This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft File: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json) Hash identifier: dR2a7FfMUmyEgx+jPY1lQZ7F52ZdSV8NCeetTojc4uk= Subject key identifier: 81:DE:F5:68:0B:A0:2D:1F:D7:62:A3:DF:B5:98:19:F9:EB:A5:B1:E1 Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E Certificate issuer: /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e Certificate serial: 019C420FEB0E959D0D1DD8A877F3E1110300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft Manifest number: 02D8 Signing time: Mon 09 Feb 2026 11:01:05 +0000 Manifest this update: Mon 09 Feb 2026 11:01:05 +0000 Manifest next update: Tue 10 Feb 2026 11:01:05 +0000 Files and hashes: 1: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: O8jZI5+LFwRt+gYvFiElWm7ZIQo6KWpngxdmZK801Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:eb:0e:95:9d:0d:1d:d8:a8:77:f3:e1:11:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e Validity Not Before: Feb 9 11:01:05 2026 GMT Not After : Feb 10 11:01:05 2026 GMT Subject: CN=81def5680ba02d1fd762a3dfb59819f9eba5b1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:7e:2e:1b:a1:d0:ce:ca:7c:4f:04:66:9e: 67:c0:0f:d4:66:77:51:7b:d4:39:23:61:46:03:72: ad:45:cd:43:09:32:23:c5:94:dc:0b:48:73:bf:35: e8:3c:ae:30:8b:ff:31:eb:90:71:ab:87:1c:1b:cb: cd:45:a1:1c:87:2c:c7:bf:ac:7a:5f:ce:f5:a4:76: 0e:86:2e:16:35:80:74:af:60:69:17:7d:c5:27:d7: 21:f1:59:fa:e8:ca:66:56:fb:25:a7:7b:37:7a:f1: fa:03:3b:53:8d:95:2b:8e:39:e3:a3:d1:6a:28:27: 57:89:66:fd:03:63:ae:92:7c:e7:7e:cf:4e:a1:1f: b2:cb:91:33:37:cd:90:ae:cb:27:59:a3:1f:f6:d9: 55:17:6e:27:77:0e:0d:64:b5:4d:23:bc:13:c9:05: 5b:fb:60:43:51:e6:a0:09:63:f5:b3:bb:18:d4:2f: 24:14:a0:3f:1a:7a:75:b1:19:01:44:84:11:fc:b0: e5:61:ea:a9:53:36:94:c1:a9:8c:52:cb:57:35:45: 2b:de:0f:25:59:1f:88:ea:e3:06:57:05:24:c0:2f: cb:e0:36:c3:e0:73:1e:79:1f:1e:b8:ed:ee:91:70: 02:46:64:0a:d3:dc:38:95:08:59:d5:9d:35:ee:17: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DE:F5:68:0B:A0:2D:1F:D7:62:A3:DF:B5:98:19:F9:EB:A5:B1:E1 X509v3 Authority Key Identifier: keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:96:4d:b4:77:7a:86:eb:29:27:7f:82:08:74:f7:9e:39:f9: 8d:2b:1e:ce:c7:28:f7:93:a1:89:0d:63:2c:62:a6:92:94:ea: c1:c9:12:08:6b:d1:9d:d2:18:18:e9:36:41:6e:dd:82:8f:22: 82:67:57:66:be:7e:df:30:17:6b:56:84:70:b3:03:58:49:57: 4f:bb:a9:02:24:32:fd:b1:7d:da:01:f7:38:d7:af:93:da:22: 5a:ac:ca:1e:e4:c6:dd:48:dc:f6:dc:37:28:d8:58:1d:26:a3: 5f:14:8c:84:09:78:ec:60:1d:1c:3c:4d:27:9b:4b:83:1a:6e: 1b:ed:12:9d:f3:8c:c5:00:29:e9:de:94:e0:be:7e:ff:6a:2b: 5b:f9:11:ce:f8:41:41:7c:17:cc:13:fd:54:c1:da:5e:94:3b: cf:32:ff:a7:4d:3a:7e:9e:d5:82:71:6f:03:ee:9f:8e:1c:d2: a0:23:93:06:35:2a:2b:81:61:56:ad:33:65:92:c9:de:5c:08: 71:36:12:1b:f7:95:c7:11:93:86:51:4b:5c:50:91:c5:db:d4: fa:c6:9d:21:b3:fd:dc:1d:ea:e0:9b:73:b8:81:5c:fa:c1:d4: fd:02:b2:05:a2:e4:13:30:6c:67:ae:b3:e6:c5:19:b6:96:b0: ee:f5:dc:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+sOlZ0NHdiod/PhEQMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NzYzMzRkYzZmNzBmNTYzZTk5OGY2MDgwYWQzMjhhYWI3 ZjhkMGUwHhcNMjYwMjA5MTEwMTA1WhcNMjYwMjEwMTEwMTA1WjAzMTEwLwYDVQQD Eyg4MWRlZjU2ODBiYTAyZDFmZDc2MmEzZGZiNTk4MTlmOWViYTViMWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuh+Lhuh0M7KfE8EZp5nwA/UZndR e9Q5I2FGA3KtRc1DCTIjxZTcC0hzvzXoPK4wi/8x65Bxq4ccG8vNRaEchyzHv6x6 X871pHYOhi4WNYB0r2BpF33FJ9ch8Vn66MpmVvslp3s3evH6AztTjZUrjjnjo9Fq KCdXiWb9A2Ouknznfs9OoR+yy5EzN82QrssnWaMf9tlVF24ndw4NZLVNI7wTyQVb +2BDUeagCWP1s7sY1C8kFKA/Gnp1sRkBRIQR/LDlYeqpUzaUwamMUstXNUUr3g8l WR+I6uMGVwUkwC/L4DbD4HMeeR8euO3ukXACRmQK09w4lQhZ1Z017hfgiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHe9WgLoC0f12Kj37WYGfnrpbHhMB8GA1UdIwQY MBaAFAd2M03G9w9WPpmPYICtMoqrf40OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iYzM0YTAtMzIwMy00M2M3LTkxOWQt ZTRjOGExOGJhNjQ1LzEvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iYzM0YTAtMzIwMy00M2M3LTkxOWQtZTRjOGExOGJhNjQ1 LzEvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5ZNtHd6 huspJ3+CCHT3njn5jSsezsco95OhiQ1jLGKmkpTqwckSCGvRndIYGOk2QW7dgo8i gmdXZr5+3zAXa1aEcLMDWElXT7upAiQy/bF92gH3ONevk9oiWqzKHuTG3Ujc9tw3 KNhYHSajXxSMhAl47GAdHDxNJ5tLgxpuG+0SnfOMxQAp6d6U4L5+/2orW/kRzvhB QXwXzBP9VMHaXpQ7zzL/p006fp7VgnFvA+6fjhzSoCOTBjUqK4FhVq0zZZLJ3lwI cTYSG/eVxxGThlFLXFCRxdvU+sadIbP93B3q4JtzuIFc+sHU/QKyBaLkEzBsZ66z 5sUZtpaw7vXcAQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:37 2026 by rpki-client