This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json) Hash identifier: KvtKqeNiUbNq58ur/y6CyhOfAU2YZqoAhbLjit18rQE= Subject key identifier: A6:56:53:9D:97:5C:44:74:BF:91:93:2C:56:51:B9:BB:79:A1:1C:A7 Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4 Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4 Certificate serial: 019C438FFD314B2E9EE1B6E3B643CFC7E824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft Manifest number: 0848 Signing time: Mon 09 Feb 2026 18:00:35 +0000 Manifest this update: Mon 09 Feb 2026 18:00:35 +0000 Manifest next update: Tue 10 Feb 2026 18:00:35 +0000 Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: UU8NoKZz3ZRtQfJDR1bIF8+CTCHJJg6M5yUSFh7NTyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:fd:31:4b:2e:9e:e1:b6:e3:b6:43:cf:c7:e8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4 Validity Not Before: Feb 9 18:00:35 2026 GMT Not After : Feb 10 18:00:35 2026 GMT Subject: CN=a656539d975c4474bf91932c5651b9bb79a11ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:a6:b7:76:a4:15:74:18:97:ce:f4:0b:34: 2d:dd:4e:1f:9f:df:3f:1f:39:2a:a6:f9:40:49:1d: c4:d8:33:0e:c9:6c:3a:56:4a:b4:00:9d:05:b7:f4: d9:78:fe:8d:0d:24:1b:e9:ae:4b:03:42:ec:43:52: b4:a6:89:b4:55:43:40:f8:99:5e:0f:99:5b:a1:ad: 9f:eb:d2:f1:1c:52:63:6b:df:97:71:f4:b0:9b:72: dc:fc:2f:d7:49:d3:71:2a:0e:32:60:2c:35:26:4d: 4d:3a:fb:17:3d:f9:1e:96:65:59:a5:38:c8:38:62: 2c:06:19:2e:d8:41:96:0b:4e:d9:00:f7:aa:01:f3: 9e:93:7f:eb:98:6e:6c:d0:43:3f:c6:1e:6d:d7:45: 28:e0:9f:28:23:05:14:c9:d1:2c:ff:d1:ef:27:e1: 53:59:3f:3e:7f:73:7c:d2:4e:7c:ef:7e:c2:c9:db: fb:b7:9b:9b:55:2b:0b:5e:3d:91:23:42:70:1e:ce: 0b:9b:56:84:dc:ee:3f:9b:cd:00:0b:92:e4:23:b3: dc:d4:25:c3:dd:d6:9c:55:98:f8:c2:5a:81:9e:60: 29:9c:64:f8:56:29:a3:04:ff:37:19:d9:a7:89:6d: f6:23:a9:e3:d7:55:d9:f8:a4:62:74:69:e2:64:d9: a7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:56:53:9D:97:5C:44:74:BF:91:93:2C:56:51:B9:BB:79:A1:1C:A7 X509v3 Authority Key Identifier: keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1f:66:70:db:d0:26:b4:8f:37:24:e6:17:5e:86:70:30:31: 2a:5c:98:8d:cf:ac:36:e7:8b:bc:30:f5:10:70:1a:74:fe:d6: 01:79:b1:79:64:15:85:2d:18:a3:34:bf:f6:1e:aa:17:83:3f: f5:e1:ee:ab:5b:21:ad:b2:8a:86:af:db:08:be:c4:94:21:95: 08:65:2b:90:f3:62:f1:a7:4a:ea:22:63:33:69:33:48:9f:52: be:f7:80:ee:21:10:ca:a0:aa:9f:5c:52:7b:96:51:a6:a7:a4: 27:a7:49:f6:a7:a1:32:b5:9d:48:6d:fd:c1:4c:29:03:5f:f1: 15:bd:ba:13:99:f9:5d:d0:91:a8:f7:a9:ce:e2:f2:a3:a3:1f: 75:23:9e:d0:5a:5d:13:e3:e4:ac:51:6d:fb:d6:de:d3:e7:e5: f5:1b:69:52:9c:d9:0d:dc:c6:db:28:b2:cb:4a:9c:00:62:bb: 16:cb:c5:bb:af:84:ef:83:76:d4:90:dc:5b:9c:fe:c5:a4:9b: 0f:57:65:a9:cf:ed:4b:19:2e:68:a9:b7:19:ac:33:da:50:0c: 9a:c6:10:13:3d:5e:ff:52:92:c7:e3:90:46:8c:e6:26:45:3a: 82:bc:07:93:76:28:11:92:83:a5:61:07:9d:7d:03:3f:53:18: 00:4a:57:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/0xSy6e4bbjtkPPx+gkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2IxOTY5ZDlhZGRmMTk5NjMyYjRkZTA1ZThhMjBlM2Rl N2I2YzQwHhcNMjYwMjA5MTgwMDM1WhcNMjYwMjEwMTgwMDM1WjAzMTEwLwYDVQQD EyhhNjU2NTM5ZDk3NWM0NDc0YmY5MTkzMmM1NjUxYjliYjc5YTExY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvCmt3akFXQYl870CzQt3U4fn98/ HzkqpvlASR3E2DMOyWw6Vkq0AJ0Ft/TZeP6NDSQb6a5LA0LsQ1K0pom0VUNA+Jle D5lboa2f69LxHFJja9+XcfSwm3Lc/C/XSdNxKg4yYCw1Jk1NOvsXPfkelmVZpTjI OGIsBhku2EGWC07ZAPeqAfOek3/rmG5s0EM/xh5t10Uo4J8oIwUUydEs/9HvJ+FT WT8+f3N80k58737Cydv7t5ubVSsLXj2RI0JwHs4Lm1aE3O4/m80AC5LkI7Pc1CXD 3dacVZj4wlqBnmApnGT4VimjBP83GdmniW32I6nj11XZ+KRidGniZNmn+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZWU52XXER0v5GTLFZRubt5oRynMB8GA1UdIwQY MBaAFMd7GWnZrd8ZljK03gXoog4957bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OWE4MDItNjM2ZS00ZjA2LWI3Nzkt N2M3ODJmNmE0NmM3LzEveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80OWE4MDItNjM2ZS00ZjA2LWI3NzktN2M3ODJmNmE0NmM3 LzEveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqx9mcNvQ JrSPNyTmF16GcDAxKlyYjc+sNueLvDD1EHAadP7WAXmxeWQVhS0YozS/9h6qF4M/ 9eHuq1shrbKKhq/bCL7ElCGVCGUrkPNi8adK6iJjM2kzSJ9SvveA7iEQyqCqn1xS e5ZRpqekJ6dJ9qehMrWdSG39wUwpA1/xFb26E5n5XdCRqPepzuLyo6MfdSOe0Fpd E+PkrFFt+9be0+fl9RtpUpzZDdzG2yiyy0qcAGK7FsvFu6+E74N21JDcW5z+xaSb D1dlqc/tSxkuaKm3Gawz2lAMmsYQEz1e/1KSx+OQRozmJkU6grwHk3YoEZKDpWEH nX0DP1MYAEpXmQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:07 2026 by rpki-client