This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft File: I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json) Hash identifier: 4uwwq66LQp1qxvmCzAObA++UYdn3wIjgUFeerfSgfdo= Subject key identifier: C2:8F:1D:BD:81:08:31:9D:9F:D0:C4:B6:82:2C:8E:95:41:AE:8A:94 Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21 Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821 Certificate serial: 019C43FDDBC702EC18947B4DD1FFCF6D221F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft Manifest number: 1766 Signing time: Mon 09 Feb 2026 20:00:36 +0000 Manifest this update: Mon 09 Feb 2026 20:00:36 +0000 Manifest next update: Tue 10 Feb 2026 20:00:36 +0000 Files and hashes: 1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: 0ZZwWOmxz5kUZmf24M0iucXy6deFn9tR/xudEjoG1y4=) 2: bj3I_g97Yahu7vddzs1BZpAT61I.roa (hash: Umd8xcEXcey7lYUK9Epa+37FhJD7JxD8DRhMnzG18gM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:db:c7:02:ec:18:94:7b:4d:d1:ff:cf:6d:22:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821 Validity Not Before: Feb 9 20:00:36 2026 GMT Not After : Feb 10 20:00:36 2026 GMT Subject: CN=c28f1dbd8108319d9fd0c4b6822c8e9541ae8a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:0e:4b:79:de:70:ca:8e:ab:0d:4a:f3:e2: e5:3d:32:87:29:5e:f9:88:db:41:86:11:bb:84:0b: b4:bd:4f:3f:4a:1b:fd:0b:92:a4:f2:c4:34:9d:50: 16:97:8b:d0:0e:2f:f5:4b:c2:8a:a8:ee:e2:a5:2b: 1e:a7:35:7f:e3:85:02:05:67:cc:1c:d1:97:4c:c9: d8:27:3b:47:17:45:54:a4:fa:69:5e:3d:a4:dc:ef: f1:d3:24:65:4a:0d:bc:9d:9f:24:ce:4c:7f:38:5a: 87:e2:5b:25:f1:54:b8:4e:f5:bc:3c:62:53:b9:eb: 5c:87:8e:ab:2b:a6:7b:5e:04:25:50:86:9c:a1:9a: 16:5a:29:03:8c:4a:a4:1c:7b:68:6d:d8:b4:22:83: e3:ea:21:60:b9:75:fa:b5:41:9f:0d:63:93:e6:62: 5f:36:39:8d:3d:18:9d:a6:27:f0:14:98:69:8a:fb: e4:ed:78:74:39:c5:a5:73:6b:2a:09:24:9b:08:b7: 40:3d:7a:92:ef:e4:41:34:6d:de:f8:f0:77:dc:64: ea:37:b9:98:42:76:82:55:2a:28:21:b0:87:74:58: f8:7f:22:2e:97:46:c8:f4:51:b0:20:35:4a:a0:4f: b8:0e:89:e8:4f:83:92:2b:a1:32:97:88:cd:5d:3a: e0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8F:1D:BD:81:08:31:9D:9F:D0:C4:B6:82:2C:8E:95:41:AE:8A:94 X509v3 Authority Key Identifier: keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:bf:17:cd:c6:de:5b:2e:00:c9:1a:df:d5:51:c7:71:8b:c6: 44:2f:36:c4:3b:ff:65:2d:85:41:71:70:54:7e:5b:ab:19:68: b3:09:2f:8e:dd:79:9f:be:5a:97:2d:5c:16:1e:a0:da:f8:8e: 50:83:fb:6b:33:ee:a9:87:d3:55:7d:5c:bc:d1:cc:72:bf:07: 22:f6:70:d5:50:53:09:8e:af:70:da:eb:e7:43:52:8f:8b:a0: 1e:7c:f0:04:35:2d:44:d1:20:79:53:79:d7:d8:bd:29:91:d5: 27:88:27:f6:10:e3:e6:5f:0e:a7:3e:3e:3c:62:31:86:5b:7b: 75:d1:52:4f:97:ab:2d:b5:d9:e0:07:3d:e5:67:26:f9:52:05: 3d:b3:3f:c9:6a:1c:99:22:d7:f4:2c:37:b2:dd:dd:d5:da:b5: 3d:92:8b:e3:6f:22:ef:4c:a2:e9:a6:19:a4:6c:01:a2:56:e5: c8:87:06:12:99:2e:4b:33:3b:c1:14:b2:03:bd:a6:f7:55:81: 6a:de:d3:9e:34:6a:eb:9f:ce:f3:79:43:9d:cd:89:03:bf:70: 50:57:d7:c3:0a:02:07:34:e5:5b:e2:7c:1c:a3:df:1f:ca:ad: 01:41:28:cd:d1:8e:a9:8a:54:85:28:58:65:a9:0a:8f:4d:8f: 1b:a0:bd:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/dvHAuwYlHtN0f/PbSIfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2IyYjUwYmYwYzE4YTUzMWU2ZGIxNTY2N2JlN2VkNzZi YjI4MjEwHhcNMjYwMjA5MjAwMDM2WhcNMjYwMjEwMjAwMDM2WjAzMTEwLwYDVQQD EyhjMjhmMWRiZDgxMDgzMTlkOWZkMGM0YjY4MjJjOGU5NTQxYWU4YTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYkOS3necMqOqw1K8+LlPTKHKV75 iNtBhhG7hAu0vU8/Shv9C5Kk8sQ0nVAWl4vQDi/1S8KKqO7ipSsepzV/44UCBWfM HNGXTMnYJztHF0VUpPppXj2k3O/x0yRlSg28nZ8kzkx/OFqH4lsl8VS4TvW8PGJT uetch46rK6Z7XgQlUIacoZoWWikDjEqkHHtobdi0IoPj6iFguXX6tUGfDWOT5mJf NjmNPRidpifwFJhpivvk7Xh0OcWlc2sqCSSbCLdAPXqS7+RBNG3e+PB33GTqN7mY QnaCVSooIbCHdFj4fyIul0bI9FGwIDVKoE+4DonoT4OSK6Eyl4jNXTrgJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKPHb2BCDGdn9DEtoIsjpVBroqUMB8GA1UdIwQY MBaAFCN7K1C/DBilMebbFWZ75+12uyghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zZDZkNTEtM2Q1Ny00M2E4LWI2N2Yt YjYxNWRmN2ZjZTllLzEvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8zZDZkNTEtM2Q1Ny00M2E4LWI2N2YtYjYxNWRmN2ZjZTll LzEvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl78Xzcbe Wy4AyRrf1VHHcYvGRC82xDv/ZS2FQXFwVH5bqxloswkvjt15n75aly1cFh6g2viO UIP7azPuqYfTVX1cvNHMcr8HIvZw1VBTCY6vcNrr50NSj4ugHnzwBDUtRNEgeVN5 19i9KZHVJ4gn9hDj5l8Opz4+PGIxhlt7ddFST5erLbXZ4Ac95Wcm+VIFPbM/yWoc mSLX9Cw3st3d1dq1PZKL428i70yi6aYZpGwBolblyIcGEpkuSzM7wRSyA72m91WB at7TnjRq65/O83lDnc2JA79wUFfXwwoCBzTlW+J8HKPfH8qtAUEozdGOqYpUhShY ZakKj02PG6C9Kg== -----END CERTIFICATE-----Generated at Tue Feb 10 05:51:03 2026 by rpki-client