This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json) Hash identifier: Ifz0FyxxVgLPNEh/RJBOOLx2of8lEdbCvCoy/BHvGO4= Subject key identifier: FA:1A:32:79:81:B0:51:FF:2B:43:20:91:B5:13:2B:12:E0:1B:57:E9 Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10 Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410 Certificate serial: 019C43221F9622B61B8E16A107C991393EB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft Manifest number: 0EF5 Signing time: Mon 09 Feb 2026 16:00:35 +0000 Manifest this update: Mon 09 Feb 2026 16:00:35 +0000 Manifest next update: Tue 10 Feb 2026 16:00:35 +0000 Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: RnsYXmlyNzBIH4XNRXq7e7ik6cGbRDc5eLkIJ72EwyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:1f:96:22:b6:1b:8e:16:a1:07:c9:91:39:3e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410 Validity Not Before: Feb 9 16:00:35 2026 GMT Not After : Feb 10 16:00:35 2026 GMT Subject: CN=fa1a327981b051ff2b432091b5132b12e01b57e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a3:00:81:e1:c6:87:1c:b0:ee:a1:d6:63:d5: e7:e2:f1:48:2e:44:ca:ff:8f:9f:16:8a:b1:84:45: 70:53:f1:ce:7f:10:94:eb:91:8b:b5:f4:21:f5:82: 2b:ab:52:0d:4b:87:f6:94:cf:aa:50:0e:52:2d:95: 89:62:cf:15:6c:a3:d8:1d:73:20:d6:20:06:00:a3: cc:d6:8e:e0:48:21:66:17:fc:ed:df:3c:82:e5:79: 67:2f:71:83:51:14:4a:92:1d:2f:89:47:40:1a:9f: d0:6b:04:bd:14:70:90:bc:1e:d3:53:89:fb:d2:cc: 49:7c:f3:31:41:8c:ed:e8:ce:75:23:75:e7:51:5f: 7c:db:07:31:58:c2:b9:01:82:9d:77:24:ea:69:a1: 47:60:97:a0:ff:ad:a4:07:f3:1f:d2:4c:2f:61:a5: 95:fe:54:3c:1e:a4:c5:d1:6c:c3:97:e7:e2:40:88: 3d:39:ce:09:76:12:ea:a3:a8:d5:de:aa:0a:2d:69: a3:bf:51:6f:e2:b8:06:7f:04:fb:ba:07:63:ad:5c: ef:51:1f:21:36:af:6e:08:ca:92:21:ad:5e:f3:a3: 8d:a6:07:c1:54:6d:60:e1:32:fa:46:38:ad:83:b7: 79:a3:6d:94:81:09:b4:23:b6:dd:a4:b7:95:d0:ff: 99:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1A:32:79:81:B0:51:FF:2B:43:20:91:B5:13:2B:12:E0:1B:57:E9 X509v3 Authority Key Identifier: keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c0:06:ea:08:a2:d8:ca:12:c6:82:91:25:03:4b:d5:d8:7a: 00:2b:f4:cb:f4:35:66:5a:2f:1f:03:1a:22:2f:a2:39:e0:f7: 51:69:bf:87:41:d8:17:70:bd:91:3b:ed:6d:db:d6:b7:17:5d: 25:6e:0b:1a:b3:43:60:ef:b7:dc:70:c9:74:a4:ee:d6:4d:63: 1f:28:91:92:11:0f:b3:26:1d:88:22:40:0e:08:09:6d:4a:fd: 67:e7:4b:6d:40:cb:f8:1c:b7:4a:db:a0:45:61:6a:b2:bc:7a: a1:8b:74:84:9e:f6:98:f3:55:a5:ec:0f:1e:6d:e4:53:1c:c7: 6f:1c:76:32:e9:c4:e4:29:45:27:13:c8:48:91:82:c6:62:81: fd:b3:9a:e1:dd:98:f3:13:4f:10:08:74:99:37:96:ac:49:c8: 7a:23:91:de:7f:e3:40:91:16:13:4f:1d:24:62:cb:43:e8:25: 50:bf:ca:9b:3a:34:e3:18:06:d5:4c:15:d2:f8:85:99:ea:c1: 0a:48:a2:c5:cb:e7:3d:f4:3a:bf:70:57:00:b5:95:af:9a:aa: d8:5e:00:d2:0b:ba:0e:b2:77:c4:3a:2e:95:a3:19:94:81:db: ab:3f:ea:36:9a:7f:f6:c4:fd:e2:02:16:e3:da:af:9f:f1:b2: 75:eb:5a:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIh+WIrYbjhahB8mROT6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNmU3MGU0MzZlMWMwMjVhYTBlMGUzZmJhODUyYjk4YWQz Yjg0MTAwHhcNMjYwMjA5MTYwMDM1WhcNMjYwMjEwMTYwMDM1WjAzMTEwLwYDVQQD EyhmYTFhMzI3OTgxYjA1MWZmMmI0MzIwOTFiNTEzMmIxMmUwMWI1N2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaMAgeHGhxyw7qHWY9Xn4vFILkTK /4+fFoqxhEVwU/HOfxCU65GLtfQh9YIrq1INS4f2lM+qUA5SLZWJYs8VbKPYHXMg 1iAGAKPM1o7gSCFmF/zt3zyC5XlnL3GDURRKkh0viUdAGp/QawS9FHCQvB7TU4n7 0sxJfPMxQYzt6M51I3XnUV982wcxWMK5AYKddyTqaaFHYJeg/62kB/Mf0kwvYaWV /lQ8HqTF0WzDl+fiQIg9Oc4JdhLqo6jV3qoKLWmjv1Fv4rgGfwT7ugdjrVzvUR8h Nq9uCMqSIa1e86ONpgfBVG1g4TL6Rjitg7d5o22UgQm0I7bdpLeV0P+Z7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoaMnmBsFH/K0MgkbUTKxLgG1fpMB8GA1UdIwQY MBaAFN1ucOQ24cAlqg4OP7qFK5itO4QQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1c1dzVEYmh3Q1dxRGc0X3VvVXJtSzA3aEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iNmFmYmItNWE2Yi00MzQ1LTkwYWUt N2I2MWE2OTVkMTMyLzEvM1c1dzVEYmh3Q1dxRGc0X3VvVXJtSzA3aEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iNmFmYmItNWE2Yi00MzQ1LTkwYWUtN2I2MWE2OTVkMTMy LzEvM1c1dzVEYmh3Q1dxRGc0X3VvVXJtSzA3aEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsAG6gii 2MoSxoKRJQNL1dh6ACv0y/Q1ZlovHwMaIi+iOeD3UWm/h0HYF3C9kTvtbdvWtxdd JW4LGrNDYO+33HDJdKTu1k1jHyiRkhEPsyYdiCJADggJbUr9Z+dLbUDL+By3Stug RWFqsrx6oYt0hJ72mPNVpewPHm3kUxzHbxx2MunE5ClFJxPISJGCxmKB/bOa4d2Y 8xNPEAh0mTeWrEnIeiOR3n/jQJEWE08dJGLLQ+glUL/Kmzo04xgG1UwV0viFmerB CkiixcvnPfQ6v3BXALWVr5qq2F4A0gu6DrJ3xDoulaMZlIHbqz/qNpp/9sT94gIW 49qvn/GydetanA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:00 2026 by rpki-client