This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft File: MV3KddscDCcsCIvLF-dqTQ7tNNM.mft (raw, json) Hash identifier: 4wPUeGkN6v8HWh90UFeV0N5nQprrfZtvK3nGZTbIlaQ= Subject key identifier: 9A:3D:5E:BB:9A:2F:D0:56:AF:65:B8:5A:1B:C8:7E:E7:FD:5B:08:70 Authority key identifier: 31:5D:CA:75:DB:1C:0C:27:2C:08:8B:CB:17:E7:6A:4D:0E:ED:34:D3 Certificate issuer: /CN=315dca75db1c0c272c088bcb17e76a4d0eed34d3 Certificate serial: 019C44A25B30EB3656D9976C5E81B717F299 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MV3KddscDCcsCIvLF-dqTQ7tNNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft Manifest number: 016D Signing time: Mon 09 Feb 2026 23:00:16 +0000 Manifest this update: Mon 09 Feb 2026 23:00:16 +0000 Manifest next update: Tue 10 Feb 2026 23:00:16 +0000 Files and hashes: 1: MV3KddscDCcsCIvLF-dqTQ7tNNM.crl (hash: 6stIGrkiN53woI+/5EEKJL845i1pSXNGLgPZMBBn9rY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft rsync://rpki.ripe.net/repository/DEFAULT/MV3KddscDCcsCIvLF-dqTQ7tNNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:5b:30:eb:36:56:d9:97:6c:5e:81:b7:17:f2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=315dca75db1c0c272c088bcb17e76a4d0eed34d3 Validity Not Before: Feb 9 23:00:16 2026 GMT Not After : Feb 10 23:00:16 2026 GMT Subject: CN=9a3d5ebb9a2fd056af65b85a1bc87ee7fd5b0870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:ac:5d:57:72:81:ed:40:88:8d:9a:c5:2c: 8d:be:8e:4a:f7:53:09:eb:c5:40:eb:3e:fb:75:8d: cd:2d:f1:2b:7a:0a:f3:c4:9f:7b:74:a2:65:cb:5e: 44:4b:a3:5c:3e:ab:39:70:1e:4d:34:18:91:2a:0b: 14:fd:15:49:e7:78:9d:66:bf:04:2d:ac:e0:48:78: e8:69:14:e9:e2:22:92:af:3a:c6:46:40:b7:e3:af: e4:7f:09:31:31:74:12:cd:3e:76:3b:fc:72:1a:ac: 6d:c7:95:1c:e6:12:ee:70:c3:d5:d3:16:dd:b7:dc: af:1a:8e:70:32:0f:dc:c6:ce:96:b4:00:ee:43:97: e1:28:18:03:38:89:9f:ed:e3:dc:38:19:6a:00:43: 8c:8c:b6:92:e4:ee:eb:dd:5e:6b:c7:e7:80:d2:46: b7:ef:1a:6a:38:ee:a9:c8:36:1a:d4:c8:f6:5d:fa: bc:2d:c1:58:d2:42:84:42:18:d6:03:0d:af:2a:06: 97:0f:87:ce:80:53:e2:de:83:e3:53:a3:88:59:d0: c5:d4:30:6c:41:11:48:7f:c9:ee:ad:f7:7d:6e:a3: ff:2e:12:d7:19:87:39:04:61:f1:e5:9f:2c:cb:27: 5f:eb:29:f6:1c:91:d3:6d:20:b7:e7:45:9d:c9:9a: d2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3D:5E:BB:9A:2F:D0:56:AF:65:B8:5A:1B:C8:7E:E7:FD:5B:08:70 X509v3 Authority Key Identifier: keyid:31:5D:CA:75:DB:1C:0C:27:2C:08:8B:CB:17:E7:6A:4D:0E:ED:34:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MV3KddscDCcsCIvLF-dqTQ7tNNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:78:5a:3b:5a:a8:97:98:72:01:0a:8b:6f:35:86:8c:be:bc: 