This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json) Hash identifier: ubEfAKW3/WLFGfOqdhiO6I8IYG+c0kbu7bd3oN8bLG0= Subject key identifier: 83:A8:DE:24:B6:E4:23:D3:7F:0F:C3:9D:53:EA:37:1C:A6:C3:A9:97 Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96 Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696 Certificate serial: 019C43C731D1B0B47B5BFAC10B1F11CC5798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft Manifest number: 06F7 Signing time: Mon 09 Feb 2026 19:00:53 +0000 Manifest this update: Mon 09 Feb 2026 19:00:53 +0000 Manifest next update: Tue 10 Feb 2026 19:00:53 +0000 Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: aikyCA3XeC+wG818Lvm1aWMmd2vcAbc3XGkQIxmZ3FY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:31:d1:b0:b4:7b:5b:fa:c1:0b:1f:11:cc:57:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696 Validity Not Before: Feb 9 19:00:53 2026 GMT Not After : Feb 10 19:00:53 2026 GMT Subject: CN=83a8de24b6e423d37f0fc39d53ea371ca6c3a997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:a3:b9:88:5d:ba:61:a6:72:72:7b:1f:cb: 81:89:b3:7b:fb:7a:4e:0a:2f:fd:ab:94:48:4c:47: 0b:18:70:bc:50:ce:45:0d:ff:c5:6b:49:e7:49:8a: 15:ca:f1:50:8f:ca:b5:e6:00:3c:9e:3b:17:91:dd: 56:6c:47:bc:f5:18:2a:53:21:f3:46:1f:c7:90:79: ff:74:cb:e9:5f:f4:c1:06:13:2e:55:13:d5:35:88: 7e:d6:da:1d:f9:65:6e:b6:cc:82:07:35:87:99:7e: f3:08:7d:6a:61:69:b6:ac:ed:d0:9b:ff:3d:b8:79: 13:23:3f:6d:15:62:de:49:e1:63:a0:5f:ad:2e:17: 4f:cc:64:17:03:4f:ee:b9:98:79:27:0d:73:00:0b: 74:d1:3c:38:14:c0:8f:f8:c1:0b:ac:8d:46:42:b0: 1b:9d:3e:75:d4:67:00:7b:7d:44:89:73:8c:67:4f: a1:41:6f:13:20:76:1d:44:0e:a7:69:2b:3f:7f:26: 1f:f7:b6:62:37:7c:5b:2c:b8:81:8f:9c:a3:6a:08: 93:fc:3b:d5:2b:96:ae:d8:79:1b:1e:77:42:b6:cd: 5e:7d:d5:ca:a2:fe:01:56:8b:ae:96:43:a2:93:1d: 4f:f7:77:7a:7d:64:be:c6:94:9d:63:ff:be:1c:99: e0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A8:DE:24:B6:E4:23:D3:7F:0F:C3:9D:53:EA:37:1C:A6:C3:A9:97 X509v3 Authority Key Identifier: keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6d:43:65:53:b7:1e:1d:08:bf:a6:ab:c4:02:64:08:91:56: 01:bb:7f:12:5b:6f:12:a0:3f:a0:10:f7:0e:27:ab:37:f0:3f: f7:43:a8:4f:6e:f5:db:c6:c8:7e:ef:e4:5c:0d:89:7c:e7:61: bf:3b:e4:26:4b:20:09:81:48:8b:b2:d1:25:75:e5:16:7e:8a: 36:aa:cb:5e:6c:91:ab:db:12:65:32:82:39:37:7e:26:5d:75: 9f:f4:c9:3e:eb:26:c5:77:36:ff:23:88:2f:e0:72:f3:2d:17: 99:31:ae:22:47:70:71:4a:37:86:c2:14:1e:3b:58:61:1b:7a: e0:d6:2e:ef:b0:66:24:0c:56:df:32:19:4f:20:47:a6:31:f0: 67:e8:24:1d:1f:c2:c1:3c:30:99:ac:31:ab:c6:4a:0e:51:11: ea:fe:55:3b:55:f3:dc:b4:fd:14:64:91:9f:b3:b1:8b:97:ef: d0:ef:7b:82:79:49:a1:27:34:43:af:9f:cd:51:20:bb:b7:6a: ee:dd:62:57:9a:15:b1:00:95:3f:f2:f8:d3:ce:74:f2:a1:d6: 2f:5c:cb:45:36:eb:7b:74:a0:d2:75:be:a0:25:8e:29:aa:c3: 44:16:b7:15:53:a3:90:b5:a5:05:5e:c4:a6:2f:09:71:c9:47: 3f:43:de:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxzHRsLR7W/rBCx8RzFeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNzQ3MTk2Y2I4YzlkYzY0MjMzN2FmZWJmMDRiMjA0ZGNk MTk2OTYwHhcNMjYwMjA5MTkwMDUzWhcNMjYwMjEwMTkwMDUzWjAzMTEwLwYDVQQD Eyg4M2E4ZGUyNGI2ZTQyM2QzN2YwZmMzOWQ1M2VhMzcxY2E2YzNhOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU6juYhdumGmcnJ7H8uBibN7+3pO Ci/9q5RITEcLGHC8UM5FDf/Fa0nnSYoVyvFQj8q15gA8njsXkd1WbEe89RgqUyHz Rh/HkHn/dMvpX/TBBhMuVRPVNYh+1tod+WVutsyCBzWHmX7zCH1qYWm2rO3Qm/89 uHkTIz9tFWLeSeFjoF+tLhdPzGQXA0/uuZh5Jw1zAAt00Tw4FMCP+MELrI1GQrAb nT511GcAe31EiXOMZ0+hQW8TIHYdRA6naSs/fyYf97ZiN3xbLLiBj5yjagiT/DvV K5au2HkbHndCts1efdXKov4BVouulkOikx1P93d6fWS+xpSdY/++HJnggQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOo3iS25CPTfw/DnVPqNxymw6mXMB8GA1UdIwQY MBaAFN50cZbLjJ3GQjN6/r8EsgTc0ZaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NzFjMjQtNmIyYi00NmE1LWE3NTEt ZDNlOGE4Njg5ZGMzLzEvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85NzFjMjQtNmIyYi00NmE1LWE3NTEtZDNlOGE4Njg5ZGMz LzEvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ21DZVO3 Hh0Iv6arxAJkCJFWAbt/EltvEqA/oBD3DierN/A/90OoT27128bIfu/kXA2JfOdh vzvkJksgCYFIi7LRJXXlFn6KNqrLXmyRq9sSZTKCOTd+Jl11n/TJPusmxXc2/yOI L+By8y0XmTGuIkdwcUo3hsIUHjtYYRt64NYu77BmJAxW3zIZTyBHpjHwZ+gkHR/C wTwwmawxq8ZKDlER6v5VO1Xz3LT9FGSRn7Oxi5fv0O97gnlJoSc0Q6+fzVEgu7dq 7t1iV5oVsQCVP/L408508qHWL1zLRTbre3Sg0nW+oCWOKarDRBa3FVOjkLWlBV7E pi8JcclHP0Pe1g== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:06 2026 by rpki-client