This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft File: G3NaOdmSptxEu-c6TZm-PIQvqWg.mft (raw, json) Hash identifier: mIhDxGMMc3j44c3I4oGfuIkBmxn08rtF0vhV4JMtrcg= Subject key identifier: 43:E8:4E:7B:26:0C:E6:F0:25:EB:DC:CA:1D:13:49:82:FE:B4:04:59 Authority key identifier: 1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68 Certificate issuer: /CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968 Certificate serial: 019C4359264C1A96F99CC05DF8F27B59A5ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft Manifest number: 059F Signing time: Mon 09 Feb 2026 17:00:41 +0000 Manifest this update: Mon 09 Feb 2026 17:00:41 +0000 Manifest next update: Tue 10 Feb 2026 17:00:41 +0000 Files and hashes: 1: G3NaOdmSptxEu-c6TZm-PIQvqWg.crl (hash: S+1psoS7zetI4CCkr/zPu5bXTNBlUmvhk6fBNLUcGw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:26:4c:1a:96:f9:9c:c0:5d:f8:f2:7b:59:a5:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968 Validity Not Before: Feb 9 17:00:41 2026 GMT Not After : Feb 10 17:00:41 2026 GMT Subject: CN=43e84e7b260ce6f025ebdcca1d134982feb40459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:99:96:68:6e:34:aa:2a:b6:30:9c:80:cf:8b: 7a:85:dd:68:21:6f:86:09:fd:a1:39:09:93:66:2f: 83:e6:cb:cd:94:45:57:92:fa:a3:4f:bc:6a:a7:24: f9:4c:90:2c:8a:d8:73:3c:4c:d6:ad:5a:5b:85:db: 68:2a:ac:1a:35:da:ba:aa:71:88:3a:0a:57:86:cc: ad:67:c3:75:59:84:e7:b8:9b:e1:ff:9b:51:fa:b7: 27:cc:4e:e1:33:28:d7:73:c9:9c:c2:a3:82:5c:01: 86:f9:d1:ae:e5:a4:86:19:35:a0:79:03:70:4c:66: 21:ff:c8:ce:be:7f:29:71:83:cf:82:8b:db:5f:60: 5b:6b:38:4e:0d:41:13:ba:c5:07:b2:69:2c:53:ee: e7:85:66:09:b9:f8:67:b4:16:43:a5:f2:85:21:d7: 4b:85:b7:b1:c0:8a:f7:1b:9e:89:30:b9:15:fe:64: ba:8c:06:2b:78:94:c4:fd:73:88:3a:4a:9f:a5:18: dd:86:6b:cb:5c:be:c8:c3:9b:b6:2d:93:b0:42:69: 6a:2d:ab:11:6b:49:fe:28:5d:22:06:97:87:cc:70: 35:bc:2d:c0:ba:bc:bf:37:66:d4:7d:7b:8d:26:43: ad:88:e8:de:4b:aa:d7:1f:10:dd:d7:fb:b0:ea:ec: ac:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E8:4E:7B:26:0C:E6:F0:25:EB:DC:CA:1D:13:49:82:FE:B4:04:59 X509v3 Authority Key Identifier: keyid:1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:de:9c:d7:5f:e3:f4:91:8d:ae:e2:7c:50:23:11:3e:ac:a1: 21:e0:46:7e:b7:ac:fb:f5:49:15:ac:6f:1e:81:66:be:99:39: a5:cb:c8:68:fc:ac:c3:c6:ad:20:d2:f1:44:ce:2d:89:80:b7: 34:b4:53:c6:3d:b3:71:33:d5:92:77:c5:f4:0c:35:9a:aa:dd: c1:94:3d:ec:04:14:7c:6c:f7:99:e2:0e:87:58:37:42:f7:1d: 40:58:3c:54:fe:f6:c3:38:47:56:1a:bc:1b:5e:91:3a:34:96: 32:25:10:15:2a:db:00:37:10:41:d0:ee:de:8b:b1:49:f0:97: 47:8d:5b:21:e0:65:90:b1:69:2a:21:89:3e:9b:e1:6b:e6:29: dd:e2:8b:f1:e7:69:74:19:9c:28:97:ed:73:45:1e:f3:af:48: 3e:f6:13:a8:92:da:58:bb:53:57:7e:13:ee:d7:4a:54:95:2b: 7d:0f:41:0a:7a:42:9f:46:5f:57:85:5f:bf:66:16:67:dd:3e: 35:28:89:c9:ea:49:3c:aa:06:64:a1:6b:49:f0:4d:44:d5:6a: 69:53:4f:26:5b:10:61:e6:73:b2:08:f1:43:9f:c9:42:b3:c7: d9:b2:51:5c:13:81:87:d8:04:a0:d1:9c:2a:ea:39:02:c5:e9: 90:10:ec:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSZMGpb5nMBd+PJ7WaXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNzM1YTM5ZDk5MmE2ZGM0NGJiZTczYTRkOTliZTNjODQy ZmE5NjgwHhcNMjYwMjA5MTcwMDQxWhcNMjYwMjEwMTcwMDQxWjAzMTEwLwYDVQQD Eyg0M2U4NGU3YjI2MGNlNmYwMjVlYmRjY2ExZDEzNDk4MmZlYjQwNDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pmWaG40qiq2MJyAz4t6hd1oIW+G Cf2hOQmTZi+D5svNlEVXkvqjT7xqpyT5TJAsithzPEzWrVpbhdtoKqwaNdq6qnGI OgpXhsytZ8N1WYTnuJvh/5tR+rcnzE7hMyjXc8mcwqOCXAGG+dGu5aSGGTWgeQNw TGYh/8jOvn8pcYPPgovbX2BbazhODUETusUHsmksU+7nhWYJufhntBZDpfKFIddL hbexwIr3G56JMLkV/mS6jAYreJTE/XOIOkqfpRjdhmvLXL7Iw5u2LZOwQmlqLasR a0n+KF0iBpeHzHA1vC3Aury/N2bUfXuNJkOtiOjeS6rXHxDd1/uw6uyswwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPoTnsmDObwJevcyh0TSYL+tARZMB8GA1UdIwQY MBaAFBtzWjnZkqbcRLvnOk2ZvjyEL6loMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzNOYU9kbVNwdHhFdS1jNlRabS1QSVF2cVdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wNmRhMGItNDVmYS00YmM5LTk3MTct NDAwMTM2OWJhMTFmLzEvRzNOYU9kbVNwdHhFdS1jNlRabS1QSVF2cVdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wNmRhMGItNDVmYS00YmM5LTk3MTctNDAwMTM2OWJhMTFm LzEvRzNOYU9kbVNwdHhFdS1jNlRabS1QSVF2cVdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARd6c11/j 9JGNruJ8UCMRPqyhIeBGfres+/VJFaxvHoFmvpk5pcvIaPysw8atINLxRM4tiYC3 NLRTxj2zcTPVknfF9Aw1mqrdwZQ97AQUfGz3meIOh1g3QvcdQFg8VP72wzhHVhq8 G16ROjSWMiUQFSrbADcQQdDu3ouxSfCXR41bIeBlkLFpKiGJPpvha+Yp3eKL8edp dBmcKJftc0Ue869IPvYTqJLaWLtTV34T7tdKVJUrfQ9BCnpCn0ZfV4Vfv2YWZ90+ NSiJyepJPKoGZKFrSfBNRNVqaVNPJlsQYeZzsgjxQ5/JQrPH2bJRXBOBh9gEoNGc Kuo5AsXpkBDs0w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:36 2026 by rpki-client