This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json) Hash identifier: YwU2V5S29q0kfrRRCjTwfhQ2zsqHEFxun4kWO6M6waE= Subject key identifier: D2:C4:D0:89:3E:D6:A8:83:87:7D:37:97:EC:1D:BD:67:D7:BE:BB:18 Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59 Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159 Certificate serial: 019C41A2472B8AAB819B55B7E61A68D9E76F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft Manifest number: 0DBC Signing time: Mon 09 Feb 2026 09:01:19 +0000 Manifest this update: Mon 09 Feb 2026 09:01:19 +0000 Manifest next update: Tue 10 Feb 2026 09:01:19 +0000 Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: 7THxoqdduWQLyONehMdAJRan6GLdSnUiAEgbrZEHWgg=) 2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:47:2b:8a:ab:81:9b:55:b7:e6:1a:68:d9:e7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159 Validity Not Before: Feb 9 09:01:19 2026 GMT Not After : Feb 10 09:01:19 2026 GMT Subject: CN=d2c4d0893ed6a883877d3797ec1dbd67d7bebb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:5d:20:b6:f0:76:9a:6d:74:b8:72:bf:03: 95:95:64:6d:82:5d:37:05:69:76:0b:cf:32:a9:88: 25:04:53:80:24:c9:c9:2a:9e:69:0b:65:c6:8d:5b: 64:44:b9:a2:3c:43:9c:d0:89:1b:26:a3:b4:40:31: a8:ee:21:f8:89:28:e7:ea:58:ba:17:28:e7:44:f1: 18:1c:57:ff:2a:38:d9:68:01:99:b5:95:72:79:5c: 3d:d3:b0:79:88:06:56:70:a3:1f:e3:61:bf:7f:b4: 85:7b:89:05:51:fa:14:80:e5:ee:8a:de:74:f1:97: dc:37:bf:f9:e3:8c:ba:5a:55:76:e5:9f:ff:08:e3: 67:ae:e5:2b:9c:07:b4:4a:d5:d5:94:45:76:f7:86: 4b:60:7b:33:19:b0:e9:3f:9b:b6:d7:d6:b3:54:a6: 0d:d8:9b:68:b3:99:1e:ad:94:88:c9:2d:a7:9e:5c: 46:d0:9d:3d:4d:5b:8f:35:9a:64:3b:3e:0a:b5:7d: fc:f9:04:29:79:55:13:19:31:49:05:d1:9b:68:d5: a6:f4:18:83:42:b8:04:68:55:44:77:66:e3:44:de: 54:84:12:ac:17:7d:4d:89:cb:51:23:31:fd:a2:1b: 2f:5b:03:e0:81:03:a6:db:90:88:cb:64:51:3c:85: 3d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C4:D0:89:3E:D6:A8:83:87:7D:37:97:EC:1D:BD:67:D7:BE:BB:18 X509v3 Authority Key Identifier: keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a8:5d:8b:6b:b4:7a:0f:df:a4:c3:37:81:8a:1e:7b:2d:b0: db:22:a2:14:35:f1:eb:aa:54:55:0b:01:92:c6:fc:90:0d:e3: ac:27:36:36:14:fa:f0:ee:36:e7:64:36:e7:90:04:27:a9:56: 0b:00:93:e3:b2:d0:94:21:7d:3c:22:bf:5f:17:c5:c4:07:40: a2:0e:68:6e:7a:03:57:b2:65:42:d2:c1:99:64:23:ad:2c:c3: b8:37:78:77:24:90:ae:06:f7:c8:51:8b:62:ba:d8:b4:be:f7: 27:a4:36:4f:8a:fe:b4:59:ae:a7:21:eb:61:41:e0:8f:cf:91: b3:6d:87:83:a9:28:38:49:df:b2:17:1e:81:d6:bf:f0:24:6b: 35:63:6a:41:f1:1f:fd:12:f2:1e:2d:b6:43:44:7f:b0:0b:7d: 5c:9f:cc:d8:c2:de:ed:97:2c:f9:eb:37:83:4f:af:6d:8a:75: 94:3e:85:94:e3:fa:86:33:45:ae:9a:26:ea:6d:2f:9a:b7:d8: 9e:ce:db:52:94:ea:99:49:fe:71:ff:ca:2c:e5:28:ac:5b:98: ec:6f:5b:6d:a5:5d:30:ae:da:ce:e6:ab:20:43:b7:50:05:83: 8d:8e:58:c7:d2:45:a6:1d:7e:6d:9a:79:3b:d0:e6:47:aa:01: 9c:04:39:d0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxBokcriquBm1W35hpo2edvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZWZmNzZlMTJkYzE0Yzc0NGFhNzI2ZTAxNzQxNzI3YzQ2 ZGMxNTkwHhcNMjYwMjA5MDkwMTE5WhcNMjYwMjEwMDkwMTE5WjAzMTEwLwYDVQQD EyhkMmM0ZDA4OTNlZDZhODgzODc3ZDM3OTdlYzFkYmQ2N2Q3YmViYjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokxdILbwdpptdLhyvwOVlWRtgl03 BWl2C88yqYglBFOAJMnJKp5pC2XGjVtkRLmiPEOc0IkbJqO0QDGo7iH4iSjn6li6 FyjnRPEYHFf/KjjZaAGZtZVyeVw907B5iAZWcKMf42G/f7SFe4kFUfoUgOXuit50 8ZfcN7/544y6WlV25Z//CONnruUrnAe0StXVlEV294ZLYHszGbDpP5u219azVKYN 2Jtos5kerZSIyS2nnlxG0J09TVuPNZpkOz4KtX38+QQpeVUTGTFJBdGbaNWm9BiD QrgEaFVEd2bjRN5UhBKsF31NictRIzH9ohsvWwPggQOm25CIy2RRPIU9VQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNLE0Ik+1qiDh303l+wdvWfXvrsYMB8GA1UdIwQY MBaAFPvv924S3BTHRKpybgF0FyfEbcFZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0tXzNiaExjRk1kRXFuSnVBWFFYSjhSdHdWay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvZDgwMWY3LTI4MjQtNGVhOS1hZDhm LTNiOGY1MDhhNzU0YS8xLzEtLV8zYmhMY0ZNZEVxbkp1QVhRWEo4UnR3VmsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzVmL2Q4MDFmNy0yODI0LTRlYTktYWQ4Zi0zYjhmNTA4YTc1 NGEvMS8xLS1fM2JoTGNGTWRFcW5KdUFYUVhKOFJ0d1ZrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqhd i2u0eg/fpMM3gYoeey2w2yKiFDXx66pUVQsBksb8kA3jrCc2NhT68O4252Q255AE J6lWCwCT47LQlCF9PCK/XxfFxAdAog5obnoDV7JlQtLBmWQjrSzDuDd4dySQrgb3 yFGLYrrYtL73J6Q2T4r+tFmupyHrYUHgj8+Rs22Hg6koOEnfshcegda/8CRrNWNq QfEf/RLyHi22Q0R/sAt9XJ/M2MLe7Zcs+es3g0+vbYp1lD6FlOP6hjNFrpom6m0v mrfYns7bUpTqmUn+cf/KLOUorFuY7G9bbaVdMK7azuarIEO3UAWDjY5Yx9JFph1+ bZp5O9DmR6oBnAQ50A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:30 2026 by rpki-client