This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft File: cs3rVmQuM1iXcef9pxu3HgF_nZY.mft (raw, json) Hash identifier: Mi7vJe+yYQeQa9u8TwXnzDYP92VdM+/8TVfHoowZ++Y= Subject key identifier: 85:C3:02:09:43:43:95:35:34:21:3D:3A:A2:00:55:95:85:F8:3F:2C Authority key identifier: 72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96 Certificate issuer: /CN=72cdeb56642e33589771e7fda71bb71e017f9d96 Certificate serial: 019C424635F777E34296BAD0A98E5FDD06F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft Manifest number: 0D2D Signing time: Mon 09 Feb 2026 12:00:23 +0000 Manifest this update: Mon 09 Feb 2026 12:00:23 +0000 Manifest next update: Tue 10 Feb 2026 12:00:23 +0000 Files and hashes: 1: cs3rVmQuM1iXcef9pxu3HgF_nZY.crl (hash: XxtoDub/5qpWxucZX1rEhNOOGoF1CLqB5FahysrVzm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:35:f7:77:e3:42:96:ba:d0:a9:8e:5f:dd:06:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cdeb56642e33589771e7fda71bb71e017f9d96 Validity Not Before: Feb 9 12:00:23 2026 GMT Not After : Feb 10 12:00:23 2026 GMT Subject: CN=85c302094343953534213d3aa200559585f83f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:44:e7:af:01:d8:5d:ee:9b:a9:6f:b2:d0: 5d:8e:1f:c9:2e:be:8b:a8:19:2a:7a:d4:6b:a1:1c: 97:32:4e:15:04:b4:b3:d6:1a:05:e8:ec:4b:f4:51: 96:30:40:5e:a0:49:c9:7d:fa:c5:36:ef:f5:a3:14: 5d:15:35:30:1a:7f:08:f1:8f:76:94:a8:d0:87:ed: e2:0b:f2:14:99:c1:9e:99:00:50:f2:63:a4:6c:8a: f7:6e:50:5d:83:3c:2b:7b:66:2d:c6:b3:5b:79:2b: 0d:38:15:80:4e:2b:e9:65:6c:eb:43:a8:13:3e:bc: dc:07:74:69:10:b2:2d:cb:4c:e4:55:18:7e:5a:92: 77:3a:1f:25:cf:24:cf:c8:a3:2a:01:bb:a2:5b:88: 79:46:b2:05:db:c1:b2:62:cc:98:28:a6:45:37:ff: 84:1a:93:46:f1:2a:20:cc:ed:1f:1d:f0:32:e2:51: 62:e5:e9:a8:c2:9b:62:76:e0:8e:57:6d:65:69:11: 14:10:31:ee:1d:84:a3:18:ac:63:fb:6b:58:e8:97: 8c:73:a0:6d:5f:43:db:b7:fb:00:f6:d0:be:59:29: ba:b0:3b:f3:16:e5:d6:a0:2c:b4:21:fc:c0:a8:ce: 40:73:f0:10:c5:34:a4:4d:e4:8c:e2:b5:2e:12:95: c3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C3:02:09:43:43:95:35:34:21:3D:3A:A2:00:55:95:85:F8:3F:2C X509v3 Authority Key Identifier: keyid:72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8e:2d:11:e5:e4:2e:33:81:dd:b7:9e:c3:19:c6:da:27:a1: 8c:52:b5:c8:78:ec:31:0a:80:a1:24:94:8a:09:c0:51:03:d2: 90:59:c0:ac:8e:44:07:c9:be:4c:d2:5f:88:aa:e4:26:bc:5f: 