This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft File: a3tUza1xENOJd_mlkmCzkxLkSH0.mft (raw, json) Hash identifier: 8JRCpOSQZYUCwVKWKCANm5gLJOc3dHfOcnQXu31XkBY= Subject key identifier: 84:3D:06:4E:1F:4C:2B:84:9A:AC:50:1B:AB:87:36:CD:FD:5D:AF:A3 Authority key identifier: 6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D Certificate issuer: /CN=6b7b54cdad7110d38977f9a59260b39312e4487d Certificate serial: 019C457F30E9C01ACB5C5EDCFEF8BB9FB55C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft Manifest number: 12EC Signing time: Tue 10 Feb 2026 03:01:29 +0000 Manifest this update: Tue 10 Feb 2026 03:01:29 +0000 Manifest next update: Wed 11 Feb 2026 03:01:29 +0000 Files and hashes: 1: a3tUza1xENOJd_mlkmCzkxLkSH0.crl (hash: 7dGN+AkrJSIDTzwNi5sgR+9T1MNarQK4S+Ac7/mYUek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:7f:30:e9:c0:1a:cb:5c:5e:dc:fe:f8:bb:9f:b5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7b54cdad7110d38977f9a59260b39312e4487d Validity Not Before: Feb 10 03:01:29 2026 GMT Not After : Feb 11 03:01:29 2026 GMT Subject: CN=843d064e1f4c2b849aac501bab8736cdfd5dafa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:86:66:16:95:6a:10:f9:b2:16:9e:6f:61: 16:3d:12:14:ec:31:c1:13:c3:e5:aa:bd:bc:0d:22: d5:97:c7:33:3d:14:87:92:9f:a4:1c:95:6a:f5:60: 11:cc:62:9f:09:03:11:f0:67:c0:ee:41:71:43:61: 62:ee:e7:e4:30:61:dd:b9:94:e1:22:d6:32:7b:f3: 4e:8c:ef:5a:67:fd:a4:1e:42:56:88:41:c7:39:ac: 28:bc:02:1a:aa:37:8d:a3:99:1b:74:3b:e2:a3:3c: 06:0b:3c:94:97:10:3d:3b:a8:ec:e8:d9:29:b5:8c: 76:e5:af:1c:f2:27:1a:96:88:07:3c:e2:2d:28:1f: 1e:07:e9:36:56:bb:e9:f9:93:86:26:bf:9e:6c:60: 41:fb:a9:10:27:52:55:2d:42:e7:96:86:de:b4:5b: e3:06:8b:b8:fe:18:40:8b:94:b7:c9:c5:8c:19:05: 5c:2e:57:63:42:00:a1:10:65:1a:02:95:3c:bf:ed: 6f:06:b4:b3:d8:09:95:33:09:2d:a2:eb:4d:5d:2d: 58:25:9d:45:8d:b3:2e:53:1d:ef:4d:f8:76:a4:20: 89:f4:d7:65:42:bf:01:b2:3d:da:d6:15:ed:39:d0: 9f:a2:32:79:31:16:98:9d:fa:69:14:06:27:14:09: 74:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3D:06:4E:1F:4C:2B:84:9A:AC:50:1B:AB:87:36:CD:FD:5D:AF:A3 X509v3 Authority Key Identifier: keyid:6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:be:3b:f8:f3:43:0f:9b:c5:f9:b6:f3:bb:55:41:96:fc:90: 03:6f:86:ef:18:e1:1f:da:68:88:1c:8c:0a:b7:94:41:97:44: 4a:1a:f5:fc:cf:6c:0c:0a:93:d8:a6:d7:8b:84:eb:68:99:1a: 