2MTQzNjExOTZmZC8xLzEtM0kzQnREb04xaTZVaE9PbmJRZ2UxcGNHSncubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU5L2NmYWMzMS04MzU2LTQzMmQtYTM0ZC1iNjE0MzYxMTk2 ZmQvMS8xLTNJM0J0RG9OMWk2VWhPT25iUWdlMXBjR0p3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEtW PhJZhTi1Ir08NvzxK+sqzvPDX1JTB2T4IwUw3HhJKpX/yZPWiPdMK9VT72D4aos+ 4kEUPWv+Btyf8byYbZvVGHs6eLs/N33Ar9DiMBzN5qtkVvjHaOntar4y88mstgj4 9FVB1y3njzd1sUfjiZHCr9BIqUaXYgwCLZhcbT5qXl2wWPJy/iSYCSzyH6cx2DHy BkhgCdf0uX9lVJgw0sYsNakFjv/KyUuNuP8Ju1v9kyKY4sPwJiz0R/MZT3p6/VAl /NmC2ZBfPM4pec3+89qiJXNamic0QmGNqUMg+X7hw0SVzym6wJI9ooCr+Mq9dhTZ U6fFAFOdHH6Nlf6n3w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:52 2026 by rpki-client