24:e3:bc:27:fc:7d:6f:09:c4:d6:8d:b8:c7:32:d1:d0:5a:2d: 83:a7:ac:4b:39:01:47:86:29:67:82:b0:70:57:17:52:5a:23: 14:b3:4d:46:cd:6a:3c:31:49:ea:58:53:30:31:86:a1:1f:9d: 8d:5e:3e:a8:88:4b:93:c3:a7:28:cd:a7:aa:89:87:31:e6:ad: c2:49:a6:59:e7:6d:03:a4:92:b7:df:7a:93:ec:a1:ca:b7:1c: e7:b7:73:60:ce:e9:9d:6b:4c:46:7a:4e:f3:94:46:f2:7d:31: 26:79:e0:aa:7b:68:4d:08:ef:c8:5e:00:8c:03:4e:8d:01:ae: 71:b2:fa:69:6e:1e:05:33:52:5c:07:df:f4:d8:86:bd:c3:cd: 4c:5c:dd:d8:59:e3:48:d5:f7:f0:47:0e:57:58:38:0d:d0:7d: e3:b2:0f:9c:63:b4:5f:0c:e1:f8:6a:d6:40:73:a4:84:07:8f: 90:a9:94:47:a2:47:e4:0c:1b:0e:2b:f0:6a:b4:99:2e:12:f9: d0:e9:23:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRjX3d+NClrrQqY5f3Qb2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2RlYjU2NjQyZTMzNTg5NzcxZTdmZGE3MWJiNzFlMDE3 ZjlkOTYwHhcNMjYwMjA5MTIwMDIzWhcNMjYwMjEwMTIwMDIzWjAzMTEwLwYDVQQD Eyg4NWMzMDIwOTQzNDM5NTM1MzQyMTNkM2FhMjAwNTU5NTg1ZjgzZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5tE568B2F3um6lvstBdjh/JLr6L qBkqetRroRyXMk4VBLSz1hoF6OxL9FGWMEBeoEnJffrFNu/1oxRdFTUwGn8I8Y92 lKjQh+3iC/IUmcGemQBQ8mOkbIr3blBdgzwre2YtxrNbeSsNOBWATivpZWzrQ6gT PrzcB3RpELIty0zkVRh+WpJ3Oh8lzyTPyKMqAbuiW4h5RrIF28GyYsyYKKZFN/+E GpNG8SogzO0fHfAy4lFi5emowptiduCOV21laREUEDHuHYSjGKxj+2tY6JeMc6Bt X0Pbt/sA9tC+WSm6sDvzFuXWoCy0IfzAqM5Ac/AQxTSkTeSM4rUuEpXDJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXDAglDQ5U1NCE9OqIAVZWF+D8sMB8GA1UdIwQY MBaAFHLN61ZkLjNYl3Hn/acbtx4Bf52WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3MzclZtUXVNMWlYY2VmOXB4dTNIZ0ZfblpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zYzg0NDgtYWY0YS00YjQ4LWE3MmEt ZTgyNzc0YTE2YTU3LzEvY3MzclZtUXVNMWlYY2VmOXB4dTNIZ0ZfblpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zYzg0NDgtYWY0YS00YjQ4LWE3MmEtZTgyNzc0YTE2YTU3 LzEvY3MzclZtUXVNMWlYY2VmOXB4dTNIZ0ZfblpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXI4tEeXk LjOB3beewxnG2iehjFK1yHjsMQqAoSSUignAUQPSkFnArI5EB8m+TNJfiKrkJrxf JOO8J/x9bwnE1o24xzLR0Fotg6esSzkBR4YpZ4KwcFcXUlojFLNNRs1qPDFJ6lhT MDGGoR+djV4+qIhLk8OnKM2nqomHMeatwkmmWedtA6SSt996k+yhyrcc57dzYM7p nWtMRnpO85RG8n0xJnngqntoTQjvyF4AjANOjQGucbL6aW4eBTNSXAff9NiGvcPN TFzd2FnjSNX38EcOV1g4DdB947IPnGO0Xwzh+GrWQHOkhAePkKmUR6JH5AwbDivw arSZLhL50OkjvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:18 2026 by rpki-client