79:d1:46:50:52:16:11:c5:a2:b7:48:7b:a7:5d:76:46:22:55: 93:12:3b:19:ec:0c:5a:7b:ce:f5:2d:66:0c:83:45:40:5e:4d: d3:52:4d:14:64:36:38:d2:1c:c6:64:a4:b2:d8:2b:72:e3:a9: e5:aa:8f:af:4f:db:86:74:81:86:d0:99:d2:06:c7:67:6e:bf: 28:7b:60:6a:e6:0f:87:5a:16:03:c0:e4:0d:4f:5a:5c:c6:70: de:a1:f8:68:be:25:d7:0e:fe:da:65:54:c7:b9:d8:1b:28:53: f0:ea:bc:cd:a0:13:c0:ad:60:4b:a9:2e:16:cc:0e:a2:0d:20: 29:a0:f5:ca:8f:8d:13:13:11:0a:b1:05:5e:70:0d:35:08:97: 2d:4e:1a:26:c9:75:d4:14:1c:e0:90:4c:6b:8d:7d:94:f2:d1: d1:56:85:f9:ee:f7:46:70:9f:3f:55:c1:06:f9:78:96:b1:e8: ac:dc:03:10:94:67:b7:5b:93:73:d9:eb:b6:c8:32:97:ad:2d: 05:87:3d:e3:51:68:c9:f3:84:50:1e:89:1f:06:7e:5b:85:ba: 28:86:0a:92:09:a5:ec:91:a7:c2:62:95:48:83:2b:56:2f:f5: c2:bf:49:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEolsw6zZW2ZdsXoG3F/KZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNWRjYTc1ZGIxYzBjMjcyYzA4OGJjYjE3ZTc2YTRkMGVl ZDM0ZDMwHhcNMjYwMjA5MjMwMDE2WhcNMjYwMjEwMjMwMDE2WjAzMTEwLwYDVQQD Eyg5YTNkNWViYjlhMmZkMDU2YWY2NWI4NWExYmM4N2VlN2ZkNWIwODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDqsXVdyge1AiI2axSyNvo5K91MJ 68VA6z77dY3NLfEregrzxJ97dKJly15ES6NcPqs5cB5NNBiRKgsU/RVJ53idZr8E LazgSHjoaRTp4iKSrzrGRkC346/kfwkxMXQSzT52O/xyGqxtx5Uc5hLucMPV0xbd t9yvGo5wMg/cxs6WtADuQ5fhKBgDOImf7ePcOBlqAEOMjLaS5O7r3V5rx+eA0ka3 7xpqOO6pyDYa1Mj2Xfq8LcFY0kKEQhjWAw2vKgaXD4fOgFPi3oPjU6OIWdDF1DBs QRFIf8nurfd9bqP/LhLXGYc5BGHx5Z8syydf6yn2HJHTbSC350WdyZrS0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo9XruaL9BWr2W4WhvIfuf9WwhwMB8GA1UdIwQY MBaAFDFdynXbHAwnLAiLyxfnak0O7TTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVYzS2Rkc2NEQ2NzQ0l2TEYtZHFUUTd0Tk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xYzMyZjgtOTdmYS00ZjU1LWFlMTYt OTQ1MDY0Y2Q3MzI5LzEvTVYzS2Rkc2NEQ2NzQ0l2TEYtZHFUUTd0Tk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xYzMyZjgtOTdmYS00ZjU1LWFlMTYtOTQ1MDY0Y2Q3MzI5 LzEvTVYzS2Rkc2NEQ2NzQ0l2TEYtZHFUUTd0Tk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHhaO1qo l5hyAQqLbzWGjL68edFGUFIWEcWit0h7p112RiJVkxI7GewMWnvO9S1mDINFQF5N 01JNFGQ2ONIcxmSkstgrcuOp5aqPr0/bhnSBhtCZ0gbHZ26/KHtgauYPh1oWA8Dk DU9aXMZw3qH4aL4l1w7+2mVUx7nYGyhT8Oq8zaATwK1gS6kuFswOog0gKaD1yo+N ExMRCrEFXnANNQiXLU4aJsl11BQc4JBMa419lPLR0VaF+e73RnCfP1XBBvl4lrHo rNwDEJRnt1uTc9nrtsgyl60tBYc941FoyfOEUB6JHwZ+W4W6KIYKkgml7JGnwmKV SIMrVi/1wr9Jnw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:15 2026 by rpki-client