This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft File: R3BGWvTHI2RwAFnnll08iepGPNc.mft (raw, json) Hash identifier: JTOY1HPtYe37cF2YgWKcxwZifhykOkQl4C9WEyYw4j0= Subject key identifier: 6B:A3:E8:49:36:6C:73:ED:CE:4D:E7:05:96:B1:D3:0A:E7:68:64:53 Authority key identifier: 47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7 Certificate issuer: /CN=4770465af4c72364700059e7965d3c89ea463cd7 Certificate serial: 019C4321C744FA10805D4AE145F9AFC177B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft Manifest number: 11C6 Signing time: Mon 09 Feb 2026 16:00:12 +0000 Manifest this update: Mon 09 Feb 2026 16:00:12 +0000 Manifest next update: Tue 10 Feb 2026 16:00:12 +0000 Files and hashes: 1: R3BGWvTHI2RwAFnnll08iepGPNc.crl (hash: SeEQX2xnyrYSXd5c7ra5XlcjANz222HeXcRQ3/4qMyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:c7:44:fa:10:80:5d:4a:e1:45:f9:af:c1:77:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4770465af4c72364700059e7965d3c89ea463cd7 Validity Not Before: Feb 9 16:00:12 2026 GMT Not After : Feb 10 16:00:12 2026 GMT Subject: CN=6ba3e849366c73edce4de70596b1d30ae7686453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:06:0e:9e:05:68:82:df:22:bf:65:64:d0:c3: dd:a6:78:35:a4:8a:be:e4:23:c0:cf:fc:15:5b:0b: f2:bb:c0:7b:d4:56:a5:d8:30:6d:11:a2:a4:3d:23: 96:1e:5a:9c:5f:5c:51:3c:fb:9b:cd:e7:e3:3f:56: 06:ad:cc:4c:b0:52:ce:f2:ec:55:54:13:64:ee:11: 1b:c3:a5:8e:0d:75:3f:02:f5:54:70:17:9c:72:1a: dd:57:a6:2f:29:20:9d:77:be:a2:00:a6:d8:f8:b0: 6b:09:7a:aa:b0:05:44:b6:46:6d:40:98:31:87:89: ea:34:0e:c8:7d:71:60:b7:f2:d6:3f:e6:19:32:c9: 7d:48:ac:e8:aa:80:f2:1f:a2:32:c9:3b:ea:ef:94: b7:59:9e:d7:70:e8:33:57:dc:19:4a:2a:61:a3:91: 80:7b:5f:d7:99:f2:1b:98:10:21:f7:cb:5a:c4:77: 51:cf:25:6a:fe:45:67:69:df:0c:f8:5a:03:de:14: 79:d0:32:cf:b6:7b:75:17:4f:e0:cf:d0:f1:06:42: 23:3e:6b:54:a3:bc:29:39:a3:9b:37:e7:23:83:73: 11:f5:6c:94:34:aa:c3:80:a8:a7:07:0d:2b:e7:61: 08:39:04:5f:49:68:01:ec:bd:63:2d:71:32:4f:f3: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A3:E8:49:36:6C:73:ED:CE:4D:E7:05:96:B1:D3:0A:E7:68:64:53 X509v3 Authority Key Identifier: keyid:47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9b:61:a3:71:47:db:d8:70:b6:52:a7:37:54:d2:64:25:4f: 86:29:78:4c:e0:b5:63:11:49:15:83:02:a3:61:e5:35:4b:ac: 89:00:95:8c:76:81:02:ae:5c:a9:e4:2f:27:95:c5:6f:d0:11: 8b:1a:e1:35:6e:20:43:8f:c0:ec:e1:2d:d4:87:4f:31:bf:97: 4d:8b:09:e8:ee:6f:40:a2:26:58:81:71:02:b1:ae:7d:f6:d6: f3:36:8b:c9:6e:a9:e9:d7:4c:ac:1a:39:52:5b:ab:a3:ab:6a: 42:6b:18:be:2b:d9:7d:2c:b3:44:a3:8d:c0:39:1c:f1:06:53: f4:a4:22:c9:25:d7:cf:15:bb:d6:93:28:c4:9c:8d:a0:18:17: 9d:b8:a4:04:34:d6:76:74:0a:5f:8c:3f:0f:3d:92:70:d1:ec: 84:1d:65:b4:e0:53:37:3f:52:12:b1:d1:17:a4:66:14:3e:6f: 36:66:ab:44:d5:25:c0:dc:44:a5:a7:00:a3:6b:98:2d:2b:f4: cc:3f:bb:14:d8:26:3f:b3:54:94:60:32:9a:b9:2a:de:0c:56: 9f:32:d5:7a:23:dc:20:11:ea:ab:9f:8c:a7:23:81:a4:e0:12: cf:17:57:00:ec:59:80:a3:29:ba:7d:fb:83:11:04:99:4a:ed: c4:43:0b:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIcdE+hCAXUrhRfmvwXe0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzA0NjVhZjRjNzIzNjQ3MDAwNTllNzk2NWQzYzg5ZWE0 NjNjZDcwHhcNMjYwMjA5MTYwMDEyWhcNMjYwMjEwMTYwMDEyWjAzMTEwLwYDVQQD Eyg2YmEzZTg0OTM2NmM3M2VkY2U0ZGU3MDU5NmIxZDMwYWU3Njg2NDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QYOngVogt8iv2Vk0MPdpng1pIq+ 5CPAz/wVWwvyu8B71Fal2DBtEaKkPSOWHlqcX1xRPPubzefjP1YGrcxMsFLO8uxV VBNk7hEbw6WODXU/AvVUcBecchrdV6YvKSCdd76iAKbY+LBrCXqqsAVEtkZtQJgx h4nqNA7IfXFgt/LWP+YZMsl9SKzoqoDyH6IyyTvq75S3WZ7XcOgzV9wZSipho5GA e1/XmfIbmBAh98taxHdRzyVq/kVnad8M+FoD3hR50DLPtnt1F0/gz9DxBkIjPmtU o7wpOaObN+cjg3MR9WyUNKrDgKinBw0r52EIOQRfSWgB7L1jLXEyT/PMXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuj6Ek2bHPtzk3nBZax0wrnaGRTMB8GA1UdIwQY MBaAFEdwRlr0xyNkcABZ55ZdPInqRjzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85N2QwOWItZTVlMS00N2Y4LWIyNWYt OGE5MmUwOWJmZTFiLzEvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85N2QwOWItZTVlMS00N2Y4LWIyNWYtOGE5MmUwOWJmZTFi LzEvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5tho3FH 29hwtlKnN1TSZCVPhil4TOC1YxFJFYMCo2HlNUusiQCVjHaBAq5cqeQvJ5XFb9AR ixrhNW4gQ4/A7OEt1IdPMb+XTYsJ6O5vQKImWIFxArGuffbW8zaLyW6p6ddMrBo5 Uluro6tqQmsYvivZfSyzRKONwDkc8QZT9KQiySXXzxW71pMoxJyNoBgXnbikBDTW dnQKX4w/Dz2ScNHshB1ltOBTNz9SErHRF6RmFD5vNmarRNUlwNxEpacAo2uYLSv0 zD+7FNgmP7NUlGAymrkq3gxWnzLVeiPcIBHqq5+MpyOBpOASzxdXAOxZgKMpun37 gxEEmUrtxEMLlw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:06 2026 by rpki-client