This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json) Hash identifier: 4nO5l4SQ9Hk73GKf9J0TiWU7kcsyFfSktlILLF81WRA= Subject key identifier: 9C:1D:6B:DD:E3:5B:22:D1:1B:AD:CD:92:09:67:D4:36:27:53:A8:D1 Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6 Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6 Certificate serial: 019C42B48AC9D9FA844B74EDAFFC53737291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft Manifest number: 0C2A Signing time: Mon 09 Feb 2026 14:00:54 +0000 Manifest this update: Mon 09 Feb 2026 14:00:54 +0000 Manifest next update: Tue 10 Feb 2026 14:00:54 +0000 Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: C0dfYMRwmYZNW03dyX1NR1B/t19jTXWMELDGhewek7Y=) 2: sa-VxIHIFXVHRevvOB_tVdLXAUg.roa (hash: AJ35gvwbYj3xRDQgq3Eq1FxMxn80Yq+XvR8L/G/XxyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:8a:c9:d9:fa:84:4b:74:ed:af:fc:53:73:72:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6 Validity Not Before: Feb 9 14:00:54 2026 GMT Not After : Feb 10 14:00:54 2026 GMT Subject: CN=9c1d6bdde35b22d11badcd920967d4362753a8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:ec:e2:50:de:32:b9:97:17:31:91:83:27: 0e:6c:3b:92:fd:bf:64:3d:95:2f:7d:72:c2:62:a3: 1e:43:84:81:76:f8:5d:d7:db:8f:0b:dc:29:2f:74: 26:c4:06:89:63:26:bd:1a:60:a0:56:37:f2:85:c3: f4:16:a0:43:77:4e:93:43:b7:b4:f8:db:03:90:b6: e6:68:39:ee:0d:fa:b7:99:64:a5:72:a2:9c:a9:4b: 21:ce:2d:2e:3e:16:16:24:4e:a2:b9:47:c5:aa:81: cf:dd:21:4f:c5:c8:76:fa:28:78:af:61:12:e9:17: ad:ab:6b:9a:58:d8:63:84:8d:4b:ad:7f:7d:d8:c9: cd:d7:ec:7c:ae:c8:48:99:35:57:39:e0:24:6d:46: b9:90:8a:11:4c:42:4b:1a:28:90:21:5c:a9:48:84: 88:24:2a:9f:c0:9d:68:12:ca:14:6a:ea:f4:ab:bc: 75:a6:00:15:57:bb:c4:d4:5d:19:c8:ce:18:6d:b2: 99:e9:e9:a3:d4:8a:e7:53:2e:cd:98:1e:0d:06:0b: 98:92:1c:86:0b:5b:26:ba:17:55:2e:9f:25:ec:7b: ae:4e:48:b8:fa:8c:65:9c:4f:f1:08:7e:4e:2a:a2: 99:44:2c:2e:c8:a4:70:3b:ef:e6:78:09:61:3f:cb: f5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1D:6B:DD:E3:5B:22:D1:1B:AD:CD:92:09:67:D4:36:27:53:A8:D1 X509v3 Authority Key Identifier: keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:a5:54:dd:1d:0b:0c:d2:ed:9d:00:a1:29:5f:bc:a9:41:ad: 70:a1:f5:1c:82:72:f5:0a:1c:c9:02:b8:b8:dd:b4:89:6b:74: 6d:45:b4:dc:f1:a7:4c:53:70:3c:93:72:51:3a:cd:21:53:fe: 9d:40:65:54:a1:d4:01:06:17:46:a5:aa:a5:00:51:43:9f:b3: 9f:19:ab:c3:7f:56:2f:2f:86:dc:a6:da:29:9d:92:c0:1b:c8: e3:a9:c2:6c:7d:78:7c:a8:11:57:c4:88:91:15:fb:40:9a:b3: 10:47:f6:21:2e:34:82:27:27:df:b4:7d:14:f7:c3:02:3a:a1: e1:a0:f3:67:c6:26:ef:7e:ac:8e:5e:69:1a:1f:50:d3:41:f6: cf:76:e2:5b:44:4b:16:64:a2:02:cf:4b:58:6c:b2:0a:55:41: 37:02:74:bf:1a:cd:31:1f:a9:0a:b0:65:01:4c:38:50:c4:a7: e1:45:b8:d9:62:46:67:38:50:f6:69:2e:4b:56:f1:70:e5:0e: 0d:17:ed:23:54:0d:c0:59:06:29:c3:e0:94:48:44:3c:5c:20: e9:ad:dd:48:09:0f:6d:b2:a9:ee:a0:69:60:ca:8f:73:fd:ee: 67:70:15:a6:a1:d2:aa:7a:27:4c:7d:bf:44:d6:35:8d:ff:2d: 6f:b6:f2:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtIrJ2fqES3Ttr/xTc3KRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNzE0MmI0NWI1Y2UzOTAxNmUyNWUwOWIyZmVkNTc5YTli ZDc3ZDYwHhcNMjYwMjA5MTQwMDU0WhcNMjYwMjEwMTQwMDU0WjAzMTEwLwYDVQQD Eyg5YzFkNmJkZGUzNWIyMmQxMWJhZGNkOTIwOTY3ZDQzNjI3NTNhOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ/s4lDeMrmXFzGRgycObDuS/b9k PZUvfXLCYqMeQ4SBdvhd19uPC9wpL3QmxAaJYya9GmCgVjfyhcP0FqBDd06TQ7e0 +NsDkLbmaDnuDfq3mWSlcqKcqUshzi0uPhYWJE6iuUfFqoHP3SFPxch2+ih4r2ES 6Retq2uaWNhjhI1LrX992MnN1+x8rshImTVXOeAkbUa5kIoRTEJLGiiQIVypSISI JCqfwJ1oEsoUaur0q7x1pgAVV7vE1F0ZyM4YbbKZ6emj1IrnUy7NmB4NBguYkhyG C1smuhdVLp8l7HuuTki4+oxlnE/xCH5OKqKZRCwuyKRwO+/meAlhP8v1vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwda93jWyLRG63Nkgln1DYnU6jRMB8GA1UdIwQY MBaAFB9xQrRbXOOQFuJeCbL+1XmpvXfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZmVhZDctNTg2YS00YjM1LWIxOTkt ZGZlNDVmNjcyZjgxLzEvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kZmVhZDctNTg2YS00YjM1LWIxOTktZGZlNDVmNjcyZjgx LzEvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxqVU3R0L DNLtnQChKV+8qUGtcKH1HIJy9QocyQK4uN20iWt0bUW03PGnTFNwPJNyUTrNIVP+ nUBlVKHUAQYXRqWqpQBRQ5+znxmrw39WLy+G3KbaKZ2SwBvI46nCbH14fKgRV8SI kRX7QJqzEEf2IS40gicn37R9FPfDAjqh4aDzZ8Ym736sjl5pGh9Q00H2z3biW0RL FmSiAs9LWGyyClVBNwJ0vxrNMR+pCrBlAUw4UMSn4UW42WJGZzhQ9mkuS1bxcOUO DRftI1QNwFkGKcPglEhEPFwg6a3dSAkPbbKp7qBpYMqPc/3uZ3AVpqHSqnonTH2/ RNY1jf8tb7bysA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:37 2026 by rpki-client