This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json) Hash identifier: JN5KbrundbwXJTzrFSOjPUfO/2++I1E5AodRJ3xd/fc= Subject key identifier: DC:D4:B3:36:5F:92:9D:97:5F:EB:FE:7E:31:BA:FF:9A:29:2F:6D:38 Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6 Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6 Certificate serial: 019C420FAD2F92133FB7D117176594B08B80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft Manifest number: 0EEF Signing time: Mon 09 Feb 2026 11:00:49 +0000 Manifest this update: Mon 09 Feb 2026 11:00:49 +0000 Manifest next update: Tue 10 Feb 2026 11:00:49 +0000 Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: 7PKvXiixghB7mnGuMk7ojBLrhbOFhCxWtOCYCo3990I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ad:2f:92:13:3f:b7:d1:17:17:65:94:b0:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6 Validity Not Before: Feb 9 11:00:49 2026 GMT Not After : Feb 10 11:00:49 2026 GMT Subject: CN=dcd4b3365f929d975febfe7e31baff9a292f6d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:95:f2:3a:8d:14:7f:1d:5e:f3:be:59:0e: 70:2e:3a:99:2c:7c:ec:a7:e7:15:5f:73:d5:31:11: 82:7c:c7:06:88:35:c8:27:01:cb:c5:d5:43:94:9a: 30:7d:39:b1:e9:21:74:68:83:3d:bf:9e:9a:6f:2a: c9:72:52:25:31:1c:f1:da:4d:1e:c5:89:51:fd:49: 3a:ae:f5:df:5f:05:8a:10:39:43:98:86:85:d8:73: 93:6b:75:df:22:05:f9:20:5f:08:ed:da:a9:24:93: 9d:40:a3:28:13:8d:f9:98:50:12:8f:1d:e2:67:ae: 0f:10:f0:f8:b8:1b:5c:54:97:79:95:15:9e:a2:a4: 9f:f4:06:c6:c4:e8:93:18:31:bc:89:a8:a8:81:71: 10:15:74:4e:d4:cc:94:90:b1:b9:14:62:a9:e3:ac: c6:0f:15:90:61:78:e3:d0:51:f5:bb:11:c3:c1:5d: b9:e4:89:3c:82:2d:b9:22:08:70:2f:28:0c:a8:fa: 8d:f3:b3:b6:6d:3c:85:25:cf:f9:99:73:68:53:dc: 7e:e0:3c:96:e2:49:65:c7:01:ca:2b:63:e2:00:55: 90:27:1e:ed:47:e8:ec:a7:c0:96:56:33:e8:9f:0f: f1:93:f1:73:e8:35:36:7c:28:89:a4:57:14:ae:5c: 48:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D4:B3:36:5F:92:9D:97:5F:EB:FE:7E:31:BA:FF:9A:29:2F:6D:38 X509v3 Authority Key Identifier: keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:bc:5e:55:2b:ac:a0:c0:50:82:89:0b:cb:b3:5d:d1:e4:2e: 4b:ee:0f:30:5d:85:d5:d6:6f:98:b9:f7:40:20:66:d1:51:ac: 9a:a7:88:5e:ed:ed:04:71:ab:42:19:ff:fe:4a:fe:71:25:0d: 15:7f:8e:e4:15:e2:46:ee:4f:4c:84:d5:00:19:a1:b7:14:16: 46:34:8b:8f:6b:0d:86:11:ac:28:64:82:df:18:fd:e4:0d:8e: 83:e0:4a:a4:d4:7c:c6:ff:70:1a:4b:ae:6e:a7:92:c5:65:32: 34:9b:28:dd:05:a3:61:15:3b:3b:0a:df:f9:aa:9b:23:70:eb: 65:51:97:00:01:53:10:cf:f1:74:6a:ae:f1:46:9b:c3:19:65: 54:18:48:33:ec:12:e5:e0:82:20:56:fc:7a:bc:fd:b5:37:75: 57:cb:ad:05:0a:99:c8:42:54:d2:5f:77:08:5e:83:91:83:6c: 67:e8:9d:f1:f2:de:42:b2:b6:67:d5:49:ed:b3:5f:08:07:92: a1:a3:48:8f:79:19:84:bd:19:92:ae:c9:6c:d5:1b:48:36:cb: db:8d:fc:84:6f:a1:b4:d6:c2:dc:2a:d1:d0:c8:0a:15:c5:16: 4c:2d:fa:54:31:d5:e7:c8:0e:35:7b:a6:a1:94:20:c8:01:56: 33:3d:93:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD60vkhM/t9EXF2WUsIuAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYzQzMzk3N2M3MmI0YmU1ZDg4OGY1Njg1M2VkMzFhMWZm MWVmYzYwHhcNMjYwMjA5MTEwMDQ5WhcNMjYwMjEwMTEwMDQ5WjAzMTEwLwYDVQQD EyhkY2Q0YjMzNjVmOTI5ZDk3NWZlYmZlN2UzMWJhZmY5YTI5MmY2ZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4mV8jqNFH8dXvO+WQ5wLjqZLHzs p+cVX3PVMRGCfMcGiDXIJwHLxdVDlJowfTmx6SF0aIM9v56abyrJclIlMRzx2k0e xYlR/Uk6rvXfXwWKEDlDmIaF2HOTa3XfIgX5IF8I7dqpJJOdQKMoE435mFASjx3i Z64PEPD4uBtcVJd5lRWeoqSf9AbGxOiTGDG8iaiogXEQFXRO1MyUkLG5FGKp46zG DxWQYXjj0FH1uxHDwV255Ik8gi25IghwLygMqPqN87O2bTyFJc/5mXNoU9x+4DyW 4kllxwHKK2PiAFWQJx7tR+jsp8CWVjPonw/xk/Fz6DU2fCiJpFcUrlxIIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzUszZfkp2XX+v+fjG6/5opL204MB8GA1UdIwQY MBaAFN7EM5d8crS+XYiPVoU+0xof8e/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYt MjIzZjUwOGMwNTVhLzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYtMjIzZjUwOGMwNTVh LzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7xeVSus oMBQgokLy7Nd0eQuS+4PMF2F1dZvmLn3QCBm0VGsmqeIXu3tBHGrQhn//kr+cSUN FX+O5BXiRu5PTITVABmhtxQWRjSLj2sNhhGsKGSC3xj95A2Og+BKpNR8xv9wGkuu bqeSxWUyNJso3QWjYRU7Owrf+aqbI3DrZVGXAAFTEM/xdGqu8UabwxllVBhIM+wS 5eCCIFb8erz9tTd1V8utBQqZyEJU0l93CF6DkYNsZ+id8fLeQrK2Z9VJ7bNfCAeS oaNIj3kZhL0Zkq7JbNUbSDbL2438hG+htNbC3CrR0MgKFcUWTC36VDHV58gONXum oZQgyAFWMz2Tyw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:29 2026 by rpki-client