43:68:a9:38:30:24:b0:51:ed:66:0a:5b:11:c1:55:d2:a6:39: 7c:1d:40:76:06:71:c8:cb:78:0a:45:76:04:28:88:d8:47:7e: ef:30:26:cd:5f:8a:6b:d3:2b:84:18:e6:06:f5:1f:5d:7a:78: ce:b9:f6:9d:f0:fa:52:6c:07:6a:64:17:99:6d:f6:eb:98:e6: 39:14:a7:26:f6:26:dc:c8:8e:36:6f:5a:b0:5e:0a:d9:74:34: 67:3c:b7:1d:c7:9b:07:42:46:43:16:fe:7a:c4:ce:7b:6e:97: e9:f0:68:0d:4d:f8:14:c9:d8:4d:eb:f9:3e:4f:f6:83:2c:b7: e5:60:7a:61:64:15:83:45:4c:1c:99:30:c3:f0:6c:17:b4:5c: 76:b6:62:25:67:29:d1:38:20:a4:e6:41:fd:92:3c:5e:b5:a3: ab:87:ba:b6:94:b2:45:ab:8e:4a:81:4b:52:e0:ac:8a:03:6c: d5:66:21:d0:48:a8:bb:5b:e9:19:d0:3c:64:0b:ae:75:d0:b7: 09:47:52:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFfzDpwBrLXF7c/vi7n7VcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2I1NGNkYWQ3MTEwZDM4OTc3ZjlhNTkyNjBiMzkzMTJl NDQ4N2QwHhcNMjYwMjEwMDMwMTI5WhcNMjYwMjExMDMwMTI5WjAzMTEwLwYDVQQD Eyg4NDNkMDY0ZTFmNGMyYjg0OWFhYzUwMWJhYjg3MzZjZGZkNWRhZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mmGZhaVahD5shaeb2EWPRIU7DHB E8Plqr28DSLVl8czPRSHkp+kHJVq9WARzGKfCQMR8GfA7kFxQ2Fi7ufkMGHduZTh ItYye/NOjO9aZ/2kHkJWiEHHOawovAIaqjeNo5kbdDviozwGCzyUlxA9O6js6Nkp tYx25a8c8icalogHPOItKB8eB+k2Vrvp+ZOGJr+ebGBB+6kQJ1JVLULnlobetFvj Bou4/hhAi5S3ycWMGQVcLldjQgChEGUaApU8v+1vBrSz2AmVMwktoutNXS1YJZ1F jbMuUx3vTfh2pCCJ9NdlQr8Bsj3a1hXtOdCfojJ5MRaYnfppFAYnFAl0gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQ9Bk4fTCuEmqxQG6uHNs39Xa+jMB8GA1UdIwQY MBaAFGt7VM2tcRDTiXf5pZJgs5MS5Eh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTN0VXphMXhFTk9KZF9tbGttQ3preExrU0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82MjgxZGMtOWI1Zi00OWM4LWI0NTUt NDFkNzE3OWVkOTUxLzEvYTN0VXphMXhFTk9KZF9tbGttQ3preExrU0gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82MjgxZGMtOWI1Zi00OWM4LWI0NTUtNDFkNzE3OWVkOTUx LzEvYTN0VXphMXhFTk9KZF9tbGttQ3preExrU0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXL47+PND D5vF+bbzu1VBlvyQA2+G7xjhH9poiByMCreUQZdEShr1/M9sDAqT2KbXi4TraJka Q2ipODAksFHtZgpbEcFV0qY5fB1AdgZxyMt4CkV2BCiI2Ed+7zAmzV+Ka9MrhBjm BvUfXXp4zrn2nfD6UmwHamQXmW3265jmORSnJvYm3MiONm9asF4K2XQ0Zzy3Hceb B0JGQxb+esTOe26X6fBoDU34FMnYTev5Pk/2gyy35WB6YWQVg0VMHJkww/BsF7Rc drZiJWcp0TggpOZB/ZI8XrWjq4e6tpSyRauOSoFLUuCsigNs1WYh0Eiou1vpGdA8 ZAuuddC3CUdS0g== -----END CERTIFICATE-----Generated at Tue Feb 10 07:14:37 2026 by rpki-client