This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft File: rV3Hd3t3orNHfGernSbMeqAvOIk.mft (raw, json) Hash identifier: mzbufBTNXm6lhayh/trkoegrfdhI1hw6eJhu6uMjMnw= Subject key identifier: BF:0D:80:21:54:E5:E9:A7:0A:0D:86:E9:B7:7D:38:C9:DB:11:C7:A6 Authority key identifier: AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89 Certificate issuer: /CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889 Certificate serial: 019C416A8996B5573A66AAFE6633CB170120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft Manifest number: 178A Signing time: Mon 09 Feb 2026 08:00:26 +0000 Manifest this update: Mon 09 Feb 2026 08:00:26 +0000 Manifest next update: Tue 10 Feb 2026 08:00:26 +0000 Files and hashes: 1: rV3Hd3t3orNHfGernSbMeqAvOIk.crl (hash: L33jPf0SZenrKjPnPmXjwTOPt91K9Mk47AwkNV0fHJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:89:96:b5:57:3a:66:aa:fe:66:33:cb:17:01:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889 Validity Not Before: Feb 9 08:00:26 2026 GMT Not After : Feb 10 08:00:26 2026 GMT Subject: CN=bf0d802154e5e9a70a0d86e9b77d38c9db11c7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:ec:65:bc:f8:cb:b4:71:ca:7a:ac:73:c5: ef:ed:3f:ea:64:ce:71:fb:31:fe:e1:ee:e2:51:5c: 12:73:3f:0f:c5:cb:74:85:a4:66:c7:fc:cb:d4:b4: 5a:a3:9d:2a:3d:f6:af:95:4e:1a:99:ec:69:3a:2e: 46:4d:9b:62:81:48:d4:95:00:db:85:83:7f:e6:4a: 6a:05:d0:a4:d8:9c:6f:ff:7c:82:f5:4f:ea:4d:2d: 65:12:01:e3:7d:39:f9:93:6f:f4:f1:74:16:1b:d3: 93:7e:8c:b4:1e:70:5e:31:4f:8d:83:03:b3:4b:97: 3d:1a:15:e5:2a:0d:16:97:0e:b5:e7:7a:87:5a:86: 2e:46:44:9c:bd:7e:a3:4e:14:5e:99:f9:ee:0c:e9: 3a:f4:39:ba:a5:f7:90:48:18:3b:25:a7:25:f9:3a: 04:3a:57:11:2d:0b:60:56:7e:9d:2a:e3:63:4d:4a: 52:79:66:53:f7:fa:bc:81:f3:1a:ec:e6:fb:24:f2: 70:3e:e3:27:11:94:19:dd:79:71:ae:e5:b4:ed:5b: b8:ea:9f:e2:de:7d:48:11:67:28:34:c6:c4:06:c9: d9:f4:ca:7e:da:9f:60:7c:91:a6:a9:b0:a8:77:eb: 93:15:34:3a:39:47:cf:5b:1a:64:0c:b6:f9:7c:81: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0D:80:21:54:E5:E9:A7:0A:0D:86:E9:B7:7D:38:C9:DB:11:C7:A6 X509v3 Authority Key Identifier: keyid:AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:41:cf:8b:da:6b:02:81:cc:ed:0d:c6:92:58:e4:e6:0b:3f: 28:30:46:c8:78:6c:cd:ee:59:9d:9a:c8:81:4a:84:46:82:8f: 65:9d:ad:7a:6d:e6:c3:e0:3d:9e:15:3a:bc:63:87:da:66:55: 37:67:e5:ab:cd:da:f3:af:9d:8a:6e:59:f5:8c:f6:80:60:ca: de:d8:b2:4c:e2:d9:48:15:88:3a:ba:5b:11:53:e4:04:7a:06: 49:37:6f:61:69:2d:1a:be:5f:3c:f5:0e:a1:c4:8b:12:33:90: 0c:a3:b2:ca:53:80:38:ff:86:fd:4f:10:9b:e3:fc:74:65:37: 14:79:4b:29:bd:7e:38:ab:c4:86:20:98:c1:ef:3d:d0:fc:12: 5c:a1:0b:9a:30:e7:cc:86:91:4a:fe:07:91:e3:d1:ac:a6:c2: 28:23:54:72:2c:98:22:a3:8f:46:cf:a1:fa:7a:d0:a2:f7:ec: a3:d2:04:69:5d:1b:15:88:29:b8:0c:e4:32:ff:1c:9f:83:e7: ce:6d:2a:7d:1c:dd:66:57:e5:8c:ab:99:ea:7a:a4:b4:94:4e: 51:76:34:d2:81:0f:05:12:d6:c7:bb:a8:18:4a:27:19:ca:a7: f9:06:10:34:bf:36:92:06:bd:cf:0c:93:f2:71:2d:54:68:1e: 7b:1b:df:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBaomWtVc6Zqr+ZjPLFwEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNWRjNzc3N2I3N2EyYjM0NzdjNjdhYjlkMjZjYzdhYTAy ZjM4ODkwHhcNMjYwMjA5MDgwMDI2WhcNMjYwMjEwMDgwMDI2WjAzMTEwLwYDVQQD EyhiZjBkODAyMTU0ZTVlOWE3MGEwZDg2ZTliNzdkMzhjOWRiMTFjN2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1jsZbz4y7Rxynqsc8Xv7T/qZM5x +zH+4e7iUVwScz8Pxct0haRmx/zL1LRao50qPfavlU4amexpOi5GTZtigUjUlQDb hYN/5kpqBdCk2Jxv/3yC9U/qTS1lEgHjfTn5k2/08XQWG9OTfoy0HnBeMU+NgwOz S5c9GhXlKg0Wlw6153qHWoYuRkScvX6jThRemfnuDOk69Dm6pfeQSBg7Jacl+ToE OlcRLQtgVn6dKuNjTUpSeWZT9/q8gfMa7Ob7JPJwPuMnEZQZ3XlxruW07Vu46p/i 3n1IEWcoNMbEBsnZ9Mp+2p9gfJGmqbCod+uTFTQ6OUfPWxpkDLb5fIHhBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8NgCFU5emnCg2G6bd9OMnbEcemMB8GA1UdIwQY MBaAFK1dx3d7d6KzR3xnq50mzHqgLziJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclYzSGQzdDNvck5IZkdlcm5TYk1lcUF2T0lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82NTU4NjgtM2I3OS00NDQ3LWI0NjUt ZjQwOTQ1OGMwNGQ1LzEvclYzSGQzdDNvck5IZkdlcm5TYk1lcUF2T0lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82NTU4NjgtM2I3OS00NDQ3LWI0NjUtZjQwOTQ1OGMwNGQ1 LzEvclYzSGQzdDNvck5IZkdlcm5TYk1lcUF2T0lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkHPi9pr AoHM7Q3Gkljk5gs/KDBGyHhsze5ZnZrIgUqERoKPZZ2tem3mw+A9nhU6vGOH2mZV N2flq83a86+dim5Z9Yz2gGDK3tiyTOLZSBWIOrpbEVPkBHoGSTdvYWktGr5fPPUO ocSLEjOQDKOyylOAOP+G/U8Qm+P8dGU3FHlLKb1+OKvEhiCYwe890PwSXKELmjDn zIaRSv4HkePRrKbCKCNUciyYIqOPRs+h+nrQovfso9IEaV0bFYgpuAzkMv8cn4Pn zm0qfRzdZlfljKuZ6nqktJROUXY00oEPBRLWx7uoGEonGcqn+QYQNL82kga9zwyT 8nEtVGgeexvfFw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:43 2026 by rpki-client