This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft File: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft (raw, json) Hash identifier: l1tJqbYz1sBJlq0avXrqhxpdaT2T+ZrBBVb2FeL8En0= Subject key identifier: 35:24:F0:7B:31:F2:D1:DD:25:62:EB:6F:EF:7B:77:00:93:23:06:D1 Authority key identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B Certificate issuer: /CN=de11cc6df13366fc595a6e72ed03c53800792b4b Certificate serial: 019C43904B2BD9B7843E362C2FCE0BAEC81A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft Manifest number: 0F73 Signing time: Mon 09 Feb 2026 18:00:55 +0000 Manifest this update: Mon 09 Feb 2026 18:00:55 +0000 Manifest next update: Tue 10 Feb 2026 18:00:55 +0000 Files and hashes: 1: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl (hash: +tkIW5z2aT6iUtq/cSVQExdvZEAIzlLPPah6ALlezpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:4b:2b:d9:b7:84:3e:36:2c:2f:ce:0b:ae:c8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de11cc6df13366fc595a6e72ed03c53800792b4b Validity Not Before: Feb 9 18:00:55 2026 GMT Not After : Feb 10 18:00:55 2026 GMT Subject: CN=3524f07b31f2d1dd2562eb6fef7b7700932306d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:80:fe:60:4e:52:c5:3d:4a:bc:f9:07:be:5e: 92:03:53:e3:2b:9c:9a:cf:f2:52:f0:2b:5f:38:3d: 69:5f:b0:af:56:cc:da:81:4d:84:21:43:8d:56:cf: ec:15:e1:06:14:7b:94:0b:59:ee:4c:68:99:24:cd: 6d:62:97:ab:d8:6f:53:43:d9:0b:1f:52:d2:27:9c: d4:63:ce:35:57:18:74:10:64:1e:6e:52:3e:3e:36: a6:bd:da:b6:46:a2:db:34:4c:be:c0:2d:c8:62:88: 10:89:27:04:53:01:5d:9a:28:41:6f:6c:ee:b0:b9: ee:97:66:05:43:d3:e4:99:b5:08:3b:7e:5d:aa:75: 05:74:25:23:3a:08:ff:b9:be:0b:04:47:07:53:82: 4c:89:88:bf:ec:af:c7:6b:95:0c:70:dc:32:91:cb: ec:7c:10:78:48:b5:cb:d6:c8:62:86:8e:94:a6:34: 50:05:cf:83:f7:1a:de:a6:e7:82:db:46:2f:99:31: f5:ba:09:44:a8:cb:5d:db:06:39:2f:1a:a1:3a:6f: 17:29:8d:1e:8e:e9:11:bc:79:a3:b4:34:08:8f:cf: ff:23:e5:06:6f:d1:2f:49:99:0d:9f:79:2d:c7:61: 48:f8:e2:29:f7:4b:20:4b:64:3c:7a:7a:2f:3d:3c: f9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:24:F0:7B:31:F2:D1:DD:25:62:EB:6F:EF:7B:77:00:93:23:06:D1 X509v3 Authority Key Identifier: keyid:DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:1d:05:ab:00:2d:f6:2f:7e:2e:73:85:d1:8d:a6:81:4c:dd: 49:fe:45:ea:b3:2f:4c:2a:74:cb:e5:40:bd:2c:03:38:0f:f7: 98:bf:a2:80:1b:18:f1:3b:8d:01:b7:05:63:5f:04:d5:5e:e1: a0:52:8a:24:5c:74:14:fa:ac:02:be:0e:8f:c6:8e:d0:84:c9: 02:42:a4:ed:4f:4e:8b:33:be:1c:24:1a:9a:6b:ff:d7:14:ff: 8c:46:d0:ec:47:f2:d0:d9:b1:d7:0a:8d:33:62:d0:a9:e6:7d: 64:0e:78:5a:4b:fc:72:cf:c1:d5:2d:2d:27:93:a1:46:ae:91: a3:11:07:fe:5b:cd:d8:ff:ed:00:90:04:4b:d9:31:78:67:3c: ed:20:72:fb:39:3f:eb:d6:45:53:df:04:b0:34:a2:63:16:e7: 3b:b3:94:9c:46:1d:c4:1d:66:8e:01:c4:0a:ac:61:19:8f:46: 75:5a:1a:90:1b:db:f6:5e:b7:31:b6:c5:82:5f:26:cb:81:5e: 79:8b:c6:82:ec:7e:b6:ff:61:79:81:e0:8a:b1:21:6e:aa:f9: e2:fd:a3:1a:a9:ae:d8:4a:58:e9:93:ab:43:78:62:7a:0a:27: b9:0c:2f:a8:76:8f:ea:ed:22:d2:5d:4b:de:e6:ec:f5:7f:c0: af:9d:75:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkEsr2beEPjYsL84LrsgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTFjYzZkZjEzMzY2ZmM1OTVhNmU3MmVkMDNjNTM4MDA3 OTJiNGIwHhcNMjYwMjA5MTgwMDU1WhcNMjYwMjEwMTgwMDU1WjAzMTEwLwYDVQQD EygzNTI0ZjA3YjMxZjJkMWRkMjU2MmViNmZlZjdiNzcwMDkzMjMwNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYD+YE5SxT1KvPkHvl6SA1PjK5ya z/JS8CtfOD1pX7CvVszagU2EIUONVs/sFeEGFHuUC1nuTGiZJM1tYper2G9TQ9kL H1LSJ5zUY841Vxh0EGQeblI+Pjamvdq2RqLbNEy+wC3IYogQiScEUwFdmihBb2zu sLnul2YFQ9PkmbUIO35dqnUFdCUjOgj/ub4LBEcHU4JMiYi/7K/Ha5UMcNwykcvs fBB4SLXL1shiho6UpjRQBc+D9xrepueC20YvmTH1uglEqMtd2wY5LxqhOm8XKY0e jukRvHmjtDQIj8//I+UGb9EvSZkNn3ktx2FI+OIp90sgS2Q8enovPTz5ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUk8Hsx8tHdJWLrb+97dwCTIwbRMB8GA1UdIwQY MBaAFN4RzG3xM2b8WVpucu0DxTgAeStLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hITWJmRXpadnhaV201eTdRUEZPQUI1SzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jNjQ5NGQtZmM2Ni00NTNjLWJjODMt ZTZjNGRmNDZmMDRkLzEvM2hITWJmRXpadnhaV201eTdRUEZPQUI1SzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jNjQ5NGQtZmM2Ni00NTNjLWJjODMtZTZjNGRmNDZmMDRk LzEvM2hITWJmRXpadnhaV201eTdRUEZPQUI1SzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQh0FqwAt 9i9+LnOF0Y2mgUzdSf5F6rMvTCp0y+VAvSwDOA/3mL+igBsY8TuNAbcFY18E1V7h oFKKJFx0FPqsAr4Oj8aO0ITJAkKk7U9OizO+HCQammv/1xT/jEbQ7Efy0Nmx1wqN M2LQqeZ9ZA54Wkv8cs/B1S0tJ5OhRq6RoxEH/lvN2P/tAJAES9kxeGc87SBy+zk/ 69ZFU98EsDSiYxbnO7OUnEYdxB1mjgHECqxhGY9GdVoakBvb9l63MbbFgl8my4Fe eYvGgux+tv9heYHgirEhbqr54v2jGqmu2EpY6ZOrQ3hiegonuQwvqHaP6u0i0l1L 3ubs9X/Ar511DA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:14 2026 by rpki-client