This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json) Hash identifier: IpUSlwtI9o76RjxIOvFWgyHsjWBGtLwYN2fqD+1rud8= Subject key identifier: 30:91:DE:FA:09:D4:7D:CF:AE:83:57:6B:1A:58:F4:08:3A:CA:D5:F6 Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42 Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442 Certificate serial: 019C420F7081F85642B3B98E7CF40C19383A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft Manifest number: 12D6 Signing time: Mon 09 Feb 2026 11:00:33 +0000 Manifest this update: Mon 09 Feb 2026 11:00:33 +0000 Manifest next update: Tue 10 Feb 2026 11:00:33 +0000 Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: 6APUy0cT9sEujrsizvmiVohKsqGGDlZ0MRKkP1w8pBI=) 2: t2nvtC07fwfG4DJZdYyApeiuOoI.roa (hash: Y4IHvCKtqY3mhfa2IhWhMpbzNg7eswOXZP8ib5pSXR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:70:81:f8:56:42:b3:b9:8e:7c:f4:0c:19:38:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442 Validity Not Before: Feb 9 11:00:33 2026 GMT Not After : Feb 10 11:00:33 2026 GMT Subject: CN=3091defa09d47dcfae83576b1a58f4083acad5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:fd:61:aa:0a:d8:d5:03:bc:13:b5:43:7e: 5e:38:fd:f7:5d:51:53:b0:b6:db:f4:08:29:0b:3d: 3f:8b:a3:36:94:1c:60:a0:a3:89:96:58:3f:2d:1d: 7e:47:d5:82:b9:1a:d8:fc:a6:89:f9:2e:71:59:dc: 5f:55:a2:7d:eb:60:25:cc:56:09:ac:97:c1:24:22: 13:d0:d5:81:ef:bc:d8:3e:24:78:50:b2:50:bf:4d: 6b:3d:94:9b:42:6e:dc:ed:30:37:19:b8:9d:57:dc: 84:27:58:7e:1f:ca:ee:06:4b:cc:9d:87:8d:0f:fb: b6:80:05:b5:c8:3f:e2:78:52:a8:89:9e:66:50:1d: 64:7c:42:3a:9d:21:0f:d4:f9:c9:5e:9f:da:39:77: 57:ac:94:d5:c3:b6:21:54:c2:21:31:5f:c3:99:2a: 9e:10:1b:a3:39:9a:9c:ee:f5:40:2b:4c:85:8d:38: b6:34:2b:44:5f:43:64:d3:ef:35:3f:5b:4d:9e:8d: 3c:0c:97:73:dd:1e:8a:ff:ed:0b:9f:4d:2a:2b:4f: d1:6c:ae:bb:95:9f:c4:cc:23:78:2e:ab:e5:eb:8e: c4:0c:15:03:ad:b3:a4:10:2a:e1:a6:4b:7b:4a:f8: 6e:4b:b7:50:7f:0e:4e:ea:ad:71:eb:d3:c3:0a:f9: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:91:DE:FA:09:D4:7D:CF:AE:83:57:6B:1A:58:F4:08:3A:CA:D5:F6 X509v3 Authority Key Identifier: keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6e:df:85:b1:38:be:5d:a4:a5:47:ba:fa:58:45:1c:93:e3: ae:b9:2e:f8:ff:c1:ae:21:70:23:e2:ca:e3:33:d4:5d:eb:23: 80:18:a7:47:c8:d1:10:d7:0a:f0:43:bb:7c:09:0f:3e:d5:90: 26:90:ac:be:41:25:3a:a0:3b:52:c2:d9:10:29:9a:95:82:f9: 61:da:d4:92:7e:7a:b8:29:a9:31:c2:e3:d5:af:92:8f:0c:d8: a6:52:55:93:bf:c3:9d:90:68:a3:47:95:1e:6e:85:e3:ba:a6: 4a:09:73:2e:b7:74:5f:1c:21:cb:4d:3a:2a:47:9b:ea:97:0e: 01:f6:b1:ea:88:a8:15:0e:21:9f:fa:77:b9:f4:06:fd:91:05: e1:89:70:64:bf:fe:ea:71:ff:39:b1:a1:08:83:58:bc:b3:ed: c9:0a:83:c3:0c:8b:9a:de:7e:44:bc:80:02:50:84:95:fd:1a: 74:85:c8:58:97:45:5e:ca:5b:c5:13:c0:03:a4:6f:5b:b4:2b: 05:36:0d:40:04:3c:60:2e:43:5e:0b:e6:f2:76:f9:e3:da:9e: c3:16:22:e7:f4:34:5c:70:58:ce:82:7b:07:4c:8c:a1:2e:e8: 18:fd:0f:9a:3f:58:8b:38:32:b5:61:7a:f0:40:af:e5:f7:0c: 36:db:78:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD3CB+FZCs7mOfPQMGTg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNzQzMmY2OTljYmQyNDliMmUzYzljNTViZGVmYWY4Mzk4 NmI0NDIwHhcNMjYwMjA5MTEwMDMzWhcNMjYwMjEwMTEwMDMzWjAzMTEwLwYDVQQD EygzMDkxZGVmYTA5ZDQ3ZGNmYWU4MzU3NmIxYTU4ZjQwODNhY2FkNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIv9YaoK2NUDvBO1Q35eOP33XVFT sLbb9AgpCz0/i6M2lBxgoKOJllg/LR1+R9WCuRrY/KaJ+S5xWdxfVaJ962AlzFYJ rJfBJCIT0NWB77zYPiR4ULJQv01rPZSbQm7c7TA3GbidV9yEJ1h+H8ruBkvMnYeN D/u2gAW1yD/ieFKoiZ5mUB1kfEI6nSEP1PnJXp/aOXdXrJTVw7YhVMIhMV/DmSqe EBujOZqc7vVAK0yFjTi2NCtEX0Nk0+81P1tNno08DJdz3R6K/+0Ln00qK0/RbK67 lZ/EzCN4Lqvl647EDBUDrbOkECrhpkt7SvhuS7dQfw5O6q1x69PDCvnW/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCR3voJ1H3ProNXaxpY9Ag6ytX2MB8GA1UdIwQY MBaAFJ90MvaZy9JJsuPJxVve+vg5hrRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQt NmFkZGZjYjE4Zjk5LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQtNmFkZGZjYjE4Zjk5 LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKW7fhbE4 vl2kpUe6+lhFHJPjrrku+P/BriFwI+LK4zPUXesjgBinR8jRENcK8EO7fAkPPtWQ JpCsvkElOqA7UsLZECmalYL5YdrUkn56uCmpMcLj1a+SjwzYplJVk7/DnZBoo0eV Hm6F47qmSglzLrd0Xxwhy006Kkeb6pcOAfax6oioFQ4hn/p3ufQG/ZEF4YlwZL/+ 6nH/ObGhCINYvLPtyQqDwwyLmt5+RLyAAlCElf0adIXIWJdFXspbxRPAA6RvW7Qr BTYNQAQ8YC5DXgvm8nb549qewxYi5/Q0XHBYzoJ7B0yMoS7oGP0Pmj9YizgytWF6 8ECv5fcMNtt4qw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:18 2026 by rpki-client