This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json) Hash identifier: CCTgJKK06Ed0pF0C3uGFnuK1P/nMIqMwTXO8ZKCIVH4= Subject key identifier: EE:B8:0E:7B:D3:BF:7F:C1:0C:B4:F3:60:27:F4:68:20:6A:B3:D6:94 Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92 Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892 Certificate serial: 019C42EBAE2E2569D11BBEB98B507E778CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft Manifest number: 116D Signing time: Mon 09 Feb 2026 15:01:07 +0000 Manifest this update: Mon 09 Feb 2026 15:01:07 +0000 Manifest next update: Tue 10 Feb 2026 15:01:07 +0000 Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: OJbWO9nlrvlcUudHjiQxAB5ObnwIPjuj55VV+p+6BeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:ae:2e:25:69:d1:1b:be:b9:8b:50:7e:77:8c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de122d172c13b15291e41f945681525826fef892 Validity Not Before: Feb 9 15:01:07 2026 GMT Not After : Feb 10 15:01:07 2026 GMT Subject: CN=eeb80e7bd3bf7fc10cb4f36027f468206ab3d694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9e:c2:d5:a8:3e:63:cd:23:e6:47:a2:21:0f: dd:36:84:d8:77:bd:79:b9:5d:4f:3f:15:49:9c:7a: 9a:cf:43:75:e0:61:60:90:6b:35:44:64:4e:4f:e6: 44:68:f3:d5:0f:a2:0c:39:d4:11:5c:4c:41:49:7f: c1:7c:a6:ca:6a:ea:db:a3:b4:34:5c:ee:d6:bf:80: c7:c8:45:81:e3:4f:3a:9a:bc:5f:e5:c3:c2:0d:42: 08:0d:79:94:b9:e0:89:78:6e:2a:7e:4e:c1:c0:30: 35:c8:90:d0:bb:de:fc:90:de:de:64:97:f7:e9:e7: 1a:55:16:c7:10:e7:9c:9c:2f:cc:90:6f:ec:d9:62: 66:e4:12:81:a1:e3:24:8b:58:25:05:7f:5b:d8:fb: e0:0e:cb:fe:08:ae:03:e2:23:ce:e5:29:ff:45:3d: 0e:eb:d2:f9:c9:e8:4c:94:fd:35:bf:80:9f:ec:a2: 7b:53:be:58:86:a8:45:05:af:52:40:2e:28:9e:fc: 75:52:0c:f2:9c:90:91:ea:c1:36:bd:98:3d:11:cf: fb:0f:d3:b1:fd:91:4b:24:33:4f:92:5f:87:59:38: 98:b5:33:36:ed:60:de:97:90:ad:47:41:f9:4b:a4: f1:54:4d:d5:da:e0:6b:08:4a:04:90:bb:ba:f8:7a: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B8:0E:7B:D3:BF:7F:C1:0C:B4:F3:60:27:F4:68:20:6A:B3:D6:94 X509v3 Authority Key Identifier: keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3c:bc:43:9f:03:82:8c:6b:eb:28:96:26:ac:d9:b2:21:90: 43:fb:1b:cf:72:a0:5e:05:3d:c4:66:9f:b7:bb:9f:dd:0a:6f: 54:5b:4f:1b:89:6a:27:25:f8:71:0f:ac:51:fa:6c:e3:8c:4d: ca:df:b7:f6:21:31:9a:04:04:7b:65:af:5a:16:ac:cb:c3:01: fa:b0:c7:fe:7b:a5:2f:3c:02:69:89:e3:7a:46:72:49:ea:b3: 98:5e:4d:b7:80:d5:92:3b:42:ed:26:9d:b9:8b:61:65:8f:43: da:a1:13:1c:61:e6:d3:ab:14:7a:d8:c6:25:4c:51:26:e6:d4: 8d:25:94:d9:10:5f:55:c6:83:21:b2:5f:bd:a6:77:d7:1a:30: eb:f0:74:05:4d:73:90:d7:4a:8b:7c:25:d5:e3:e7:92:4a:f4: 05:19:3d:c0:c2:ed:47:50:5b:68:17:0d:ec:11:04:97:7a:e0: ad:7b:92:1e:e4:38:05:09:fb:ab:13:3d:a0:d4:86:53:1c:bb: cd:d0:76:06:4d:90:09:e1:1d:45:bc:9b:57:60:95:fa:ac:08: 11:08:41:cd:c1:47:33:3c:7d:35:18:f9:09:9c:44:c1:59:eb: 11:bd:eb:d5:94:a9:ec:cb:e8:fa:7a:d9:51:9c:17:c9:2c:47: 8a:ed:69:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC664uJWnRG765i1B+d4y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTIyZDE3MmMxM2IxNTI5MWU0MWY5NDU2ODE1MjU4MjZm ZWY4OTIwHhcNMjYwMjA5MTUwMTA3WhcNMjYwMjEwMTUwMTA3WjAzMTEwLwYDVQQD EyhlZWI4MGU3YmQzYmY3ZmMxMGNiNGYzNjAyN2Y0NjgyMDZhYjNkNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ7C1ag+Y80j5keiIQ/dNoTYd715 uV1PPxVJnHqaz0N14GFgkGs1RGROT+ZEaPPVD6IMOdQRXExBSX/BfKbKaurbo7Q0 XO7Wv4DHyEWB4086mrxf5cPCDUIIDXmUueCJeG4qfk7BwDA1yJDQu978kN7eZJf3 6ecaVRbHEOecnC/MkG/s2WJm5BKBoeMki1glBX9b2PvgDsv+CK4D4iPO5Sn/RT0O 69L5yehMlP01v4Cf7KJ7U75YhqhFBa9SQC4onvx1UgzynJCR6sE2vZg9Ec/7D9Ox /ZFLJDNPkl+HWTiYtTM27WDel5CtR0H5S6TxVE3V2uBrCEoEkLu6+HqmQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO64DnvTv3/BDLTzYCf0aCBqs9aUMB8GA1UdIwQY MBaAFN4SLRcsE7FSkeQflFaBUlgm/viSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMt MzY1YzRiNWMyNGVkLzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMtMzY1YzRiNWMyNGVk LzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjy8Q58D goxr6yiWJqzZsiGQQ/sbz3KgXgU9xGaft7uf3QpvVFtPG4lqJyX4cQ+sUfps44xN yt+39iExmgQEe2WvWhasy8MB+rDH/nulLzwCaYnjekZySeqzmF5Nt4DVkjtC7Sad uYthZY9D2qETHGHm06sUetjGJUxRJubUjSWU2RBfVcaDIbJfvaZ31xow6/B0BU1z kNdKi3wl1ePnkkr0BRk9wMLtR1BbaBcN7BEEl3rgrXuSHuQ4BQn7qxM9oNSGUxy7 zdB2Bk2QCeEdRbybV2CV+qwIEQhBzcFHMzx9NRj5CZxEwVnrEb3r1ZSp7Mvo+nrZ UZwXySxHiu1pzw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:49 2026 by rpki-client